last executing test programs: 4.55959477s ago: executing program 5 (id=4254): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.279526221s ago: executing program 0 (id=4259): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380)={0x20, 0x10, 0x4, "fb5b1ff1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.903290108s ago: executing program 4 (id=4265): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c0000080001800100dd80140003801000018000002f0000000000000090000400000000004c0000004800e000000200008a00ac14141592247b1db244ab"], 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 3.752185818s ago: executing program 4 (id=4267): r0 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x8, @string={0x8, 0x3, "6f40e85c1f00"}}}, 0x0) 2.989452108s ago: executing program 2 (id=4275): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8917, 0x0) 2.755330934s ago: executing program 2 (id=4278): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980902, 0x0, '\x00', @p_u8=0x0}}) 2.668692055s ago: executing program 5 (id=4279): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x1217000, 0x800, 0x13, 0x7}, 0x20) 2.559161238s ago: executing program 2 (id=4281): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.407882224s ago: executing program 5 (id=4284): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000040)='[:::\x00', 0x0) 2.33544998s ago: executing program 1 (id=4285): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick=0xc, {0x0, 0xe2}, {}, @raw8={"3ad5e5aa05fd1f1646e53f27"}}, {0x0, 0x0, 0x4, 0x7, @time={0x3}, {}, {}, @queue={0x0, {0xfffffffe, 0xffffffff}}}, {0x0, 0x1, 0x0, 0x0, @time={0x40000000}, {}, {}, @time=@tick=0xfcc}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}}], 0x70) 2.279380637s ago: executing program 0 (id=4287): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) close_range(r0, r0, 0x0) 2.1551251s ago: executing program 1 (id=4288): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x8, 0x7ffffffffffffffe, 0x5cfc) 2.117984496s ago: executing program 5 (id=4289): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x3b, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.947330508s ago: executing program 0 (id=4291): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@overlay={0x6, 0xd, 0x4, 0x800000, 0xd220, {0x0, 0xea60}, {0x2, 0xc, 0x8a, 0xfd, 0xb, 0x1, "a1297bdf"}, 0x6, 0x3, {}, 0x40}) 1.945726513s ago: executing program 1 (id=4292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1.882030981s ago: executing program 5 (id=4293): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir}) 1.825794955s ago: executing program 4 (id=4294): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 1.76756794s ago: executing program 0 (id=4295): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 1.749450206s ago: executing program 3 (id=4296): syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xdfff, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0x8}}}}}, 0x0) 1.677913498s ago: executing program 1 (id=4297): r0 = fsopen(&(0x7f0000000400)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.676050907s ago: executing program 5 (id=4298): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4446, &(0x7f0000008900)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x149240, 0x0) 1.546508153s ago: executing program 0 (id=4299): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f000000ae00)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_remount}, {@usrquota}, {@nodiscard}, {@errors_remount}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 1.534211025s ago: executing program 4 (id=4300): symlink(&(0x7f00000050c0)='./file0/file0\x00', &(0x7f0000005100)='./file0\x00') removexattr(&(0x7f0000006a00)='./file0/file0\x00', &(0x7f0000006a40)=@random={'os2.', 'batadv_slave_1\x00'}) 1.489427489s ago: executing program 3 (id=4301): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x101000, 0x16a) finit_module(r0, 0x0, 0x2) 1.47788835s ago: executing program 1 (id=4302): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f0000006580)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@quota}, {@nointegrity}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x6318, &(0x7f0000006600)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 1.278160845s ago: executing program 4 (id=4303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.218924847s ago: executing program 3 (id=4304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b400000000034000480300001800d00010073796e70726f7879000000001c000280050002008100000008000340000000fcffffff40000700000900010073797a30"], 0xd0}}, 0x4000040) 1.102592752s ago: executing program 4 (id=4305): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 966.941182ms ago: executing program 3 (id=4306): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') 616.76054ms ago: executing program 3 (id=4307): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f000001f900)='./file1\x00', 0x2200400, &(0x7f0000000080)=ANY=[], 0xfe, 0x15b, &(0x7f0000000200)="$eJzs0D1rWmEYxvH/c87jC1SxpRak0Cp0sZWCL7RbKZ5SqYM90NKlk2BPX0CxVGjdqpRuGYSsDnlZJZBPoNFASNAl+RJZ3AIZDecckxDMR7h/4/Xc93XD8/bVLK249qbZ+PnLabWcL6kPdqX08XQ4LLp5ENq7N979+VERvqMZaZh3YR+YROHrj7pj1Jp1d2xehBBg3VnmNGKX96y4pqshh7+ffgLjB96cwWrmFAh4ew81WDE/ywKLzbDfd8/P3L4zwASlgstjj0z+lzPJ+wra/czO4Oj99LD8/NlrZy1f6j2NJMzMX9jCUuGDybcTc7k1mw6wK/askM+/LGRzBi+OvcJOD/0u8hs+K9Bun4HXFyTxWH+CfwrWvVvzPRUFxhvndiN09dedP2YKVLJfqyYC29X4XQMzrd2XBbfQ/i8KIYQQQgghhBBCCCGEEEIIIYQQqy4CAAD//4/VU1E=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 571.374974ms ago: executing program 2 (id=4308): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x20200) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x4, 0x0, 0xfa}) 431.174499ms ago: executing program 2 (id=4309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x4000) 351.447455ms ago: executing program 0 (id=4310): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/141, 0x8d) 192.022876ms ago: executing program 2 (id=4311): syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 47.019824ms ago: executing program 1 (id=4312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xd, 0x14, 0x0, 0x1, [@nested={0x4, 0x18}, @typed={0x4, 0xd, 0x0, 0x0, @binary}, @generic=')']}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 3 (id=4313): pipe2(&(0x7f0000000040), 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) kernel console output (not intermixed with test programs): z [ 449.651157][T13660] FAT-fs (loop2): Directory bread(block 71) failed [ 449.692109][T13660] FAT-fs (loop2): Directory bread(block 72) failed [ 449.698696][T13660] FAT-fs (loop2): Directory bread(block 73) failed [ 449.705417][ T10] usb 2-1: Manufacturer: syz [ 449.710117][ T10] usb 2-1: SerialNumber: syz [ 449.749942][ T10] usb 2-1: config 0 descriptor?? [ 449.764525][T13668] loop4: detected capacity change from 0 to 64 [ 449.809843][T13668] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop4 [ 449.985221][T13672] loop3: detected capacity change from 0 to 1024 [ 450.052377][ T10] comedi comedi5: could not switch to alternate setting 1 [ 450.095698][ T10] usbduxfast 2-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 450.143889][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.150315][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.192983][ T10] usb 2-1: USB disconnect, device number 100 [ 450.424927][T13685] Invalid ELF header type: 0 != 1 [ 450.690340][T13692] loop3: detected capacity change from 0 to 1024 [ 450.769159][T13692] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 450.815199][T13692] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 450.913388][T13692] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 450.941419][T13692] System zones: 0-1, 4-36, 102-102 [ 450.996071][T13692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.038172][ T10] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 451.081719][T13701] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 451.147826][T13701] erofs (device loop2): mounted with root inode @ nid 36. [ 451.225096][T13698] ntfs3(loop1): Failed to initialize $Secure (-22). [ 451.271705][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 451.305380][ T10] usb 6-1: config 0 has an invalid interface number: 87 but max is 0 [ 451.329899][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.358595][ T10] usb 6-1: config 0 has no interface number 0 [ 451.364732][ T10] usb 6-1: config 0 interface 87 has no altsetting 0 [ 451.437620][ T10] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0013, bcdDevice=80.bb [ 451.507825][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.525670][ T10] usb 6-1: Product: syz [ 451.532754][ T10] usb 6-1: Manufacturer: syz [ 451.537367][ T10] usb 6-1: SerialNumber: syz [ 451.638079][ T10] usb 6-1: config 0 descriptor?? [ 451.814848][T13679] F2FS-fs (loop4): invalid crc value [ 451.854536][T13679] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:6 [ 451.869481][ T790] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 451.898020][ T10] kvaser_usb 6-1:0.87: error -ENODEV: Cannot get usb endpoint(s) [ 451.915607][T13679] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 451.934441][ T5933] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 451.974886][ T10] usb 6-1: USB disconnect, device number 87 [ 452.062607][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 452.080258][ T790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 452.105412][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 452.114917][ T790] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.147810][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.165316][ T5933] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 452.183125][ T790] usb 3-1: config 1 interface 0 has no altsetting 0 [ 452.200825][ T5933] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 452.214241][ T790] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 452.231068][ T5933] usb 4-1: config 17 has no interface number 0 [ 452.241850][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.259753][ T5933] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.275149][ T790] usb 3-1: Product: syz [ 452.291992][ T790] usb 3-1: Manufacturer: syz [ 452.296742][ T790] usb 3-1: SerialNumber: syz [ 452.313956][ T5933] usb 4-1: config 17 interface 8 has no altsetting 0 [ 452.347074][ T5933] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 452.366991][T13720] set_capacity_and_notify: 4 callbacks suppressed [ 452.367016][T13720] loop0: detected capacity change from 0 to 4096 [ 452.383882][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.415415][ T5933] usb 4-1: Product: syz [ 452.426276][ T5933] usb 4-1: Manufacturer: syz [ 452.441562][ T5933] usb 4-1: SerialNumber: syz [ 452.458808][T13720] ntfs3(loop0): Primary boot: invalid index size -57. [ 452.469717][T13720] ntfs3(loop0): try to read out of volume at offset 0x1ffe00 [ 452.622564][ T790] usbhid 3-1:1.0: can't add hid device: -71 [ 452.628670][ T790] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 452.720083][ T5933] usb 4-1: selecting invalid altsetting 0 [ 452.753693][ T790] usb 3-1: USB disconnect, device number 84 [ 452.913048][ T5933] usb 4-1: USB disconnect, device number 87 [ 453.007349][T13730] loop1: detected capacity change from 0 to 4096 [ 453.038287][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.055749][T13730] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 453.153352][T13730] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 453.746024][ T5904] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 453.934613][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 453.949850][ T5904] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 453.959368][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 453.975234][ T5904] usb 2-1: config 0 interface 0 has no altsetting 1 [ 454.017437][ T5904] usb 2-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 454.031185][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.084059][ T5904] usb 2-1: Product: syz [ 454.088381][ T5904] usb 2-1: Manufacturer: syz [ 454.092996][ T5904] usb 2-1: SerialNumber: syz [ 454.152380][ T5904] usb 2-1: config 0 descriptor?? [ 454.160920][ T5904] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 454.169273][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 454.188353][T13736] loop4: detected capacity change from 0 to 32768 [ 454.286699][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 454.341062][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 454.354451][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 454.371843][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.404495][ T10] usb 1-1: Product: syz [ 454.408700][ T10] usb 1-1: Manufacturer: syz [ 454.424585][ T10] usb 1-1: SerialNumber: syz [ 454.430008][ T5904] usb 2-1: USB disconnect, device number 101 [ 454.479587][ T5971] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 454.483154][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.509912][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 454.538508][T13779] loop5: detected capacity change from 0 to 4096 [ 454.543240][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 454.574961][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 454.586175][T13779] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 454.596009][T13779] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 454.611343][T13779] ntfs3(loop5): mft corrupted [ 454.616401][T13779] ntfs3(loop5): Failed to load root (-22). [ 454.625202][T13779] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 454.635821][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=71.94 [ 454.671648][ T5971] usb 4-1: Using ep0 maxpacket: 16 [ 454.672670][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.689745][ T5971] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 454.714698][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.721720][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 454.730519][ T5971] usb 4-1: config 0 has no interface number 0 [ 454.740188][ T9] usb 3-1: config 0 descriptor?? [ 454.748112][ T5971] usb 4-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 454.762346][ T9] ttusbir 3-1:0.0: cannot find expected altsetting [ 454.780757][ T5971] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 454.801314][ T5971] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 454.833765][ T5971] usb 4-1: Product: syz [ 454.849837][ T5971] usb 4-1: Manufacturer: syz [ 454.859850][ T5971] usb 4-1: SerialNumber: syz [ 454.903530][ T5971] usb 4-1: config 0 descriptor?? [ 454.931706][T13775] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 454.949904][ T10] usb 1-1: USB disconnect, device number 61 [ 455.032277][ T5933] usb 3-1: USB disconnect, device number 85 [ 455.044133][ T6468] udevd[6468]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.170902][ T5971] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 455.202530][ T5971] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 455.205750][ T9] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 455.249028][ T5971] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 455.266415][ T5971] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 455.293119][ T5971] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 455.304208][ T5971] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 455.320095][ T5971] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 455.336420][ T5971] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 455.378642][ T5971] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 455.390304][ T9] usb 6-1: config 1 has an invalid interface number: 82 but max is 0 [ 455.407707][ T9] usb 6-1: config 1 has no interface number 0 [ 455.411470][ T5971] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 455.433260][ T9] usb 6-1: config 1 interface 82 has no altsetting 0 [ 455.450344][ T5971] usb 4-1: USB disconnect, device number 88 [ 455.482073][ T5971] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 455.492928][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 455.503190][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.514504][ T5971] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 455.524237][ T9] usb 6-1: Product: syz [ 455.524279][ T9] usb 6-1: Manufacturer: syz [ 455.524312][ T9] usb 6-1: SerialNumber: syz [ 455.541106][T13791] loop4: detected capacity change from 0 to 8192 [ 455.584159][ T5971] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 455.602147][ T6021] loop4: p4 < > [ 455.622905][T13791] loop4: p4 < > [ 455.634240][ T5971] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 455.657401][ T5971] keyspan 4-1:0.107: device disconnected [ 455.837511][ T9] hub 6-1:1.82: bad descriptor, ignoring hub [ 455.868714][ T9] hub 6-1:1.82: probe with driver hub failed with error -5 [ 455.920808][ T9] sierra 6-1:1.82: Sierra USB modem converter detected [ 455.931123][T13806] tmpfs: Bad value for 'mpol' [ 455.980440][ T9] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 456.049159][ T9] usb 6-1: USB disconnect, device number 88 [ 456.097776][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 456.115370][ T9] sierra 6-1:1.82: device disconnected [ 456.136024][ T5971] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 456.166937][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 456.235577][T13813] loop4: detected capacity change from 0 to 1024 [ 456.251759][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 456.277191][T13813] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 456.311946][T13817] loop2: detected capacity change from 0 to 2048 [ 456.328173][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 456.346934][ T5971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.357889][ T5971] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 456.369124][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.408588][ T5845] loop2: p2 p3 p7 [ 456.413350][ T5971] usb 1-1: config 0 descriptor?? [ 456.453373][ T5971] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 456.574986][T13817] loop2: p2 p3 p7 [ 456.707609][ T9] usb 1-1: USB disconnect, device number 62 [ 456.956730][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 456.986173][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 457.020258][ T6021] udevd[6021]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 457.066125][ T10] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 457.129426][T13844] loop2: detected capacity change from 0 to 256 [ 457.141044][T13836] loop4: detected capacity change from 0 to 4096 [ 457.159127][T13844] exfat: Deprecated parameter 'utf8' [ 457.170786][T13844] exFAT-fs (loop2): failed to read boot sector [ 457.178656][T13836] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 457.210067][T13844] exFAT-fs (loop2): failed to recognize exfat type [ 457.252017][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.261686][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 457.266610][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.278636][ T6021] udevd[6021]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 457.299789][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 457.331632][T13836] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 457.374118][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 457.383771][ T5980] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 457.391906][T13836] ntfs3(loop4): Failed to load $BadClus (-22). [ 457.399933][ T10] usb 6-1: New USB device strings: Mfr=1, Product=206, SerialNumber=3 [ 457.439183][ T10] usb 6-1: Product: syz [ 457.457499][ T10] usb 6-1: Manufacturer: syz [ 457.484337][ T10] usb 6-1: SerialNumber: syz [ 457.568311][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 457.591077][ T5980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.623289][ T5980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.670314][ T5980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.717614][ T5980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 457.737228][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.793341][ T5980] usb 4-1: Product: syz [ 457.797561][ T5980] usb 4-1: Manufacturer: syz [ 457.826000][ T10] usb 6-1: USB disconnect, device number 89 [ 457.835844][ T5904] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 457.843522][ T5980] usb 4-1: SerialNumber: syz [ 458.012725][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.043764][ T5904] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 458.058442][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.075811][ T5980] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 458.083620][ T5980] cdc_ncm 4-1:1.0: bind() failure [ 458.089056][ T5904] usb 3-1: Product: syz [ 458.098636][ T5904] usb 3-1: Manufacturer: syz [ 458.106896][ T5980] usbtest 4-1:1.0: Linux user mode ISO test driver [ 458.113561][ T5904] usb 3-1: SerialNumber: syz [ 458.118592][ T5980] usbtest 4-1:1.0: high-speed {control iso-in} tests (+alt) [ 458.132420][ T5904] usb 3-1: config 0 descriptor?? [ 458.176854][ T5980] usb 4-1: USB disconnect, device number 89 [ 458.220613][T13856] loop1: detected capacity change from 0 to 8192 [ 458.320146][T13848] loop0: detected capacity change from 0 to 32768 [ 458.350266][T13848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3531 (13848) [ 458.381906][ T5904] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -71 [ 458.385767][T13848] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 458.435677][T13848] BTRFS info (device loop0 state S): using crc32c checksum algorithm [ 458.452612][ T5904] usb 3-1: USB disconnect, device number 86 [ 458.530386][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 458.596699][ T38] BTRFS warning (device loop0 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored [ 458.674008][ T223] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 458.735167][ T38] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored [ 458.776544][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 458.792919][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 458.810108][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 458.821641][ T223] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored [ 458.843926][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 458.872015][ T10] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 458.884744][T13848] BTRFS info (device loop0 state ES): bdev /dev/loop0 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0 [ 458.884884][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.914819][ T10] usb 5-1: Product: syz [ 458.920514][ T10] usb 5-1: Manufacturer: syz [ 458.925123][ T10] usb 5-1: SerialNumber: syz [ 458.927311][T13883] loop5: detected capacity change from 0 to 512 [ 458.938643][T13860] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 458.951417][T13848] BTRFS info (device loop0 state ES): enabling ssd optimizations [ 458.990081][T13848] BTRFS info (device loop0 state ES): disabling tree log [ 459.006144][T13883] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 459.026063][T13848] BTRFS info (device loop0 state ES): turning on flush-on-commit [ 459.044350][T13848] BTRFS info (device loop0 state ES): enabling free space tree [ 459.084382][T13848] BTRFS info (device loop0 state ES): ignoring meta csums [ 459.096988][T13848] BTRFS info (device loop0 state ES): use zlib compression, level 3 [ 459.117632][ T1001] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored [ 459.281537][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.324719][ T5832] BTRFS info (device loop0 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 459.334555][T13883] EXT4-fs (loop5): failed to open journal device unknown-block(31,20) -6 [ 459.343024][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 459.611045][ T10] usb 5-1: USB disconnect, device number 82 [ 459.866821][T13893] loop2: detected capacity change from 0 to 8192 [ 459.904079][T13893] FAT-fs (loop2): bogus logical sector size 0 [ 459.941614][T13893] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 459.985269][T13893] FAT-fs (loop2): Can't find a valid FAT filesystem [ 460.206905][T13878] loop1: detected capacity change from 0 to 40427 [ 460.220806][T13878] f2fs: Bad value for 'fault_injection' [ 460.325869][ T5904] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 460.562358][ T5904] usb 6-1: unable to get BOS descriptor or descriptor too short [ 460.604245][ T5904] usb 6-1: not running at top speed; connect to a high speed hub [ 460.638860][ T5904] usb 6-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 460.651696][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.689753][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 460.706541][ T5904] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.811477][ T5904] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.873733][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.901402][ T5904] usb 6-1: Product: syz [ 460.905958][ T5904] usb 6-1: Manufacturer: syz [ 460.910655][ T5904] usb 6-1: SerialNumber: syz [ 460.948024][T13921] loop0: detected capacity change from 0 to 1024 [ 460.952146][ T5904] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 460.999690][ T5904] cdc_ncm 6-1:1.0: bind() failure [ 461.051473][T13921] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 461.128299][T13921] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 461.137816][T13921] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3558: Failed to acquire dquot type 0 [ 461.236820][T13921] loop0: lost filesystem error report for type 5 error -117 [ 461.239026][T13921] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, [ 461.246742][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 461.246773][ C0] EXT4-fs (loop0): initial error at time 1774382025: ext4_acquire_dquot:7001 [ 461.246805][ C0] EXT4-fs (loop0): last error at time 1774382025: ext4_acquire_dquot:7001 [ 461.257974][ T5807] usb 6-1: USB disconnect, device number 90 [ 461.260969][T13921] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 461.333618][T13902] loop3: detected capacity change from 0 to 32768 [ 461.341755][T13921] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.3558: corrupted inode contents [ 461.364614][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.366031][T13921] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #13: comm syz.0.3558: mark_inode_dirty error [ 461.392217][T13902] (syz.3.3549,13902,0):ocfs2_read_virt_blocks:1015 ERROR: Inode #66 contains a hole at offset 0 [ 461.421788][T13902] (syz.3.3549,13902,0):ocfs2_read_dir_block:524 ERROR: status = -5 [ 461.446964][T13902] (syz.3.3549,13902,0):ocfs2_read_virt_blocks:1015 ERROR: Inode #66 contains a hole at offset 512 [ 461.481003][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.492865][T13921] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.3558: corrupted inode contents [ 461.513736][T13902] (syz.3.3549,13902,0):ocfs2_read_dir_block:524 ERROR: status = -5 [ 461.522161][T13902] (syz.3.3549,13902,0):ocfs2_read_virt_blocks:1015 ERROR: Inode #66 contains a hole at offset 1024 [ 461.554899][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.568232][T13921] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.3558: mark_inode_dirty error [ 461.607364][T13902] (syz.3.3549,13902,0):ocfs2_read_dir_block:524 ERROR: status = -5 [ 461.630702][T13902] (syz.3.3549,13902,0):ocfs2_read_virt_blocks:1015 ERROR: Inode #66 contains a hole at offset 1536 [ 461.645623][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.655086][T13921] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.3558: corrupted inode contents [ 461.687173][T13902] (syz.3.3549,13902,0):ocfs2_read_dir_block:524 ERROR: status = -5 [ 461.720165][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.722269][T13921] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.3558: mark_inode_dirty error [ 461.732545][T13902] (syz.3.3549,13902,0):ocfs2_read_virt_blocks:1015 ERROR: Inode #66 contains a hole at offset 2048 [ 461.754494][T13938] loop1: detected capacity change from 0 to 2048 [ 461.759151][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.769853][T13902] (syz.3.3549,13902,1):ocfs2_read_dir_block:524 ERROR: status = -5 [ 461.805692][T13921] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.3558: corrupted inode contents [ 461.823930][T13902] (syz.3.3549,13902,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 461.852035][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.854738][T13921] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 461.878122][T13902] (syz.3.3549,13902,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 461.878169][T13902] (syz.3.3549,13902,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 461.924600][ T6021] loop1: p2 < > p4 [ 461.931014][ T6021] loop1: p4 size 262144 extends beyond EOD, truncated [ 461.938106][T13921] loop0: lost filesystem error report for type 5 error -117 [ 461.946205][T13921] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.3558: corrupted inode contents [ 461.973015][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.973760][T13921] EXT4-fs error (device loop0): ext4_truncate:4587: inode #13: comm syz.0.3558: mark_inode_dirty error [ 462.011669][T13938] loop1: p2 < > p4 [ 462.015605][T13902] (syz.3.3549,13902,1):ocfs2_initialize_super:2198 ERROR: status = -22 [ 462.026097][T13938] loop1: p4 size 262144 extends beyond EOD, truncated [ 462.048407][T13921] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 462.048434][ T5904] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 462.069108][T13902] (syz.3.3549,13902,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 462.090886][T13921] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 462.166204][T13921] loop0: lost filesystem error report for type 5 error -117 [ 462.169789][T13921] EXT4-fs (loop0): 1 truncate cleaned up [ 462.220019][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 462.220068][T13924] loop4: detected capacity change from 0 to 32768 [ 462.253743][ T6520] udevd[6520]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 462.259970][ T5904] usb 3-1: config index 0 descriptor too short (expected 46593, got 71) [ 462.275444][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 462.286671][T13924] XFS (loop4): invalid logbufs value: 9 [not 2-8] [ 462.288061][T13921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.316691][ T5904] usb 3-1: config 0 has too many interfaces: 158, using maximum allowed: 32 [ 462.334078][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.369036][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 158 [ 462.404238][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 462.413536][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 462.423969][ T5904] usb 3-1: config 0 has no interface number 0 [ 462.440950][ T5904] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 462.457719][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.508330][ T5904] usb 3-1: Product: syz [ 462.523152][ T5904] usb 3-1: Manufacturer: syz [ 462.547594][ T5904] usb 3-1: SerialNumber: syz [ 462.575904][ T5904] usb 3-1: config 0 descriptor?? [ 462.591961][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.642224][ T5904] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 462.649829][ T10] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 462.669943][ T5904] uvcvideo 3-1:0.105: No valid video chain found. [ 462.757816][T13952] loop4: detected capacity change from 0 to 22 [ 462.776372][T13952] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 462.794608][T13952] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 462.818573][ T5807] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 462.822001][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 462.876255][ T5933] usb 3-1: USB disconnect, device number 87 [ 462.878681][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 462.928557][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 462.958515][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.995034][ T10] usb 2-1: config 0 descriptor?? [ 462.996066][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 463.029395][ T5807] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 463.045234][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 463.060966][ T5807] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 463.078533][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.088669][ T5807] usb 6-1: Product: syz [ 463.092954][ T5807] usb 6-1: Manufacturer: syz [ 463.100591][ T5807] usb 6-1: SerialNumber: syz [ 463.108528][ T5807] usb 6-1: config 0 descriptor?? [ 463.114514][T13948] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 463.127944][ T5971] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 463.137231][ T5807] usb 6-1: ucan: probing device on interface #0 [ 463.175137][ T5807] usb 6-1: ucan: invalid in_ep MaxPacketSize [ 463.192232][ T5807] usb 6-1: ucan: probe failed; try to update the device firmware [ 463.244033][ T10] ath6kl: Failed to submit usb control message: -71 [ 463.257756][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 463.265170][ T10] ath6kl: Unable to send get target info: -71 [ 463.279921][ T10] ath6kl: Failed to init ath6kl core: -71 [ 463.287158][ T10] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 463.303674][ T10] usb 2-1: USB disconnect, device number 102 [ 463.320143][ T5933] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 463.331482][ T5971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 463.346239][ T5971] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 463.372585][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.385825][ T9] usb 6-1: USB disconnect, device number 91 [ 463.389756][ T5971] usb 4-1: Product: syz [ 463.397184][ T5971] usb 4-1: Manufacturer: syz [ 463.401809][ T5971] usb 4-1: SerialNumber: syz [ 463.430069][ T5904] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 463.480423][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 463.494060][ T5933] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b [ 463.506439][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.514945][ T5933] usb 5-1: Product: syz [ 463.519134][ T5933] usb 5-1: Manufacturer: syz [ 463.523884][ T5933] usb 5-1: SerialNumber: syz [ 463.532296][ T5933] usb 5-1: config 0 descriptor?? [ 463.542481][ T5933] upd78f0730 5-1:0.0: upd78f0730 converter detected [ 463.553026][ T5933] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 463.597811][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 463.605543][ T5904] usb 1-1: unable to get BOS descriptor or descriptor too short [ 463.615335][ T5904] usb 1-1: config 11 has an invalid interface number: 208 but max is 1 [ 463.624928][ T5904] usb 1-1: config 11 has an invalid interface number: 177 but max is 1 [ 463.636904][ T5904] usb 1-1: config 11 has no interface number 0 [ 463.643379][ T5904] usb 1-1: config 11 has no interface number 1 [ 463.650451][ T5904] usb 1-1: config 11 interface 177 altsetting 155 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 463.653323][ T5971] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 463.662930][ T5904] usb 1-1: config 11 interface 208 has no altsetting 0 [ 463.676522][ T5971] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 463.687927][ T5904] usb 1-1: config 11 interface 177 has no altsetting 0 [ 463.698058][ T5904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=1f.bf [ 463.708417][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.716859][ T5904] usb 1-1: Product: syz [ 463.721288][ T5904] usb 1-1: Manufacturer: syz [ 463.726458][ T5904] usb 1-1: SerialNumber: syz [ 463.727440][ T5971] usb 4-1: USB disconnect, device number 90 [ 463.769133][ T5933] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 463.786792][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.802036][ T5807] usb 5-1: USB disconnect, device number 83 [ 463.827083][ T5807] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 463.847202][ T5807] upd78f0730 5-1:0.0: device disconnected [ 463.963197][ T5933] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 463.977844][ T5904] snd-usb-6fire 1-1:11.208: unable to receive device firmware state. [ 463.985885][ T5933] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.006457][ T5904] snd-usb-6fire 1-1:11.208: probe with driver snd-usb-6fire failed with error -71 [ 464.025754][ T5933] usb 3-1: config 2 interface 0 has no altsetting 0 [ 464.056142][ T5933] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 464.073140][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.088090][ T5933] usb 3-1: Product: syz [ 464.094265][ T5904] usb 1-1: USB disconnect, device number 63 [ 464.113641][ T5933] usb 3-1: Manufacturer: syz [ 464.141043][ T5933] usb 3-1: SerialNumber: syz [ 464.476739][ T5933] usb 3-1: USB disconnect, device number 88 [ 464.855906][T13994] loop3: detected capacity change from 0 to 4096 [ 464.885220][T13994] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 464.909044][T13994] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 464.927320][T13994] ntfs3(loop3): Failed to load $MFTMirr (-22). [ 464.945490][ T5904] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 465.107167][T14007] loop1: detected capacity change from 0 to 8 [ 465.131113][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 465.147043][T14007] SQUASHFS error: lzo decompression failed, data probably corrupt [ 465.178666][T14007] SQUASHFS error: Failed to read block 0x91: -5 [ 465.202358][ T5904] usb 6-1: config 162 has an invalid interface number: 84 but max is 2 [ 465.232998][ T5904] usb 6-1: config 162 has an invalid interface number: 3 but max is 2 [ 465.241331][T14007] SQUASHFS error: Unable to read metadata cache entry [8f] [ 465.241361][T14007] SQUASHFS error: Unable to read inode 0x11f [ 465.322896][ T5904] usb 6-1: config 162 has no interface number 0 [ 465.366889][ T5904] usb 6-1: config 162 has no interface number 1 [ 465.389563][ T5904] usb 6-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.450189][ T5904] usb 6-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 465.478117][ T5904] usb 6-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 465.525163][ T5904] usb 6-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 465.584180][ T5904] usb 6-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 465.595501][T14023] dns_resolver: Unsupported server list version (6) [ 465.618007][ T5904] usb 6-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 465.672644][ T5904] usb 6-1: config 162 interface 84 has no altsetting 0 [ 465.703856][ T5904] usb 6-1: config 162 interface 2 has no altsetting 0 [ 465.727534][ T5904] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 465.742732][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.752990][T14026] IPv6: addrconf: prefix option has invalid lifetime [ 465.778760][ T5904] usb 6-1: Product: syz [ 465.783060][ T5904] usb 6-1: Manufacturer: syz [ 465.787660][ T5904] usb 6-1: SerialNumber: syz [ 465.789675][ T5807] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 465.982242][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 465.990658][ T5807] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.021166][ T5807] usb 4-1: config 1 interface 0 has no altsetting 0 [ 466.043663][ T5807] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 466.065274][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.078316][ T5807] usb 4-1: Product: syz [ 466.097495][ T5807] usb 4-1: Manufacturer: syz [ 466.107136][ T5138] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 466.114987][ T5807] usb 4-1: SerialNumber: syz [ 466.145743][ T5904] usb 6-1: USB disconnect, device number 92 [ 466.227771][ T5971] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 466.289017][T14011] loop0: detected capacity change from 0 to 32768 [ 466.315702][T14011] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3602 (14011) [ 466.330626][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 466.371534][ T5807] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input41 [ 466.396737][ T5173] bcm5974 4-1:1.0: could not read from device [ 466.409342][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 466.419404][ T5971] usb 3-1: unable to get BOS descriptor or descriptor too short [ 466.423647][T14011] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 466.433456][ T5971] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 466.439763][T14011] BTRFS info (device loop0 state S): using crc32c checksum algorithm [ 466.461762][ T5971] usb 3-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=76.d2 [ 466.463108][ T5173] bcm5974 4-1:1.0: could not read from device [ 466.475395][ T5807] usb 4-1: USB disconnect, device number 91 [ 466.493460][ T5173] bcm5974 4-1:1.0: could not read from device [ 466.501230][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.505630][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 466.529423][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 466.539907][ T10] usb 5-1: config 147 has an invalid interface number: 101 but max is 0 [ 466.549830][ T10] usb 5-1: config 147 has no interface number 0 [ 466.549849][ T5971] usb 3-1: Product: syz [ 466.549870][ T5971] usb 3-1: Manufacturer: syz [ 466.556130][ T10] usb 5-1: config 147 interface 101 has no altsetting 0 [ 466.564897][ T10] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 466.595126][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.606942][ T5971] usb 3-1: SerialNumber: syz [ 466.625163][ T10] usb 5-1: Product: syz [ 466.637245][ T38] BTRFS warning (device loop0 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 466.641922][ T10] usb 5-1: Manufacturer: syz [ 466.691472][ T10] usb 5-1: SerialNumber: syz [ 466.712457][ T223] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored [ 466.802379][ T13] BTRFS error (device loop0 state ES): bad fsid on logical 5337088 mirror 1 [ 466.836821][T14011] BTRFS error (device loop0 state ES): failed to load root extent [ 466.875344][T14011] BTRFS error (device loop0 state ECS): failed to load root free space [ 466.907067][ T82] BTRFS error (device loop0 state ECS): bad fsid on logical 5328896 mirror 1 [ 466.913578][T14054] loop5: detected capacity change from 0 to 512 [ 466.924237][T14054] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 466.973931][ T5971] usb 3-1: USB disconnect, device number 89 [ 466.982433][ T10] go7007 5-1:147.101: probe with driver go7007 failed with error -12 [ 467.013719][ T1001] BTRFS warning (device loop0 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored [ 467.059965][T14011] BTRFS info (device loop0 state ECS): enabling ssd optimizations [ 467.082302][T14011] BTRFS info (device loop0 state ECS): disabling log replay at mount time [ 467.097078][T14011] BTRFS info (device loop0 state ECS): turning on sync discard [ 467.129648][ T10] usb 5-1: USB disconnect, device number 84 [ 467.136383][T14011] BTRFS info (device loop0 state ECS): enabling free space tree [ 467.144419][T14011] BTRFS info (device loop0 state ECS): ignoring bad roots [ 467.158073][T14011] BTRFS info (device loop0 state ECS): ignoring data csums [ 467.165493][T14011] BTRFS info (device loop0 state ECS): ignoring meta csums [ 467.212638][T14011] BTRFS info (device loop0 state ECS): ignoring unknown super block flags [ 467.243329][T14011] BTRFS info (device loop0 state ECS): force zlib compression, level 3 [ 467.400928][ T5832] BTRFS info (device loop0 state ECS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 468.294935][ T5904] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 468.306310][T14090] ufs: You didn't specify the type of your ufs filesystem [ 468.306310][T14090] [ 468.306310][T14090] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 468.306310][T14090] [ 468.306310][T14090] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 468.348036][ T29] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 468.366019][T14090] ufs: ufstype=old is supported read-only [ 468.384411][T14090] ufs: ufs_fill_super(): bad magic number [ 468.504751][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 468.512875][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 468.533718][ T5904] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 468.549267][ T29] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 468.557886][ T29] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 468.569282][ T5904] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 468.590650][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.595283][ T29] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 468.598873][ T5904] usb 3-1: Product: syz [ 468.638876][T14062] loop3: detected capacity change from 0 to 32768 [ 468.645663][ T29] usb 1-1: config 150 has no interface number 0 [ 468.647589][ T5904] usb 3-1: Manufacturer: syz [ 468.651943][ T29] usb 1-1: config 150 interface 204 has no altsetting 0 [ 468.665193][ T5904] usb 3-1: SerialNumber: syz [ 468.691832][ T29] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 468.705782][T14062] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 468.724595][T14062] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 468.724766][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.768588][T14062] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 3ms [ 468.775101][ T29] usb 1-1: Product: syz [ 468.802716][ T29] usb 1-1: Manufacturer: syz [ 468.830750][ T29] usb 1-1: SerialNumber: syz [ 468.846958][ T5971] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 468.862036][T14062] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 468.889139][T14078] loop5: detected capacity change from 0 to 32768 [ 468.921337][ T5904] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 468.960099][ T5904] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 469.002302][T14078] JBD2: Ignoring recovery information on journal [ 469.030283][T14078] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 469.056237][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 469.069119][ T5971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.080645][ T5971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.104213][ T29] xr_serial 1-1:150.204: skipping garbage [ 469.106784][T14078] JBD2: bad block at offset 32 [ 469.113594][ T5971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.124183][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.133099][ T5971] usb 5-1: Product: syz [ 469.137466][ T5971] usb 5-1: Manufacturer: syz [ 469.143218][ T5971] usb 5-1: SerialNumber: syz [ 469.173232][ T29] usb 1-1: USB disconnect, device number 64 [ 469.197250][T14078] (syz.5.3630,14078,0):ocfs2_load_local_alloc:312 ERROR: Invalid local alloc inode, 75 [ 469.232690][ T5904] usb 3-1: USB disconnect, device number 90 [ 469.272168][T14078] (syz.5.3630,14078,0):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 469.327491][T14089] loop1: detected capacity change from 0 to 32768 [ 469.338060][T14078] (syz.5.3630,14078,0):ocfs2_check_volume:2404 ERROR: status = -22 [ 469.362310][T14078] (syz.5.3630,14078,0):ocfs2_check_volume:2432 ERROR: status = -22 [ 469.391501][T14089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3634 (14089) [ 469.424594][T14078] (syz.5.3630,14078,0):ocfs2_mount_volume:1764 ERROR: status = -22 [ 469.439467][ T5971] usb 5-1: 0:2 : does not exist [ 469.458908][ T5971] usb 5-1: unit 9 not found! [ 469.481181][T14089] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 469.494414][T14078] (syz.5.3630,14078,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 469.524950][T14089] BTRFS info (device loop1): using crc32c checksum algorithm [ 469.596197][ T5971] usb 5-1: USB disconnect, device number 85 [ 469.701145][ T38] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 469.802333][T14089] BTRFS warning (device loop1): couldn't read tree root [ 469.828816][T14089] BTRFS warning (device loop1): try to load backup roots slot 1 [ 469.864270][ T5138] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 469.877906][ T13] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 469.946967][T14089] BTRFS warning (device loop1): couldn't read tree root [ 469.959037][T14089] BTRFS warning (device loop1): try to load backup roots slot 2 [ 470.005600][ T1001] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 470.059193][T14089] BTRFS warning (device loop1): couldn't read tree root [ 470.065608][ T9] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 470.108349][T14089] BTRFS warning (device loop1): try to load backup roots slot 3 [ 470.270945][T14089] BTRFS info (device loop1): checking UUID tree [ 470.306374][ T9] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 470.317147][T14089] BTRFS info (device loop1): setting nodatasum [ 470.332843][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.343539][T14089] BTRFS info (device loop1): enabling ssd optimizations [ 470.387601][ T9] usb 4-1: config 0 descriptor?? [ 470.394003][T14089] BTRFS info (device loop1): turning on flush-on-commit [ 470.423439][T14089] BTRFS info (device loop1): turning on async discard [ 470.471888][T14089] BTRFS info (device loop1): enabling free space tree [ 470.474146][ T9] pwc: Samsung MPC-C10 USB webcam detected. [ 470.500421][T14089] BTRFS info (device loop1): trying to use backup root at mount time [ 470.540381][T14089] BTRFS info (device loop1): max_inline set to 0 [ 470.637353][ T9] pwc: send_video_command error -71 [ 470.642616][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 470.710952][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 470.753860][ T9] usb 4-1: USB disconnect, device number 92 [ 470.850512][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.059935][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 471.138422][T14153] loop5: detected capacity change from 0 to 8 [ 471.168987][T14153] SQUASHFS error: lzo decompression failed, data probably corrupt [ 471.199115][T14153] SQUASHFS error: Failed to read block 0x91: -5 [ 471.216805][T14153] SQUASHFS error: Unable to read metadata cache entry [8f] [ 471.249054][T14153] SQUASHFS error: Unable to read inode 0x11f [ 471.252927][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 471.321529][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 471.342740][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 162, changing to 7 [ 471.415327][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 471.464271][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.505804][ T10] usb 5-1: Product: syz [ 471.536175][ T10] usb 5-1: Manufacturer: syz [ 471.547581][ T10] usb 5-1: SerialNumber: syz [ 471.563824][ T5138] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 471.636821][T14127] loop0: detected capacity change from 0 to 40427 [ 471.689555][T14127] F2FS-fs (loop0): Image doesn't support compression [ 471.710886][T14127] F2FS-fs (loop0): build fault injection rate: 684 [ 471.741978][T14127] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 471.754716][ T5933] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 471.787451][T14127] F2FS-fs (loop0): invalid crc value [ 471.863556][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 471.882668][ T10] usb 5-1: 2:1 : sample bitwidth 64 in over sample bytes 4 [ 471.924586][ T10] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 471.935428][ T10] usb 5-1: 2:1 : invalid channels 0 [ 471.950484][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 471.964026][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 471.995808][ T5933] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 28, changing to 7 [ 472.056667][ T5933] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 472.083560][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.113117][ T10] usb 5-1: USB disconnect, device number 86 [ 472.123393][ T5933] usb 4-1: Product: syz [ 472.127707][ T5933] usb 4-1: Manufacturer: syz [ 472.169489][ T5933] usb 4-1: SerialNumber: syz [ 472.175779][T14127] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 472.224627][T14127] F2FS-fs (loop0): Start checkpoint disabled! [ 472.271779][T14127] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 472.304963][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.310741][T14127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 472.453429][ T5933] usb 4-1: 1:1 : unsupported sample bitwidth 1 in 5 bytes [ 472.479959][ T5933] usb 4-1: 1:1 : unsupported format bits 0x2002 [ 472.501633][ T5933] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 472.686747][T14183] tmpfs: Bad value for 'mpol' [ 472.711302][ T5933] usb 4-1: USB disconnect, device number 93 [ 472.788044][T14163] loop2: detected capacity change from 0 to 32768 [ 472.808461][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.862845][T14163] JBD2: Ignoring recovery information on journal [ 472.889465][T14163] JBD2: Journal too short (blocks 2-2). [ 472.895257][T14163] JBD2: journal reset failed [ 472.950237][T14163] (syz.2.3660,14163,1):ocfs2_journal_load:1157 ERROR: Failed to load journal! [ 472.959372][T14163] (syz.2.3660,14163,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -22 [ 472.969757][T14163] (syz.2.3660,14163,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 472.980006][T14163] (syz.2.3660,14163,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 473.002346][T14163] (syz.2.3660,14163,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 473.070049][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 473.283583][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 473.312511][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 473.355832][ T9] usb 2-1: config 36 has an invalid interface number: 220 but max is 0 [ 473.379664][ T9] usb 2-1: config 36 has no interface number 0 [ 473.409437][ T9] usb 2-1: config 36 interface 220 has no altsetting 0 [ 473.445231][ T9] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ad.68 [ 473.471144][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.497287][ T9] usb 2-1: Product: syz [ 473.501671][ T9] usb 2-1: Manufacturer: syz [ 473.506273][ T9] usb 2-1: SerialNumber: syz [ 473.537760][T14194] loop5: detected capacity change from 0 to 4096 [ 473.595483][T14194] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 473.624065][T14194] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 473.648110][T14194] ntfs3(loop5): Failed to load $MFT. [ 473.692486][T14206] loop3: detected capacity change from 0 to 128 [ 473.725787][T14206] FAT-fs (loop3): invalid media value (0x00) [ 473.731926][T14206] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 473.808853][T14206] FAT-fs (loop3): Can't find a valid FAT filesystem [ 473.823256][ T9] HFC-S_USB 2-1:36.220: probe with driver HFC-S_USB failed with error -5 [ 473.893949][ T9] usb 2-1: USB disconnect, device number 103 [ 474.155956][T14213] loop0: detected capacity change from 0 to 512 [ 474.203861][T14213] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 474.285166][T14192] loop4: detected capacity change from 0 to 40427 [ 474.358653][T14192] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3) [ 474.419204][T14192] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 474.441267][T14192] F2FS-fs (loop4): build fault injection rate: 4 [ 474.452012][T14192] F2FS-fs (loop4): build fault injection type: 0x1c25c2 [ 474.476221][T14192] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0 [ 474.531278][T14192] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x491a/0x7740 [ 474.578971][T14192] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 474.815915][T14229] loop0: detected capacity change from 0 to 720 [ 474.874649][T14205] loop2: detected capacity change from 0 to 32768 [ 474.914778][T14205] BTRFS error: failed to parse compression option 'lzo:nobarrier' [ 474.933294][T14233] loop3: detected capacity change from 0 to 128 [ 475.227301][T14237] erofs (device loop1): mounted with root inode @ nid 36. [ 475.324797][T14235] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 475.334187][T14216] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3685 (14216) [ 475.408973][T14216] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 475.466961][T14216] BTRFS info (device loop5): using sha256 checksum algorithm [ 475.539034][T14235] ntfs3(loop0): Failed to load $Extend (-22). [ 475.569727][T14235] ntfs3(loop0): Failed to initialize $Extend. [ 475.662449][T14216] BTRFS info (device loop5): enabling ssd optimizations [ 475.705273][T14216] BTRFS info (device loop5): turning on async discard [ 475.712709][T14216] BTRFS info (device loop5): enabling free space tree [ 475.722736][T14259] EXT4-fs: inline encryption not supported [ 475.742625][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 475.753310][T14259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 475.761757][T14259] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 475.889748][ T5838] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 475.892072][T14259] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 1 [ 475.999030][T14259] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 476.024915][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.050724][ T10] usb 4-1: string descriptor 0 read error: -22 [ 476.073565][T14259] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3698: Failed to acquire dquot type 1 [ 476.106003][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.144586][T14259] loop4: lost filesystem error report for type 5 error -5 [ 476.144781][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.152101][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 476.152128][ C0] EXT4-fs (loop4): initial error at time 1774382039: ext4_acquire_dquot:7001 [ 476.152161][ C0] EXT4-fs (loop4): last error at time 1774382039: ext4_acquire_dquot:7001 [ 476.186716][T14259] EXT4-fs (loop4): Remounting filesystem read-only [ 476.232118][T14259] EXT4-fs (loop4): 1 truncate cleaned up [ 476.300763][T14269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.364447][T14271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.413834][ T10] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 476.437694][ T10] usb 4-1: bad CDC descriptors [ 476.485989][T14259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.544423][ T5890] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 476.554161][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.575876][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.600956][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.672754][ T5933] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 476.715412][ T5971] usb 4-1: USB disconnect, device number 94 [ 476.721890][T14280] set_capacity_and_notify: 7 callbacks suppressed [ 476.721912][T14280] loop4: detected capacity change from 0 to 512 [ 476.726216][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 476.763807][T14282] 9pnet_fd: Insufficient options for proto=fd [ 476.779747][ T5890] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 476.792661][ T5890] usb 1-1: config 7 has no interface number 0 [ 476.819065][T14280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.842762][ T5890] usb 1-1: config 7 interface 58 has no altsetting 0 [ 476.854353][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 476.867233][ T5933] usb 6-1: config 8 has an invalid interface number: 243 but max is 0 [ 476.886128][ T5933] usb 6-1: config 8 has no interface number 0 [ 476.892491][ T5933] usb 6-1: config 8 interface 243 has no altsetting 0 [ 476.902977][T14285] loop1: detected capacity change from 0 to 1024 [ 476.909946][ T5933] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=ae.5f [ 476.928800][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.931161][ T5890] usb 1-1: New USB device found, idVendor=0419, idProduct=aaf5, bcdDevice= 1.00 [ 476.948538][ T5933] usb 6-1: Product: syz [ 476.953571][ T5933] usb 6-1: Manufacturer: syz [ 476.958188][ T5933] usb 6-1: SerialNumber: syz [ 477.003431][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.034791][ T5890] usb 1-1: Product: syz [ 477.067344][T14285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.091002][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.101065][ T5890] usb 1-1: Manufacturer: syz [ 477.107215][ T5890] usb 1-1: SerialNumber: syz [ 477.119016][T14288] loop2: detected capacity change from 0 to 2048 [ 477.197356][T14288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.203557][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.307149][ T5933] qmi_wwan 6-1:8.243: probe with driver qmi_wwan failed with error -22 [ 477.367471][T14288] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.392830][ T5890] usb-storage 1-1:7.58: USB Mass Storage device detected [ 477.433880][ T5890] usb-storage 1-1:7.58: Quirks match for vid 0419 pid aaf5: a0 [ 477.440744][ T5933] usb 6-1: USB disconnect, device number 93 [ 477.493630][T14296] loop1: detected capacity change from 0 to 512 [ 477.510031][T14296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 477.553041][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.587704][T14298] loop3: detected capacity change from 0 to 512 [ 477.609101][ T5890] usb 1-1: USB disconnect, device number 65 [ 477.694062][T14296] EXT4-fs (loop1): 1 truncate cleaned up [ 477.752847][T14296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.800250][T14298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.885499][T14292] loop4: detected capacity change from 0 to 40427 [ 477.901119][T14292] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(1) blocks(1024) [ 477.911344][T14292] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 477.921802][T14292] F2FS-fs (loop4): invalid crc value [ 477.982370][T14302] loop2: detected capacity change from 0 to 1024 [ 478.050067][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.080062][T14302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.098838][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.129420][T14292] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 478.287589][T14292] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 478.298241][T14292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 478.396097][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.412243][T14310] loop0: detected capacity change from 0 to 512 [ 478.488401][T14310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.734193][T14316] loop2: detected capacity change from 0 to 16 [ 478.755934][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.802511][T14316] erofs (device loop2): mounted with root inode @ nid 36. [ 479.162668][T14320] loop2: detected capacity change from 0 to 512 [ 479.212963][T14320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.269462][T14308] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3713 (14308) [ 479.398789][T14312] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3714 (14312) [ 479.439296][T14308] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 479.456635][T14305] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3715 (14305) [ 479.493460][T14312] BTRFS info (device loop3): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 479.497899][T14308] BTRFS info (device loop1): using sha256 checksum algorithm [ 479.529088][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.543806][T14305] BTRFS info (device loop5): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 479.569156][T14312] BTRFS info (device loop3): using sha256 checksum algorithm [ 479.593637][T14305] BTRFS info (device loop5): using sha256 checksum algorithm [ 479.966248][T14308] BTRFS info (device loop1): enabling ssd optimizations [ 479.974982][T14308] BTRFS info (device loop1): turning on async discard [ 479.982231][T14308] BTRFS info (device loop1): enabling free space tree [ 480.045261][T14305] BTRFS info (device loop5): enabling ssd optimizations [ 480.115962][T14312] BTRFS info (device loop3): enabling ssd optimizations [ 480.122960][T14312] BTRFS info (device loop3): turning on async discard [ 480.138008][T14305] BTRFS info (device loop5): turning on async discard [ 480.178844][T14305] BTRFS info (device loop5): enabling free space tree [ 480.196684][T14312] BTRFS info (device loop3): enabling free space tree [ 480.278824][ T5827] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 480.391044][ T5838] BTRFS info (device loop5): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 480.415127][T14318] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 480.442985][T14318] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 480.596518][ T5836] BTRFS info (device loop3): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 480.623895][T14318] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 480.683486][ T5933] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 480.690395][ T5933] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 481.332435][ T5933] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 600ms [ 481.401361][ T5933] gfs2: fsid=syz:syz.0: jid=0: Done [ 481.428341][T14318] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 481.878544][T14391] hfsplus: invalid file type 0113366 for inode 2 [ 481.937060][T14391] hfsplus: failed to load root directory [ 482.203520][T14331] set_capacity_and_notify: 5 callbacks suppressed [ 482.203543][T14331] loop4: detected capacity change from 0 to 32768 [ 482.296187][T14331] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 482.327853][T14331] CPU: 1 UID: 0 PID: 14331 Comm: syz.4.3718 Not tainted syzkaller #0 PREEMPT(full) [ 482.327892][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.327910][T14331] Call Trace: [ 482.327921][T14331] [ 482.327932][T14331] dump_stack_lvl+0xe8/0x150 [ 482.327979][T14331] sysfs_create_dir_ns+0x271/0x2a0 [ 482.328021][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.328058][T14331] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 482.328102][T14331] ? do_raw_spin_unlock+0xf5/0x210 [ 482.328138][T14331] kobject_add_internal+0x62b/0xd00 [ 482.328190][T14331] kobject_init_and_add+0x12b/0x1a0 [ 482.328234][T14331] ? __pfx_kobject_init_and_add+0x10/0x10 [ 482.328271][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.328303][T14331] ? __raw_spin_lock_init+0x45/0x100 [ 482.328335][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.328367][T14331] ? __init_swait_queue_head+0xa9/0x150 [ 482.328401][T14331] gfs2_sys_fs_add+0x257/0x480 [ 482.328453][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.328485][T14331] ? is_dynamic_key+0x1ac/0x1c0 [ 482.328524][T14331] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 482.328575][T14331] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 482.328622][T14331] gfs2_fill_super+0x13a7/0x21d0 [ 482.328679][T14331] ? __pfx_gfs2_fill_super+0x10/0x10 [ 482.328708][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.328748][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.328781][T14331] ? sb_set_blocksize+0x155/0x240 [ 482.328816][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.328853][T14331] ? setup_bdev_super+0x4c1/0x5b0 [ 482.328891][T14331] get_tree_bdev_flags+0x431/0x4f0 [ 482.328924][T14331] ? __pfx_gfs2_fill_super+0x10/0x10 [ 482.328955][T14331] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 482.328985][T14331] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 482.329019][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.329060][T14331] gfs2_get_tree+0x51/0x1e0 [ 482.329096][T14331] vfs_get_tree+0x92/0x2a0 [ 482.329130][T14331] do_new_mount+0x341/0xd30 [ 482.329171][T14331] ? apparmor_capable+0x126/0x170 [ 482.329209][T14331] ? __pfx_do_new_mount+0x10/0x10 [ 482.329250][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.329283][T14331] ? ns_capable+0x89/0xe0 [ 482.329321][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.329356][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.329396][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.329447][T14331] ? user_path_at+0xd4/0x160 [ 482.329478][T14331] __se_sys_mount+0x31d/0x420 [ 482.329529][T14331] ? __pfx___se_sys_mount+0x10/0x10 [ 482.329568][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.329611][T14331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.329644][T14331] ? __x64_sys_mount+0x20/0xc0 [ 482.329688][T14331] do_syscall_64+0x14d/0xf80 [ 482.329721][T14331] ? trace_irq_disable+0x3b/0x150 [ 482.329764][T14331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.329798][T14331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.329826][T14331] RIP: 0033:0x7fbc45f9da0a [ 482.329852][T14331] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.329876][T14331] RSP: 002b:00007fbc46f32e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 482.329905][T14331] RAX: ffffffffffffffda RBX: 00007fbc46f32ee0 RCX: 00007fbc45f9da0a [ 482.329926][T14331] RDX: 0000200000021140 RSI: 0000200000021180 RDI: 00007fbc46f32ea0 [ 482.329946][T14331] RBP: 0000200000021140 R08: 00007fbc46f32ee0 R09: 0000000000000000 [ 482.329965][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000021180 [ 482.329991][T14331] R13: 00007fbc46f32ea0 R14: 0000000000021135 R15: 00002000000211c0 [ 482.330033][T14331] [ 482.418900][T14331] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 482.751429][T14331] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 483.179388][T14395] loop5: detected capacity change from 0 to 32768 [ 483.255292][T14395] OCFS2: ERROR (device loop5): int ocfs2_validate_slot_map_block(struct super_block *, struct buffer_head *): Invalid Slot Map Buffer Head Block Number : 0, Should be >= 2 [ 483.255368][T14395] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 483.295808][T14395] OCFS2: File system is now read-only. [ 483.302394][T14395] (syz.5.3729,14395,1):ocfs2_map_slot_buffers:410 ERROR: status = -30 [ 483.333022][T14395] (syz.5.3729,14395,1):ocfs2_init_slot_info:448 ERROR: status = -30 [ 483.363309][T14395] (syz.5.3729,14395,1):ocfs2_initialize_super:2222 ERROR: status = -30 [ 483.405291][T14395] (syz.5.3729,14395,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 483.902423][T14401] loop2: detected capacity change from 0 to 21 [ 483.953679][T14401] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 484.000488][ T5971] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 484.013446][T14390] loop1: detected capacity change from 0 to 32768 [ 484.148337][T14390] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 484.193791][T14390] dlm: no local IP address has been set [ 484.229963][ T5971] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 484.243301][ T5971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.257057][T14390] dlm: cannot start dlm midcomms -107 [ 484.258907][ T5971] usb 6-1: config 0 has no interface number 0 [ 484.278979][ T5971] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 484.286748][T14390] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 484.295963][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.323245][ T5971] usb 6-1: Product: syz [ 484.331064][ T5971] usb 6-1: Manufacturer: syz [ 484.335785][ T5971] usb 6-1: SerialNumber: syz [ 484.374281][ T5971] usb 6-1: config 0 descriptor?? [ 484.470998][T14397] loop4: detected capacity change from 0 to 32768 [ 484.484204][T14405] loop2: detected capacity change from 0 to 128 [ 484.641160][T14407] loop1: detected capacity change from 0 to 128 [ 484.644413][ T5971] usb 6-1: USB disconnect, device number 94 [ 484.907233][T14412] loop0: detected capacity change from 0 to 64 [ 485.250924][T14417] loop0: detected capacity change from 0 to 256 [ 485.495211][T14419] loop5: detected capacity change from 0 to 128 [ 485.941324][T14409] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3736 (14409) [ 486.009002][T14409] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 486.069589][T14409] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 486.089809][T14426] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 486.137610][T14413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3737 (14413) [ 486.249730][T14413] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 486.340385][T14409] BTRFS info (device loop3): enabling ssd optimizations [ 486.355338][T14413] BTRFS info (device loop2): using sha256 checksum algorithm [ 486.371303][T14409] BTRFS info (device loop3): turning on async discard [ 486.378212][T14409] BTRFS info (device loop3): enabling free space tree [ 486.703946][T14413] BTRFS info (device loop2): enabling ssd optimizations [ 486.754189][T14413] BTRFS info (device loop2): turning on async discard [ 486.761303][T14413] BTRFS info (device loop2): enabling free space tree [ 486.854543][ T5836] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 487.155219][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 487.223745][T14467] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 487.496894][T14469] erofs (device loop3): mounted with root inode @ nid 36. [ 488.368713][T14461] set_capacity_and_notify: 8 callbacks suppressed [ 488.368738][T14461] loop5: detected capacity change from 0 to 32768 [ 488.485764][T14461] (syz.5.3746,14461,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 488.527178][T14461] (syz.5.3746,14461,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 488.566468][T14466] loop4: detected capacity change from 0 to 32768 [ 488.676052][T14466] (syz.4.3747,14466,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 488.721797][T14466] (syz.4.3747,14466,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 488.809885][T14465] loop1: detected capacity change from 0 to 32768 [ 488.924509][T14465] (syz.1.3749,14465,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 488.970953][T14465] (syz.1.3749,14465,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 489.917340][T14479] loop5: detected capacity change from 0 to 32768 [ 490.000257][T14479] (syz.5.3753,14479,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 490.041540][T14479] (syz.5.3753,14479,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 490.205170][T14482] loop4: detected capacity change from 0 to 32768 [ 490.343267][T14482] (syz.4.3754,14482,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 490.391141][T14482] (syz.4.3754,14482,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 490.433744][T14472] loop0: detected capacity change from 0 to 65536 [ 490.462076][T14475] loop3: detected capacity change from 0 to 65536 [ 490.470437][T14487] loop5: detected capacity change from 0 to 4096 [ 490.487612][T14472] (syz.0.3751,14472,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 490.544095][T14475] (syz.3.3752,14475,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 490.544318][T14472] (syz.0.3751,14472,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 490.623936][T14475] (syz.3.3752,14475,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 490.709542][T14492] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.084678][T14497] loop0: detected capacity change from 0 to 2048 [ 491.252212][T14497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.499460][T14502] loop2: detected capacity change from 0 to 256 [ 491.571026][T14503] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 491.581380][T14502] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 491.644666][T14502] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 491.681320][T14502] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 491.713587][T14503] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 491.735576][T14502] UDF-fs: Scanning with blocksize 512 failed [ 491.764228][T14503] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 491.774327][T14502] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 491.817037][T14503] UDF-fs: Scanning with blocksize 512 failed [ 491.855852][T14503] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 491.867958][T14502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.945089][T14503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.002880][ T5807] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 492.174000][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 492.185290][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 492.235451][T14493] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3757 (14493) [ 492.249286][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.249326][ T5807] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.249358][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 492.249386][ T5807] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 492.249448][ T5807] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 492.249479][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.271199][ T5807] usb 1-1: config 0 descriptor?? [ 492.394339][T14509] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 492.446961][T14495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3758 (14495) [ 492.447191][T14509] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 492.462363][T14493] BTRFS info (device loop4): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 492.506835][ T5807] hub 1-1:0.0: bad descriptor, ignoring hub [ 492.513196][ T5807] hub 1-1:0.0: probe with driver hub failed with error -5 [ 492.562143][T14509] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 492.584647][T14493] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 492.604409][T14495] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 492.670932][T14509] UDF-fs: Scanning with blocksize 512 failed [ 492.690828][T14495] BTRFS info (device loop3 state S): using crc32c checksum algorithm [ 492.691553][ T5138] Bluetooth: hci6: urb ffff888034a3ea00 submission failed (90) [ 492.762428][ T5807] usb 1-1: USB disconnect, device number 66 [ 492.783722][T14509] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 492.835101][T14493] BTRFS info (device loop4): enabling ssd optimizations [ 492.842517][T14509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.889331][T14493] BTRFS info (device loop4): turning on async discard [ 492.892402][ T38] BTRFS warning (device loop3 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x3a96e814 level 0, ignored [ 492.900385][T14493] BTRFS info (device loop4): enabling free space tree [ 492.937780][T14495] BTRFS error (device loop3 state ES): devid 1 uuid ffe9ff7f-0000-0000-0000-9003f3eadbc4 is missing [ 492.973451][T14495] BTRFS error (device loop3 state ES): failed to read chunk tree: -2 [ 493.022484][T14495] BTRFS error (device loop3 state ES): open_ctree failed: -2 [ 493.235283][ T5830] BTRFS info (device loop4): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 493.823243][T14553] set_capacity_and_notify: 9 callbacks suppressed [ 493.823277][T14553] loop0: detected capacity change from 0 to 512 [ 494.265752][T14559] loop5: detected capacity change from 0 to 512 [ 494.343966][T14559] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 494.386692][T14559] UDF-fs: Scanning with blocksize 512 failed [ 494.393819][T14559] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 494.441963][T14559] UDF-fs: Scanning with blocksize 1024 failed [ 494.523059][T14559] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 494.574228][T14559] UDF-fs: Scanning with blocksize 2048 failed [ 494.633516][T14559] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 494.698184][T14559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.440623][T14561] loop0: detected capacity change from 0 to 32768 [ 495.490452][T14561] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3777 (14561) [ 495.558082][T14561] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 495.577208][T14561] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 495.753618][T14549] loop4: detected capacity change from 0 to 65536 [ 495.792839][T14549] (syz.4.3769,14549,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 495.883769][T14549] (syz.4.3769,14549,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 495.918863][T14561] BTRFS info (device loop0): enabling ssd optimizations [ 495.926000][T14561] BTRFS info (device loop0): turning on async discard [ 495.979996][T14561] BTRFS info (device loop0): enabling free space tree [ 496.231620][ T5832] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 497.366627][T14563] loop5: detected capacity change from 0 to 65536 [ 497.447782][T14563] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 497.584825][T14563] XFS (loop5): Ending clean mount [ 497.733408][ T5838] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 498.825640][T14583] loop0: detected capacity change from 0 to 65536 [ 498.846230][T14612] loop5: detected capacity change from 0 to 64 [ 498.903734][T14583] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 499.680495][T14608] loop1: detected capacity change from 0 to 32768 [ 499.954742][T14628] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.283540][T14619] loop3: detected capacity change from 0 to 32768 [ 500.349199][T14619] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3791 (14619) [ 500.431364][T14619] BTRFS info (device loop3): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 500.448324][T14619] BTRFS info (device loop3): using blake2b checksum algorithm [ 500.494416][T14623] loop5: detected capacity change from 0 to 32768 [ 500.745942][T14619] BTRFS info (device loop3): enabling ssd optimizations [ 500.753163][T14619] BTRFS info (device loop3): turning on async discard [ 500.769259][T14619] BTRFS info (device loop3): enabling free space tree [ 500.844777][T14653] loop0: detected capacity change from 0 to 512 [ 500.851117][T14655] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.936045][T14653] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 500.962434][ T5836] BTRFS info (device loop3): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 501.013120][T14653] UDF-fs: Scanning with blocksize 512 failed [ 501.077301][T14653] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 501.153488][T14653] UDF-fs: Scanning with blocksize 1024 failed [ 501.303951][T14653] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 501.311474][T14653] UDF-fs: Scanning with blocksize 2048 failed [ 501.393242][T14653] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 501.456675][T14653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.939297][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3808'. [ 501.982450][T14676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3808'. [ 502.171852][T14682] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 502.203354][T14684] loop1: detected capacity change from 0 to 164 [ 502.216264][T14682] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3813'. [ 502.273659][T14684] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 502.908643][T14700] loop3: detected capacity change from 0 to 4096 [ 502.925471][T14700] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 502.994959][T14712] loop0: detected capacity change from 0 to 256 [ 503.035026][T14700] ntfs3(loop3): ino=19, mi_enum_attr [ 503.045141][T14700] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 503.092978][T14712] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 503.199374][T14712] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 503.231310][T14712] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 503.469693][T14721] loop5: detected capacity change from 0 to 4096 [ 503.519559][T14721] EXT4-fs (loop5): Test dummy encryption mode enabled [ 503.562156][T14721] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 503.591847][T14721] System zones: 0-5 [ 503.620429][T14721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.890060][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.923222][T14744] loop2: detected capacity change from 0 to 8 [ 504.004036][T14744] SQUASHFS error: Unable to read directory block [1d0:26] [ 504.248902][T14751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3845'. [ 504.299954][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3842'. [ 504.379785][T14760] netlink: 'syz.4.3848': attribute type 4 has an invalid length. [ 504.414627][T14760] netlink: 'syz.4.3848': attribute type 3 has an invalid length. [ 504.422551][T14760] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3848'. [ 504.487466][T14764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3851'. [ 504.554697][T14764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3851'. [ 504.635155][ T30] audit: type=1326 audit(1774382065.669:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14767 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b39c799 code=0x7ffc0000 [ 504.734173][T14772] loop3: detected capacity change from 0 to 2048 [ 504.745954][ T30] audit: type=1326 audit(1774382065.669:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14767 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b39c799 code=0x7ffc0000 [ 504.783003][T14772] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.837261][ T30] audit: type=1326 audit(1774382065.697:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14767 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f9d2b39c799 code=0x7ffc0000 [ 504.969107][ T30] audit: type=1326 audit(1774382065.697:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14767 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b39c799 code=0x7ffc0000 [ 505.077764][ T30] audit: type=1326 audit(1774382065.697:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14767 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b39c799 code=0x7ffc0000 [ 505.261164][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'. [ 505.396049][T14791] loop5: detected capacity change from 0 to 4096 [ 505.415658][T14791] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.453380][T14791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.517336][T14791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.614314][T14810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 505.652266][T14791] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 505.790125][T14806] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 505.868108][T14806] bond1 (unregistering): Released all slaves [ 505.911658][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.291155][T14829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3881'. [ 506.372283][T14829] gre0: Master is either lo or non-ether device [ 506.566093][T14837] xt_hashlimit: max too large, truncated to 1048576 [ 506.886005][T14851] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 506.973364][T14804] loop0: detected capacity change from 0 to 32768 [ 507.107772][T14804] XFS (loop0): Mounting V5 Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 507.133047][T14860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.163575][T14804] XFS (loop0): Log size 768 blocks too small, minimum size is 1056 blocks [ 507.215614][T14804] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 507.294982][ T30] audit: type=1326 audit(1774382068.157:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.4.3898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc45f9c799 code=0x7ffc0000 [ 507.365124][T14804] XFS (loop0): log mount failed [ 507.398555][ T30] audit: type=1326 audit(1774382068.157:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.4.3898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc45f9c799 code=0x7ffc0000 [ 507.528260][ T30] audit: type=1326 audit(1774382068.204:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.4.3898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fbc45f9c799 code=0x7ffc0000 [ 507.613097][ T30] audit: type=1326 audit(1774382068.204:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.4.3898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc45f9c799 code=0x7ffc0000 [ 507.717688][ T30] audit: type=1326 audit(1774382068.204:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.4.3898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc45f9c799 code=0x7ffc0000 [ 507.728957][T14885] loop4: detected capacity change from 0 to 16 [ 507.777253][T14885] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 507.815360][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3905'. [ 507.846864][T14893] warning: `syz.3.3906' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 508.632219][T14915] loop4: detected capacity change from 0 to 4096 [ 508.693548][T14915] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 508.860046][T14928] loop2: detected capacity change from 0 to 1024 [ 508.892597][T14931] netlink: 'syz.3.3927': attribute type 6 has an invalid length. [ 508.914110][T14928] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 508.942465][T14933] openvswitch: netlink: IP tunnel dst address not specified [ 508.961644][T14928] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 509.005516][T14928] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 509.012045][T14935] loop1: detected capacity change from 0 to 256 [ 509.037374][T14935] exfat: Deprecated parameter 'namecase' [ 509.062185][T14928] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 509.140229][T14935] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 509.470414][T14928] loop2: detected capacity change from 0 to 4096 [ 509.516978][T14928] ntfs3: Unknown parameter 'data' [ 509.596864][T14949] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 509.654658][T14948] loop5: detected capacity change from 0 to 1024 [ 509.743720][T14953] loop4: detected capacity change from 0 to 8 [ 509.758986][T14953] SQUASHFS error: Unable to read inode 0xe3 [ 509.776588][T14948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.061302][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.241113][T14978] Driver unsupported XDP return value 0 on prog (id 269) dev N/A, expect packet loss! [ 510.454783][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3955'. [ 510.483053][T14991] loop1: detected capacity change from 0 to 128 [ 510.647740][T14991] FAT-fs (loop1): Directory bread(block 32) failed [ 510.654786][T14991] FAT-fs (loop1): Directory bread(block 33) failed [ 510.679344][T14991] FAT-fs (loop1): Directory bread(block 34) failed [ 510.697573][T14997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.698331][T14991] FAT-fs (loop1): Directory bread(block 35) failed [ 510.738445][T14991] FAT-fs (loop1): Directory bread(block 36) failed [ 510.767457][T14991] FAT-fs (loop1): Directory bread(block 37) failed [ 510.814956][T14991] FAT-fs (loop1): Directory bread(block 38) failed [ 510.858060][T14991] FAT-fs (loop1): Directory bread(block 39) failed [ 510.916053][T14991] FAT-fs (loop1): Directory bread(block 40) failed [ 510.967299][T14991] FAT-fs (loop1): Directory bread(block 41) failed [ 511.104295][T15008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3963'. [ 511.145102][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3963'. [ 511.210267][T15006] geneve2: entered promiscuous mode [ 511.217669][T15006] geneve2: entered allmulticast mode [ 511.279678][T14991] syz.1.3954: attempt to access beyond end of device [ 511.279678][T14991] loop1: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 511.316664][T14991] FAT-fs (loop1): Filesystem has been set read-only [ 511.348646][T14991] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 511.383647][T15012] set_capacity_and_notify: 1 callbacks suppressed [ 511.383680][T15012] loop3: detected capacity change from 0 to 64 [ 511.589670][T15016] loop5: detected capacity change from 0 to 64 [ 511.960947][T15020] loop4: detected capacity change from 0 to 64 [ 511.980497][T15021] openvswitch: netlink: Key 6 has unexpected len 187 expected 2 [ 511.981420][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 512.014791][T15020] syz.4.3971: attempt to access beyond end of device [ 512.014791][T15020] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 512.562763][T15047] xt_l2tp: v2 doesn't support IP mode [ 512.619832][T15050] loop0: detected capacity change from 0 to 256 [ 512.695129][T15050] FAT-fs (loop0): Directory bread(block 64) failed [ 512.695174][T15050] FAT-fs (loop0): Directory bread(block 65) failed [ 512.695259][T15050] FAT-fs (loop0): Directory bread(block 66) failed [ 512.695288][T15050] FAT-fs (loop0): Directory bread(block 67) failed [ 512.695392][T15050] FAT-fs (loop0): Directory bread(block 68) failed [ 512.695507][T15050] FAT-fs (loop0): Directory bread(block 69) failed [ 512.695600][T15050] FAT-fs (loop0): Directory bread(block 70) failed [ 512.695630][T15050] FAT-fs (loop0): Directory bread(block 71) failed [ 512.695717][T15050] FAT-fs (loop0): Directory bread(block 72) failed [ 512.695747][T15050] FAT-fs (loop0): Directory bread(block 73) failed [ 512.772585][T15054] loop3: detected capacity change from 0 to 256 [ 512.815737][T15054] FAT-fs (loop3): Directory bread(block 64) failed [ 512.815847][T15054] FAT-fs (loop3): Directory bread(block 65) failed [ 512.815948][T15054] FAT-fs (loop3): Directory bread(block 66) failed [ 512.815978][T15054] FAT-fs (loop3): Directory bread(block 67) failed [ 512.816065][T15054] FAT-fs (loop3): Directory bread(block 68) failed [ 512.816095][T15054] FAT-fs (loop3): Directory bread(block 69) failed [ 512.816183][T15054] FAT-fs (loop3): Directory bread(block 70) failed [ 512.816213][T15054] FAT-fs (loop3): Directory bread(block 71) failed [ 512.816300][T15054] FAT-fs (loop3): Directory bread(block 72) failed [ 512.816331][T15054] FAT-fs (loop3): Directory bread(block 73) failed [ 512.817840][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 512.983151][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 512.986707][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.986738][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.989502][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e [ 512.989537][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.989564][ T9] usb 3-1: Product: syz [ 512.989583][ T9] usb 3-1: Manufacturer: syz [ 512.989603][ T9] usb 3-1: SerialNumber: syz [ 512.992613][ T9] usb 3-1: config 0 descriptor?? [ 513.217434][ T10] usb 3-1: USB disconnect, device number 91 [ 513.981764][T15087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.098588][T15094] ip6tnl1: entered promiscuous mode [ 515.006359][T15136] loop0: detected capacity change from 0 to 512 [ 515.063725][T15136] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 515.072005][T15136] EXT4-fs (loop0): orphan cleanup on readonly fs [ 515.107506][T15136] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 515.151433][T15136] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 515.211735][T15146] netlink: 'syz.2.4033': attribute type 8 has an invalid length. [ 515.243925][T15136] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.4026: inode has both inline data and extents flags [ 515.244072][T15136] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 515.249691][T15136] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4026: couldn't read orphan inode 16 (err -117) [ 515.249736][T15136] loop0: lost filesystem error report for type 5 error -117 [ 515.300577][T15136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.325736][T15136] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 515.524543][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.762651][T15162] loop4: detected capacity change from 0 to 256 [ 515.827838][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.836254][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.878161][T15167] loop0: detected capacity change from 0 to 136 [ 515.886836][T15162] FAT-fs (loop4): Directory bread(block 64) failed [ 515.910121][T15168] netlink: 'syz.3.4042': attribute type 63 has an invalid length. [ 515.925349][T15162] FAT-fs (loop4): Directory bread(block 65) failed [ 515.960319][T15162] FAT-fs (loop4): Directory bread(block 66) failed [ 516.003481][T15162] FAT-fs (loop4): Directory bread(block 67) failed [ 516.053659][T15162] FAT-fs (loop4): Directory bread(block 68) failed [ 516.108273][T15162] FAT-fs (loop4): Directory bread(block 69) failed [ 516.145431][T15162] FAT-fs (loop4): Directory bread(block 70) failed [ 516.152132][T15162] FAT-fs (loop4): Directory bread(block 71) failed [ 516.198165][T15162] FAT-fs (loop4): Directory bread(block 72) failed [ 516.233805][T15162] FAT-fs (loop4): Directory bread(block 73) failed [ 516.605717][T15191] veth0_to_bond: entered promiscuous mode [ 516.611543][T15191] veth0_to_bond: entered allmulticast mode [ 516.713879][T15191] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 516.807380][T15200] loop5: detected capacity change from 0 to 1024 [ 516.976238][T15200] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 517.010477][T15200] syz.5.4057: attempt to access beyond end of device [ 517.010477][T15200] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 517.030808][T15209] mmap: syz.2.4061 (15209): VmData 37462016 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 517.093831][T15200] Buffer I/O error on dev loop5, logical block 458752, async page read [ 517.147202][T15200] syz.5.4057: attempt to access beyond end of device [ 517.147202][T15200] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 517.166000][T15204] loop3: detected capacity change from 0 to 4096 [ 517.207929][T15204] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 517.218750][T15200] Buffer I/O error on dev loop5, logical block 458752, async page read [ 517.377887][T15219] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 517.420137][T15219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4066'. [ 517.444980][T15215] loop4: detected capacity change from 0 to 4096 [ 517.474026][T15219] batman_adv: batadv0: Adding interface: vlan1 [ 517.508420][T15219] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.586492][T15222] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.640482][T15219] batman_adv: batadv0: Interface activated: vlan1 [ 517.707297][T15215] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 517.841909][T15215] Remounting filesystem read-only [ 517.921696][T15234] sctp: [Deprecated]: syz.1.4074 (pid 15234) Use of int in maxseg socket option. [ 517.921696][T15234] Use struct sctp_assoc_value instead [ 518.048604][ T5830] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 518.534418][T15253] loop3: detected capacity change from 0 to 512 [ 518.667755][T15253] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4082: inode has both inline data and extents flags [ 518.695560][T15253] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.696344][T15253] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4082: couldn't read orphan inode 15 (err -117) [ 518.706004][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 518.706033][ C1] EXT4-fs (loop3): initial error at time 1774382078: ext4_orphan_get:1391: inode 15 [ 518.706077][ C1] EXT4-fs (loop3): last error at time 1774382078: ext4_orphan_get:1391: inode 15 [ 518.746655][T15253] loop3: lost filesystem error report for type 5 error -117 [ 518.768507][T15258] netlink: 'syz.1.4084': attribute type 30 has an invalid length. [ 518.770317][T15253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.887862][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.097861][T15232] loop0: detected capacity change from 0 to 32768 [ 519.146190][T15232] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4072 (15232) [ 519.160531][T15271] netlink: 'syz.1.4088': attribute type 12 has an invalid length. [ 519.186878][T15271] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4088'. [ 519.229527][T15232] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 519.260190][T15232] BTRFS info (device loop0): using sha256 checksum algorithm [ 519.393369][T15285] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4089'. [ 519.437400][T15232] BTRFS info (device loop0): enabling ssd optimizations [ 519.444543][T15232] BTRFS info (device loop0): turning on async discard [ 519.559201][T15232] BTRFS info (device loop0): enabling free space tree [ 519.574422][T15285] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4089'. [ 519.605890][T15232] BTRFS info (device loop0): enabling auto defrag [ 519.616790][T15232] BTRFS info (device loop0): max_inline set to 4096 [ 519.671202][T15247] loop4: detected capacity change from 0 to 32768 [ 519.772243][T15247] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 519.823485][T15303] loop1: detected capacity change from 0 to 164 [ 519.960320][T15303] Unsupported NM flag settings (240) [ 519.979294][T15310] loop2: detected capacity change from 0 to 1764 [ 520.049823][ T5832] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 520.064857][T15247] XFS (loop4): Ending clean mount [ 520.090661][T15310] process 'syz.2.4095' launched './file0' with NULL argv: empty string added [ 520.307329][T15316] vti0: entered promiscuous mode [ 520.354378][T15316] vti0: entered allmulticast mode [ 520.458147][ T5830] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 520.754004][ T9] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 520.943017][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 520.967330][ T9] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 520.980769][T15337] loop2: detected capacity change from 0 to 1024 [ 520.990552][ T9] usb 4-1: config 11 has no interface number 0 [ 521.008711][ T9] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 521.053489][ T9] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 521.129370][ T9] usb 4-1: config 11 interface 95 has no altsetting 0 [ 521.177628][ T9] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 521.186864][ T9] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 521.229941][ T30] audit: type=1800 audit(1774382081.187:27): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4109" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 521.239683][ T9] usb 4-1: Manufacturer: syz [ 521.305025][T15343] binder: 15342:15343 ioctl c018620c 2000000001c0 returned -22 [ 521.335923][T15323] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 521.379943][ T82] hfsplus: b-tree write err: -5, ino 25 [ 521.390269][ T82] hfsplus: b-tree write err: -5, ino 4 [ 521.411851][ T82] hfsplus: b-tree write err: -5, ino 2 [ 521.579784][T15349] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 521.603745][T15351] netlink: 'syz.4.4116': attribute type 3 has an invalid length. [ 521.629546][ T9] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 521.679799][T15351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4116'. [ 521.713272][ T9] usb 4-1: USB disconnect, device number 95 [ 521.916648][T15361] kAFS: unable to lookup cell '(' [ 522.012523][T15360] veth3: entered promiscuous mode [ 522.037569][T15360] veth3: entered allmulticast mode [ 522.360466][T15377] loop4: detected capacity change from 0 to 512 [ 522.463795][T15377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.482337][T15377] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.890070][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.299285][T15373] loop5: detected capacity change from 0 to 32768 [ 523.331213][T15408] dlm: no local IP address has been set [ 523.357788][T15408] dlm: cannot start dlm midcomms -107 [ 523.406625][T15373] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.461817][T15422] loop1: detected capacity change from 0 to 128 [ 523.481934][T15422] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 523.515009][T15421] netlink: 'syz.4.4146': attribute type 3 has an invalid length. [ 523.553997][T15421] netlink: 'syz.4.4146': attribute type 1 has an invalid length. [ 523.592305][T15422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.627882][T15421] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4146'. [ 523.815517][T15373] XFS (loop5): Ending clean mount [ 524.057181][ T5838] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 524.163445][T15440] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 524.226671][T15440] bond1 (unregistering): Released all slaves [ 524.249864][T15447] netlink: 'syz.2.4157': attribute type 21 has an invalid length. [ 524.501181][T15453] loop0: detected capacity change from 0 to 2048 [ 524.653302][T15453] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 524.701524][T15453] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 524.754470][T15453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.973151][T15469] netlink: 'syz.2.4169': attribute type 1 has an invalid length. [ 525.053655][T15469] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4169'. [ 525.270559][T15485] netlink: 'syz.4.4175': attribute type 1 has an invalid length. [ 525.710203][ T5971] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 525.939275][ T5971] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 525.958783][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.010069][ T5971] usb 3-1: Product: syz [ 526.020181][ T5971] usb 3-1: Manufacturer: syz [ 526.030939][ T5971] usb 3-1: SerialNumber: syz [ 526.066830][ T5971] usb 3-1: config 0 descriptor?? [ 526.077332][T15516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.097532][ T5971] usb 3-1: selecting invalid altsetting 1 [ 526.110830][ T5971] technisat-usb2: could not set alternate setting to 0 [ 526.118740][T15516] batadv_slave_0: entered promiscuous mode [ 526.316346][ T5971] technisat-usb2: firmware version: 0.0 [ 526.333876][ T5971] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 526.545807][ T5971] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 526.590396][ T5971] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 526.637146][T15541] loop4: detected capacity change from 0 to 512 [ 526.664239][ T5971] usb 3-1: USB disconnect, device number 92 [ 526.746658][T15541] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 526.779473][T15541] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 526.788930][T15541] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.4202: Failed to acquire dquot type 1 [ 526.827816][T15541] loop4: lost filesystem error report for type 5 error -5 [ 526.832668][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 526.846342][ C0] EXT4-fs (loop4): last error at time 1774382086: ext4_acquire_dquot:7001 [ 526.872750][T15541] EXT4-fs (loop4): 1 truncate cleaned up [ 526.910572][T15541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.000190][T15541] ext4 filesystem being mounted at /701/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.251668][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.450508][T15565] loop5: detected capacity change from 0 to 8 [ 527.511310][T15558] loop3: detected capacity change from 0 to 8192 [ 527.584210][T15565] SQUASHFS error: zlib decompression failed, data probably corrupt [ 527.623864][T15565] SQUASHFS error: Failed to read block 0x9b: -5 [ 527.650189][T15565] SQUASHFS error: Unable to read metadata cache entry [99] [ 527.717483][T15565] SQUASHFS error: Unable to read inode 0x104 [ 527.782975][T15574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4217'. [ 528.026921][T15582] netlink: 'syz.0.4220': attribute type 2 has an invalid length. [ 528.040812][ T10] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 528.064268][T15582] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4220'. [ 528.265343][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 528.273490][ T10] usb 6-1: config 0 has no interface number 0 [ 528.329687][ T10] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 528.364754][ T10] usb 6-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x6D, changing to 0xD [ 528.410289][ T10] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0xD has invalid maxpacket 14309, setting to 64 [ 528.457741][ T10] usb 6-1: config 0 interface 2 has no altsetting 0 [ 528.472139][ T10] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 528.511252][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.544297][ T10] usb 6-1: Product: syz [ 528.564065][ T10] usb 6-1: Manufacturer: syz [ 528.579746][ T10] usb 6-1: SerialNumber: syz [ 528.604819][ T10] usb 6-1: config 0 descriptor?? [ 528.623057][T15565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 528.654371][T15565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 528.674259][ T5890] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 528.783724][T15608] loop3: detected capacity change from 0 to 64 [ 528.876618][ T5890] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 528.885000][ T5890] usb 1-1: config 0 has no interface number 0 [ 528.921254][ T5890] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.961683][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.976785][ T5890] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 529.021948][ T10] usb 6-1: invalid MIDI in EP 0 [ 529.033778][ T5890] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 529.080989][ T5890] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 529.114591][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.163317][ T5890] usb 1-1: Product: syz [ 529.168123][ T5890] usb 1-1: Manufacturer: syz [ 529.173165][ T5890] usb 1-1: SerialNumber: syz [ 529.208552][ T5890] usb 1-1: config 0 descriptor?? [ 529.226559][T15620] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 529.258504][T15620] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 529.383181][ T10] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 529.435587][ T10] usb 6-1: USB disconnect, device number 95 [ 529.502153][ T5807] usb 1-1: USB disconnect, device number 67 [ 529.605235][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.870955][T15642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4251'. [ 529.900980][T15642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4251'. [ 530.371566][ T5933] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 530.440581][T15664] loop1: detected capacity change from 0 to 1024 [ 530.501326][T15664] hfsplus: request for non-existent node 458752 in B*Tree [ 530.541281][T15664] hfsplus: request for non-existent node 458752 in B*Tree [ 530.555357][ T5933] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 530.569183][ T5933] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 530.584674][T15664] hfsplus: request for non-existent node 458752 in B*Tree [ 530.590473][T15670] netlink: 'syz.4.4265': attribute type 1 has an invalid length. [ 530.607018][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.613681][T15664] hfsplus: request for non-existent node 458752 in B*Tree [ 530.631151][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 530.725119][T15673] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 530.753846][T15673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 530.774666][T15668] loop3: detected capacity change from 0 to 8192 [ 530.807106][ T1082] hfsplus: b-tree write err: -5, ino 25 [ 530.829564][T15668] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 530.840936][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 530.849265][ T1082] hfsplus: b-tree write err: -5, ino 4 [ 530.879633][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 530.896878][ T1082] hfsplus: b-tree write err: -5, ino 2 [ 530.911460][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.923464][T15668] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 530.947600][ T9] usb 1-1: Product: syz [ 530.959897][T15668] FAT-fs (loop3): Filesystem has been set read-only [ 530.967024][ T9] usb 1-1: Manufacturer: syz [ 530.987050][ T9] usb 1-1: SerialNumber: syz [ 531.005278][T15668] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 531.027228][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 531.037377][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 531.053032][T15668] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 531.066422][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 531.138449][ T5933] ath6kl: Failed to read usb control message: -71 [ 531.156547][ T5933] ath6kl: Unable to read the bmi data from the device: -71 [ 531.175771][ T5933] ath6kl: Unable to recv target info: -71 [ 531.212326][ T5933] ath6kl: Failed to init ath6kl core: -71 [ 531.212522][T15681] xt_HMARK: spi-set and port-set can't be combined [ 531.240588][ T5933] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 531.263341][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 531.285498][ T5933] usb 6-1: USB disconnect, device number 96 [ 531.301589][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.316069][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.363172][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.383805][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.397556][ T10] usb 5-1: Product: syz [ 531.401744][ T10] usb 5-1: Manufacturer: syz [ 531.424253][ T10] usb 5-1: SerialNumber: syz [ 531.511364][ T9] r8152-cfgselector 1-1: USB disconnect, device number 68 [ 531.911220][ T10] usb 5-1: cannot find UAC_HEADER [ 532.066119][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4283'. [ 532.119266][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 532.155907][ T10] usb 5-1: USB disconnect, device number 87 [ 532.210129][ T9] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 532.313461][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.417966][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.456356][ T9] usb 3-1: config 0 has no interface number 0 [ 532.468123][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 532.524827][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 532.566283][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 532.621041][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.766112][ T9] usb 3-1: config 0 descriptor?? [ 532.774608][T15703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 532.817126][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 533.096877][ T9] usb 3-1: USB disconnect, device number 93 [ 533.294223][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4304'. [ 533.548172][T15753] loop3: detected capacity change from 0 to 512 [ 533.568142][T15753] EXT4-fs: Ignoring removed oldalloc option [ 533.630426][T15753] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.4306: Parent and EA inode have the same ino 15 [ 533.643065][T15753] loop3: lost filesystem error report for type 5 error -117 [ 533.652431][T15753] EXT4-fs (loop3): Remounting filesystem read-only [ 533.660011][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 533.660041][ C1] EXT4-fs (loop3): initial error at time 1774382092: ext4_xattr_inode_iget:437 [ 533.660074][ C1] EXT4-fs (loop3): last error at time 1774382092: ext4_xattr_inode_iget:437 [ 533.691632][T15753] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 533.696408][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 533.700881][T15753] EXT4-fs (loop3): 1 orphan inode deleted [ 533.716533][T15753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.837279][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.838116][T15737] loop5: detected capacity change from 0 to 32768 [ 533.861723][T15739] loop0: detected capacity change from 0 to 32768 [ 533.944024][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.959362][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.959644][T15737] JBD2: Ignoring recovery information on journal [ 534.018185][ T9] usb 5-1: config 0 descriptor?? [ 534.073456][ T9] cp210x 5-1:0.0: cp210x converter detected [ 534.116466][T15760] loop3: detected capacity change from 0 to 16 [ 534.153013][T15760] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 534.168499][T15737] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 534.215257][T15744] loop1: detected capacity change from 0 to 32768 [ 534.264824][T15737] (syz.5.4298,15737,1):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #65: directory entry too close to end - offset=0, inode=65, rec_len=16, name_len=1 [ 534.317623][T15744] ERROR: (device loop1): diAllocAG: error reading iag [ 534.317623][T15744] [ 534.328760][T15744] ialloc: diAlloc returned -5! [ 534.336638][T15737] (syz.5.4298,15737,0):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -2 [ 534.388154][T15737] (syz.5.4298,15737,0):ocfs2_mknod:302 ERROR: status = -2 [ 534.433847][ T5832] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 534.446321][ T5832] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 534.454841][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 534.464397][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.474570][ T5832] RIP: 0010:jfs_flush_journal+0x970/0xef0 [ 534.480308][ T5832] Code: 2a 67 fe 4d 8d 75 d8 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 6e 73 d1 fe 4d 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 52 73 d1 fe 49 8b 3e e8 0a af a1 fe [ 534.500364][ T5832] RSP: 0018:ffffc900026f7b00 EFLAGS: 00010216 [ 534.506804][ T5832] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888035bb5b80 [ 534.514959][ T5832] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 534.523368][ T5832] RBP: ffffc900026f7c30 R08: ffffffff9011b3b7 R09: 1ffffffff2023676 [ 534.531427][ T5832] R10: dffffc0000000000 R11: fffffbfff2023677 R12: 0000000000000000 [ 534.539568][ T5832] R13: ffff888075b11838 R14: 0000000000000030 R15: ffff888056714a28 [ 534.547638][ T5832] FS: 0000555562aa4500(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 534.557029][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.563624][ T5832] CR2: 000000110c2b2439 CR3: 000000005acbe000 CR4: 0000000000350ef0 [ 534.571611][ T5832] Call Trace: [ 534.575070][ T5832] [ 534.578171][ T5832] ? dquot_disable+0x138d/0x1bf0 [ 534.583126][ T5832] ? __pfx_jfs_flush_journal+0x10/0x10 [ 534.589210][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 534.594871][ T5832] ? hook_sb_delete+0xbdd/0xd40 [ 534.599738][ T5832] ? __pfx_dquot_disable+0x10/0x10 [ 534.604871][ T5832] jfs_umount+0x178/0x3c0 [ 534.609293][ T5832] jfs_put_super+0x8c/0x190 [ 534.613979][ T5832] ? __pfx_jfs_put_super+0x10/0x10 [ 534.619101][ T5832] generic_shutdown_super+0x13d/0x2d0 [ 534.624753][ T5832] kill_block_super+0x44/0x90 [ 534.629522][ T5832] deactivate_locked_super+0xbc/0x130 [ 534.635099][ T5832] cleanup_mnt+0x437/0x4d0 [ 534.639608][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.644820][ T5832] task_work_run+0x1d9/0x270 [ 534.649423][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 534.654557][ T5832] exit_to_user_mode_loop+0xed/0x480 [ 534.659917][ T5832] ? rcu_is_watching+0x15/0xb0 [ 534.664972][ T5832] do_syscall_64+0x32d/0xf80 [ 534.669573][ T5832] ? trace_irq_disable+0x3b/0x150 [ 534.674745][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.680903][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.686893][ T5832] RIP: 0033:0x7f1f06f9d9d7 [ 534.691398][ T5832] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 534.711097][ T5832] RSP: 002b:00007ffe139181e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 534.719879][ T5832] RAX: 0000000000000000 RBX: 00007f1f07032050 RCX: 00007f1f06f9d9d7 [ 534.727864][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe139182a0 [ 534.735847][ T5832] RBP: 00007ffe139182a0 R08: 00007ffe139192a0 R09: 00000000ffffffff [ 534.743825][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe13919330 [ 534.752150][ T5832] R13: 00007f1f07032050 R14: 000000000007e720 R15: 00007ffe13919370 [ 534.760580][ T5832] [ 534.763779][ T5832] Modules linked in: [ 534.769405][ T5832] ---[ end trace 0000000000000000 ]--- [ 534.786711][T15737] (syz.5.4298,15737,0):ocfs2_mknod:506 ERROR: status = -2 [ 534.795386][T15737] (syz.5.4298,15737,0):ocfs2_create:679 ERROR: status = -2 [ 534.832600][T15767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.855786][ T5832] RIP: 0010:jfs_flush_journal+0x970/0xef0 [ 534.875807][ T5832] Code: 2a 67 fe 4d 8d 75 d8 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 6e 73 d1 fe 4d 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 52 73 d1 fe 49 8b 3e e8 0a af a1 fe [ 534.902279][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 534.922076][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 534.930508][ T5838] ocfs2: Unmounting device (7,5) on (node local) [ 534.962095][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 534.992709][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 535.028141][ T5832] RSP: 0018:ffffc900026f7b00 EFLAGS: 00010216 [ 535.036851][ T9] usb 5-1: USB disconnect, device number 88 [ 535.070622][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.086229][ T5832] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888035bb5b80 [ 535.094345][ T5832] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 535.096723][ T5845] udevd[5845]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 535.124226][ T5832] RBP: ffffc900026f7c30 R08: ffffffff9011b3b7 R09: 1ffffffff2023676 [ 535.139713][ T9] cp210x 5-1:0.0: device disconnected [ 535.147495][ T5832] R10: dffffc0000000000 R11: fffffbfff2023677 R12: 0000000000000000 [ 535.163079][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 535.171249][ T5845] udevd[5845]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 535.192907][ T5832] R13: ffff888075b11838 R14: 0000000000000030 R15: ffff888056714a28 [ 535.213456][ T5832] FS: 0000555562aa4500(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 535.228217][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.235323][ T5832] CR2: 00007f253afe92f8 CR3: 000000005acbe000 CR4: 0000000000350ef0 [ 535.244252][ T5832] Kernel panic - not syncing: Fatal exception [ 535.251005][ T5832] Kernel Offset: disabled [ 535.255623][ T5832] Rebooting in 86400 seconds..