last executing test programs: 3.09358129s ago: executing program 0 (id=7444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x4, 0x1, 'i'}}) 2.873922493s ago: executing program 0 (id=7447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "3199125fd38055fa64da6b151477bef2c7"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) 2.640097916s ago: executing program 0 (id=7452): r0 = syz_open_dev$video(&(0x7f0000000900), 0x5, 0xc0000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000a80)=@multiplanar_fd={0xffff, 0x9, 0x4, 0x4, 0x5, {0x77359400}, {0x3, 0x1, 0xd, 0x8, 0x2, 0x58, "9282deb2"}, 0x10001, 0x4, {0x0}, 0x8}) 2.434114708s ago: executing program 0 (id=7455): io_setup(0x3, &(0x7f0000000200)=0x0) io_pgetevents(r0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 2.133232706s ago: executing program 0 (id=7459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000012"], 0x20) 1.867008131s ago: executing program 0 (id=7464): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.503144332s ago: executing program 2 (id=7470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.385255629s ago: executing program 2 (id=7473): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e20, @multicast1}}) 1.20432882s ago: executing program 2 (id=7476): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x2808092, &(0x7f0000000480)={[{@barrier}, {@gid}, {@gid}, {@creator={'creator', 0x3d, "ff60f383"}}, {}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@umask={'umask', 0x3d, 0x4}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") symlink(&(0x7f0000000d40)='./file7\x00', &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 845.411291ms ago: executing program 2 (id=7481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 786.968665ms ago: executing program 1 (id=7482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000064000d"], 0x18}}, 0x0) 679.053421ms ago: executing program 3 (id=7483): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000440)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@fat=@nfs}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x81040, 0x0) 638.550343ms ago: executing program 1 (id=7484): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettimeofday(&(0x7f0000000040), 0x0) 560.281028ms ago: executing program 2 (id=7485): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 474.220503ms ago: executing program 1 (id=7486): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) shutdown(r0, 0x0) 457.087614ms ago: executing program 3 (id=7487): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x80, @broadcast}, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd50, 0x2}) 394.560798ms ago: executing program 2 (id=7488): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af000000190902120001000000000904"], 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) 311.148673ms ago: executing program 3 (id=7489): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x4, 0x0, 0x0, 0x4fa000000000, 0xffffff1f00000000}) 235.799987ms ago: executing program 3 (id=7490): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c) 234.861277ms ago: executing program 1 (id=7498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x25}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xff}]}}}]}, 0x48}}, 0x0) 151.741882ms ago: executing program 3 (id=7491): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0xe1e, 0x4, 0x80000001}, 0xc) 115.364134ms ago: executing program 1 (id=7492): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) 24.298329ms ago: executing program 3 (id=7493): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000140)) 0s ago: executing program 1 (id=7494): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x10009, 0x4) kernel console output (not intermixed with test programs): 32768 [ 1026.960642][T21545] (syz.3.6927,21545,0):ocfs2_check_set_options:1215 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 1026.997356][T21545] (syz.3.6927,21545,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1027.088381][T10513] usb 3-1: string descriptor 0 read error: -71 [ 1027.112630][T10513] usbhid 3-1:0.0: can't add hid device: -71 [ 1027.118722][T10513] usbhid: probe of 3-1:0.0 failed with error -71 [ 1027.134014][T10513] usb 3-1: USB disconnect, device number 124 [ 1027.643763][ T5775] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 1027.789726][T21570] loop2: detected capacity change from 0 to 8 [ 1027.834153][T21570] SQUASHFS error: xz decompression failed, data probably corrupt [ 1027.853415][T21570] SQUASHFS error: Failed to read block 0x108: -5 [ 1027.863824][ T5775] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 1027.876256][T21570] SQUASHFS error: Unable to read metadata cache entry [106] [ 1027.883846][ T5775] usb 1-1: config 7 has no interface number 0 [ 1027.890363][T21570] SQUASHFS error: Unable to read inode 0x11f [ 1027.896529][ T5775] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 1027.947151][ T5775] usb 1-1: config 7 interface 252 has no altsetting 0 [ 1027.960904][ T5775] usb 1-1: string descriptor 0 read error: -22 [ 1027.973348][ T5775] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1027.982730][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.016613][ T5775] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 1028.216061][T21576] loop1: detected capacity change from 0 to 4096 [ 1028.252809][T21576] ntfs: (device loop1): ntfs_read_inode_mount(): $MFT/$DATA attribute not found. $MFT is corrupt. Run chkdsk. [ 1028.254519][ T8] usb 1-1: USB disconnect, device number 117 [ 1028.324055][T21576] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 1028.366025][T21576] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 1028.611989][T21588] loop2: detected capacity change from 0 to 2048 [ 1028.668564][T21590] loop1: detected capacity change from 0 to 190 [ 1028.673246][T21588] loop2: p1 p2 < > p3 < p5 p6 > p4 [ 1028.676331][ T23] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1028.680343][T21588] loop2: partition table partially beyond EOD, truncated [ 1028.696706][T21588] loop2: p2 start 4278190080 is beyond EOD, truncated [ 1028.707865][T21590] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 1028.720014][T21590] ntfs: (device loop1): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 1028.731656][T21588] loop2: p4 size 8192 extends beyond EOD, truncated [ 1028.741041][T21590] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1028.758486][T21590] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1028.774879][T21588] loop2: p6 size 8192 extends beyond EOD, truncated [ 1028.816811][T21590] ntfs: volume version 3.1. [ 1028.830185][T21590] ntfs: (device loop1): load_system_files(): Volume is dirty. Will not be able to remount read-write. Run chkdsk and mount in Windows. [ 1028.873163][T21590] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is an extent inode! [ 1028.882031][T21590] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1028.905804][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1028.916990][ T23] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 1028.936041][ T23] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 32 [ 1028.952323][T21590] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1028.970799][ T23] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.986700][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1028.998243][T21590] ntfs: (device loop1): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug. [ 1029.097762][T21590] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1029.109662][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1029.128118][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.156758][ T23] usb 4-1: Product: syz [ 1029.161019][ T23] usb 4-1: Manufacturer: syz [ 1029.166718][T21590] syz.1.6949: attempt to access beyond end of device [ 1029.166718][T21590] loop1: rw=0, sector=224, nr_sectors = 8 limit=190 [ 1029.194585][ T23] usb 4-1: SerialNumber: syz [ 1029.223747][T21582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1029.232625][T21582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1029.269375][T21594] loop0: detected capacity change from 0 to 2048 [ 1029.312115][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1029.334891][ T8827] udevd[8827]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1029.347791][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1029.364819][T21594] loop0: p1 p2 p3 [ 1029.364819][T21594] p1: [ 1029.390592][T21594] loop0: p2 size 458752 extends beyond EOD, truncated [ 1029.411554][T21594] loop0: p3 start 65280 is beyond EOD, truncated [ 1029.521809][ T23] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 1029.557446][ T8827] udevd[8827]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 1029.567846][ T23] usb 4-1: USB disconnect, device number 123 [ 1029.592880][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 1029.705897][ T8827] udevd[8827]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1029.720146][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1029.769615][T21603] loop2: detected capacity change from 0 to 512 [ 1029.816537][T21603] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1029.848810][T21603] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.6955: ea_inode file size=4 entry size=6 [ 1029.869695][T21603] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1029.891698][T21603] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #15: comm syz.2.6955: corrupted inode contents [ 1029.915147][T21603] EXT4-fs (loop2): Remounting filesystem read-only [ 1029.931684][T21603] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -5) [ 1029.945272][T21603] EXT4-fs (loop2): 1 orphan inode deleted [ 1029.952990][T21603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1030.088871][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.209138][ T1189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1030.267690][T21617] hpfs: bad mount options. [ 1030.412549][ T1189] usb 2-1: Using ep0 maxpacket: 8 [ 1030.419962][ T1189] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 1030.444225][ T1189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.488535][ T1189] usb 2-1: config 0 descriptor?? [ 1030.521009][ T1189] usblcd 2-1:0.0: USBLCD model not supported. [ 1030.717063][T21630] set_capacity_and_notify: 1 callbacks suppressed [ 1030.717083][T21630] loop3: detected capacity change from 0 to 8192 [ 1030.735238][ T786] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1030.761450][ T1189] usb 2-1: USB disconnect, device number 4 [ 1030.773277][T21630] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1030.788197][T21630] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1030.803142][T21630] REISERFS (device loop3): using ordered data mode [ 1030.810875][T21630] reiserfs: using flush barriers [ 1030.825627][T21630] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1030.860092][T21630] REISERFS (device loop3): checking transaction log (loop3) [ 1030.874916][T21630] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 1030.969748][ T786] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1030.978021][ T786] usb 3-1: config 8 has no interface number 0 [ 1031.010819][ T786] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1031.027559][T21621] loop0: detected capacity change from 0 to 32768 [ 1031.035672][ T786] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1031.067545][T21621] (syz.0.6960,21621,0):ocfs2_check_set_options:1215 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 1031.087157][ T786] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1031.095577][T21621] (syz.0.6960,21621,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1031.117611][ T786] usb 3-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 1031.142466][ T786] usb 3-1: Product: syz [ 1031.146705][ T786] usb 3-1: Manufacturer: syz [ 1031.163165][ T786] usb 3-1: SerialNumber: syz [ 1031.395826][ T8] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1031.497570][ T786] usb 3-1: USB disconnect, device number 125 [ 1031.652357][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1031.674898][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1031.694056][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.702938][ T8] usb 4-1: Product: syz [ 1031.707415][ T8] usb 4-1: Manufacturer: syz [ 1031.712274][ T8] usb 4-1: SerialNumber: syz [ 1031.720083][ T8] usb 4-1: config 0 descriptor?? [ 1031.856035][T21647] loop0: detected capacity change from 0 to 512 [ 1031.882014][T21647] EXT4-fs (loop0): unsupported inode size: 0 [ 1031.899175][T21647] EXT4-fs (loop0): blocksize: 1024 [ 1031.998601][ T8] usb 4-1: USB disconnect, device number 124 [ 1032.169885][T21655] loop2: detected capacity change from 0 to 128 [ 1032.188576][T21655] FAT-fs (loop2): bogus number of reserved sectors [ 1032.200272][T21655] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 1032.233146][T21655] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1032.266476][ T5785] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1032.298728][T21653] loop0: detected capacity change from 0 to 4096 [ 1032.330633][T21653] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1032.518669][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1032.538407][T21661] loop2: detected capacity change from 0 to 16 [ 1032.742714][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 1032.780572][ T5879] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1032.801039][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.831582][ T5879] usb 2-1: Product: syz [ 1032.852421][ T5879] usb 2-1: Manufacturer: syz [ 1032.857123][ T5879] usb 2-1: SerialNumber: syz [ 1032.891714][T21665] loop3: detected capacity change from 0 to 4096 [ 1032.919225][ T5879] usb 2-1: config 0 descriptor?? [ 1032.951804][ T5879] go7007 2-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1032.976059][T21665] ntfs: volume version 3.1. [ 1033.117867][ T1189] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1033.195034][T21675] loop3: detected capacity change from 0 to 8 [ 1033.212500][ T5879] usb 2-1: USB disconnect, device number 5 [ 1033.259804][T21675] unable to read inode lookup table [ 1033.330399][ T1189] usb 1-1: Using ep0 maxpacket: 8 [ 1033.339681][ T1189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1033.370341][ T1189] usb 1-1: config 6 has an invalid interface number: 4 but max is 1 [ 1033.391303][ T1189] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.422487][ T1189] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1033.437166][ T1189] usb 1-1: config 6 has no interface number 0 [ 1033.454246][ T1189] usb 1-1: config 6 interface 4 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.476229][ T1189] usb 1-1: config 6 interface 4 has no altsetting 0 [ 1033.485853][ T1189] usb 1-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 1033.500021][ T1189] usb 1-1: New USB device strings: Mfr=1, Product=8, SerialNumber=0 [ 1033.530154][ T1189] usb 1-1: Product: syz [ 1033.541273][ T1189] usb 1-1: Manufacturer: syz [ 1033.752282][T21685] loop3: detected capacity change from 0 to 8192 [ 1033.766102][T21685] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1033.790167][T21685] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1033.801013][T21685] REISERFS (device loop3): using ordered data mode [ 1033.825929][T21685] REISERFS warning (device loop3): sh-457 journal_init_dev: journal_init_dev: Cannot open './cgroup': -15 [ 1033.858183][ T1189] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1033.888175][T21685] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 1033.974330][ T1189] snd-usb-audio: probe of 1-1:6.4 failed with error -2 [ 1033.984083][ T1189] usb 1-1: USB disconnect, device number 118 [ 1033.993650][ T5778] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1034.032693][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.211095][ T5778] usb 3-1: Using ep0 maxpacket: 32 [ 1034.234204][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1034.251527][ T5778] usb 3-1: config 241 has an invalid interface number: 213 but max is 0 [ 1034.261081][ T5778] usb 3-1: config 241 has no interface number 0 [ 1034.267418][ T5778] usb 3-1: config 241 interface 213 has no altsetting 0 [ 1034.295190][ T5778] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=15.61 [ 1034.305246][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.313306][ T5778] usb 3-1: Product: syz [ 1034.349303][ T5778] usb 3-1: Manufacturer: syz [ 1034.354000][ T5778] usb 3-1: SerialNumber: syz [ 1034.603448][ T5778] usb 3-1: Found UVC 0.00 device syz (0408:3090) [ 1034.609903][ T5778] usb 3-1: No valid video chain found. [ 1034.634045][ T5778] usb 3-1: USB disconnect, device number 126 [ 1034.656036][T10513] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1034.704743][T21706] loop0: detected capacity change from 0 to 4096 [ 1034.748594][T21707] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1034.766015][T21704] __ntfs_error: 9 callbacks suppressed [ 1034.766033][T21704] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 1034.816615][T21704] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 1034.871012][T10513] usb 2-1: Using ep0 maxpacket: 16 [ 1034.893973][T10513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1034.913423][T10513] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 1034.944391][T10513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.963536][T10513] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1035.017549][T10513] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1035.041076][T10513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.049156][T10513] usb 2-1: Product: syz [ 1035.064016][T10513] usb 2-1: Manufacturer: syz [ 1035.071585][T10513] usb 2-1: SerialNumber: syz [ 1035.078967][T10513] usb 2-1: config 0 descriptor?? [ 1035.088423][T10513] mcba_usb 2-1:0.0: Can't find endpoints [ 1035.350623][ T5778] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1035.383830][T10513] usb 2-1: USB disconnect, device number 6 [ 1035.579995][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 1035.602627][ T5778] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1035.612697][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1035.622130][ T5778] usb 1-1: Product: syz [ 1035.626446][ T5778] usb 1-1: Manufacturer: syz [ 1035.631967][ T5778] usb 1-1: SerialNumber: syz [ 1035.652671][ T5778] usb 1-1: config 0 descriptor?? [ 1035.660226][ T5778] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1035.810425][ T23] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1035.897839][ T5778] usb 1-1: USB disconnect, device number 119 [ 1036.008920][ T23] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1036.024033][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.034979][ T23] usb 3-1: Product: syz [ 1036.039748][ T23] usb 3-1: Manufacturer: syz [ 1036.044678][ T23] usb 3-1: SerialNumber: syz [ 1036.053114][ T23] usb 3-1: config 0 descriptor?? [ 1036.227207][ T8] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1036.239708][T21741] set_capacity_and_notify: 1 callbacks suppressed [ 1036.239721][T21741] loop1: detected capacity change from 0 to 4096 [ 1036.263941][T21741] ntfs: (device loop1): ntfs_read_inode_mount(): $MFT/$DATA attribute not found. $MFT is corrupt. Run chkdsk. [ 1036.275991][T21741] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 1036.288610][T21741] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 1036.309255][ T23] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 1036.337036][ T23] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1036.350016][ T23] usb 3-1: USB disconnect, device number 127 [ 1036.439846][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1036.460170][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.545616][ T8] pwc: Logitech/Cisco VT Camera webcam detected. [ 1036.764475][ T8] pwc: Failed to set LED on/off time (-71) [ 1036.776483][ T8] pwc: send_video_command error -71 [ 1036.788192][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1036.822897][ T8] Philips webcam: probe of 4-1:127.0 failed with error -71 [ 1036.840393][ T8] usb 4-1: USB disconnect, device number 125 [ 1036.923630][T21755] loop1: detected capacity change from 0 to 2048 [ 1036.976835][T21757] loop0: detected capacity change from 0 to 8 [ 1036.989582][T21755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1037.038595][T21757] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1037.048815][T21757] SQUASHFS error: Failed to read block 0x9b: -5 [ 1037.079473][T21757] SQUASHFS error: Unable to read metadata cache entry [99] [ 1037.100962][T21757] SQUASHFS error: Unable to read inode 0x127 [ 1037.339110][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1037.409246][T21765] loop0: detected capacity change from 0 to 4096 [ 1037.464277][T21765] ntfs: volume version 3.1. [ 1037.469547][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1037.491339][T21765] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x5, type 0xb0, name_len 4). Marking corrupt inode and base inode 0x5 as bad. Run chkdsk. [ 1037.531377][T21765] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to get bitmap attribute. [ 1037.551637][T21765] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 1037.562125][T21767] loop3: detected capacity change from 0 to 8192 [ 1037.576509][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1037.599541][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1037.611183][T21767] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "seclabel" [ 1037.616946][T21765] ntfs: (device loop0): load_system_files(): Failed to load root directory. [ 1037.659693][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1037.662543][T21765] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 1037.704555][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1037.721306][ T23] usb 3-1: string descriptor 0 read error: -22 [ 1037.728723][ T23] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1037.733046][ T8] usb 2-1: config 1 has no interface number 1 [ 1037.747968][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.770072][ T23] usb 3-1: config 0 descriptor?? [ 1037.770933][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1037.790292][ T23] em28xx 3-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1037.829019][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1037.838516][ T23] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1037.867638][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.875856][ T8] usb 2-1: Product: syz [ 1037.880081][ T8] usb 2-1: Manufacturer: syz [ 1037.912321][ T8] usb 2-1: SerialNumber: syz [ 1038.079411][ T23] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1038.095508][ T23] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1038.125091][ T23] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1038.146636][ T23] em28xx 3-1:0.0: No AC97 audio processor [ 1038.191596][ T23] usb 3-1: USB disconnect, device number 2 [ 1038.225329][ T8] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1038.234560][ T23] em28xx 3-1:0.0: Disconnecting em28xx [ 1038.260907][ T23] em28xx 3-1:0.0: Freeing device [ 1038.278255][ T8] usb 2-1: USB disconnect, device number 7 [ 1038.367490][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.632200][ T5778] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1038.774306][T21778] loop0: detected capacity change from 0 to 32768 [ 1038.808722][T21778] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1038.856021][T21782] loop2: detected capacity change from 0 to 8192 [ 1038.857582][ T5778] usb 4-1: Using ep0 maxpacket: 16 [ 1038.871360][ T5778] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1038.879931][ T5778] usb 4-1: config 0 has no interface number 0 [ 1038.886306][ T5778] usb 4-1: config 0 interface 119 has no altsetting 0 [ 1038.897071][ T5778] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 1038.922212][T21782] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1038.924444][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.950936][ T5778] usb 4-1: Product: syz [ 1038.956627][ T5778] usb 4-1: Manufacturer: syz [ 1038.962105][ T5778] usb 4-1: SerialNumber: syz [ 1038.970102][ T5778] usb 4-1: config 0 descriptor?? [ 1038.972321][T21778] XFS (loop0): Internal error (!rhead->h_version || (be32_to_cpu(rhead->h_version) & (~XLOG_VERSION_OKBITS))) at line 2941 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x199/0x380 [ 1038.995153][T21782] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1038.995373][T21782] REISERFS (device loop2): using ordered data mode [ 1038.995387][T21782] reiserfs: using flush barriers [ 1039.015013][T21782] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1039.045256][T21782] REISERFS (device loop2): checking transaction log (loop2) [ 1039.079141][T21778] CPU: 1 PID: 21778 Comm: syz.0.7035 Not tainted syzkaller #0 [ 1039.086734][T21778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1039.096853][T21778] Call Trace: [ 1039.100177][T21778] [ 1039.103179][T21778] dump_stack_lvl+0x18c/0x250 [ 1039.107926][T21778] ? show_regs_print_info+0x20/0x20 [ 1039.113214][T21778] xfs_corruption_error+0x122/0x170 [ 1039.118475][T21778] ? xlog_valid_rec_header+0x199/0x380 [ 1039.124005][T21778] xlog_valid_rec_header+0x1f1/0x380 [ 1039.129355][T21778] ? xlog_valid_rec_header+0x199/0x380 [ 1039.134936][T21778] xlog_do_recovery_pass+0x9b9/0xdb0 [ 1039.140295][T21778] ? lock_chain_count+0x20/0x20 [ 1039.145199][T21778] ? xlog_do_io+0x360/0x360 [ 1039.149778][T21778] ? xlog_verify_head+0xea/0x430 [ 1039.154867][T21778] ? __kmem_cache_free+0xba/0x1e0 [ 1039.159975][T21778] xlog_verify_head+0x137/0x430 [ 1039.164901][T21778] xlog_find_tail+0x6c4/0xa00 [ 1039.169663][T21778] xlog_recover+0x4c/0x440 [ 1039.174157][T21778] xfs_log_mount+0x2c2/0x470 [ 1039.178816][T21778] xfs_mountfs+0xc58/0x1d40 [ 1039.183393][T21778] ? lockdep_softirqs_off+0x430/0x430 [ 1039.188839][T21778] ? xfs_default_resblks+0x70/0x70 [ 1039.194014][T21778] ? init_timer_key+0x161/0x2a0 [ 1039.198952][T21778] ? rcu_is_watching+0x15/0xb0 [ 1039.203785][T21778] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 1039.210094][T21778] xfs_fs_fill_super+0x112f/0x13a0 [ 1039.215276][T21778] get_tree_bdev+0x3f3/0x520 [ 1039.219926][T21778] ? vfs_parse_fs_string+0x170/0x170 [ 1039.225280][T21778] ? xfs_mount_set_dax_mode+0x100/0x100 [ 1039.230888][T21778] ? setup_bdev_super+0x660/0x660 [ 1039.235987][T21778] ? apparmor_capable+0x137/0x1a0 [ 1039.241074][T21778] ? bpf_lsm_capable+0x9/0x10 [ 1039.245816][T21778] ? security_capable+0x89/0xb0 [ 1039.250750][T21778] vfs_get_tree+0x8c/0x280 [ 1039.255275][T21778] do_new_mount+0x24b/0xa40 [ 1039.259854][T21778] __se_sys_mount+0x2e7/0x3d0 [ 1039.264595][T21778] ? __x64_sys_mount+0xc0/0xc0 [ 1039.269430][T21778] ? lockdep_hardirqs_on+0x98/0x150 [ 1039.274698][T21778] ? __x64_sys_mount+0x20/0xc0 [ 1039.279531][T21778] do_syscall_64+0x55/0xa0 [ 1039.284010][T21778] ? clear_bhb_loop+0x40/0x90 [ 1039.288742][T21778] ? clear_bhb_loop+0x40/0x90 [ 1039.293483][T21778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.299445][T21778] RIP: 0033:0x7f18b1f9c14a [ 1039.303927][T21778] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.323654][T21778] RSP: 002b:00007f18b2f47e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1039.332233][T21778] RAX: ffffffffffffffda RBX: 00007f18b2f47ee0 RCX: 00007f18b1f9c14a [ 1039.340279][T21778] RDX: 00002000000000c0 RSI: 0000200000000280 RDI: 00007f18b2f47ea0 [ 1039.348311][T21778] RBP: 00002000000000c0 R08: 00007f18b2f47ee0 R09: 0000000000008000 [ 1039.356344][T21778] R10: 0000000000008000 R11: 0000000000000246 R12: 0000200000000280 [ 1039.364401][T21778] R13: 00007f18b2f47ea0 R14: 00000000000097a7 R15: 0000200000000180 [ 1039.372432][T21778] [ 1039.402374][T21782] REISERFS (device loop2): Using tea hash to sort names [ 1039.409887][T21782] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1039.426262][T21782] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1039.446373][T21778] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 1039.454098][T21778] XFS (loop0): xlog_valid_rec_header: unrecognised log version (0). [ 1039.463689][ T5778] usb 4-1: USB disconnect, device number 126 [ 1039.479764][T21778] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1039.552001][T21778] XFS (loop0): Starting recovery (logdev: internal) [ 1039.615192][T21778] XFS (loop0): Ending recovery (logdev: internal) [ 1039.641412][T21778] XFS (loop0): Quotacheck needed: Please wait. [ 1039.679830][ T786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1039.755413][T21778] XFS (loop0): Quotacheck: Done. [ 1039.925802][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 1039.933381][ T786] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 1039.945216][ T786] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1039.954608][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1039.961549][ T786] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1039.972400][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.987518][ T786] usb 2-1: Product: syz [ 1039.991803][ T786] usb 2-1: Manufacturer: syz [ 1039.996454][ T786] usb 2-1: SerialNumber: syz [ 1040.204034][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1040.248373][ T786] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input60 [ 1040.302603][ T5123] bcm5974 2-1:1.0: could not read from device [ 1040.311023][ T786] usb 2-1: USB disconnect, device number 8 [ 1040.398103][ T8] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 1040.412729][ T8] usb 3-1: config 0 has no interface number 0 [ 1040.436848][ T8] usb 3-1: New USB device found, idVendor=2001, idProduct=7d0e, bcdDevice=65.ae [ 1040.460848][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.479975][ T8] usb 3-1: Product: syz [ 1040.487013][ T8] usb 3-1: Manufacturer: syz [ 1040.504219][ T8] usb 3-1: SerialNumber: syz [ 1040.512867][ T8] usb 3-1: config 0 descriptor?? [ 1040.723137][T21799] loop3: detected capacity change from 0 to 32768 [ 1040.753466][T21799] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7042 (21799) [ 1040.770708][ T8] hub 3-1:0.167: bad descriptor, ignoring hub [ 1040.776863][ T8] hub: probe of 3-1:0.167 failed with error -5 [ 1040.797835][ T8] option 3-1:0.167: GSM modem (1-port) converter detected [ 1040.812581][T21799] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1040.834354][T21799] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1040.857536][T21799] BTRFS info (device loop3): enabling ssd optimizations [ 1040.864593][T21799] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1040.915734][ T8] usb 3-1: USB disconnect, device number 3 [ 1040.928466][T21799] BTRFS info (device loop3): enabling all of the rescue options [ 1040.948741][ T8] option 3-1:0.167: device disconnected [ 1040.966480][T21799] BTRFS info (device loop3): ignoring data csums [ 1040.972924][T21799] BTRFS info (device loop3): ignoring bad roots [ 1041.001412][T21799] BTRFS info (device loop3): disabling log replay at mount time [ 1041.043948][T21799] BTRFS info (device loop3): enabling all of the rescue options [ 1041.069622][T21799] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 1041.104814][T21799] BTRFS error (device loop3): unrecognized metadata_ratio value 0x0900000000000000 [ 1041.136945][T21799] BTRFS error (device loop3): open_ctree failed: -34 [ 1041.346349][T21805] loop0: detected capacity change from 0 to 32768 [ 1041.394523][T21805] jbd2_journal_init_inode: Cannot locate journal superblock [ 1041.422855][ T5778] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1041.435589][T21805] (syz.0.7044,21805,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 1041.445418][T21805] (syz.0.7044,21805,0):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 1041.455561][T21805] (syz.0.7044,21805,0):ocfs2_check_volume:2488 ERROR: status = -22 [ 1041.463608][T21805] (syz.0.7044,21805,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 1041.473853][T21805] (syz.0.7044,21805,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1041.669700][ T5778] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 1041.710718][ T5778] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 1041.718982][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.765557][ T5778] usb 2-1: config 0 has no interface number 0 [ 1041.779645][ T5778] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1041.817840][ T5778] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1041.827757][ T5778] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1041.869836][T21817] loop2: detected capacity change from 0 to 4096 [ 1041.892477][ T5778] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1041.922256][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.957796][ T5778] usb 2-1: config 0 descriptor?? [ 1041.972189][T21817] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1041.992993][ T5778] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1042.041473][T21817] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1042.201726][T20340] usb 2-1: Failed to submit usb control message: -71 [ 1042.227566][T20340] usb 2-1: unable to send the bmi data to the device: -71 [ 1042.234913][ T5778] usb 2-1: USB disconnect, device number 9 [ 1042.259776][T20340] usb 2-1: unable to get target info from device [ 1042.282043][T20340] usb 2-1: could not get target info (-71) [ 1042.300709][T20340] usb 2-1: could not probe fw (-71) [ 1042.451066][T21826] loop3: detected capacity change from 0 to 8192 [ 1042.506978][ T5785] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1042.533963][T10513] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1042.739690][T10513] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.757243][T10513] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1042.778135][T10513] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.788215][T10513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.796627][T10513] usb 3-1: Product: syz [ 1042.800869][T10513] usb 3-1: Manufacturer: syz [ 1042.805628][T10513] usb 3-1: SerialNumber: syz [ 1043.061011][T10513] usb 3-1: 0:2 : does not exist [ 1043.089926][ T8] usb 1-1: new low-speed USB device number 120 using dummy_hcd [ 1043.102893][T21842] loop1: detected capacity change from 0 to 4096 [ 1043.111425][T10513] usb 3-1: USB disconnect, device number 4 [ 1043.206648][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.267427][T21842] ntfs: (device loop1): parse_options(): NLS character set maccenteuroAdmask=0000000000004000 not found. Using previous one default. [ 1043.299265][T21842] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 1043.311482][T21842] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1043.330058][T21842] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1043.340975][ T8] usb 1-1: config 9 has an invalid interface number: 1 but max is 0 [ 1043.371349][T21842] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 1043.383289][ T8] usb 1-1: config 9 has no interface number 0 [ 1043.383331][ T8] usb 1-1: config 9 interface 1 has no altsetting 0 [ 1043.393455][ T8] usb 1-1: string descriptor 0 read error: -22 [ 1043.408455][T21842] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1043.420512][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1043.420544][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.455746][ T8] cx231xx 1-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1043.468258][T21842] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1043.489779][ T8] cx231xx 1-1:9.1: Not found matching IAD interface [ 1043.526190][T21842] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 1043.534880][T21842] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1043.554616][T21842] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1043.568606][T21842] ntfs: volume version 3.1. [ 1043.686552][T21836] loop3: detected capacity change from 0 to 40427 [ 1043.698883][T21836] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1043.724126][T21836] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1043.734388][T21836] F2FS-fs (loop3): Encoding requested by superblock is unknown [ 1043.767427][T10513] usb 1-1: USB disconnect, device number 120 [ 1043.922771][T21847] loop2: detected capacity change from 0 to 64 [ 1044.080946][T21851] loop1: detected capacity change from 0 to 1024 [ 1044.099478][T21851] EXT4-fs: Ignoring removed orlov option [ 1044.117166][T21851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1044.157667][T21851] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 1044.184799][T21849] loop3: detected capacity change from 0 to 4096 [ 1044.269844][T21849] ntfs: volume version 3.1. [ 1044.671961][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1044.697276][T21865] loop0: detected capacity change from 0 to 2048 [ 1044.713554][T21862] loop3: detected capacity change from 0 to 2048 [ 1044.739545][T21865] UDF-fs: bad mount option "gid=igno" or missing value [ 1044.822171][T21862] NILFS (loop3): error -116 while loading last checkpoint (checkpoint number=2) [ 1044.947221][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.978262][ T8] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1045.011563][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.039697][ T8] usb 3-1: Product: syz [ 1045.043998][ T8] usb 3-1: Manufacturer: syz [ 1045.078090][ T8] usb 3-1: SerialNumber: syz [ 1045.097338][ T8] usb 3-1: config 0 descriptor?? [ 1045.409436][ T5775] usb 3-1: USB disconnect, device number 5 [ 1045.516393][ T8] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 1045.678717][T21876] loop0: detected capacity change from 0 to 32768 [ 1045.702952][T21876] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 1045.718358][T21876] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1801)... [ 1045.732742][ T8] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 1045.741665][ T8] usb 2-1: config 7 has no interface number 0 [ 1045.747728][T21876] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no journals! [ 1045.757906][ T8] usb 2-1: config 7 interface 252 has no altsetting 0 [ 1045.765077][ T786] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1045.776692][ T8] usb 2-1: string descriptor 0 read error: -22 [ 1045.784708][ T8] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1045.793827][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.002754][ T786] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1046.013307][ T786] usb 4-1: not running at top speed; connect to a high speed hub [ 1046.028398][ T786] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1046.053733][ T786] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.072112][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.093595][ T786] usb 4-1: Product: syz [ 1046.097876][ T786] usb 4-1: Manufacturer: syz [ 1046.108771][ T1189] usb 2-1: USB disconnect, device number 10 [ 1046.114542][ T786] usb 4-1: SerialNumber: syz [ 1046.139186][T21889] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.7082: invalid block [ 1046.242282][T21889] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.7082: Invalid block bitmap block 0 in block_group 0 [ 1046.301616][T21889] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1046.316423][T21889] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.7082: attempt to clear invalid blocks 983261 len 1 [ 1046.360056][T21889] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7082: invalid indirect mapped block 2683928664 (level 0) [ 1046.375898][ T786] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1046.390732][T21895] Alternate GPT is invalid, using primary GPT. [ 1046.404786][T21895] loop2: p1 p2 p3 [ 1046.408715][T21889] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.7082: Invalid inode table block 0 in block_group 0 [ 1046.408869][T21895] loop2: partition table partially beyond EOD, truncated [ 1046.440194][T21889] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1046.465793][T21889] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1046.479813][T21889] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.7082: Invalid inode table block 0 in block_group 0 [ 1046.510294][ T786] usb 4-1: USB disconnect, device number 127 [ 1046.516459][T21889] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1046.541306][T21889] EXT4-fs error (device loop0): ext4_truncate:4294: inode #13: comm syz.0.7082: mark_inode_dirty error [ 1046.559324][T21889] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1046.574141][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.592944][T21889] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.7082: Invalid inode table block 0 in block_group 0 [ 1046.714802][T21889] EXT4-fs (loop0): 1 truncate cleaned up [ 1046.722424][T21889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.955115][ T8827] udevd[8827]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1046.965651][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1046.978420][ T8822] udevd[8822]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1047.006998][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.130451][ T786] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1047.231595][T21903] set_capacity_and_notify: 2 callbacks suppressed [ 1047.231612][T21903] loop1: detected capacity change from 0 to 4096 [ 1047.259331][T21903] ntfs3: loop1: $Volume is corrupted. [ 1047.335720][ T786] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 1047.350747][ T786] usb 3-1: config 0 has no interface number 0 [ 1047.357357][ T8] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1047.387409][ T786] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 1047.399569][ T786] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1047.425851][ T786] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 1047.443733][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.462324][ T786] usb 3-1: Product: syz [ 1047.473310][ T786] usb 3-1: Manufacturer: syz [ 1047.479274][ T786] usb 3-1: SerialNumber: syz [ 1047.502360][ T786] usb 3-1: config 0 descriptor?? [ 1047.517239][T21897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1047.528282][T21897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1047.550822][ T786] ftdi_sio 3-1:0.99: FTDI USB Serial Device converter detected [ 1047.569862][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1047.582670][ T8] usb 1-1: config 150 has an invalid interface number: 204 but max is 0 [ 1047.591591][ T786] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 1047.609024][ T8] usb 1-1: config 150 has no interface number 0 [ 1047.633329][ T8] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1047.657213][ T8] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1047.675627][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.692806][ T8] usb 1-1: Product: syz [ 1047.697476][ T8] usb 1-1: Manufacturer: syz [ 1047.702137][ T8] usb 1-1: SerialNumber: syz [ 1047.786221][ T5775] usb 3-1: USB disconnect, device number 6 [ 1047.796364][ T5775] ftdi_sio 3-1:0.99: device disconnected [ 1047.982555][ T8] usb 1-1: USB disconnect, device number 121 [ 1048.028388][ T786] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1048.044228][T21911] loop3: detected capacity change from 0 to 32768 [ 1048.059645][T21911] (syz.3.7092,21911,1):ocfs2_check_set_options:1221 ERROR: ACL support requested but extended attributes feature is not enabled [ 1048.077527][T21911] (syz.3.7092,21911,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1048.245323][ T786] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 1048.256692][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 1048.280721][ T786] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1048.299651][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.317133][ T786] usb 2-1: Product: syz [ 1048.327497][ T786] usb 2-1: Manufacturer: syz [ 1048.332193][ T786] usb 2-1: SerialNumber: syz [ 1048.340296][ T786] usb 2-1: config 0 descriptor?? [ 1048.348146][ T786] hub 2-1:0.0: bad descriptor, ignoring hub [ 1048.358651][ T786] hub: probe of 2-1:0.0 failed with error -5 [ 1048.394823][ T786] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 1048.435098][ T786] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1048.524660][ T786] usbtouchscreen: probe of 2-1:0.0 failed with error -90 [ 1048.819690][ T786] usb 2-1: USB disconnect, device number 11 [ 1048.956158][T21933] loop3: detected capacity change from 0 to 764 [ 1048.982055][T21933] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1049.344338][T21944] loop1: detected capacity change from 0 to 16 [ 1049.362689][T21944] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1049.385748][T10513] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1049.397273][T21944] cramfs: unsupported filesystem features [ 1049.551950][T21948] loop3: detected capacity change from 0 to 8 [ 1049.599605][T10513] usb 3-1: Using ep0 maxpacket: 16 [ 1049.622323][T21948] SQUASHFS error: xz decompression failed, data probably corrupt [ 1049.631865][T10513] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.646731][T21930] loop0: detected capacity change from 0 to 32768 [ 1049.652535][T21948] SQUASHFS error: Failed to read block 0x108: -5 [ 1049.653834][T10513] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1049.681158][T10513] usb 3-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56 [ 1049.681952][T21948] SQUASHFS error: Unable to read metadata cache entry [106] [ 1049.696239][T10513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.726356][T21948] SQUASHFS error: Unable to read inode 0x11f [ 1049.727875][T10513] usb 3-1: Product: syz [ 1049.747504][T10513] usb 3-1: Manufacturer: syz [ 1049.759902][T10513] usb 3-1: SerialNumber: syz [ 1049.899145][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1050.020109][T10513] ums-cypress 3-1:2.0: USB Mass Storage device detected [ 1050.106500][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1050.119734][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1050.132699][ T8] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 1050.163527][ T8] usb 2-1: config 11 has no interface number 0 [ 1050.184488][T10513] usb 3-1: USB disconnect, device number 7 [ 1050.187684][ T8] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1050.225487][ T8] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1050.258112][T21958] syz.0.7114: attempt to access beyond end of device [ 1050.258112][T21958] md0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1050.287210][ T8] usb 2-1: config 11 interface 244 has no altsetting 0 [ 1050.308100][ T8] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1050.337194][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.345456][ T8] usb 2-1: Product: syz [ 1050.362113][ T8] usb 2-1: Manufacturer: syz [ 1050.366799][ T8] usb 2-1: SerialNumber: syz [ 1050.542374][T21964] loop0: detected capacity change from 0 to 4096 [ 1050.550404][T21964] ntfs3: loop0: Primary boot: invalid index size -57. [ 1050.558035][T21964] ntfs3: loop0: try to read out of volume at offset 0x1ffe00 [ 1050.647119][ T1189] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1050.689978][ T8] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 1050.698679][ T8] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 1050.797714][ T8] peak_usb: probe of 2-1:11.244 failed with error -71 [ 1050.822835][ T8] usb 2-1: USB disconnect, device number 12 [ 1050.850291][ T1189] usb 4-1: Using ep0 maxpacket: 8 [ 1050.857968][ T1189] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1050.884889][ T1189] usb 4-1: config 0 has no interface number 0 [ 1050.891755][ T1189] usb 4-1: config 0 interface 239 altsetting 0 has an invalid endpoint with address 0x64, skipping [ 1050.947694][ T1189] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1050.984398][ T1189] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1050.996759][ T1189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.025505][ T1189] usb 4-1: Product: syz [ 1051.029758][ T1189] usb 4-1: Manufacturer: syz [ 1051.070006][ T1189] usb 4-1: SerialNumber: syz [ 1051.086788][ T1189] usb 4-1: config 0 descriptor?? [ 1051.103656][T21960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1051.357810][ T1189] ath6kl: Failed to submit usb control message: -71 [ 1051.371688][ T1189] ath6kl: unable to send the bmi data to the device: -71 [ 1051.387736][ T1189] ath6kl: Unable to send get target info: -71 [ 1051.405819][ T1189] ath6kl: Failed to init ath6kl core: -71 [ 1051.435411][ T1189] ath6kl_usb: probe of 4-1:0.239 failed with error -71 [ 1051.475572][ T1189] usb 4-1: USB disconnect, device number 2 [ 1051.787458][T21989] loop1: detected capacity change from 0 to 8 [ 1051.851752][T21989] SQUASHFS error: xz decompression failed, data probably corrupt [ 1051.860970][T21989] SQUASHFS error: Failed to read block 0x108: -5 [ 1051.868700][T21989] SQUASHFS error: Unable to read metadata cache entry [106] [ 1051.876289][T21989] SQUASHFS error: Unable to read inode 0x11f [ 1052.023535][T21977] loop2: detected capacity change from 0 to 32768 [ 1052.043129][T21977] gfs2: fsid=: Unknown on-disk format, unable to mount [ 1052.245002][T21993] loop0: detected capacity change from 0 to 8192 [ 1052.328891][T21993] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1052.389443][T21993] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1052.399160][T21993] REISERFS (device loop0): using writeback data mode [ 1052.468841][T21993] REISERFS warning (device loop0): sh-457 journal_init_dev: journal_init_dev: Cannot open './cgroup': -15 [ 1052.494454][T21997] __ntfs_error: 14 callbacks suppressed [ 1052.494472][T21997] ntfs: (device loop3): parse_options(): Unrecognized mount option show_sys_filùqTÈ£³(Ü|Ewes. [ 1052.549723][T21993] REISERFS warning (device loop0): sh-462 journal_init: unable to initialize journal device [ 1052.561873][T21997] ntfs: (device loop3): parse_options(): Invalid fmask option argument: 0Ø000000000000000000511 [ 1052.752936][ T1189] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1052.852970][T22007] set_capacity_and_notify: 1 callbacks suppressed [ 1052.852989][T22007] loop2: detected capacity change from 0 to 512 [ 1052.904694][T22007] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1052.918917][T22007] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1052.928931][T22007] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 1052.966869][ T1189] usb 2-1: Using ep0 maxpacket: 32 [ 1052.975156][ T1189] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1052.988249][ T1189] usb 2-1: config 0 has no interface number 0 [ 1052.998491][ T1189] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1053.009562][ T5785] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1053.049822][ T1189] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1053.066599][ T1189] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1053.077241][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.088037][ T1189] usb 2-1: Product: syz [ 1053.092280][ T1189] usb 2-1: Manufacturer: syz [ 1053.108291][ T1189] usb 2-1: SerialNumber: syz [ 1053.130971][ T1189] usb 2-1: config 0 descriptor?? [ 1053.397122][ T1189] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1053.424351][ T1189] cx231xx 2-1:0.1: Not found matching IAD interface [ 1053.453737][ T1189] usb 2-1: USB disconnect, device number 13 [ 1053.732394][T22028] loop0: detected capacity change from 0 to 8 [ 1053.753242][T22028] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1053.778331][T22028] SQUASHFS error: Failed to read block 0x9b: -5 [ 1053.787179][T22028] SQUASHFS error: Unable to read metadata cache entry [99] [ 1053.794933][T22028] SQUASHFS error: Unable to read inode 0x127 [ 1054.216692][T22034] loop3: detected capacity change from 0 to 8192 [ 1054.310720][T22020] loop2: detected capacity change from 0 to 32768 [ 1054.332325][T22020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7144 (22020) [ 1054.373432][T22020] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1054.399055][T22020] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1054.433688][T22020] BTRFS info (device loop2): enabling ssd optimizations [ 1054.441615][T22020] BTRFS info (device loop2): using spread ssd allocation scheme [ 1054.460348][T22020] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1054.476611][T22020] BTRFS info (device loop2): turning off barriers [ 1054.495048][T22020] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1054.542365][T22020] BTRFS info (device loop2): trying to use backup root at mount time [ 1054.550767][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1054.603179][T22020] BTRFS info (device loop2): metadata ratio 6 [ 1054.609360][T22020] BTRFS info (device loop2): enabling auto defrag [ 1054.648477][T22020] BTRFS info (device loop2): enabling disk space caching [ 1054.678486][T22020] BTRFS info (device loop2): max_inline at 0 [ 1054.684568][T22020] BTRFS error (device loop2): cannot disable free space tree [ 1054.717213][T22020] BTRFS error (device loop2): open_ctree failed: -22 [ 1054.789285][ T8] usb 2-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1054.820576][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.849625][ T8] usb 2-1: Product: syz [ 1054.862084][ T8] usb 2-1: Manufacturer: syz [ 1054.901149][ T8] usb 2-1: SerialNumber: syz [ 1054.921868][T22036] loop0: detected capacity change from 0 to 32768 [ 1054.926076][ T8] usb 2-1: config 0 descriptor?? [ 1054.947782][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1054.998027][T22036] (syz.0.7152,22036,1):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 1055.021717][T22036] (syz.0.7152,22036,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 1055.021761][T22036] (syz.0.7152,22036,1):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 1055.083345][T22036] (syz.0.7152,22036,1):ocfs2_initialize_super:2254 ERROR: status = -22 [ 1055.108721][T22036] (syz.0.7152,22036,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1055.170757][ T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1055.177693][ T8] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 1055.189433][T22051] loop3: detected capacity change from 0 to 1024 [ 1055.224777][ T8] usb 2-1: USB disconnect, device number 14 [ 1055.239226][T22051] EXT4-fs: Ignoring removed orlov option [ 1055.283396][T22051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1055.339936][T22051] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1055.350350][ T1189] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1055.408188][T22051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.566367][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.575409][ T1189] usb 3-1: Using ep0 maxpacket: 32 [ 1055.622453][ T1189] usb 3-1: config index 0 descriptor too short (expected 548, got 36) [ 1055.643778][ T1189] usb 3-1: config 127 has too many interfaces: 193, using maximum allowed: 32 [ 1055.667958][ T1189] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 1055.677997][ T1189] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.694835][ T1189] usb 3-1: config 127 has 0 interfaces, different from the descriptor's value: 193 [ 1055.712378][ T1189] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1055.723361][ T1189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.732330][ T1189] usb 3-1: Product: syz [ 1055.740291][ T1189] usb 3-1: Manufacturer: syz [ 1055.760967][ T1189] usb 3-1: SerialNumber: syz [ 1055.970445][ T5775] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1056.018649][T22063] loop3: detected capacity change from 0 to 4096 [ 1056.022728][ T1189] usb 3-1: USB disconnect, device number 8 [ 1056.037486][T22063] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1056.071760][T22063] ntfs: (device loop3): parse_options(): The case_sensitive option requires a boolean argument. [ 1056.155763][ T5785] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1056.184738][ T5775] usb 1-1: Using ep0 maxpacket: 16 [ 1056.198795][ T5775] usb 1-1: config 254 has an invalid interface number: 119 but max is 0 [ 1056.222491][ T5775] usb 1-1: config 254 has no interface number 0 [ 1056.237849][ T5775] usb 1-1: config 254 interface 119 has no altsetting 0 [ 1056.261914][ T5775] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=79.38 [ 1056.285259][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.299535][ T5775] usb 1-1: Product: syz [ 1056.310285][ T5775] usb 1-1: Manufacturer: syz [ 1056.325988][ T5775] usb 1-1: SerialNumber: syz [ 1056.355565][ T5775] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1056.410695][T22071] loop1: detected capacity change from 0 to 512 [ 1056.433644][T22071] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1056.455241][T22071] EXT4-fs (loop1): invalid journal inode [ 1056.461043][T22071] EXT4-fs (loop1): can't get journal size [ 1056.471407][T22071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 1056.482147][T22071] System zones: 1-12, 13-13 [ 1056.489576][T22071] EXT4-fs (loop1): 1 truncate cleaned up [ 1056.497226][T22071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.600517][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.729357][ T5775] usb 1-1: USB disconnect, device number 122 [ 1056.787141][T22079] loop3: detected capacity change from 0 to 128 [ 1056.826602][T22079] befs: (loop3): No write support. Marking filesystem read-only [ 1056.860252][T22079] befs: (loop3): invalid magic header [ 1057.327894][ T5775] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1057.535949][ T5775] usb 2-1: Using ep0 maxpacket: 16 [ 1057.549277][T22085] loop2: detected capacity change from 0 to 32768 [ 1057.565474][ T5775] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1057.579125][ T5775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.592459][T22085] (syz.2.7174,22085,0):ocfs2_verify_volume:2368 ERROR: bad cluster size found: 32 [ 1057.617992][ T5775] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1057.632177][T22085] (syz.2.7174,22085,0):ocfs2_verify_volume:2387 ERROR: status = -22 [ 1057.643294][ T5775] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 1057.658044][T22085] (syz.2.7174,22085,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1057.668253][ T5775] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1057.688038][T22085] (syz.2.7174,22085,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1057.699911][ T5775] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.727166][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.735845][ T5775] usb 2-1: Product: syz [ 1057.740090][ T5775] usb 2-1: Manufacturer: syz [ 1057.744883][ T5775] usb 2-1: SerialNumber: syz [ 1057.757208][T22097] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1057.799707][T22097] ntfs: (device loop3): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 1057.838860][T22097] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 1057.894582][T22097] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1057.926875][T22097] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1058.032602][T22097] ntfs: volume version 3.1. [ 1058.038889][T22105] dccp_v6_rcv: dropped packet with invalid checksum [ 1058.061483][T22097] ntfs: (device loop3): ntfs_read_locked_inode(): Found unknown compression method or corrupt file. [ 1058.074814][ T5775] usb 2-1: USB disconnect, device number 15 [ 1058.124570][T22097] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1058.180893][T22097] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1058.188521][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.300854][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1058.525068][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1058.538245][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1058.552480][ T23] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 1058.561239][ T23] usb 3-1: config 11 has no interface number 0 [ 1058.567537][ T23] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1058.586882][ T23] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1058.597373][ T23] usb 3-1: config 11 interface 244 has no altsetting 0 [ 1058.609339][ T23] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1058.619213][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.627803][ T23] usb 3-1: Product: syz [ 1058.629055][T22111] set_capacity_and_notify: 1 callbacks suppressed [ 1058.629098][T22111] loop3: detected capacity change from 0 to 4096 [ 1058.633754][ T23] usb 3-1: Manufacturer: syz [ 1058.650232][ T23] usb 3-1: SerialNumber: syz [ 1058.664207][T22111] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1058.719755][T22111] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1058.727672][T22111] ntfs3: loop3: Failed to load $Extend (-22). [ 1058.735496][T22111] ntfs3: loop3: Failed to initialize $Extend. [ 1058.760365][ T1189] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1058.942190][ T23] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 1058.952581][ T1189] usb 1-1: Using ep0 maxpacket: 32 [ 1058.958296][T22114] No source specified [ 1058.962829][ T23] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 1058.975397][ T1189] usb 1-1: config index 0 descriptor too short (expected 48155, got 27) [ 1058.983818][ T1189] usb 1-1: config 249 has too many interfaces: 50, using maximum allowed: 32 [ 1059.011036][ T1189] usb 1-1: config 249 has 2 interfaces, different from the descriptor's value: 50 [ 1059.032696][ T1189] usb 1-1: config 249 has no interface number 1 [ 1059.044041][ T1189] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1059.059548][ T1189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.072251][ T23] peak_usb: probe of 3-1:11.244 failed with error -71 [ 1059.097739][ T1189] usb 1-1: Product: syz [ 1059.102014][ T1189] usb 1-1: Manufacturer: syz [ 1059.122916][ T1189] usb 1-1: SerialNumber: syz [ 1059.128451][ T23] usb 3-1: USB disconnect, device number 9 [ 1059.315463][T22117] loop1: detected capacity change from 0 to 4096 [ 1059.342200][T22117] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1059.359472][T22117] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1059.374686][T22117] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1059.386839][T22117] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1059.413217][T22117] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1059.429243][ T1189] usb 1-1: Could not set interface, error -71 [ 1059.442268][T22117] ntfs: volume version 3.1. [ 1059.455797][ T1189] usb 1-1: USB disconnect, device number 123 [ 1059.509987][ T5778] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1059.712418][ T5778] usb 4-1: Using ep0 maxpacket: 32 [ 1059.726822][T22121] loop1: detected capacity change from 0 to 4096 [ 1059.748271][ T5778] usb 4-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 1059.757733][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.768532][ T5778] usb 4-1: Product: syz [ 1059.776511][ T5778] usb 4-1: Manufacturer: syz [ 1059.782947][ T5778] usb 4-1: SerialNumber: syz [ 1059.790996][ T5778] usb 4-1: config 0 descriptor?? [ 1059.811958][ T5778] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1059.963858][T22129] loop2: detected capacity change from 0 to 256 [ 1060.130323][ T5775] usb 4-1: USB disconnect, device number 3 [ 1060.461900][T22142] loop0: detected capacity change from 0 to 4096 [ 1060.699424][ T1189] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1060.919369][ T1189] usb 3-1: Using ep0 maxpacket: 8 [ 1060.931999][ T1189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1060.957137][ T1189] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1060.969935][T22139] loop1: detected capacity change from 0 to 32768 [ 1060.980655][ T1189] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1061.003882][T22139] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.7200 (22139) [ 1061.028329][ T1189] usb 3-1: config 8 interface 0 has no altsetting 0 [ 1061.038153][ T1189] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1061.047825][ T1189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.055894][ T1189] usb 3-1: Product: syz [ 1061.074100][T22139] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1061.079960][ T1189] usb 3-1: Manufacturer: syz [ 1061.103122][ T1189] usb 3-1: SerialNumber: syz [ 1061.111261][T22139] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1061.149977][T22139] BTRFS info (device loop1): using free space tree [ 1061.370510][T22139] BTRFS info (device loop1): enabling ssd optimizations [ 1061.377573][T22139] BTRFS info (device loop1): auto enabling async discard [ 1061.395108][ T1189] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1061.414172][ T1189] usb 3-1: selecting invalid altsetting 0 [ 1061.492751][ T1189] snd-usb-audio: probe of 3-1:8.0 failed with error -12 [ 1061.525067][ T1189] usb 3-1: USB disconnect, device number 10 [ 1061.544319][ T5770] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1061.573693][T22147] loop3: detected capacity change from 0 to 32768 [ 1061.610816][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.649970][T22147] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop3 scanned by syz.3.7204 (22147) [ 1061.688273][T22147] BTRFS info (device loop3): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1061.701121][T22147] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1061.712255][T22145] loop0: detected capacity change from 0 to 32768 [ 1061.745440][T22147] BTRFS info (device loop3): using free space tree [ 1061.758725][T22145] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop0 scanned by syz.0.7203 (22145) [ 1061.919477][T22145] BTRFS info (device loop0): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1061.946613][T22145] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1061.955443][T22145] BTRFS info (device loop0): using free space tree [ 1062.038622][T22147] BTRFS info (device loop3): enabling ssd optimizations [ 1062.068129][T22147] BTRFS info (device loop3): auto enabling async discard [ 1062.080386][ T5785] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop1 scanned by udevd (5785) [ 1062.306372][T22145] BTRFS info (device loop0): enabling ssd optimizations [ 1062.334514][ T5767] BTRFS info (device loop3): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1062.336800][T22145] BTRFS info (device loop0): auto enabling async discard [ 1062.594437][ T5768] BTRFS info (device loop0): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1062.609646][ T8827] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 9 /dev/loop3 scanned by udevd (8827) [ 1062.800908][ T5775] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1063.036260][ T5775] usb 3-1: Using ep0 maxpacket: 32 [ 1063.048676][ T5775] usb 3-1: config 239 has an invalid interface number: 45 but max is 0 [ 1063.057031][ T5775] usb 3-1: config 239 has no interface number 0 [ 1063.089289][ T5775] usb 3-1: config 239 interface 45 has no altsetting 0 [ 1063.113342][ T5775] usb 3-1: New USB device found, idVendor=048d, idProduct=9135, bcdDevice=ff.f3 [ 1063.142734][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.164532][ T5775] usb 3-1: Product: syz [ 1063.168776][ T5775] usb 3-1: Manufacturer: syz [ 1063.207434][ T5775] usb 3-1: SerialNumber: syz [ 1063.292668][ T8] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1063.485232][ T5775] usb 3-1: USB disconnect, device number 11 [ 1063.526929][ T8] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 1063.570269][ T8] usb 1-1: config 0 has no interface number 0 [ 1063.576571][ T8] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1063.613380][ T8] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1063.658422][ T8] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1063.686623][T22200] loop1: detected capacity change from 0 to 32768 [ 1063.693272][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.721776][ T8] usb 1-1: Product: syz [ 1063.726035][ T8] usb 1-1: Manufacturer: syz [ 1063.745867][ T8] usb 1-1: SerialNumber: syz [ 1063.751072][T22200] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.7206 (22200) [ 1063.775908][ T8] usb 1-1: config 0 descriptor?? [ 1063.791317][ T8] ums-karma 1-1:0.46: USB Mass Storage device detected [ 1063.850143][T22200] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1063.891294][ T8] ums-karma: probe of 1-1:0.46 failed with error -5 [ 1063.910447][T22200] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1063.946113][T22200] BTRFS info (device loop1): using free space tree [ 1063.997704][T22205] loop3: detected capacity change from 0 to 32768 [ 1064.040028][T22205] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop3 scanned by syz.3.7207 (22205) [ 1064.144321][ T1189] usb 1-1: USB disconnect, device number 124 [ 1064.154087][T22205] BTRFS info (device loop3): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1064.164870][T22200] BTRFS info (device loop1): enabling ssd optimizations [ 1064.182662][T22200] BTRFS info (device loop1): auto enabling async discard [ 1064.221376][T22205] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1064.261963][T22205] BTRFS info (device loop3): using free space tree [ 1064.368844][ T5770] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1064.475240][T22205] BTRFS info (device loop3): enabling ssd optimizations [ 1064.494100][T22205] BTRFS info (device loop3): auto enabling async discard [ 1064.720604][ T5767] BTRFS info (device loop3): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1065.020984][T22245] loop0: detected capacity change from 0 to 4096 [ 1065.065629][T22245] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1065.131768][ T5785] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 9 /dev/loop3 scanned by udevd (5785) [ 1065.171354][T22245] ntfs3: loop0: Failed to initialize $Secure (-22). [ 1065.208810][T22227] loop2: detected capacity change from 0 to 32768 [ 1065.249735][T22227] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop2 scanned by syz.2.7210 (22227) [ 1065.311736][T22227] BTRFS info (device loop2): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 1065.334387][ T1189] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 1065.371577][T22227] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1065.430722][T22227] BTRFS info (device loop2): using free space tree [ 1065.552993][ T1189] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1065.622672][ T1189] usb 2-1: string descriptor 0 read error: -22 [ 1065.629152][ T1189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.678553][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.736478][T22227] BTRFS info (device loop2): enabling ssd optimizations [ 1065.784691][ T1189] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1065.793731][T22227] BTRFS info (device loop2): auto enabling async discard [ 1066.009489][ T5769] BTRFS info (device loop2): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 1066.047486][T10513] usb 2-1: USB disconnect, device number 16 [ 1066.249447][T22251] loop3: detected capacity change from 0 to 32768 [ 1066.308800][T22251] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.7214 (22251) [ 1066.371699][T22251] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1066.404881][T22251] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1066.435136][T22251] BTRFS info (device loop3): using free space tree [ 1066.473770][ T8827] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 9 /dev/loop2 scanned by udevd (8827) [ 1066.697102][T22251] BTRFS info (device loop3): enabling ssd optimizations [ 1066.735551][T22251] BTRFS info (device loop3): auto enabling async discard [ 1066.794536][T22256] loop0: detected capacity change from 0 to 32768 [ 1066.856632][T22256] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.7215 (22256) [ 1066.936384][T22256] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 1066.965312][ T5767] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1066.976194][T22256] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1067.027950][T22256] BTRFS info (device loop0): using free space tree [ 1067.262125][T22256] BTRFS info (device loop0): enabling ssd optimizations [ 1067.269284][T22256] BTRFS info (device loop0): auto enabling async discard [ 1067.498016][ T5768] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 1067.685681][ T5775] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1067.764772][T22291] loop1: detected capacity change from 0 to 32768 [ 1067.814184][T22291] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.7217 (22291) [ 1067.862701][T22272] loop2: detected capacity change from 0 to 40427 [ 1067.903716][T22272] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 1067.921100][ T5775] usb 4-1: Using ep0 maxpacket: 8 [ 1067.932101][T22291] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1067.943080][ T5775] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.962978][T22272] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1067.974496][T22291] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1067.998990][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1068.011458][T22291] BTRFS info (device loop1): using free space tree [ 1068.020164][T22272] F2FS-fs (loop2): invalid crc value [ 1068.043870][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1068.061780][ T5775] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1068.127258][ T5775] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1068.186060][ T5775] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1068.198794][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.213962][ T5775] usb 4-1: config 0 descriptor?? [ 1068.297595][T22291] BTRFS info (device loop1): enabling ssd optimizations [ 1068.331248][T22291] BTRFS info (device loop1): auto enabling async discard [ 1068.412714][T22272] F2FS-fs (loop2): Start checkpoint disabled! [ 1068.478482][T22272] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1068.485641][T22272] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1068.569418][ T5879] usb 4-1: USB disconnect, device number 4 [ 1068.643978][ T5770] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1069.111314][T22311] loop0: detected capacity change from 0 to 32768 [ 1069.160386][T22311] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop0 scanned by syz.0.7219 (22311) [ 1069.203242][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.210972][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1069.229353][T22311] BTRFS info (device loop0): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1069.291216][T22311] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1069.322256][T22311] BTRFS info (device loop0): using free space tree [ 1069.452969][T22340] loop3: detected capacity change from 0 to 128 [ 1069.578255][T22332] loop1: detected capacity change from 0 to 32768 [ 1069.586712][T22332] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop1 scanned by syz.1.7220 (22332) [ 1069.627709][T22332] BTRFS info (device loop1): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1069.652532][T22332] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1069.662074][T22332] BTRFS info (device loop1): using free space tree [ 1069.674172][T22311] BTRFS info (device loop0): enabling ssd optimizations [ 1069.702186][T22311] BTRFS info (device loop0): auto enabling async discard [ 1069.750912][T22354] loop3: detected capacity change from 0 to 128 [ 1069.930210][T22332] BTRFS info (device loop1): enabling ssd optimizations [ 1069.952480][T22332] BTRFS info (device loop1): auto enabling async discard [ 1069.961602][ T5768] BTRFS info (device loop0): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1070.258412][ T5770] BTRFS info (device loop1): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1070.558285][T22374] loop0: detected capacity change from 0 to 4096 [ 1070.611072][T22374] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1070.856121][T22367] loop2: detected capacity change from 0 to 32768 [ 1070.892607][T22378] loop1: detected capacity change from 0 to 16 [ 1070.939255][T22378] erofs: (device loop1): mounted with root inode @ nid 36. [ 1071.000640][T22367] (syz.2.7221,22367,1):ocfs2_find_slot:468 ERROR: no free slots available! [ 1071.025429][T22367] (syz.2.7221,22367,1):ocfs2_mount_volume:1807 ERROR: status = -22 [ 1071.086912][T22371] loop3: detected capacity change from 0 to 32768 [ 1071.107626][T22371] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.7225 (22371) [ 1071.120319][T22367] (syz.2.7221,22367,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1071.204327][T22371] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 1071.256496][T22371] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1071.265839][T22371] BTRFS info (device loop3): using free space tree [ 1071.465074][T22395] loop1: detected capacity change from 0 to 2048 [ 1071.525264][T22395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.585992][T22371] BTRFS info (device loop3): enabling ssd optimizations [ 1071.598668][T22371] BTRFS info (device loop3): auto enabling async discard [ 1071.647223][T22396] loop0: detected capacity change from 0 to 4096 [ 1071.754812][T22396] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1071.815452][T22396] NILFS (loop0): mounting unchecked fs [ 1071.868753][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.945772][T22396] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount [ 1071.994628][ T5767] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 1072.152351][ T5887] udevd[5887]: incorrect nilfs2 checksum on /dev/loop0 [ 1072.396084][T22411] loop1: detected capacity change from 0 to 4096 [ 1072.539108][T22411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.683684][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.966715][T22408] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop2 scanned by syz.2.7233 (22408) [ 1073.085113][T22408] BTRFS info (device loop2): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1073.117334][T22408] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1073.180041][T22408] BTRFS info (device loop2): using free space tree [ 1073.214969][T22421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.396570][T22408] BTRFS info (device loop2): enabling ssd optimizations [ 1073.403616][T22408] BTRFS info (device loop2): auto enabling async discard [ 1073.406652][T22417] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.7237 (22417) [ 1073.483534][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.508027][T22417] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1073.540269][T22417] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1073.595547][T22417] BTRFS info (device loop0): using free space tree [ 1073.800276][ T5769] BTRFS info (device loop2): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1073.854412][T22417] BTRFS info (device loop0): enabling ssd optimizations [ 1073.861449][T22417] BTRFS info (device loop0): auto enabling async discard [ 1074.235651][ T5768] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1074.303623][ T5785] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 9 /dev/loop2 scanned by udevd (5785) [ 1074.420917][T10513] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1074.672519][T10513] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1074.690774][T10513] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.734818][T10513] usb 3-1: config 0 has no interface number 0 [ 1074.785187][T10513] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1074.815877][T10513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.823996][T10513] usb 3-1: Product: syz [ 1074.868839][T10513] usb 3-1: Manufacturer: syz [ 1074.875559][T10513] usb 3-1: SerialNumber: syz [ 1074.919565][T10513] usb 3-1: config 0 descriptor?? [ 1074.963100][T22452] set_capacity_and_notify: 3 callbacks suppressed [ 1074.963118][T22452] loop1: detected capacity change from 0 to 32768 [ 1075.034089][T22452] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.7239 (22452) [ 1075.101161][T22452] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1075.165888][T22452] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1075.192838][T10513] uvcvideo 3-1:0.64: Found Unit with invalid ID 0 [ 1075.199399][T10513] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 1075.227320][T22452] BTRFS info (device loop1): using free space tree [ 1075.243188][T10513] usb 3-1: No valid video chain found. [ 1075.277020][T10513] usb 3-1: USB disconnect, device number 12 [ 1075.513585][T22452] BTRFS info (device loop1): enabling ssd optimizations [ 1075.520675][T22452] BTRFS info (device loop1): auto enabling async discard [ 1075.659250][T22463] loop0: detected capacity change from 0 to 32768 [ 1075.703966][T22463] gfs2: can't find protocol dlm [ 1075.814583][ T5770] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1075.994468][T22482] loop0: detected capacity change from 0 to 512 [ 1076.056570][T22482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.095484][T22484] loop2: detected capacity change from 0 to 512 [ 1076.168928][T22484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.302239][T22491] loop1: detected capacity change from 0 to 512 [ 1076.397258][T22491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.424131][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.475149][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.716024][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.754270][T22495] loop0: detected capacity change from 0 to 1024 [ 1076.769055][T22497] loop2: detected capacity change from 0 to 1024 [ 1076.846900][T22495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.874951][T22497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.066009][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.186209][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.310455][T22492] loop3: detected capacity change from 0 to 32768 [ 1077.360724][T22492] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop3 scanned by syz.3.7245 (22492) [ 1077.470788][T22492] BTRFS info (device loop3): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 1077.509104][T22492] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1077.541201][T22492] BTRFS info (device loop3): using free space tree [ 1077.691325][T22492] BTRFS info (device loop3): enabling ssd optimizations [ 1077.720993][T22492] BTRFS info (device loop3): auto enabling async discard [ 1077.878743][ T5767] BTRFS info (device loop3): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 1078.144580][T22502] loop1: detected capacity change from 0 to 32768 [ 1078.197798][T22502] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.7249 (22502) [ 1078.322816][T22502] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1078.346932][T22502] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1078.385615][T22502] BTRFS info (device loop1): using free space tree [ 1078.402155][T22506] loop2: detected capacity change from 0 to 32768 [ 1078.449875][T22506] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.7250 (22506) [ 1078.475817][T22506] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1078.492943][T22506] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1078.502332][T22506] BTRFS info (device loop2): using free space tree [ 1078.714096][T22502] BTRFS info (device loop1): enabling ssd optimizations [ 1078.764968][T22502] BTRFS info (device loop1): auto enabling async discard [ 1078.881519][T22506] BTRFS info (device loop2): enabling ssd optimizations [ 1078.913072][T22506] BTRFS info (device loop2): auto enabling async discard [ 1079.042407][ T5770] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1079.140214][ T5769] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1079.707214][T22560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.033291][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.233301][T22566] set_capacity_and_notify: 1 callbacks suppressed [ 1082.233319][T22566] loop0: detected capacity change from 0 to 32768 [ 1082.286167][T22566] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1082.303467][T22568] loop3: detected capacity change from 0 to 512 [ 1082.310236][T22566] dlm: no local IP address has been set [ 1082.315885][T22566] dlm: cannot start dlm midcomms -107 [ 1082.348341][T22566] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1082.394542][T22568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.609359][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.799642][T22574] loop0: detected capacity change from 0 to 2048 [ 1082.809725][T22576] loop3: detected capacity change from 0 to 128 [ 1082.947088][T22574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.104297][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.976303][T22580] loop3: detected capacity change from 0 to 32768 [ 1084.004011][T22580] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop3 scanned by syz.3.7260 (22580) [ 1084.034165][T22580] BTRFS info (device loop3): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1084.064502][T22580] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1084.092159][T22580] BTRFS info (device loop3): using free space tree [ 1084.122545][T22582] loop0: detected capacity change from 0 to 32768 [ 1084.134552][T22582] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop0 scanned by syz.0.7261 (22582) [ 1084.172667][T22582] BTRFS info (device loop0): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 1084.189409][T22582] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1084.199430][T22582] BTRFS info (device loop0): using free space tree [ 1084.343764][T22580] BTRFS info (device loop3): enabling ssd optimizations [ 1084.388319][T22580] BTRFS info (device loop3): auto enabling async discard [ 1084.393250][T22582] BTRFS info (device loop0): enabling ssd optimizations [ 1084.409753][T22582] BTRFS info (device loop0): auto enabling async discard [ 1084.421419][T22584] loop1: detected capacity change from 0 to 32768 [ 1084.459370][T22584] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop1 scanned by syz.1.7262 (22584) [ 1084.530472][T22584] BTRFS info (device loop1): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 1084.572148][T22584] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1084.625004][T22584] BTRFS info (device loop1): using free space tree [ 1084.672096][ T5767] BTRFS info (device loop3): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1084.719743][ T5768] BTRFS info (device loop0): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 1084.788068][T22618] loop2: detected capacity change from 0 to 2364 [ 1084.967082][T22584] BTRFS info (device loop1): enabling ssd optimizations [ 1085.005801][T22584] BTRFS info (device loop1): auto enabling async discard [ 1085.256996][T22640] loop2: detected capacity change from 0 to 1024 [ 1085.302417][T22639] loop0: detected capacity change from 0 to 736 [ 1085.409499][ T5770] BTRFS info (device loop1): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 1085.802362][T22644] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1086.170677][T22648] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1087.404052][T22636] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1087.473439][T22636] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1087.587045][T22636] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1087.694182][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1087.706560][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1087.970235][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 246ms [ 1087.992016][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done [ 1087.998191][T22636] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1088.007647][T22654] set_capacity_and_notify: 10 callbacks suppressed [ 1088.007664][T22654] loop0: detected capacity change from 0 to 32768 [ 1088.067142][T22654] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1088.130684][T22654] CPU: 1 PID: 22654 Comm: syz.0.7272 Not tainted syzkaller #0 [ 1088.138247][T22654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.148385][T22654] Call Trace: [ 1088.151735][T22654] [ 1088.154717][T22654] dump_stack_lvl+0x18c/0x250 [ 1088.159477][T22654] ? show_regs_print_info+0x20/0x20 [ 1088.164738][T22654] ? load_image+0x400/0x400 [ 1088.169319][T22654] sysfs_create_dir_ns+0x26e/0x2a0 [ 1088.174502][T22654] ? sysfs_warn_dup+0xa0/0xa0 [ 1088.179231][T22654] ? do_raw_spin_unlock+0x121/0x230 [ 1088.184501][T22654] kobject_add_internal+0x61c/0xcc0 [ 1088.189857][T22654] kobject_init_and_add+0x12c/0x1a0 [ 1088.195111][T22654] ? lockdep_softirqs_off+0x430/0x430 [ 1088.200557][T22654] ? kobject_add+0x240/0x240 [ 1088.205204][T22654] ? __init_swait_queue_head+0xa9/0x150 [ 1088.210805][T22654] gfs2_sys_fs_add+0x253/0x4b0 [ 1088.215718][T22654] ? gfs2_recover_set+0x250/0x250 [ 1088.220819][T22654] ? apply_workqueue_attrs+0x180/0x180 [ 1088.226352][T22654] gfs2_fill_super+0x12b6/0x1f30 [ 1088.231381][T22654] ? __might_sleep+0xe0/0xe0 [ 1088.236058][T22654] ? gfs2_reconfigure+0xb10/0xb10 [ 1088.241154][T22654] ? setup_bdev_super+0x56b/0x660 [ 1088.246236][T22654] get_tree_bdev+0x3f3/0x520 [ 1088.250967][T22654] ? end_current_label_crit_section+0x170/0x170 [ 1088.257360][T22654] ? gfs2_reconfigure+0xb10/0xb10 [ 1088.262482][T22654] ? setup_bdev_super+0x660/0x660 [ 1088.267575][T22654] gfs2_get_tree+0x51/0x1e0 [ 1088.272171][T22654] vfs_get_tree+0x8c/0x280 [ 1088.276650][T22654] do_new_mount+0x24b/0xa40 [ 1088.281230][T22654] __se_sys_mount+0x2e7/0x3d0 [ 1088.286021][T22654] ? __x64_sys_mount+0xc0/0xc0 [ 1088.290853][T22654] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.296109][T22654] ? __x64_sys_mount+0x20/0xc0 [ 1088.300945][T22654] do_syscall_64+0x55/0xa0 [ 1088.305442][T22654] ? clear_bhb_loop+0x40/0x90 [ 1088.310184][T22654] ? clear_bhb_loop+0x40/0x90 [ 1088.314929][T22654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.320881][T22654] RIP: 0033:0x7f18b1f9c14a [ 1088.325354][T22654] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.345118][T22654] RSP: 002b:00007f18b2f47e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1088.353615][T22654] RAX: ffffffffffffffda RBX: 00007f18b2f47ee0 RCX: 00007f18b1f9c14a [ 1088.361651][T22654] RDX: 000020000003b2c0 RSI: 000020000003b300 RDI: 00007f18b2f47ea0 [ 1088.369684][T22654] RBP: 000020000003b2c0 R08: 00007f18b2f47ee0 R09: 0000000000000000 [ 1088.377718][T22654] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000003b300 [ 1088.385757][T22654] R13: 00007f18b2f47ea0 R14: 000000000003b285 R15: 000020000003b340 [ 1088.393822][T22654] [ 1088.449410][T22654] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1088.561715][T22654] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1089.015025][T22665] loop1: detected capacity change from 0 to 32768 [ 1089.053585][T22665] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1089.088118][T22665] CPU: 1 PID: 22665 Comm: syz.1.7278 Not tainted syzkaller #0 [ 1089.095682][T22665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1089.105789][T22665] Call Trace: [ 1089.109146][T22665] [ 1089.112135][T22665] dump_stack_lvl+0x18c/0x250 [ 1089.116991][T22665] ? show_regs_print_info+0x20/0x20 [ 1089.122346][T22665] ? load_image+0x400/0x400 [ 1089.126926][T22665] sysfs_create_dir_ns+0x26e/0x2a0 [ 1089.132101][T22665] ? sysfs_warn_dup+0xa0/0xa0 [ 1089.136838][T22665] ? do_raw_spin_unlock+0x121/0x230 [ 1089.142106][T22665] kobject_add_internal+0x61c/0xcc0 [ 1089.147373][T22665] kobject_init_and_add+0x12c/0x1a0 [ 1089.152629][T22665] ? lockdep_softirqs_off+0x430/0x430 [ 1089.158056][T22665] ? kobject_add+0x240/0x240 [ 1089.162709][T22665] ? __init_swait_queue_head+0xa9/0x150 [ 1089.168313][T22665] gfs2_sys_fs_add+0x253/0x4b0 [ 1089.173127][T22665] ? gfs2_recover_set+0x250/0x250 [ 1089.178206][T22665] ? apply_workqueue_attrs+0x180/0x180 [ 1089.183714][T22665] gfs2_fill_super+0x12b6/0x1f30 [ 1089.188694][T22665] ? __might_sleep+0xe0/0xe0 [ 1089.193334][T22665] ? gfs2_reconfigure+0xb10/0xb10 [ 1089.198400][T22665] ? setup_bdev_super+0x56b/0x660 [ 1089.203470][T22665] get_tree_bdev+0x3f3/0x520 [ 1089.208112][T22665] ? end_current_label_crit_section+0x170/0x170 [ 1089.214397][T22665] ? gfs2_reconfigure+0xb10/0xb10 [ 1089.219460][T22665] ? setup_bdev_super+0x660/0x660 [ 1089.224561][T22665] gfs2_get_tree+0x51/0x1e0 [ 1089.229106][T22665] vfs_get_tree+0x8c/0x280 [ 1089.233558][T22665] do_new_mount+0x24b/0xa40 [ 1089.238100][T22665] __se_sys_mount+0x2e7/0x3d0 [ 1089.242812][T22665] ? __x64_sys_mount+0xc0/0xc0 [ 1089.247613][T22665] ? lockdep_hardirqs_on+0x98/0x150 [ 1089.252844][T22665] ? __x64_sys_mount+0x20/0xc0 [ 1089.257642][T22665] do_syscall_64+0x55/0xa0 [ 1089.262094][T22665] ? clear_bhb_loop+0x40/0x90 [ 1089.266802][T22665] ? clear_bhb_loop+0x40/0x90 [ 1089.271514][T22665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.277460][T22665] RIP: 0033:0x7ff1b379c14a [ 1089.281911][T22665] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.301645][T22665] RSP: 002b:00007ff1b4695e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1089.310092][T22665] RAX: ffffffffffffffda RBX: 00007ff1b4695ee0 RCX: 00007ff1b379c14a [ 1089.318202][T22665] RDX: 0000200000037f00 RSI: 0000200000037f40 RDI: 00007ff1b4695ea0 [ 1089.326257][T22665] RBP: 0000200000037f00 R08: 00007ff1b4695ee0 R09: 0000000000000000 [ 1089.334283][T22665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000037f40 [ 1089.342292][T22665] R13: 00007ff1b4695ea0 R14: 0000000000037f00 R15: 0000200000037f80 [ 1089.350333][T22665] [ 1089.355262][T22665] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1089.384900][T22665] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1089.623378][T22673] loop1: detected capacity change from 0 to 128 [ 1089.910305][T22675] loop1: detected capacity change from 0 to 256 [ 1090.213541][T22678] loop1: detected capacity change from 0 to 256 [ 1090.313615][T22680] loop3: detected capacity change from 0 to 512 [ 1090.554478][T22682] loop1: detected capacity change from 0 to 128 [ 1090.598179][T22684] loop3: detected capacity change from 0 to 128 [ 1090.807547][T22670] loop0: detected capacity change from 0 to 32768 [ 1090.851930][T22670] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1090.893838][T22670] dlm: no local IP address has been set [ 1090.899478][T22670] dlm: cannot start dlm midcomms -107 [ 1090.906206][T22670] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1090.930729][T22688] loop1: detected capacity change from 0 to 128 [ 1091.832586][T22697] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1092.474613][T22689] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1092.508432][T22689] dlm: no local IP address has been set [ 1092.514873][T22689] dlm: cannot start dlm midcomms -107 [ 1092.520838][T22689] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1092.669965][T22705] ntfs: volume version 3.1. [ 1093.085491][T22708] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1093.927211][T22710] set_capacity_and_notify: 7 callbacks suppressed [ 1093.927229][T22710] loop0: detected capacity change from 0 to 32768 [ 1094.344899][T22712] loop3: detected capacity change from 0 to 32768 [ 1094.537101][T22715] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1094.983970][T22717] loop3: detected capacity change from 0 to 4096 [ 1095.078404][T22714] loop0: detected capacity change from 0 to 32768 [ 1095.103312][T22717] ntfs: volume version 3.1. [ 1095.357202][T22718] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1096.246959][T22724] loop1: detected capacity change from 0 to 4096 [ 1096.328052][T22724] ntfs: volume version 3.1. [ 1096.363564][T22720] loop3: detected capacity change from 0 to 32768 [ 1096.399334][T22720] (syz.3.7301,22720,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1096.450332][T22720] (syz.3.7301,22720,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1096.763431][T22722] loop0: detected capacity change from 0 to 32768 [ 1096.793728][T22722] (syz.0.7302,22722,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1096.845293][T22722] (syz.0.7302,22722,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1097.644030][T22728] loop3: detected capacity change from 0 to 32768 [ 1097.680748][T22728] (syz.3.7305,22728,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1097.722451][T22728] (syz.3.7305,22728,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1097.764974][T22730] loop2: detected capacity change from 0 to 32768 [ 1097.809833][T22730] (syz.2.7306,22730,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1097.855600][T22730] (syz.2.7306,22730,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1098.013973][T22739] loop3: detected capacity change from 0 to 512 [ 1098.311973][T22743] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1099.267527][T22734] (syz.0.7308,22734,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1099.308473][T22734] (syz.0.7308,22734,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1099.740615][T22744] set_capacity_and_notify: 2 callbacks suppressed [ 1099.740632][T22744] loop3: detected capacity change from 0 to 32768 [ 1099.804343][T22744] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1099.817742][T22744] dlm: no local IP address has been set [ 1099.823407][T22744] dlm: cannot start dlm midcomms -107 [ 1099.850292][T22744] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1100.539461][T22746] loop2: detected capacity change from 0 to 65536 [ 1100.556866][T22746] (syz.2.7312,22746,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1100.597869][T22746] (syz.2.7312,22746,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1101.093073][T22754] loop3: detected capacity change from 0 to 32768 [ 1101.112187][T22754] (syz.3.7314,22754,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1101.147222][T22754] (syz.3.7314,22754,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1102.238704][T22760] loop3: detected capacity change from 0 to 32768 [ 1102.262030][T22760] (syz.3.7317,22760,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1102.308419][T22760] (syz.3.7317,22760,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1103.971591][T22756] loop2: detected capacity change from 0 to 131072 [ 1104.191454][T22756] NILFS (loop2): error -4 creating segctord thread [ 1106.993708][T22771] loop3: detected capacity change from 0 to 8192 [ 1107.018831][T22771] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1107.054129][T22771] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1107.063498][T22771] REISERFS (device loop3): using ordered data mode [ 1107.070379][T22771] reiserfs: using flush barriers [ 1107.086279][T22771] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1107.103197][T22771] REISERFS (device loop3): checking transaction log (loop3) [ 1107.388291][T22771] REISERFS (device loop3): Using r5 hash to sort names [ 1107.395646][T22771] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1108.141948][T22774] loop0: detected capacity change from 0 to 16384 [ 1108.259108][T22777] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1108.688407][T22769] loop1: detected capacity change from 0 to 131072 [ 1108.734666][T22769] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1108.764434][T22769] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1108.773767][T22769] REISERFS (device loop1): using ordered data mode [ 1108.861725][T22769] reiserfs: using flush barriers [ 1108.890070][T22769] REISERFS warning (device loop1): journal-1256 journal_init: unable to get memory for journal structure [ 1108.904351][T22779] loop0: detected capacity change from 0 to 16384 [ 1108.932715][T22769] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1108.960090][T22779] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 1108.973791][T22779] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 1109.074464][ T5785] I/O error, dev loop0, sector 16256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1109.140565][T22783] loop2: detected capacity change from 0 to 1 [ 1109.182721][T22783] syz.2.7326: attempt to access beyond end of device [ 1109.182721][T22783] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1109.231080][T22783] SQUASHFS error: Failed to read block 0x0: -5 [ 1109.258855][T22783] unable to read squashfs_super_block [ 1109.291693][T22785] syz.1.7327: attempt to access beyond end of device [ 1109.291693][T22785] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1109.352339][T22785] SQUASHFS error: Failed to read block 0x0: -5 [ 1109.383559][T22785] unable to read squashfs_super_block [ 1109.547715][T22787] loop2: detected capacity change from 0 to 128 [ 1109.578048][T22787] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1109.621624][T22787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.704564][T22789] loop0: detected capacity change from 0 to 2048 [ 1109.742651][T22789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.839762][T22791] loop1: detected capacity change from 0 to 1024 [ 1109.906366][T22791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.947961][T22793] loop2: detected capacity change from 0 to 256 [ 1110.017687][T22793] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1110.051752][T22793] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1110.086045][T22793] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1110.111453][T22793] UDF-fs: Scanning with blocksize 512 failed [ 1110.141134][T22793] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1110.204382][T22793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.311369][T22797] loop1: detected capacity change from 0 to 256 [ 1110.346766][T22797] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1110.422908][T22797] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1110.453327][T22797] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1110.461063][T22797] UDF-fs: Scanning with blocksize 512 failed [ 1110.527025][T22797] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1110.570057][T22797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.903642][T22801] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1110.952443][T22801] UDF-fs: Scanning with blocksize 512 failed [ 1110.987738][T22801] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1111.018886][T22801] UDF-fs: Scanning with blocksize 1024 failed [ 1111.042298][T22801] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1111.058244][T22801] UDF-fs: Scanning with blocksize 2048 failed [ 1111.077814][T22801] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1111.115788][T22801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1111.403461][T22803] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1111.423093][T22803] UDF-fs: Scanning with blocksize 512 failed [ 1111.460723][T22803] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1111.481106][T22803] UDF-fs: Scanning with blocksize 1024 failed [ 1111.509101][T22803] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1111.533064][T22803] UDF-fs: Scanning with blocksize 2048 failed [ 1111.557102][T22803] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1111.611953][T22803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1111.861587][T22805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1111.890997][T22805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1112.148837][T22807] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1112.167677][T22807] UDF-fs: Scanning with blocksize 512 failed [ 1112.187678][T22807] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1112.195194][T22807] UDF-fs: Scanning with blocksize 1024 failed [ 1112.218192][T22807] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1112.238462][T22807] UDF-fs: Scanning with blocksize 2048 failed [ 1112.265118][T22807] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1112.284463][T22807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1112.374044][T22809] set_capacity_and_notify: 4 callbacks suppressed [ 1112.374063][T22809] loop3: detected capacity change from 0 to 256 [ 1112.475707][T22809] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1112.529198][T22811] loop1: detected capacity change from 0 to 128 [ 1112.544295][T22809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1112.821030][T22815] loop3: detected capacity change from 0 to 512 [ 1112.850106][T22814] loop1: detected capacity change from 0 to 512 [ 1113.127076][T22817] loop3: detected capacity change from 0 to 256 [ 1113.170307][T22819] loop1: detected capacity change from 0 to 128 [ 1113.422797][T22821] loop3: detected capacity change from 0 to 512 [ 1113.484658][T22823] loop1: detected capacity change from 0 to 128 [ 1113.774708][T22826] loop1: detected capacity change from 0 to 128 [ 1114.042720][T22829] loop1: detected capacity change from 0 to 2048 [ 1115.042908][T22835] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1115.061353][T22835] UDF-fs: Scanning with blocksize 512 failed [ 1115.094053][T22835] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1115.101615][T22835] UDF-fs: Scanning with blocksize 1024 failed [ 1115.140376][T22835] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1115.167236][T22835] UDF-fs: Scanning with blocksize 2048 failed [ 1115.209066][T22837] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1115.227711][T22835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1115.233192][T22837] UDF-fs: Scanning with blocksize 512 failed [ 1115.290506][T22837] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1115.310908][T22837] UDF-fs: Scanning with blocksize 1024 failed [ 1115.338573][T22837] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1115.374889][T22837] UDF-fs: Scanning with blocksize 2048 failed [ 1115.416365][T22837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1118.169169][T22855] set_capacity_and_notify: 8 callbacks suppressed [ 1118.169186][T22855] loop1: detected capacity change from 0 to 32768 [ 1119.274285][T22859] loop1: detected capacity change from 0 to 32768 [ 1119.371469][T22859] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1119.582993][T22859] XFS (loop1): Ending clean mount [ 1119.718947][ T5770] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1120.028606][T22861] loop0: detected capacity change from 0 to 32768 [ 1120.150182][T22861] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1120.308026][T22861] XFS (loop0): Ending clean mount [ 1120.432609][T22876] loop2: detected capacity change from 0 to 8192 [ 1120.465342][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1120.496055][T22876] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1120.513968][T22876] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1120.523407][T22876] REISERFS (device loop2): using ordered data mode [ 1120.529968][T22876] reiserfs: using flush barriers [ 1120.548965][T22876] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1120.566137][T22876] REISERFS (device loop2): checking transaction log (loop2) [ 1120.903626][T22876] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1120.960843][T22876] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1120.974145][T22876] REISERFS (device loop2): Remounting filesystem read-only [ 1121.011029][T22876] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1121.059358][T22876] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 1122.415224][T22881] loop1: detected capacity change from 0 to 65536 [ 1122.484331][T22881] XFS (loop1): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 1122.767665][T22881] XFS (loop1): Ending clean mount [ 1122.875930][ T5770] XFS (loop1): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 1123.246874][T22888] loop2: detected capacity change from 0 to 65536 [ 1123.332482][T22888] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 1124.021599][T22890] loop3: detected capacity change from 0 to 65536 [ 1124.140084][T22890] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1124.292305][T22890] XFS (loop3): Ending clean mount [ 1124.422562][ T5767] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1128.397065][T22919] loop0: detected capacity change from 0 to 131072 [ 1128.484911][T22919] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 1129.709941][T22930] loop0: detected capacity change from 0 to 32768 [ 1129.827331][T22930] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1130.028550][T22930] XFS (loop0): Ending clean mount [ 1130.182619][ T5768] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1131.787763][T22946] loop2: detected capacity change from 0 to 128 [ 1131.829232][T22946] zonefs (loop2) ERROR: Not a zoned block device [ 1131.897797][T22948] Cannot find add_set index 0 as target [ 1132.616479][T22938] loop3: detected capacity change from 0 to 131072 [ 1132.712801][T22938] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1133.753796][T22990] loop1: detected capacity change from 0 to 512 [ 1133.778725][T22990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1133.827672][T22990] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1133.882021][T22990] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.7401: bad orphan inode 11 [ 1133.967892][T22990] EXT4-fs (loop1): Remounting filesystem read-only [ 1133.996149][T22990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.026035][T22979] loop3: detected capacity change from 0 to 32768 [ 1134.100374][ T5138] loop3: p1 p2 p3 [ 1134.152406][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.793894][T23009] loop1: detected capacity change from 0 to 164 [ 1134.815198][T23009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1134.870259][T23009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1134.879413][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1134.879506][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1134.901803][T23009] Symlink component flag not implemented [ 1134.907524][T23009] Symlink component flag not implemented [ 1134.925275][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1134.939738][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1134.951243][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1134.963022][T23009] Symlink component flag not implemented (7) [ 1134.998446][T23009] Symlink component flag not implemented (116) [ 1135.284797][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1135.498146][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1135.517536][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1135.538281][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.562328][ T8] usb 3-1: Product: syz [ 1135.568467][T23031] binder: 23030:23031 ioctl c00c620f 2000000000c0 returned -22 [ 1135.575416][ T8] usb 3-1: Manufacturer: syz [ 1135.580907][ T8] usb 3-1: SerialNumber: syz [ 1135.605085][ T8] usb 3-1: config 0 descriptor?? [ 1135.613051][ T8] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1135.840795][ T8] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 1135.858520][ T8] visor: probe of 3-1:0.0 failed with error -5 [ 1136.109781][ T8] usb 3-1: USB disconnect, device number 13 [ 1136.450638][T23039] loop3: detected capacity change from 0 to 32768 [ 1136.508381][T23039] loop3: p1 p9 p11 [ 1136.766369][T23063] loop3: detected capacity change from 0 to 256 [ 1136.996937][T23067] loop1: detected capacity change from 0 to 1024 [ 1137.040900][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7440'. [ 1137.050411][T23067] __quota_error: 24 callbacks suppressed [ 1137.050428][T23067] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 1137.094637][T23067] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1137.136728][T23067] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.7439: Failed to acquire dquot type 0 [ 1137.156576][T23067] EXT4-fs error (device loop1): mb_free_blocks:1954: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1137.183673][T23067] EXT4-fs (loop1): 1 truncate cleaned up [ 1137.237231][T23067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.269088][ T8827] udevd[8827]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 1137.301609][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1137.321829][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 1137.329455][T23067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.116138][T23103] loop1: detected capacity change from 0 to 512 [ 1138.173166][T23103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.431854][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.951178][ T1189] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1139.164551][ T1189] usb 1-1: Using ep0 maxpacket: 8 [ 1139.171973][ T1189] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.180830][ T1189] usb 1-1: config 0 has no interface number 0 [ 1139.191468][ T1189] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1139.208133][ T1189] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1139.244736][ T1189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.271542][ T1189] usb 1-1: Product: syz [ 1139.275800][ T1189] usb 1-1: Manufacturer: syz [ 1139.302171][ T1189] usb 1-1: SerialNumber: syz [ 1139.326545][ T1189] usb 1-1: config 0 descriptor?? [ 1139.399917][T23148] loop2: detected capacity change from 0 to 1024 [ 1139.494528][T23151] xt_CONNSECMARK: invalid mode: 66 [ 1139.566818][ T1189] i2c-cp2615: probe of 1-1:0.1 failed with error -22 [ 1139.574747][ T1013] hfsplus: b-tree write err: -5, ino 4 [ 1139.752520][T23159] loop3: detected capacity change from 0 to 256 [ 1139.837705][ T5879] usb 1-1: USB disconnect, device number 125 [ 1139.907567][T23163] netlink: 'syz.2.7485': attribute type 4 has an invalid length. [ 1140.383547][ T5879] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1140.448719][T23181] ================================================================== [ 1140.456868][T23181] BUG: KASAN: slab-use-after-free in skb_release_head_state+0x3b/0x240 [ 1140.465259][T23181] Read of size 8 at addr ffff8880770ce558 by task syz.3.7493/23181 [ 1140.473192][T23181] [ 1140.475547][T23181] CPU: 1 PID: 23181 Comm: syz.3.7493 Not tainted syzkaller #0 [ 1140.483205][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1140.493312][T23181] Call Trace: [ 1140.496644][T23181] [ 1140.499619][T23181] dump_stack_lvl+0x18c/0x250 [ 1140.504363][T23181] ? read_lock_is_recursive+0x20/0x20 [ 1140.509781][T23181] ? show_regs_print_info+0x20/0x20 [ 1140.515041][T23181] ? load_image+0x400/0x400 [ 1140.519591][T23181] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1140.525099][T23181] ? __virt_addr_valid+0x18c/0x540 [ 1140.530264][T23181] ? __virt_addr_valid+0x469/0x540 [ 1140.535427][T23181] print_report+0xa8/0x210 [ 1140.539899][T23181] ? skb_release_head_state+0x3b/0x240 [ 1140.545421][T23181] kasan_report+0x117/0x150 [ 1140.549997][T23181] ? skb_release_head_state+0x3b/0x240 [ 1140.555524][T23181] skb_release_head_state+0x3b/0x240 [ 1140.560883][T23181] kfree_skb_reason+0xd7/0x170 [ 1140.565713][T23181] __hci_req_sync+0x613/0x910 [ 1140.570457][T23181] ? hci_req_sync_complete+0x270/0x270 [ 1140.575989][T23181] ? mutex_lock_nested+0x20/0x20 [ 1140.580980][T23181] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1140.586670][T23181] ? mutex_unlock+0x10/0x10 [ 1140.591242][T23181] ? hci_inquiry_cache_flush+0x14f/0x220 [ 1140.596932][T23181] ? __kmem_cache_free+0xba/0x1e0 [ 1140.602018][T23181] ? hci_inquiry+0x600/0x600 [ 1140.606705][T23181] hci_req_sync+0xa2/0xc0 [ 1140.611105][T23181] hci_inquiry+0x38f/0x600 [ 1140.615584][T23181] ? hci_remove_remote_oob_data+0x250/0x250 [ 1140.621531][T23181] ? hci_sock_ioctl+0x521/0x9f0 [ 1140.626441][T23181] sock_do_ioctl+0xfc/0x310 [ 1140.630995][T23181] ? sock_show_fdinfo+0xb0/0xb0 [ 1140.635897][T23181] sock_ioctl+0x5ba/0x7e0 [ 1140.640273][T23181] ? sock_poll+0x3e0/0x3e0 [ 1140.644863][T23181] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1140.649848][T23181] ? security_file_ioctl+0x80/0xa0 [ 1140.655039][T23181] ? sock_poll+0x3e0/0x3e0 [ 1140.659511][T23181] __se_sys_ioctl+0xfd/0x170 [ 1140.664179][T23181] do_syscall_64+0x55/0xa0 [ 1140.668662][T23181] ? clear_bhb_loop+0x40/0x90 [ 1140.673389][T23181] ? clear_bhb_loop+0x40/0x90 [ 1140.678120][T23181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1140.684081][T23181] RIP: 0033:0x7f32af79aeb9 [ 1140.688539][T23181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.708198][T23181] RSP: 002b:00007f32b05ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.716668][T23181] RAX: ffffffffffffffda RBX: 00007f32afa15fa0 RCX: 00007f32af79aeb9 [ 1140.717947][ T5879] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 1140.724673][T23181] RDX: 0000200000000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 1140.724694][T23181] RBP: 00007f32af808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1140.724709][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.756499][T23181] R13: 00007f32afa16038 R14: 00007f32afa15fa0 R15: 00007fff28458928 [ 1140.764538][T23181] [ 1140.767618][T23181] [ 1140.769979][T23181] Allocated by task 5083: [ 1140.774344][T23181] kasan_set_track+0x4e/0x70 [ 1140.778988][T23181] __kasan_slab_alloc+0x6c/0x80 [ 1140.783889][T23181] slab_post_alloc_hook+0x6e/0x4b0 [ 1140.789055][T23181] kmem_cache_alloc+0x11a/0x2d0 [ 1140.793956][T23181] skb_clone+0x1eb/0x370 [ 1140.798240][T23181] hci_cmd_work+0x283/0x650 [ 1140.802826][T23181] process_scheduled_works+0xa5d/0x15d0 [ 1140.808429][T23181] worker_thread+0xa55/0xfc0 [ 1140.813075][T23181] kthread+0x2fa/0x390 [ 1140.817217][T23181] ret_from_fork+0x48/0x80 [ 1140.821688][T23181] ret_from_fork_asm+0x11/0x20 [ 1140.826507][T23181] [ 1140.828862][T23181] Freed by task 13159: [ 1140.832967][T23181] kasan_set_track+0x4e/0x70 [ 1140.837626][T23181] kasan_save_free_info+0x2e/0x50 [ 1140.842704][T23181] ____kasan_slab_free+0x126/0x1e0 [ 1140.847878][T23181] slab_free_freelist_hook+0x130/0x1a0 [ 1140.853381][T23181] kmem_cache_free+0xf8/0x270 [ 1140.858121][T23181] hci_cmd_work+0x25d/0x650 [ 1140.862686][T23181] process_scheduled_works+0xa5d/0x15d0 [ 1140.866182][ T5879] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1140.868275][T23181] worker_thread+0xa55/0xfc0 [ 1140.868306][T23181] kthread+0x2fa/0x390 [ 1140.886190][T23181] ret_from_fork+0x48/0x80 [ 1140.890660][T23181] ret_from_fork_asm+0x11/0x20 [ 1140.895474][T23181] [ 1140.897834][T23181] The buggy address belongs to the object at ffff8880770ce500 [ 1140.897834][T23181] which belongs to the cache skbuff_head_cache of size 240 [ 1140.912456][T23181] The buggy address is located 88 bytes inside of [ 1140.912456][T23181] freed 240-byte region [ffff8880770ce500, ffff8880770ce5f0) [ 1140.926217][T23181] [ 1140.928572][T23181] The buggy address belongs to the physical page: [ 1140.935043][T23181] page:ffffea0001dc3380 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880770ce8c0 pfn:0x770ce [ 1140.940732][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.946612][T23181] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1140.946645][T23181] page_type: 0xffffffff() [ 1140.966597][T23181] raw: 00fff00000000800 ffff88801ea6a640 ffffea0001d81b10 ffffea00017a4550 [ 1140.975222][T23181] raw: ffff8880770ce8c0 00000000000c0009 00000001ffffffff 0000000000000000 [ 1140.983840][T23181] page dumped because: kasan: bad access detected [ 1140.990296][T23181] page_owner tracks the page as allocated [ 1140.996080][T23181] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 1082, tgid 1082 (kworker/u4:6), ts 144464464676, free_ts 144220097342 [ 1141.016023][T23181] post_alloc_hook+0x1c1/0x200 [ 1141.020847][T23181] get_page_from_freelist+0x1951/0x19e0 [ 1141.026442][T23181] __alloc_pages+0x1f0/0x460 [ 1141.031086][T23181] alloc_slab_page+0x5d/0x160 [ 1141.035809][T23181] new_slab+0x87/0x2d0 [ 1141.039930][T23181] ___slab_alloc+0xc5d/0x12f0 [ 1141.044668][T23181] kmem_cache_alloc_node+0x1e6/0x320 [ 1141.050225][T23181] __alloc_skb+0x103/0x2c0 [ 1141.054694][T23181] nsim_dev_trap_report_work+0x293/0xb00 [ 1141.060392][T23181] process_scheduled_works+0xa5d/0x15d0 [ 1141.065986][T23181] worker_thread+0xa55/0xfc0 [ 1141.070630][T23181] kthread+0x2fa/0x390 [ 1141.074847][T23181] ret_from_fork+0x48/0x80 [ 1141.079324][T23181] ret_from_fork_asm+0x11/0x20 [ 1141.084150][T23181] page last free stack trace: [ 1141.088880][T23181] free_unref_page_prepare+0x7b2/0x8c0 [ 1141.094407][T23181] free_unref_page_list+0xbe/0x860 [ 1141.099586][T23181] release_pages+0x1f7a/0x2200 [ 1141.104398][T23181] tlb_flush_mmu+0x377/0x510 [ 1141.109040][T23181] tlb_finish_mmu+0xc3/0x1d0 [ 1141.113689][T23181] exit_mmap+0x428/0xb90 [ 1141.117994][T23181] __mmput+0x118/0x3c0 [ 1141.122108][T23181] exit_mm+0x1f2/0x2c0 [ 1141.126325][T23181] do_exit+0x8dd/0x2460 [ 1141.128158][ T5879] usb 3-1: config 0 descriptor?? [ 1141.130523][T23181] do_group_exit+0x21b/0x2d0 [ 1141.140211][T23181] __x64_sys_exit_group+0x3f/0x40 [ 1141.145300][T23181] do_syscall_64+0x55/0xa0 [ 1141.149800][T23181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1141.155745][T23181] [ 1141.158108][T23181] Memory state around the buggy address: [ 1141.163773][T23181] ffff8880770ce400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1141.171965][T23181] ffff8880770ce480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 1141.180068][T23181] >ffff8880770ce500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1141.188166][T23181] ^ [ 1141.190846][ T5879] pwc: Creative Labs Webcam Pro Ex detected. [ 1141.195119][T23181] ffff8880770ce580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1141.195137][T23181] ffff8880770ce600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1141.195149][T23181] ================================================================== [ 1141.195395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.231590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.259112][ T5879] pwc: Warning: more than 1 configuration available. [ 1141.295748][T23181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1141.303024][T23181] CPU: 1 PID: 23181 Comm: syz.3.7493 Not tainted syzkaller #0 [ 1141.310541][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1141.320646][T23181] Call Trace: [ 1141.323965][T23181] [ 1141.326938][T23181] dump_stack_lvl+0x18c/0x250 [ 1141.331681][T23181] ? show_regs_print_info+0x20/0x20 [ 1141.336940][T23181] ? load_image+0x400/0x400 [ 1141.341514][T23181] panic+0x2dc/0x730 [ 1141.345457][T23181] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1141.351672][T23181] ? bpf_jit_dump+0xd0/0xd0 [ 1141.356225][T23181] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1141.362266][T23181] ? _raw_spin_unlock+0x40/0x40 [ 1141.367254][T23181] ? skb_release_head_state+0x3b/0x240 [ 1141.372766][T23181] check_panic_on_warn+0x84/0xa0 [ 1141.378014][T23181] ? skb_release_head_state+0x3b/0x240 [ 1141.383571][T23181] end_report+0x6f/0x130 [ 1141.387870][T23181] kasan_report+0x128/0x150 [ 1141.392424][T23181] ? skb_release_head_state+0x3b/0x240 [ 1141.397946][T23181] skb_release_head_state+0x3b/0x240 [ 1141.403308][T23181] kfree_skb_reason+0xd7/0x170 [ 1141.408136][T23181] __hci_req_sync+0x613/0x910 [ 1141.412883][T23181] ? hci_req_sync_complete+0x270/0x270 [ 1141.418425][T23181] ? mutex_lock_nested+0x20/0x20 [ 1141.423429][T23181] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1141.429122][T23181] ? mutex_unlock+0x10/0x10 [ 1141.433688][T23181] ? hci_inquiry_cache_flush+0x14f/0x220 [ 1141.439561][T23181] ? __kmem_cache_free+0xba/0x1e0 [ 1141.444746][T23181] ? hci_inquiry+0x600/0x600 [ 1141.449397][T23181] hci_req_sync+0xa2/0xc0 [ 1141.453836][T23181] hci_inquiry+0x38f/0x600 [ 1141.458311][T23181] ? hci_remove_remote_oob_data+0x250/0x250 [ 1141.464270][T23181] ? hci_sock_ioctl+0x521/0x9f0 [ 1141.469192][T23181] sock_do_ioctl+0xfc/0x310 [ 1141.473750][T23181] ? sock_show_fdinfo+0xb0/0xb0 [ 1141.478664][T23181] sock_ioctl+0x5ba/0x7e0 [ 1141.483051][T23181] ? sock_poll+0x3e0/0x3e0 [ 1141.487542][T23181] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1141.492622][T23181] ? security_file_ioctl+0x80/0xa0 [ 1141.497796][T23181] ? sock_poll+0x3e0/0x3e0 [ 1141.502352][T23181] __se_sys_ioctl+0xfd/0x170 [ 1141.507001][T23181] do_syscall_64+0x55/0xa0 [ 1141.511472][T23181] ? clear_bhb_loop+0x40/0x90 [ 1141.516207][T23181] ? clear_bhb_loop+0x40/0x90 [ 1141.520941][T23181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1141.526979][T23181] RIP: 0033:0x7f32af79aeb9 [ 1141.531453][T23181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.551271][T23181] RSP: 002b:00007f32b05ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1141.559746][T23181] RAX: ffffffffffffffda RBX: 00007f32afa15fa0 RCX: 00007f32af79aeb9 [ 1141.567766][T23181] RDX: 0000200000000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 1141.575788][T23181] RBP: 00007f32af808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1141.583814][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.591838][T23181] R13: 00007f32afa16038 R14: 00007f32afa15fa0 R15: 00007fff28458928 [ 1141.599866][T23181] [ 1141.603518][T23181] Kernel Offset: disabled [ 1141.607859][T23181] Rebooting in 86400 seconds..