last executing test programs: 2.846364502s ago: executing program 1 (id=6839): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000a80)="e6bedc3ea4", 0x5}], 0x1) 2.720299425s ago: executing program 1 (id=6843): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x5c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000774000/0x2000)=nil) 2.59338453s ago: executing program 1 (id=6847): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r0) 2.544269501s ago: executing program 2 (id=6849): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 2.481581453s ago: executing program 1 (id=6851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='b 8:', @ANYRESDEC], 0x2e) 2.462085183s ago: executing program 2 (id=6853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r0, 0x20, 0xffff, 0xed3e) 2.375947546s ago: executing program 2 (id=6855): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000080)) 2.373285286s ago: executing program 1 (id=6856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xd07, 0x70bd23, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, 0x4, 0x60}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x4008040) 2.293350059s ago: executing program 2 (id=6858): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003420000004203818be4c765b62e3ffc5fc6fbd48bd40e59973f9eb3a49de5bcc7a65c4a03880377482878d2c7d24a7cc9d20200"]}, 0x0) 2.109724224s ago: executing program 1 (id=6863): prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') syz_usb_connect(0x5, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f02000000000905030048521dd70009050cfeffff01060209050f0000000000000905"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 822.910115ms ago: executing program 0 (id=6893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x80, 0x0, &(0x7f0000000200)="5becbc0e0d7cca6073a4f11dad00a7560bfffffcf6467b4cdce4350fea62125258be12b1e375faa787fa2be845d403ed597e6d3b653e402c19286f6d45b84e30eface15c3c8335b08ecc19cf6a9cf9ed0c7042367c9c45ac8d5d90674db9449fb3e2a46ee49726ed9383378c7d0ee22519aa5d1dfe4dab986ee923d88a532117", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 741.390757ms ago: executing program 3 (id=6895): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)='\x00}5', 0x3) 720.547898ms ago: executing program 0 (id=6896): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0) 578.874642ms ago: executing program 0 (id=6898): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) 537.475894ms ago: executing program 3 (id=6899): r0 = syz_clone(0x20000000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) 504.838825ms ago: executing program 4 (id=6900): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000c04fcff", 0x58}], 0x1) 467.283426ms ago: executing program 0 (id=6901): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000001c0)={0xff, 0x42474752, 0x780, 0x3, 0x3, @stepwise={{0x3, 0x5}, {0x5}, {0xc, 0x3}}}) 371.015139ms ago: executing program 3 (id=6902): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 359.669189ms ago: executing program 4 (id=6903): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0xfffffffe, 0x4) 286.011482ms ago: executing program 0 (id=6904): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)={0x1}) 254.799143ms ago: executing program 3 (id=6905): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40485404, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xfffffffc}, 0x37, 0x19c}) 246.930483ms ago: executing program 4 (id=6906): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setuid(0x0) 176.816765ms ago: executing program 3 (id=6907): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default trusted:'], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 163.843575ms ago: executing program 0 (id=6908): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x4, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$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") ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) 149.887726ms ago: executing program 4 (id=6909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 73.486138ms ago: executing program 2 (id=6910): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 67.574538ms ago: executing program 4 (id=6911): r0 = epoll_create1(0x0) readv(r0, 0x0, 0x0) 40.564749ms ago: executing program 2 (id=6912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="24200400858d0000340012800e00010069703665727370616e0000002000028006001800010000000500160000000000040012"], 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 14.81902ms ago: executing program 3 (id=6913): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) 0s ago: executing program 4 (id=6914): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd28, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x801c}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x18, 0x1, 0x2, 0x5, 0x50000000}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xff, 0x9, 0x8, 0x0, 0xe, 0x7d}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) kernel console output (not intermixed with test programs): SerialNumber: syz [ 606.518800][ T6094] usb 5-1: not running at top speed; connect to a high speed hub [ 606.566222][ T6097] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 606.585144][ T4550] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 606.592692][ T6097] XFS (loop3): Unmount and run xfs_repair [ 606.630003][ T6097] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 606.646768][ T6094] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.658138][ T6094] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.659694][ T4542] ath6kl: Failed to submit usb control message: -71 [ 606.667711][ T6097] 00000000: 58 41 47 46 00 00 10 00 00 00 00 00 00 00 10 00 XAGF............ [ 606.679609][ T4542] ath6kl: unable to send the bmi data to the device: -71 [ 606.690310][ T4542] ath6kl: Unable to send get target info: -71 [ 606.727944][ T6097] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 606.758847][ T6097] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 606.800784][ T6097] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 606.818734][ T6097] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 606.822345][ T4550] usb 1-1: USB disconnect, device number 16 [ 606.828853][T16951] usb 1-1: Failed to submit usb control message: -71 [ 606.849911][ T6097] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 606.860380][T16951] usb 1-1: unable to send the bmi data to the device: -71 [ 606.874378][ T6097] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 606.883463][ T6097] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 606.883926][T16951] usb 1-1: unable to get target info from device [ 606.898313][ T6094] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 606.909258][ T6094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.916114][T16951] usb 1-1: could not get target info (-71) [ 606.921883][T17429] XFS (loop3): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74 [ 606.927083][T16951] usb 1-1: could not probe fw (-71) [ 606.933509][ T6094] usb 5-1: Product: syz [ 606.942738][ T6094] usb 5-1: Manufacturer: syz [ 606.947586][T17429] XFS (loop3): Error -117 reserving per-AG metadata reserve pool. [ 606.956346][T17429] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:577). Shutting down filesystem. [ 606.973466][ T6094] usb 5-1: SerialNumber: syz [ 607.034031][T17429] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 607.044851][ T4542] ath6kl: Failed to init ath6kl core: -71 [ 607.076489][T17429] XFS (loop3): Ending clean mount [ 607.088350][T17429] XFS (loop3): Failed to initialize disk quotas. [ 607.095298][ T4542] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 607.120429][ T4542] usb 3-1: USB disconnect, device number 97 [ 607.240883][ T4570] XFS (loop3): Unmounting Filesystem [ 607.410337][ T6094] usb 5-1: unit 0 not found! [ 607.492182][ T6094] usb 5-1: USB disconnect, device number 12 [ 607.548219][T17453] loop0: detected capacity change from 0 to 512 [ 607.668728][T17453] EXT4-fs (loop0): Invalid log block size: 7 [ 607.767474][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.993537][T17457] loop2: detected capacity change from 0 to 4096 [ 608.016841][T17461] loop4: detected capacity change from 0 to 2048 [ 608.047930][T17449] loop1: detected capacity change from 0 to 40427 [ 608.086907][T17457] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 608.100166][T17449] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 608.141271][T17449] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 608.164574][T17449] F2FS-fs (loop1): invalid crc value [ 608.179227][T17457] ntfs3: loop2: ino=1a, Correct links count -> 1. [ 608.223929][T17449] F2FS-fs (loop1): invalid crc value [ 608.229517][T17449] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 608.327126][ T6097] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 608.583699][ T6097] usb 4-1: Using ep0 maxpacket: 16 [ 608.594054][T17479] tmpfs: Bad value for 'nr_blocks' [ 608.610330][T16961] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 608.733367][ T6097] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 608.759216][ T6097] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.782387][T17478] loop1: detected capacity change from 0 to 4096 [ 608.794541][ T6097] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 608.843506][ T6097] usb 4-1: config 1 has no interface number 1 [ 608.871447][ T6097] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 608.910368][ T6097] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.931607][T17478] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 608.954788][T16961] usb 1-1: Using ep0 maxpacket: 16 [ 608.994580][T17478] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 609.014372][T17478] ntfs: (device loop1): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5. $MFT is corrupt. [ 609.048448][T17487] loop2: detected capacity change from 0 to 4096 [ 609.055130][T17478] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 609.064217][T17478] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 609.108638][T17487] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 609.118405][ T6097] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.161686][T16961] usb 1-1: unable to get BOS descriptor or descriptor too short [ 609.172791][ T6097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.192124][ T6097] usb 4-1: Product: syz [ 609.203056][T17487] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 609.203944][ T6097] usb 4-1: Manufacturer: syz [ 609.218735][ T4550] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 609.233794][ T6097] usb 4-1: SerialNumber: syz [ 609.249732][T17487] ntfs: (device loop2): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 609.289593][T16961] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 609.301008][T16961] usb 1-1: config 1 has no interface number 0 [ 609.307152][T16961] usb 1-1: config 1 interface 78 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 609.358226][T17491] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 609.371538][T16961] usb 1-1: config 1 interface 78 has no altsetting 0 [ 609.567429][T16961] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=df.57 [ 609.587477][T16961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.609086][T16961] usb 1-1: Product: syz [ 609.639747][T16961] usb 1-1: Manufacturer: syz [ 609.650559][T16961] usb 1-1: SerialNumber: syz [ 609.684849][ T4550] usb 5-1: config 0 has an invalid interface number: 210 but max is 0 [ 609.696355][T17467] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 609.704721][ T4550] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.712634][ T6097] usb 4-1: USB disconnect, device number 4 [ 609.780078][ T4550] usb 5-1: config 0 has no interface number 0 [ 609.815539][ T4550] usb 5-1: config 0 interface 210 altsetting 227 endpoint 0xD is Bulk; changing to Interrupt [ 609.859544][ T4550] usb 5-1: config 0 interface 210 altsetting 227 endpoint 0xD has invalid wMaxPacketSize 0 [ 609.902833][ T4550] usb 5-1: config 0 interface 210 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 609.938560][ T4550] usb 5-1: config 0 interface 210 has no altsetting 0 [ 610.038644][T16961] spcp8x5 1-1:1.78: SPCP8x5 converter detected [ 610.079662][T16961] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 610.115217][T16961] usb 1-1: USB disconnect, device number 17 [ 610.125034][T16961] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 610.135182][T16961] spcp8x5 1-1:1.78: device disconnected [ 610.251423][ T4550] usb 5-1: string descriptor 0 read error: -22 [ 610.257749][ T4550] usb 5-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=99.e1 [ 610.277844][ T4550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.304522][ T4542] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 610.339865][ T4550] usb 5-1: config 0 descriptor?? [ 610.402527][ T4550] appledisplay 5-1:0.210: Could not find int-in endpoint [ 610.415538][ T4550] usbhid 5-1:0.210: couldn't find an input interrupt endpoint [ 610.513080][T17520] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 610.541027][T17520] EXT4-fs (loop3): orphan cleanup on readonly fs [ 610.582786][ T4542] usb 2-1: Using ep0 maxpacket: 16 [ 610.601921][T17520] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1024). [ 610.621775][T17520] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 610.636913][T17520] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 610.653110][ T6097] usb 5-1: USB disconnect, device number 13 [ 610.696236][T17520] EXT4-fs (loop3): 1 truncate cleaned up [ 610.714459][T17520] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,nombcache,inode_readahead_blks=0x0000000000000080,noload,,errors=continue. Quota mode: writeback. [ 610.753676][ T4542] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 610.776139][ T4542] usb 2-1: config 0 has no interface number 0 [ 610.782857][ T4542] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 610.825668][ T4542] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 611.023464][T17542] set_capacity_and_notify: 2 callbacks suppressed [ 611.023483][T17542] loop3: detected capacity change from 0 to 128 [ 611.045396][ T4542] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 611.063470][ T4542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.082518][ T4542] usb 2-1: Product: syz [ 611.086997][ T4542] usb 2-1: Manufacturer: syz [ 611.091634][ T4542] usb 2-1: SerialNumber: syz [ 611.114756][T17542] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 611.116009][ T4542] usb 2-1: config 0 descriptor?? [ 611.170733][T17509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 611.185609][T17509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 611.206592][T17543] loop0: detected capacity change from 0 to 4096 [ 611.459453][ T4542] asix: probe of 2-1:0.251 failed with error -71 [ 611.485293][ T4542] usb 2-1: USB disconnect, device number 6 [ 611.506658][T17546] loop3: detected capacity change from 0 to 4096 [ 611.561502][T17546] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 611.719879][T17539] loop2: detected capacity change from 0 to 32768 [ 611.751056][ T4570] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 611.757996][ T4570] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 611.800965][T17558] loop4: detected capacity change from 0 to 512 [ 611.811910][T17539] (syz.2.6218,17539,0):ocfs2_verify_userspace_stack:855 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 611.840027][ T4570] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 611.848967][T17539] (syz.2.6218,17539,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 611.938558][T17555] loop0: detected capacity change from 0 to 8192 [ 611.992985][T17558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 612.066325][T17558] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.6226: corrupted xattr entries [ 612.081178][T17558] EXT4-fs (loop4): 1 orphan inode deleted [ 612.087049][T17558] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 612.427817][T17584] loop2: detected capacity change from 0 to 22 [ 612.508068][T17584] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 612.543867][T17584] romfs: bad initial checksum on dev loop2. [ 612.683099][T17592] loop1: detected capacity change from 0 to 2048 [ 612.790536][T17592] loop1: p1 p2 p3 [ 612.848914][ T4550] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 612.902308][T16961] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 612.943277][ T3562] loop1: p1 p2 p3 [ 613.169609][ T4550] usb 1-1: Using ep0 maxpacket: 16 [ 613.212659][T16961] usb 4-1: Using ep0 maxpacket: 8 [ 613.298008][ T4550] usb 1-1: config index 0 descriptor too short (expected 49615, got 36) [ 613.307600][ T4550] usb 1-1: config 163 has too many interfaces: 90, using maximum allowed: 32 [ 613.346044][ T9461] udevd[9461]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 613.362605][ T4550] usb 1-1: config 163 contains an unexpected descriptor of type 0x2, skipping [ 613.371509][ T4550] usb 1-1: config 163 has an invalid descriptor of length 0, skipping remainder of the config [ 613.397701][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 613.409133][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 613.419974][T16961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 613.447579][ T4550] usb 1-1: config 163 has 0 interfaces, different from the descriptor's value: 90 [ 613.471779][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 613.471909][ T9461] udevd[9461]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 613.502106][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 613.554640][T16961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 613.586776][T16961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 613.630080][T16961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.650595][T16961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 613.662165][ T4550] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 613.671392][ T4550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.701276][T16961] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 613.711461][ T4550] usb 1-1: Product: syz [ 613.736073][ T4550] usb 1-1: Manufacturer: syz [ 613.740821][T16961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 613.751785][ T4550] usb 1-1: SerialNumber: syz [ 613.768281][T16961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 613.874718][T17608] loop4: detected capacity change from 0 to 32768 [ 613.961097][T16961] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 613.970370][T16961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.978478][T16957] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 613.989858][T17600] loop2: detected capacity change from 0 to 32768 [ 614.006775][T16961] usb 4-1: Product: syz [ 614.012353][T16961] usb 4-1: Manufacturer: syz [ 614.031658][ T6093] usb 1-1: USB disconnect, device number 18 [ 614.038960][T17600] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 614.061723][T16961] usb 4-1: SerialNumber: syz [ 614.085490][T17600] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 614.094078][T16961] usb 4-1: config 0 descriptor?? [ 614.116747][T17596] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 614.137086][T17600] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 614.186793][ T6097] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 614.195547][ T6097] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 614.252882][ T4521] udevd[4521]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.302978][T16957] usb 2-1: Using ep0 maxpacket: 8 [ 614.408038][T17622] BFS-fs: bfs_fill_super(): Last block not available on loop4: 163903 [ 614.415663][ T6094] usb 4-1: USB disconnect, device number 5 [ 614.438435][ T6097] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 227ms [ 614.452823][T16957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.466368][ T6097] gfs2: fsid=syz:syz.0: jid=0: Done [ 614.471769][T17600] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 614.473734][T16957] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.492609][T16957] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 614.502065][T16957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.512773][T16957] usb 2-1: config 0 descriptor?? [ 614.593276][T16957] qmi_wwan 2-1:0.0: bogus CDC Union: master=25, slave=0 [ 614.608798][T16957] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 614.813025][ T6094] usb 2-1: USB disconnect, device number 7 [ 614.849658][T17633] erofs: (device loop0): z_erofs_load_lz4_config: invalid lz4 cfgs, size=9 [ 615.511712][T17654] FAT-fs (loop1): bogus sectors per cluster 0 [ 615.517863][T17654] FAT-fs (loop1): Can't find a valid FAT filesystem [ 615.538195][T17641] ntfs3: loop3: Failed to load $Volume. [ 615.551334][T17653] hfsplus: invalid btree flag [ 615.562450][T17653] hfsplus: failed to load catalog file [ 616.043702][T17660] ntfs: (device loop4): parse_options(): The uid option requires an argument. [ 616.061648][T17675] MINIX-fs: bad superblock [ 616.109573][T16957] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 616.189726][T17677] hfsplus: found bad thread record in catalog [ 616.221665][T17677] hfsplus: b-tree write err: -5, ino 19 [ 616.366703][ T26] audit: type=1326 audit(1779232640.001:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17686 comm="syz.4.6285" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa149bfde59 code=0x0 [ 616.657070][T16957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 616.698274][ T6097] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 616.793952][T16957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.804113][T16957] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 616.864011][T16957] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 616.888357][T17707] set_capacity_and_notify: 8 callbacks suppressed [ 616.888375][T17707] loop4: detected capacity change from 0 to 512 [ 616.911409][ T6094] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 616.989033][T17707] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 616.996356][T17707] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 617.093206][ T6097] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.110241][T16957] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 617.114532][ T6097] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.128611][T16957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.152247][T17707] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #12: comm syz.4.6295: iget: bad i_size value: -562949953417216 [ 617.205977][T16957] usb 3-1: Product: syz [ 617.210217][T16957] usb 3-1: Manufacturer: syz [ 617.225387][T17707] EXT4-fs (loop4): Remounting filesystem read-only [ 617.249738][T16957] usb 3-1: SerialNumber: syz [ 617.264440][T17716] loop0: detected capacity change from 0 to 8 [ 617.271613][T17707] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.6295: couldn't read orphan inode 12 (err -117) [ 617.299192][T17707] EXT4-fs (loop4): Remounting filesystem read-only [ 617.307200][ T6097] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.327450][ T6097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.333407][T17716] SQUASHFS error: zlib decompression failed, data probably corrupt [ 617.336066][ T6094] usb 2-1: config 15 has an invalid interface number: 154 but max is 0 [ 617.350449][T17707] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,mblk_io_submit,barrier=0x0000000000000009,errors=remount-ro,acl,journal_ioprio=0x0000000000000000,max_batch_time=0x0000000000000006,resgid=0x000000000000ee002. Quota mode: writeback. [ 617.360209][ T6097] usb 4-1: Product: syz [ 617.382557][ T6094] usb 2-1: config 15 has no interface number 0 [ 617.385561][T17716] SQUASHFS error: Failed to read block 0x9b: -5 [ 617.388844][ T6094] usb 2-1: config 15 interface 154 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 8 [ 617.395917][T17716] SQUASHFS error: Unable to read metadata cache entry [99] [ 617.424418][ T6097] usb 4-1: Manufacturer: syz [ 617.435294][ T6094] usb 2-1: config 15 interface 154 altsetting 7 endpoint 0xB has invalid wMaxPacketSize 0 [ 617.445356][ T6097] usb 4-1: SerialNumber: syz [ 617.456510][T17716] SQUASHFS error: Unable to read inode 0x127 [ 617.466758][ T6094] usb 2-1: config 15 interface 154 has no altsetting 0 [ 617.734958][ T6094] usb 2-1: string descriptor 0 read error: -22 [ 617.745665][ T6094] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 617.781181][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.798743][ T6097] usb 4-1: 0:2 : does not exist [ 617.809670][T17697] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 617.855839][ T6094] ati_remote_probe: Unexpected endpoint_in [ 617.865445][T16957] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 617.872975][ T6097] usb 4-1: USB disconnect, device number 6 [ 617.966635][T16957] usb 3-1: USB disconnect, device number 98 [ 618.076632][ T6093] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 618.183988][ T4542] usb 2-1: USB disconnect, device number 8 [ 618.239829][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.285571][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 618.385180][T17734] loop0: detected capacity change from 0 to 8192 [ 618.461171][T17734] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 618.479532][T17734] loop0: partition table partially beyond EOD, truncated [ 618.487158][ T6093] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 618.504362][ T6093] usb 5-1: config 0 has no interface number 0 [ 618.521650][T17734] loop0: p1 start 30976 is beyond EOD, truncated [ 618.543979][ T6093] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 618.581829][T17734] loop0: p2 size 16128 extends beyond EOD, truncated [ 618.592559][T17743] loop3: detected capacity change from 0 to 512 [ 618.603670][ T6093] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 618.647254][T17734] loop0: p3 start 327168 is beyond EOD, truncated [ 618.656336][ T6093] usb 5-1: config 0 interface 11 has no altsetting 0 [ 618.663096][ T6093] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 618.700489][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.6311: iget: bad extra_isize 90 (inode size 256) [ 618.736464][T17734] loop0: p5 start 30976 is beyond EOD, truncated [ 618.773300][ T6093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.782359][T17734] loop0: p6 size 16128 extends beyond EOD, truncated [ 618.838316][ T6093] usb 5-1: config 0 descriptor?? [ 618.850982][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 618.889083][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.6311: error while reading EA inode 11 err=-117 [ 618.902415][ T6093] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 618.961574][T17753] loop1: detected capacity change from 0 to 8 [ 618.966109][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 618.972740][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 618.985523][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 618.996043][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.6311: iget: bad extra_isize 90 (inode size 256) [ 619.022332][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 619.035870][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.6311: error while reading EA inode 11 err=-117 [ 619.037714][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 619.079244][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 619.090583][T17753] squashfs image failed sanity check [ 619.112954][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 619.149849][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.6311: iget: bad extra_isize 90 (inode size 256) [ 619.159290][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 619.229240][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 619.234409][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 619.245970][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.6311: error while reading EA inode 18 err=-117 [ 619.294681][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 619.308359][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 619.319015][ T9461] udevd[9461]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 619.320338][ T6093] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 619.340081][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.6311: iget: bad extra_isize 90 (inode size 256) [ 619.344845][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 619.386911][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 619.397667][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 619.409769][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 619.412889][T17743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.6311: error while reading EA inode 18 err=-117 [ 619.450824][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 619.473469][T17743] EXT4-fs (loop3): Remounting filesystem read-only [ 619.483826][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 619.491482][T17743] EXT4-fs (loop3): 1 orphan inode deleted [ 619.512959][T17743] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,min_batch_time=0x0000000000000008,dioread_lock,. Quota mode: none. [ 619.514860][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 619.620213][ T6093] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 619.662262][ T6093] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 619.723031][ T6093] usb 5-1: USB disconnect, device number 14 [ 619.753418][ T6093] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 619.772823][T17767] loop4: detected capacity change from 0 to 64 [ 619.794773][ T6093] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 619.858552][ T6093] keyspan 5-1:0.11: device disconnected [ 619.858602][T17767] hfs: unable to read volume bitmap [ 619.902659][T17767] hfs: can't find a HFS filesystem on dev loop4 [ 619.947543][ T6097] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 620.125003][T17763] loop0: detected capacity change from 0 to 32768 [ 620.189455][T17763] (syz.0.6320,17763,1):ocfs2_verify_volume:2375 ERROR: bad root_blkno: 0 [ 620.214769][T17763] (syz.0.6320,17763,1):ocfs2_verify_volume:2392 ERROR: status = -22 [ 620.244717][T17763] (syz.0.6320,17763,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 620.256345][T17769] loop3: detected capacity change from 0 to 8192 [ 620.274662][T17763] (syz.0.6320,17763,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 620.343328][ T6097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.373912][ T6097] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.374016][T17769] REISERFS warning (device loop3): super-6503 reiserfs_getopt: the option "conv" does not require an argument [ 620.374016][T17769] [ 620.466631][T17765] loop1: detected capacity change from 0 to 32768 [ 620.546352][ T6097] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 620.574294][ T6097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.618381][T17765] JBD2: Ignoring recovery information on journal [ 620.626170][ T6097] usb 3-1: Product: syz [ 620.626743][T17765] jbd2_journal_bmap: journal block not found at offset 257 on loop1-75 [ 620.639256][T17765] JBD2: bad block at offset 257 [ 620.644193][T17765] JBD2: error -5 scanning journal [ 620.650255][T17765] (syz.1.6322,17765,1):ocfs2_journal_wipe:1154 ERROR: status = -5 [ 620.658928][T17765] (syz.1.6322,17765,1):ocfs2_check_volume:2424 ERROR: status = -5 [ 620.667328][T17765] (syz.1.6322,17765,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 620.679991][T17765] (syz.1.6322,17765,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 620.685170][ T6097] usb 3-1: Manufacturer: syz [ 620.708086][T17765] (syz.1.6322,17765,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 620.748393][ T6097] usb 3-1: SerialNumber: syz [ 620.799995][T17779] loop0: detected capacity change from 0 to 4096 [ 620.803597][ T6097] usb 3-1: config 0 descriptor?? [ 620.885758][T17779] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 620.890027][ T6097] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 620.929290][T17779] ntfs3: loop0: Failed to load $Volume. [ 620.930704][ T6097] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 621.027657][ T6097] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 621.058185][ T6097] usb 3-1: media controller created [ 621.117558][ T6097] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.328789][ T6097] DVB: Unable to find symbol tda10046_attach() [ 621.335099][ T6097] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 621.376864][ T6097] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 621.412146][ T6097] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 621.458053][ T6097] usb 3-1: USB disconnect, device number 99 [ 621.556151][T17773] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.6326 (17773) [ 621.602290][T17773] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 621.625918][T17773] BTRFS info (device loop4): ignoring bad roots [ 621.632866][T17773] BTRFS info (device loop4): force clearing of disk cache [ 621.651221][T17773] BTRFS info (device loop4): enabling all of the rescue options [ 621.686808][T17773] BTRFS info (device loop4): ignoring data csums [ 621.694384][T17773] BTRFS info (device loop4): disabling log replay at mount time [ 621.728192][T17773] BTRFS info (device loop4): turning on async discard [ 621.741759][T17773] BTRFS info (device loop4): setting nodatacow, compression disabled [ 621.768359][T17773] BTRFS info (device loop4): turning off async discard [ 621.789832][T17773] BTRFS info (device loop4): disabling free space tree [ 621.844284][T17773] BTRFS info (device loop4): has skinny extents [ 621.878329][T17781] JBD2: Ignoring recovery information on journal [ 621.939067][T17781] JBD2: corrupted journal superblock [ 621.944567][T17781] JBD2: error -117 scanning journal [ 621.984853][T17781] (syz.3.6329,17781,0):ocfs2_journal_wipe:1154 ERROR: status = -117 [ 622.013319][T17781] (syz.3.6329,17781,0):ocfs2_check_volume:2424 ERROR: status = -117 [ 622.045355][T17781] (syz.3.6329,17781,1):ocfs2_check_volume:2493 ERROR: status = -117 [ 622.073139][T17805] loop1: p1[EZD] p2 p3 p4 [ 622.078853][T17796] VFS: unable to find oldfs superblock on device loop0 [ 622.094015][T17805] loop1: partition table partially beyond EOD, truncated [ 622.103775][T17781] (syz.3.6329,17781,1):ocfs2_mount_volume:1824 ERROR: status = -117 [ 622.135162][T17805] loop1: p1 size 32768 extends beyond EOD, truncated [ 622.163940][T17781] (syz.3.6329,17781,1):ocfs2_fill_super:1177 ERROR: status = -117 [ 622.257047][T17805] loop1: p2 start 930308 is beyond EOD, truncated [ 622.317987][T17805] loop1: p3 start 117772289 is beyond EOD, truncated [ 622.390668][T17805] loop1: p4 size 262144 extends beyond EOD, truncated [ 622.854770][T17825] set_capacity_and_notify: 4 callbacks suppressed [ 622.854788][T17825] loop0: detected capacity change from 0 to 4096 [ 622.887815][T16957] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 623.129286][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 623.142880][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 623.239408][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 623.259893][T17840] loop2: detected capacity change from 0 to 8 [ 623.271071][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 623.294936][T17832] loop1: detected capacity change from 0 to 4096 [ 623.365232][T17825] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 623.379210][T16957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.422372][T17825] ntfs3: loop0: Failed to load $Secure. [ 623.475493][T16957] usb 4-1: not running at top speed; connect to a high speed hub [ 623.527503][T17840] SQUASHFS error: zlib decompression failed, data probably corrupt [ 623.568917][T17840] SQUASHFS error: Failed to read block 0x9b: -5 [ 623.597278][T17840] SQUASHFS error: Unable to read metadata cache entry [99] [ 623.635070][T17840] SQUASHFS error: Unable to read inode 0x127 [ 623.802562][T16957] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 623.818338][T16957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.838062][T16957] usb 4-1: Product: syz [ 623.842652][T16957] usb 4-1: Manufacturer: syz [ 623.847279][T16957] usb 4-1: SerialNumber: syz [ 623.989192][T17856] loop2: detected capacity change from 0 to 1024 [ 624.111059][T17856] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46228!=20869) [ 624.138154][ T4550] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 624.295713][T17849] loop1: detected capacity change from 0 to 32768 [ 624.328919][T17858] loop4: detected capacity change from 0 to 8192 [ 624.335163][T16957] usb 4-1: USB disconnect, device number 7 [ 624.433810][T17849] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 624.452465][T17849] JBD2: Ignoring recovery information on journal [ 624.458769][ T4550] usb 1-1: Using ep0 maxpacket: 32 [ 624.489337][T17856] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 624.597870][ T4550] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 624.617059][ T4550] usb 1-1: config 2 has no interface number 0 [ 624.623605][ T4550] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 624.652135][ T4521] udevd[4521]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.668261][ T4550] usb 1-1: config 2 interface 88 has no altsetting 0 [ 624.694661][T17849] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 624.929598][ T4550] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 624.941051][ T4569] ocfs2: Unmounting device (7,1) on (node local) [ 624.960593][ T4550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.982188][ T4550] usb 1-1: Product: syz [ 624.987207][ T4550] usb 1-1: Manufacturer: syz [ 624.992023][ T4550] usb 1-1: SerialNumber: syz [ 625.068841][T17852] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 625.292798][ T4542] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 625.335661][ T4550] asix: probe of 1-1:2.88 failed with error -71 [ 625.355350][ T4550] usb 1-1: USB disconnect, device number 19 [ 625.445657][ T6090] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 625.453792][ T6097] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 625.581493][ T4542] usb 5-1: Using ep0 maxpacket: 16 [ 625.598644][T17883] loop1: detected capacity change from 0 to 40427 [ 625.720454][ T6090] usb 4-1: Using ep0 maxpacket: 8 [ 625.731908][ T4542] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 625.739312][T17883] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 625.744796][ T4542] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.775732][T17883] F2FS-fs (loop1): invalid crc value [ 625.782526][T17883] F2FS-fs (loop1): invalid crc value [ 625.783153][ T4542] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 625.796376][T17883] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 625.804964][ T4542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.831130][ T4542] usb 5-1: config 0 descriptor?? [ 625.838343][ T6097] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 625.870135][ T6097] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 625.893232][ T4542] pxrc 5-1:0.0: Could not find endpoint [ 625.902375][ T6090] usb 4-1: unable to get BOS descriptor or descriptor too short [ 625.977203][ T6097] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.986294][ T6097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 626.002355][ T6097] usb 3-1: SerialNumber: syz [ 626.030687][ T6090] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.051680][ T6090] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 626.063658][ T6097] hub 3-1:1.0: bad descriptor, ignoring hub [ 626.069601][ T6097] hub: probe of 3-1:1.0 failed with error -5 [ 626.070114][T17887] loop1: detected capacity change from 0 to 2048 [ 626.087134][ T6097] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 626.168058][ T4459] usb 5-1: USB disconnect, device number 15 [ 626.208755][T17887] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 626.255188][ T6090] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 626.265638][ T6094] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 626.298434][ T6090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.307211][ T6097] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 626.330637][ T6090] usb 4-1: Product: syz [ 626.334878][ T6090] usb 4-1: Manufacturer: syz [ 626.361334][ T6090] usb 4-1: SerialNumber: syz [ 626.387448][ T6097] usb 3-1: USB disconnect, device number 100 [ 626.661335][ T6094] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 626.680895][ T6094] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.692104][ T6094] usb 1-1: config 0 has no interface number 0 [ 626.705303][ T6094] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 626.725290][T16957] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 626.730258][ T6094] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.777498][ T6090] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 626.794247][ T6090] usb 4-1: found format II with max.bitrate = 2, frame size=20 [ 626.811552][ T6090] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 626.828693][ T6090] usb 4-1: found format II with max.bitrate = 2, frame size=20 [ 626.907058][ T6090] usb 4-1: 0:2 : does not exist [ 626.918224][ T6094] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 626.936871][ T6094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.957224][ T6090] usb 4-1: USB disconnect, device number 8 [ 627.003147][ T6094] usb 1-1: Product: syz [ 627.007464][ T6094] usb 1-1: Manufacturer: syz [ 627.047620][ T6094] usb 1-1: SerialNumber: syz [ 627.063773][ T4646] udevd[4646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.080477][ T6094] usb 1-1: config 0 descriptor?? [ 627.163708][T16957] usb 2-1: config 7 has an invalid interface number: 184 but max is 0 [ 627.171936][T16957] usb 2-1: config 7 has no interface number 0 [ 627.206495][T16957] usb 2-1: config 7 interface 184 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 627.228023][T16957] usb 2-1: config 7 interface 184 has no altsetting 0 [ 627.370313][ T6094] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 627.401566][ T6094] usb 1-1: USB disconnect, device number 20 [ 627.431316][T16957] usb 2-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 627.440448][T16957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.481982][T17909] loop2: detected capacity change from 0 to 2048 [ 627.501974][T16957] usb 2-1: Product: syz [ 627.506801][T16957] usb 2-1: Manufacturer: syz [ 627.513468][T16957] usb 2-1: SerialNumber: syz [ 627.527773][T17907] loop3: detected capacity change from 0 to 4096 [ 627.565069][T17909] EXT4-fs (loop2): Ignoring removed bh option [ 627.573422][T17907] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 627.593641][T17909] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 627.629307][T17909] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 627.639455][T17907] ntfs3: loop3: failed to replay log file. Can't mount rw! [ 627.653169][T17909] EXT4-fs (loop2): Ignoring removed orlov option [ 627.678264][T17909] EXT4-fs (loop2): can't mount with both data=journal and dax [ 627.900130][T17898] XFS: noattr2 mount option is deprecated. [ 627.912633][T16957] usb-storage 2-1:7.184: USB Mass Storage device detected [ 627.943569][T16957] usb-storage 2-1:7.184: Quirks match for vid 0781 pid 0001: 1 [ 628.013154][T17898] XFS (loop4): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 628.062409][T16957] usb 2-1: USB disconnect, device number 9 [ 628.118553][T17925] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 628.140027][T17919] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 628.194735][T17919] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 628.259669][T17919] loop2: unable to read partition table [ 628.268224][T17919] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 628.552396][T17936] set_capacity_and_notify: 3 callbacks suppressed [ 628.552415][T17936] loop1: detected capacity change from 0 to 128 [ 628.726061][T17936] FAT-fs (loop1): bogus number of reserved sectors [ 628.732641][T17936] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 628.777855][T17936] FAT-fs (loop1): Can't find a valid FAT filesystem [ 628.883263][ T4550] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 629.130601][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.134951][T17953] loop1: detected capacity change from 0 to 2048 [ 629.136978][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.150290][T17951] loop4: detected capacity change from 0 to 4096 [ 629.152639][ T6090] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 629.237570][ T6097] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 629.279122][T17953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.289576][T17953] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 1376: 0x96 != 0xd4 [ 629.302950][T17953] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 629.311425][T17953] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 629.321823][ T4550] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 629.331637][ T4550] usb 3-1: config 0 has no interface number 0 [ 629.337956][ T4550] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 629.349513][ T4550] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 629.550413][ T6090] usb 4-1: config 4 has an invalid interface number: 74 but max is 0 [ 629.558901][ T4550] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 629.568202][ T6090] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 629.579603][ T4550] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 629.586632][ T6090] usb 4-1: config 4 has no interface number 0 [ 629.591588][T17959] loop1: detected capacity change from 0 to 2048 [ 629.596550][ T6090] usb 4-1: config 4 interface 74 altsetting 6 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 629.611033][ T4550] usb 3-1: Product: syz [ 629.615504][ T4550] usb 3-1: Manufacturer: syz [ 629.620129][ T4550] usb 3-1: SerialNumber: syz [ 629.623262][ T6097] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.636809][ T6097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 629.646161][ T4550] usb 3-1: config 0 descriptor?? [ 629.658281][ T6090] usb 4-1: config 4 interface 74 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.662642][T17959] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 629.696837][ T6097] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.707269][T17959] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 629.739977][ T6090] usb 4-1: config 4 interface 74 has no altsetting 0 [ 629.743664][ T4550] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 629.762874][T17959] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 629.782051][ T4550] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 629.801529][ T4550] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 629.810673][ T4550] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 629.823949][ T4550] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 629.832089][T17959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.879863][ T4550] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 629.922860][ T4550] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 629.932720][ T6097] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 629.941807][ T6097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.943884][ T4550] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 629.950166][ T6090] usb 4-1: New USB device found, idVendor=1f7b, idProduct=550c, bcdDevice=46.bd [ 629.980548][ T4550] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 629.993850][ T4550] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 629.998418][ T6090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.010281][ T6097] usb 1-1: Product: syz [ 630.014475][ T6097] usb 1-1: Manufacturer: syz [ 630.047847][ T4550] usb 3-1: USB disconnect, device number 101 [ 630.061087][ T6097] usb 1-1: SerialNumber: syz [ 630.069142][ T6090] usb 4-1: Product: syz [ 630.077524][ T6097] usb 1-1: config 0 descriptor?? [ 630.080237][ T4550] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 630.085237][ T6090] usb 4-1: Manufacturer: syz [ 630.114517][ T6090] usb 4-1: SerialNumber: syz [ 630.143503][ T4550] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 630.147600][ T6097] mcba_usb 1-1:0.0: Can't find endpoints [ 630.158715][ T4550] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 630.173206][ T4550] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 630.186687][ T4550] keyspan 3-1:0.107: device disconnected [ 630.349168][T17967] loop4: detected capacity change from 0 to 32768 [ 630.404010][T17967] jfs_mount: dbMount failed w/rc = -22 [ 630.409837][T17967] Mount JFS Failure: -22 [ 630.449247][ T4542] usb 1-1: USB disconnect, device number 21 [ 630.476272][ T6090] usb 4-1: USB disconnect, device number 9 [ 630.611477][T17977] loop4: detected capacity change from 0 to 4096 [ 630.636626][T17975] loop1: detected capacity change from 0 to 8192 [ 630.741517][T17977] ntfs: (device loop4): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt. [ 630.756494][T17977] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 630.787197][T17977] ntfs: (device loop4): ntfs_fill_super(): Failed to load essential metadata. [ 630.950152][T17982] loop2: detected capacity change from 0 to 8192 [ 631.066130][T17982] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfstransmute=overlay" [ 631.094023][T17987] loop4: detected capacity change from 0 to 4096 [ 631.156662][T17987] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 631.265996][T17987] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 631.344251][T17987] ntfs: (device loop4): ntfs_read_inode_mount(): $MFT is too big! Aborting. [ 631.353109][T17987] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 631.466709][T17987] ntfs: (device loop4): ntfs_fill_super(): Failed to load essential metadata. [ 631.632202][ T4542] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 631.681530][T18014] loop1: detected capacity change from 0 to 128 [ 631.744259][T18014] FAT-fs (loop1): invalid media value (0x00) [ 631.772796][T18014] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 631.842139][T18014] FAT-fs (loop1): Can't find a valid FAT filesystem [ 631.939408][T18016] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 632.012953][T18016] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 632.022882][T18002] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6421 (18002) [ 632.127261][T18002] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 632.167045][T18002] BTRFS info (device loop3): force clearing of disk cache [ 632.174252][T18002] BTRFS info (device loop3): enabling auto defrag [ 632.191796][T16957] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 632.208452][T18002] BTRFS info (device loop3): disabling auto defrag [ 632.265184][T18026] hfsplus: invalid extent btree flag [ 632.273986][T18026] hfsplus: failed to load extents file [ 632.274031][ T4542] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 632.289284][T18002] BTRFS info (device loop3): max_inline at 0 [ 632.327338][T18002] BTRFS info (device loop3): enabling disk space caching [ 632.328306][ T4542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.349145][T18002] BTRFS info (device loop3): disk space caching is enabled [ 632.386455][ T4542] usb 1-1: Product: syz [ 632.391533][ T4542] usb 1-1: Manufacturer: syz [ 632.396170][ T4542] usb 1-1: SerialNumber: syz [ 632.399748][T18002] BTRFS info (device loop3): has skinny extents [ 632.623021][ T477] BTRFS warning (device loop3): checksum verify failed on 5332992 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xba2d9044be3a4864cff1a395be984d9b99cb29ee89972ca6123061c437332bca level 0 [ 632.669585][T16957] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 632.701310][T18029] REISERFS warning (device loop2): super-6505 reiserfs_getopt: head of option "grpquota" is only correct [ 632.701310][T18029] [ 632.715280][T16957] usb 5-1: config 0 has no interface number 0 [ 632.718059][T18002] BTRFS warning (device loop3): couldn't read tree root [ 632.721406][T16957] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 632.769440][ T4542] usb 1-1: Found UVC 0.00 device syz (093a:2476) [ 632.775877][ T4542] usb 1-1: No valid video chain found. [ 632.883525][ T4542] gspca_main: pac207-2.14.0 probing 093a:2476 [ 632.935396][ T4542] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 632.975639][T16957] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 632.990324][ T4542] usb 1-1: USB disconnect, device number 22 [ 632.999474][T16957] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 633.064718][T16957] usb 5-1: Product: syz [ 633.068986][T16957] usb 5-1: Manufacturer: syz [ 633.073753][T16957] usb 5-1: SerialNumber: syz [ 633.107149][T16957] usb 5-1: config 0 descriptor?? [ 633.161314][T18022] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 633.186505][T16957] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 633.193628][T18002] BTRFS error (device loop3): open_ctree failed: -22 [ 633.201293][T16957] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 633.209902][T18059] hfsplus: failed to load root directory [ 633.212317][T16957] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 633.234455][T16957] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 633.277437][T16957] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 633.339226][T16957] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 633.371400][T16957] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 633.397192][T16957] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 633.417255][T16957] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 633.436627][T18063] syz.0.6443[18063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 633.436743][T18063] syz.0.6443[18063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 633.478393][T16957] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 633.570892][T16957] usb 5-1: USB disconnect, device number 16 [ 633.608256][T16957] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 633.673764][T16957] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 633.709761][T16957] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 633.746653][T16957] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 633.778807][T16957] keyspan 5-1:0.107: device disconnected [ 633.787415][T18069] EXT4-fs (loop0): quotafile must be on filesystem root [ 633.862331][T18055] JBD2: Ignoring recovery information on journal [ 634.084534][T18055] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 634.124900][T18083] set_capacity_and_notify: 7 callbacks suppressed [ 634.124918][T18083] loop0: detected capacity change from 0 to 512 [ 634.197955][ T4559] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 634.224929][T18083] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 634.275000][T18083] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 634.305337][T18083] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 634.323036][T18083] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 634.349757][ T4569] ocfs2: Unmounting device (7,1) on (node local) [ 634.392396][T18083] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 634.400468][T18083] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c04ce11c, mo2=0000] [ 634.427858][T18083] EXT4-fs (loop0): too many log groups per flexible block group [ 634.448310][T18083] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 634.465198][ T4559] usb 4-1: Using ep0 maxpacket: 32 [ 634.486703][T18083] EXT4-fs (loop0): mount failed [ 634.586375][T18099] loop4: detected capacity change from 0 to 512 [ 634.604520][ T4559] usb 4-1: config 247 has an invalid interface number: 177 but max is 0 [ 634.612915][ T4559] usb 4-1: config 247 has no interface number 0 [ 634.673755][T18099] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 634.711105][ T4559] usb 4-1: config 247 interface 177 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511 [ 634.746255][ T4559] usb 4-1: config 247 interface 177 altsetting 246 endpoint 0xD has an invalid bInterval 185, changing to 11 [ 634.754488][T18099] EXT4-fs (loop4): Value of option "test_dummy_encryption=v1.." is unrecognized [ 634.769673][ T4559] usb 4-1: config 247 interface 177 altsetting 246 bulk endpoint 0xC has invalid maxpacket 1023 [ 634.792499][ T4559] usb 4-1: config 247 interface 177 has no altsetting 0 [ 634.806465][T18101] loop2: detected capacity change from 0 to 4096 [ 634.895819][T18101] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 5) do not match. Run ntfsfix or chkdsk. [ 634.932576][T18101] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 634.968934][ T6102] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 634.978625][ T4559] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=58.f4 [ 634.990979][ T4559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.020123][ T4559] usb 4-1: Product: syz [ 635.031649][ T4559] usb 4-1: Manufacturer: syz [ 635.041251][ T4559] usb 4-1: SerialNumber: syz [ 635.052459][T18101] ntfs: volume version 3.1. [ 635.085580][T18079] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 635.114574][T18079] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 635.318063][T18113] loop4: detected capacity change from 0 to 4096 [ 635.395743][ T6102] usb 2-1: unable to get BOS descriptor or descriptor too short [ 635.401871][T18113] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 635.438441][ T6102] usb 2-1: not running at top speed; connect to a high speed hub [ 635.441731][T18113] ntfs3: loop4: Failed to load $MFT. [ 635.459981][ T4559] kvaser_usb 4-1:247.177: Cannot get usb endpoint(s) [ 635.497366][ T4559] usb 4-1: USB disconnect, device number 10 [ 635.705691][ T6102] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 635.725035][T18121] loop2: detected capacity change from 0 to 4096 [ 635.736702][ T6102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.747511][ T6102] usb 2-1: Product: syz [ 635.769171][ T6102] usb 2-1: Manufacturer: syz [ 635.779969][ T6102] usb 2-1: SerialNumber: syz [ 636.051341][T18115] loop0: detected capacity change from 0 to 32768 [ 636.154588][ T6102] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 636.184053][T18115] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.6467 (18115) [ 636.228706][ T6102] usb 2-1: USB disconnect, device number 10 [ 636.302124][T18115] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 636.323628][T18115] BTRFS info (device loop0): using free space tree [ 636.388459][T18115] BTRFS info (device loop0): has skinny extents [ 636.514664][T18123] loop4: detected capacity change from 0 to 32768 [ 636.523461][ T4646] udevd[4646]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.616973][T18123] jfs_mount: dbMount failed w/rc = -22 [ 636.658523][T18123] Mount JFS Failure: -22 [ 636.668549][T18115] BTRFS info (device loop0): enabling ssd optimizations [ 636.704768][T18125] loop2: detected capacity change from 0 to 32768 [ 636.710267][T18123] jfs_mount failed w/return code = -22 [ 636.778789][T18125] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop2 scanned by syz.2.6472 (18125) [ 636.886000][T18125] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 636.940635][T18125] BTRFS info (device loop2): using free space tree [ 636.966865][T18125] BTRFS info (device loop2): has skinny extents [ 637.302037][T18148] loop1: detected capacity change from 0 to 8192 [ 637.326680][T18127] loop3: detected capacity change from 0 to 32768 [ 637.422276][T18127] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop3 scanned by syz.3.6473 (18127) [ 637.489207][T18148] REISERFS warning (device loop1): super-6508 reiserfs_parse_options: bad value 0x8000000000000001 for -ocommit [ 637.489207][T18148] [ 637.562448][T18127] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 637.587537][T18125] BTRFS info (device loop2): enabling ssd optimizations [ 637.697767][T18127] BTRFS info (device loop3): using free space tree [ 637.706078][T18127] BTRFS info (device loop3): has skinny extents [ 637.748973][T18152] XFS (loop0): invalid log iosize: -1 [not 12-30] [ 638.132098][ T4459] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 638.265514][T18127] BTRFS info (device loop3): enabling ssd optimizations [ 638.454897][T18170] (syz.4.6478,18170,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is smaller than minimal - offset=132, inode=1688849860264007, rec_len=0, name_len=13 [ 638.485404][T18170] (syz.4.6478,18170,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 638.494426][T18170] (syz.4.6478,18170,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 638.494465][T18170] (syz.4.6478,18170,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 638.538582][ T4459] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 638.589031][ T4459] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 638.613013][T18170] (syz.4.6478,18170,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 638.622582][T18170] (syz.4.6478,18170,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 638.727330][T18200] __ntfs_error: 5 callbacks suppressed [ 638.727350][T18200] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 638.828447][ T4459] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 638.838627][ T4459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.854905][ T9461] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 9 /dev/loop3 scanned by udevd (9461) [ 638.857642][T18200] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 638.875762][ T4459] usb 2-1: Product: syz [ 638.880134][ T4459] usb 2-1: Manufacturer: syz [ 638.900863][ T4459] usb 2-1: SerialNumber: syz [ 639.225590][ T4459] usb 2-1: unit 5 not found! [ 639.318909][ T4459] usb 2-1: USB disconnect, device number 11 [ 639.588347][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.819380][T18204] set_capacity_and_notify: 3 callbacks suppressed [ 639.819401][T18204] loop2: detected capacity change from 0 to 32768 [ 639.832905][ T1108] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 639.863731][T18219] loop1: detected capacity change from 0 to 128 [ 639.910764][T18204] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6483 (18204) [ 639.958448][T18204] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 639.994011][T18213] loop4: detected capacity change from 0 to 32768 [ 640.000547][T18204] BTRFS info (device loop2): using free space tree [ 640.018147][T18204] BTRFS info (device loop2): has skinny extents [ 640.020545][T18213] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 scanned by syz.4.6487 (18213) [ 640.036593][T18211] loop0: detected capacity change from 0 to 32768 [ 640.096270][T18223] loop1: detected capacity change from 0 to 128 [ 640.119454][T18213] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 640.137762][T18211] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop0 scanned by syz.0.6486 (18211) [ 640.146724][T18213] BTRFS info (device loop4): using free space tree [ 640.162715][T18213] BTRFS info (device loop4): has skinny extents [ 640.217065][ T1108] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 640.243840][ T1108] usb 4-1: config 0 has no interface number 0 [ 640.261330][T18211] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 640.304624][ T1108] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 640.345370][T18211] BTRFS info (device loop0): using free space tree [ 640.353650][ T1108] usb 4-1: config 0 interface 89 has no altsetting 0 [ 640.354123][T18211] BTRFS info (device loop0): has skinny extents [ 640.398717][T18204] BTRFS info (device loop2): enabling ssd optimizations [ 640.518756][T18213] BTRFS info (device loop4): enabling ssd optimizations [ 640.591186][ T1108] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 640.600565][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.622169][ T1108] usb 4-1: Product: syz [ 640.626468][ T1108] usb 4-1: Manufacturer: syz [ 640.631098][ T1108] usb 4-1: SerialNumber: syz [ 640.730869][ T1108] usb 4-1: config 0 descriptor?? [ 640.775957][T18211] BTRFS info (device loop0): enabling ssd optimizations [ 640.785865][ T1108] em28xx 4-1:0.89: New device syz syz @ 12 Mbps (0ccd:10af, interface 89, class 89) [ 640.806671][ T1108] em28xx 4-1:0.89: Device initialization failed. [ 640.827357][ T1108] em28xx 4-1:0.89: Device must be connected to a high-speed USB 2.0 port. [ 641.173470][ T6091] usb 4-1: USB disconnect, device number 11 [ 641.174341][ T9461] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 9 /dev/loop4 scanned by udevd (9461) [ 641.216104][ T4183] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop2 scanned by udevd (4183) [ 641.544014][T18262] loop1: detected capacity change from 0 to 32768 [ 641.632841][T18262] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.6491 (18262) [ 641.736475][T18291] loop3: detected capacity change from 0 to 16 [ 641.782320][T18291] erofs: (device loop3): mounted with root inode @ nid 36. [ 642.104858][T18295] loop3: detected capacity change from 0 to 16 [ 642.119417][T18262] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 642.152222][T18296] loop0: detected capacity change from 0 to 16 [ 642.157191][T18295] erofs: (device loop3): mounted with root inode @ nid 36. [ 642.162849][T18262] BTRFS info (device loop1): using free space tree [ 642.226468][T18262] BTRFS info (device loop1): has skinny extents [ 642.326308][T18296] erofs: (device loop0): mounted with root inode @ nid 36. [ 642.539488][T18289] loop2: detected capacity change from 0 to 32768 [ 642.646826][T18282] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop4 scanned by syz.4.6493 (18282) [ 642.695711][T18289] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 642.708034][T18289] BTRFS info (device loop2): ignoring bad roots [ 642.717995][T18282] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 642.727591][ T4552] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 642.741498][T18289] BTRFS info (device loop2): force clearing of disk cache [ 642.769336][T18289] BTRFS info (device loop2): enabling all of the rescue options [ 642.777971][T18282] BTRFS info (device loop4): using free space tree [ 642.785323][T18282] BTRFS info (device loop4): has skinny extents [ 642.793432][T18289] BTRFS info (device loop2): ignoring data csums [ 642.799800][T18289] BTRFS info (device loop2): disabling log replay at mount time [ 642.825322][T18289] BTRFS info (device loop2): turning on async discard [ 642.833335][T18289] BTRFS info (device loop2): setting nodatacow, compression disabled [ 642.849738][T18289] BTRFS info (device loop2): turning off async discard [ 642.889658][T18262] BTRFS info (device loop1): enabling ssd optimizations [ 642.893116][T18289] BTRFS info (device loop2): disabling free space tree [ 642.924716][T18289] BTRFS info (device loop2): has skinny extents [ 643.160875][T18282] BTRFS info (device loop4): enabling ssd optimizations [ 643.249166][ T4552] usb 4-1: unable to get BOS descriptor or descriptor too short [ 643.281796][T18310] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 scanned by syz.0.6499 (18310) [ 643.300388][ T4552] usb 4-1: not running at top speed; connect to a high speed hub [ 643.413966][ T4552] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.484499][T18310] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 643.522643][T18310] BTRFS info (device loop0): using free space tree [ 643.544253][T18310] BTRFS info (device loop0): has skinny extents [ 643.564023][T18360] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 643.625452][T18360] cramfs: wrong endianness [ 643.630669][ T4552] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice=41.06 [ 643.657770][ T4552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.772226][ T4552] usb 4-1: Product: syz [ 643.776493][ T4552] usb 4-1: Manufacturer: syz [ 643.824930][ T4552] usb 4-1: SerialNumber: syz [ 644.268680][ T4552] usb 4-1: MIDIStreaming interface descriptor not found [ 644.270491][ T4179] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 9 /dev/loop4 scanned by udevd (4179) [ 644.292768][ T4646] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4646) [ 644.321373][ T4552] usb 4-1: USB disconnect, device number 12 [ 644.389676][T18375] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop1 scanned by syz.1.6503 (18375) [ 644.436910][T18310] BTRFS info (device loop0): enabling ssd optimizations [ 644.500646][T18375] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 644.542388][T18375] BTRFS info (device loop1): using free space tree [ 644.572230][T18375] BTRFS info (device loop1): has skinny extents [ 644.696283][ T6103] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 644.862991][T14854] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 9 /dev/loop0 scanned by udevd (14854) [ 644.877881][ T6091] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 644.915902][T18375] BTRFS info (device loop1): enabling ssd optimizations [ 644.952751][ T6103] usb 5-1: Using ep0 maxpacket: 16 [ 645.033517][T18406] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.6506 (18406) [ 645.081419][ T6103] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 645.098030][ T6103] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.134543][ T6091] usb 3-1: Using ep0 maxpacket: 32 [ 645.161571][ T6103] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.267225][ T6091] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 645.297642][ T6091] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 645.377058][ T6103] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.389712][T18406] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 645.431385][ T6103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.439963][T18406] BTRFS info (device loop3): using free space tree [ 645.457632][ T6103] usb 5-1: Product: syz [ 645.466513][T18406] BTRFS info (device loop3): has skinny extents [ 645.473341][ T6103] usb 5-1: Manufacturer: syz [ 645.494524][ T6103] usb 5-1: SerialNumber: syz [ 645.512866][ T6091] usb 3-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 645.560181][ T6091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.581787][ T6091] usb 3-1: Product: syz [ 645.592207][ T4183] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 9 /dev/loop1 scanned by udevd (4183) [ 645.636620][ T6091] usb 3-1: Manufacturer: syz [ 645.649032][ T6091] usb 3-1: SerialNumber: syz [ 645.757866][ T4553] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 645.884765][ T6103] usb 5-1: 0:2 : does not exist [ 645.897716][T18406] BTRFS info (device loop3): enabling ssd optimizations [ 646.003486][T18441] set_capacity_and_notify: 5 callbacks suppressed [ 646.003506][T18441] loop1: detected capacity change from 0 to 128 [ 646.064541][ T4553] usb 1-1: Using ep0 maxpacket: 32 [ 646.123726][ T6103] usb 5-1: USB disconnect, device number 17 [ 646.193167][ T6091] usb 3-1: unit 8 not found! [ 646.200767][ T4553] usb 1-1: config 247 has an invalid interface number: 177 but max is 0 [ 646.218027][ T4553] usb 1-1: config 247 has no interface number 0 [ 646.246306][ T4553] usb 1-1: config 247 interface 177 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511 [ 646.256730][ T4553] usb 1-1: config 247 interface 177 altsetting 246 endpoint 0xD has an invalid bInterval 185, changing to 11 [ 646.285189][ T6091] snd-usb-audio: probe of 3-1:1.1 failed with error -16 [ 646.291478][ T9461] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop3 scanned by udevd (9461) [ 646.315535][ T6091] usb 3-1: USB disconnect, device number 102 [ 646.319808][T18445] loop1: detected capacity change from 0 to 1024 [ 646.328487][ T4553] usb 1-1: config 247 interface 177 altsetting 246 bulk endpoint 0xC has invalid maxpacket 1023 [ 646.366085][T18445] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 646.374106][ T4553] usb 1-1: config 247 interface 177 has no altsetting 0 [ 646.585099][ T4553] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=58.f4 [ 646.596399][ T4553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.625454][ T4553] usb 1-1: Product: syz [ 646.629675][ T4553] usb 1-1: Manufacturer: syz [ 646.643325][ T4553] usb 1-1: SerialNumber: syz [ 646.706127][T18416] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 646.713328][T18416] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 646.930500][T18452] loop2: detected capacity change from 0 to 512 [ 646.941640][T18448] loop3: detected capacity change from 0 to 4096 [ 647.014670][T18448] ntfs: (device loop3): ntfs_read_locked_inode(): Attribute list has non zero lowest_vcn. [ 647.036000][T18448] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 647.060739][T18448] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 647.089772][T18448] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 647.101812][ T4553] kvaser_usb 1-1:247.177: Cannot get usb endpoint(s) [ 647.101833][T18452] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 647.127274][ T4553] usb 1-1: USB disconnect, device number 23 [ 647.142812][T18448] ntfs: volume version 3.1. [ 647.152004][T18448] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 647.219218][T18448] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 647.310850][T18448] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 647.353864][T18448] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 647.407315][T18448] ntfs: (device loop3): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 647.427986][T18448] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 647.507098][T18454] loop1: detected capacity change from 0 to 32768 [ 647.519636][T18459] loop2: detected capacity change from 0 to 512 [ 647.596182][T18459] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 647.617224][T18454] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 647.697900][T18454] BTRFS info (device loop1): ignoring bad roots [ 647.740274][T18454] BTRFS info (device loop1): force clearing of disk cache [ 647.771771][T18462] loop3: detected capacity change from 0 to 512 [ 647.783490][T18450] loop4: detected capacity change from 0 to 32768 [ 647.785684][T18454] BTRFS info (device loop1): enabling all of the rescue options [ 647.822985][T18462] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 647.865496][T18454] BTRFS info (device loop1): ignoring data csums [ 647.865947][T18450] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop4 scanned by syz.4.6514 (18450) [ 647.901046][T18454] BTRFS info (device loop1): disabling log replay at mount time [ 647.924745][T18454] BTRFS info (device loop1): turning on async discard [ 647.993492][T18454] BTRFS info (device loop1): setting nodatacow, compression disabled [ 648.002583][T18450] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 648.049485][T18450] BTRFS info (device loop4): using free space tree [ 648.051269][T18454] BTRFS info (device loop1): turning off async discard [ 648.084212][T18450] BTRFS info (device loop4): has skinny extents [ 648.106682][T18454] BTRFS info (device loop1): disabling free space tree [ 648.130076][T18454] BTRFS info (device loop1): has skinny extents [ 648.328929][T18450] BTRFS info (device loop4): enabling ssd optimizations [ 648.641730][ T4183] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 9 /dev/loop4 scanned by udevd (4183) [ 648.754038][T18465] loop0: detected capacity change from 0 to 32768 [ 648.843673][T18465] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop0 scanned by syz.0.6517 (18465) [ 648.979783][T18465] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 649.038703][T18465] BTRFS info (device loop0): using free space tree [ 649.073657][T18467] loop2: detected capacity change from 0 to 32768 [ 649.084044][T18465] BTRFS info (device loop0): has skinny extents [ 649.192051][T18467] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 649.231243][T18467] dlm: no local IP address has been set [ 649.239978][T18467] dlm: cannot start dlm midcomms -107 [ 649.245393][T18467] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 649.518003][T18465] BTRFS info (device loop0): enabling ssd optimizations [ 649.597717][T18508] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop3 scanned by syz.3.6520 (18508) [ 649.856582][T18535] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 649.883118][T18508] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 649.971177][T18537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 649.992308][T18508] BTRFS info (device loop3): using free space tree [ 650.084251][T18508] BTRFS info (device loop3): has skinny extents [ 650.502072][T18508] BTRFS info (device loop3): enabling ssd optimizations [ 650.653942][T18559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 650.682979][T18559] ext4 filesystem being mounted at /1259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.901604][ T9461] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 9 /dev/loop3 scanned by udevd (9461) [ 650.970438][T18541] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.6521 (18541) [ 651.327273][T18541] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 651.383901][T18541] BTRFS info (device loop1): using free space tree [ 651.408455][T18541] BTRFS info (device loop1): has skinny extents [ 651.579867][T18548] set_capacity_and_notify: 5 callbacks suppressed [ 651.579887][T18548] loop4: detected capacity change from 0 to 32768 [ 651.697586][T18548] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 651.773923][T18548] dlm: no local IP address has been set [ 651.779533][T18548] dlm: cannot start dlm midcomms -107 [ 651.794729][T18541] BTRFS info (device loop1): enabling ssd optimizations [ 651.832180][T18566] loop2: detected capacity change from 0 to 32768 [ 651.843900][T18548] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 651.893588][T18566] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 651.942818][T18566] CPU: 1 PID: 18566 Comm: syz.2.6527 Not tainted syzkaller #0 [ 651.950353][T18566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.960441][T18566] Call Trace: [ 651.963754][T18566] [ 651.966710][T18566] dump_stack_lvl+0x188/0x250 [ 651.971522][T18566] ? show_regs_print_info+0x20/0x20 [ 651.976756][T18566] ? load_image+0x400/0x400 [ 651.981305][T18566] sysfs_create_dir_ns+0x26a/0x290 [ 651.986444][T18566] ? sysfs_warn_dup+0xa0/0xa0 [ 651.991149][T18566] ? do_raw_spin_unlock+0x11d/0x230 [ 651.996371][T18566] kobject_add_internal+0x6e0/0xd90 [ 652.001598][T18566] kobject_init_and_add+0x128/0x190 [ 652.006828][T18566] ? lockdep_softirqs_off+0x430/0x430 [ 652.012368][T18566] ? kobject_add+0x230/0x230 [ 652.016995][T18566] ? __init_swait_queue_head+0xa5/0x150 [ 652.022570][T18566] gfs2_sys_fs_add+0x24f/0x4b0 [ 652.027366][T18566] ? gfs2_recover_set+0x240/0x240 [ 652.032413][T18566] ? snprintf+0xe5/0x140 [ 652.036682][T18566] ? __free_pages+0x95/0x1a0 [ 652.041310][T18566] ? vscnprintf+0x80/0x80 [ 652.045682][T18566] gfs2_fill_super+0x120f/0x1f00 [ 652.050677][T18566] ? gfs2_reconfigure+0xd30/0xd30 [ 652.055749][T18566] ? sb_set_blocksize+0xa5/0xe0 [ 652.060628][T18566] get_tree_bdev+0x3f1/0x610 [ 652.065250][T18566] ? gfs2_reconfigure+0xd30/0xd30 [ 652.070308][T18566] gfs2_get_tree+0x4d/0x1e0 [ 652.074847][T18566] vfs_get_tree+0x88/0x270 [ 652.079296][T18566] do_new_mount+0x24a/0xa40 [ 652.083827][T18566] __se_sys_mount+0x2e3/0x3d0 [ 652.088531][T18566] ? __x64_sys_mount+0xc0/0xc0 [ 652.093340][T18566] ? lockdep_hardirqs_on+0x94/0x140 [ 652.098744][T18566] ? __x64_sys_mount+0x1c/0xc0 [ 652.103544][T18566] do_syscall_64+0x4c/0xa0 [ 652.107985][T18566] ? clear_bhb_loop+0x30/0x80 [ 652.112698][T18566] ? clear_bhb_loop+0x30/0x80 [ 652.117401][T18566] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 652.123333][T18566] RIP: 0033:0x7f139ec820ca [ 652.127879][T18566] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.147524][T18566] RSP: 002b:00007f139ced9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 652.155968][T18566] RAX: ffffffffffffffda RBX: 00007f139ced9ee0 RCX: 00007f139ec820ca [ 652.163970][T18566] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007f139ced9ea0 [ 652.171974][T18566] RBP: 0000200000037f40 R08: 00007f139ced9ee0 R09: 0000000000000000 [ 652.179977][T18566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000037f80 [ 652.187977][T18566] R13: 00007f139ced9ea0 R14: 0000000000037f19 R15: 0000200000037fc0 [ 652.195992][T18566] [ 652.521770][T18566] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 652.584101][T18566] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 652.977141][T18594] loop4: detected capacity change from 0 to 32768 [ 653.027012][T18594] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop4 scanned by syz.4.6532 (18594) [ 653.080735][T18594] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 653.126276][T18594] BTRFS info (device loop4): using free space tree [ 653.133062][T18571] loop3: detected capacity change from 0 to 32768 [ 653.156415][T18594] BTRFS info (device loop4): has skinny extents [ 653.223582][T18571] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 653.310155][T18571] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 653.417086][T18571] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 653.469675][T16955] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 653.482899][T16955] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 653.557936][T18594] BTRFS info (device loop4): enabling ssd optimizations [ 653.792119][T16955] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms [ 653.823274][T16955] gfs2: fsid=syz:syz.0: jid=0: Done [ 653.839696][T18571] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 654.362049][T18573] loop0: detected capacity change from 0 to 131072 [ 654.484225][T18573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 654.785318][T18610] loop2: detected capacity change from 0 to 32768 [ 654.938783][T18610] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 scanned by syz.2.6533 (18610) [ 654.993844][T18610] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 655.027891][T18610] BTRFS info (device loop2): using free space tree [ 655.078466][T18610] BTRFS info (device loop2): has skinny extents [ 655.477657][T18628] loop0: detected capacity change from 0 to 32768 [ 655.557474][T18610] BTRFS info (device loop2): enabling ssd optimizations [ 655.625349][T18628] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop0 scanned by syz.0.6535 (18628) [ 655.702028][T18628] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 655.750505][T18628] BTRFS info (device loop0): using free space tree [ 655.757079][T18628] BTRFS info (device loop0): has skinny extents [ 655.807750][T18625] loop4: detected capacity change from 0 to 32768 [ 655.846920][ T9461] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 9 /dev/loop2 scanned by udevd (9461) [ 655.910761][T18625] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop4 scanned by syz.4.6534 (18625) [ 656.022418][T18654] loop3: detected capacity change from 0 to 64 [ 656.379716][T18625] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 656.393004][T18628] BTRFS info (device loop0): enabling ssd optimizations [ 656.412548][T18625] BTRFS info (device loop4): using free space tree [ 656.431561][T18671] loop2: detected capacity change from 0 to 64 [ 656.461090][T18625] BTRFS info (device loop4): has skinny extents [ 657.175072][T18625] BTRFS info (device loop4): enabling ssd optimizations [ 657.212348][T18700] set_capacity_and_notify: 1 callbacks suppressed [ 657.212367][T18700] loop1: detected capacity change from 0 to 732 [ 657.627486][ T4179] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 9 /dev/loop4 scanned by udevd (4179) [ 657.685013][T18689] loop3: detected capacity change from 0 to 32768 [ 657.787160][T18689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6539 (18689) [ 657.900301][T18689] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 657.941928][T18689] BTRFS info (device loop3): force clearing of disk cache [ 657.980378][T18689] BTRFS info (device loop3): force zlib compression, level 3 [ 658.016700][T18689] BTRFS info (device loop3): enabling auto defrag [ 658.044916][T18689] BTRFS info (device loop3): max_inline at 428 [ 658.058424][T18706] loop1: detected capacity change from 0 to 736 [ 658.066476][T18689] BTRFS info (device loop3): enabling disk space caching [ 658.114394][T18689] BTRFS info (device loop3): disk space caching is enabled [ 658.121664][T18689] BTRFS info (device loop3): has skinny extents [ 658.179217][T18697] loop0: detected capacity change from 0 to 32768 [ 658.188316][T18706] RRIP_1991A [ 658.200021][T18697] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop0 scanned by syz.0.6540 (18697) [ 658.297358][T18697] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 658.472008][T18697] BTRFS info (device loop0): using free space tree [ 658.487235][T18697] BTRFS info (device loop0): has skinny extents [ 658.519521][T18690] loop2: detected capacity change from 0 to 32768 [ 658.549749][ T9] BTRFS warning (device loop3): checksum verify failed on 5328896 wanted 0x899d431ca0f4d422df9fdf55c401a251eb5273badba587053c40c4f8d72f4d8d found 0xe7dc8f760191a5fdeb364f0f746b0943a56ccd5d6ae8fcf95606b4457c8215d1 level 0 [ 658.595942][T18690] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 658.636956][T18690] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 658.672734][T18689] BTRFS warning (device loop3): failed to read root (objectid=4): -5 [ 658.817583][T18690] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 658.885239][T18703] loop4: detected capacity change from 0 to 32768 [ 659.085383][T18689] BTRFS error (device loop3): open_ctree failed: -22 [ 659.092679][T18703] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.6543 (18703) [ 659.113547][ T4555] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 659.121994][ T4555] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 659.144260][ T4183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4183) [ 659.208738][ T4555] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms [ 659.217582][T18697] BTRFS info (device loop0): enabling ssd optimizations [ 659.219889][ T4555] gfs2: fsid=syz:syz.0: jid=0: Done [ 659.230686][T18690] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 659.249806][T18703] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 659.286169][T18703] BTRFS info (device loop4): using free space tree [ 659.301007][T18724] loop1: detected capacity change from 0 to 32768 [ 659.303940][T18703] BTRFS info (device loop4): has skinny extents [ 659.401260][T18724] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 659.502618][T18724] CPU: 0 PID: 18724 Comm: syz.1.6545 Not tainted syzkaller #0 [ 659.510151][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.520249][T18724] Call Trace: [ 659.523556][T18724] [ 659.526514][T18724] dump_stack_lvl+0x188/0x250 [ 659.531319][T18724] ? show_regs_print_info+0x20/0x20 [ 659.536557][T18724] ? load_image+0x400/0x400 [ 659.541229][T18724] sysfs_create_dir_ns+0x26a/0x290 [ 659.546376][T18724] ? sysfs_warn_dup+0xa0/0xa0 [ 659.551266][T18724] ? do_raw_spin_unlock+0x11d/0x230 [ 659.556514][T18724] kobject_add_internal+0x6e0/0xd90 [ 659.561768][T18724] kobject_init_and_add+0x128/0x190 [ 659.567001][T18724] ? lockdep_softirqs_off+0x430/0x430 [ 659.572422][T18724] ? kobject_add+0x230/0x230 [ 659.577066][T18724] ? __init_swait_queue_head+0xa5/0x150 [ 659.582658][T18724] gfs2_sys_fs_add+0x24f/0x4b0 [ 659.587457][T18724] ? gfs2_recover_set+0x240/0x240 [ 659.592511][T18724] ? snprintf+0xe5/0x140 [ 659.596884][T18724] ? __free_pages+0x95/0x1a0 [ 659.601512][T18724] ? vscnprintf+0x80/0x80 [ 659.605878][T18724] gfs2_fill_super+0x120f/0x1f00 [ 659.610869][T18724] ? gfs2_reconfigure+0xd30/0xd30 [ 659.615946][T18724] ? sb_set_blocksize+0xa5/0xe0 [ 659.620830][T18724] get_tree_bdev+0x3f1/0x610 [ 659.625455][T18724] ? gfs2_reconfigure+0xd30/0xd30 [ 659.630510][T18724] gfs2_get_tree+0x4d/0x1e0 [ 659.635061][T18724] vfs_get_tree+0x88/0x270 [ 659.639506][T18724] do_new_mount+0x24a/0xa40 [ 659.644053][T18724] __se_sys_mount+0x2e3/0x3d0 [ 659.645752][ T4646] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 9 /dev/loop0 scanned by udevd (4646) [ 659.648756][T18724] ? __x64_sys_mount+0xc0/0xc0 [ 659.665256][T18724] ? lockdep_hardirqs_on+0x94/0x140 [ 659.670503][T18724] ? __x64_sys_mount+0x1c/0xc0 [ 659.675310][T18724] do_syscall_64+0x4c/0xa0 [ 659.679760][T18724] ? clear_bhb_loop+0x30/0x80 [ 659.684462][T18724] ? clear_bhb_loop+0x30/0x80 [ 659.689170][T18724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 659.695089][T18724] RIP: 0033:0x7f809aac70ca [ 659.699535][T18724] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.719749][T18724] RSP: 002b:00007f8098d1ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 659.728295][T18724] RAX: ffffffffffffffda RBX: 00007f8098d1eee0 RCX: 00007f809aac70ca [ 659.736305][T18724] RDX: 000020000003b280 RSI: 000020000003b2c0 RDI: 00007f8098d1eea0 [ 659.744311][T18724] RBP: 000020000003b280 R08: 00007f8098d1eee0 R09: 0000000000000000 [ 659.752318][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000003b2c0 [ 659.760326][T18724] R13: 00007f8098d1eea0 R14: 000000000003b273 R15: 000020000003b300 [ 659.768352][T18724] [ 660.029533][T18724] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 660.044606][T18724] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 660.053543][T18703] BTRFS info (device loop4): enabling ssd optimizations [ 661.138423][T18781] loop3: detected capacity change from 0 to 64 [ 661.365676][T18774] loop0: detected capacity change from 0 to 32768 [ 661.405846][T18783] loop3: detected capacity change from 0 to 256 [ 661.455999][T18774] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop0 scanned by syz.0.6546 (18774) [ 661.518127][T18774] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 661.556676][T18774] BTRFS info (device loop0): using free space tree [ 661.585196][T18774] BTRFS info (device loop0): has skinny extents [ 661.813620][T18774] BTRFS info (device loop0): enabling ssd optimizations [ 662.707101][T18818] set_capacity_and_notify: 5 callbacks suppressed [ 662.707118][T18818] loop0: detected capacity change from 0 to 128 [ 662.756116][T18816] loop3: detected capacity change from 0 to 1024 [ 662.927076][T18820] loop2: detected capacity change from 0 to 512 [ 663.033128][T18822] loop0: detected capacity change from 0 to 1024 [ 663.310983][T18826] loop2: detected capacity change from 0 to 2048 [ 663.433117][T18829] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 663.695381][T18831] loop2: detected capacity change from 0 to 1764 [ 664.075337][T18833] loop2: detected capacity change from 0 to 8192 [ 665.637556][T18839] loop1: detected capacity change from 0 to 32768 [ 665.686046][T18839] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop1 scanned by syz.1.6571 (18839) [ 665.737605][T18839] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 665.772444][T18839] BTRFS info (device loop1): using free space tree [ 665.799337][T18839] BTRFS info (device loop1): has skinny extents [ 666.120193][T18839] BTRFS info (device loop1): enabling ssd optimizations [ 666.333983][ T4183] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 9 /dev/loop1 scanned by udevd (4183) [ 667.043640][T18865] loop1: detected capacity change from 0 to 4096 [ 667.150779][T18865] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 667.794785][T18867] loop1: detected capacity change from 0 to 16384 [ 667.925405][T18868] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.204010][T18872] loop1: detected capacity change from 0 to 1764 [ 668.267986][T18871] loop2: detected capacity change from 0 to 4096 [ 668.392895][T18871] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 668.711368][T18878] loop2: detected capacity change from 0 to 1764 [ 668.763225][T18874] loop4: detected capacity change from 0 to 8192 [ 668.864773][T18874] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 669.334443][T18882] loop4: detected capacity change from 0 to 4096 [ 669.442865][T18876] loop1: detected capacity change from 0 to 32768 [ 669.465912][T18882] ntfs: volume version 3.1. [ 669.923632][T18886] loop4: detected capacity change from 0 to 4096 [ 670.351937][T18890] loop0: detected capacity change from 0 to 2048 [ 670.797931][T18894] loop3: detected capacity change from 0 to 2048 [ 670.992353][T18888] loop4: detected capacity change from 0 to 32768 [ 671.025271][T18888] (syz.4.6585,18888,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 671.089645][T18888] (syz.4.6585,18888,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 671.680899][T18892] (syz.0.6587,18892,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 671.711859][T18892] (syz.0.6587,18892,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 672.065843][T18900] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 672.086812][T18896] (syz.3.6589,18896,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 672.126219][T18896] (syz.3.6589,18896,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 672.211937][T18898] (syz.4.6590,18898,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 672.277897][T18898] (syz.4.6590,18898,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 672.671152][T18907] qnx4: no qnx4 filesystem (no root dir). [ 672.777880][T18911] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 673.942878][T18915] set_capacity_and_notify: 7 callbacks suppressed [ 673.942897][T18915] loop3: detected capacity change from 0 to 32768 [ 673.994783][T18915] (syz.3.6598,18915,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 674.031153][T18915] (syz.3.6598,18915,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 674.274609][T18908] loop0: detected capacity change from 0 to 65536 [ 674.317437][T18908] (syz.0.6595,18908,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 674.379579][T18908] (syz.0.6595,18908,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 674.379612][T18921] loop3: detected capacity change from 0 to 4096 [ 674.442073][T18921] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 674.497160][T18919] loop1: detected capacity change from 0 to 32768 [ 674.574647][T18919] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 674.619367][T18919] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 674.717517][T18919] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 674.771861][ T6102] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 674.778709][ T6102] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 674.801618][T18914] loop4: detected capacity change from 0 to 65536 [ 674.852760][T18914] (syz.4.6597,18914,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 674.895141][T18914] (syz.4.6597,18914,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 675.131669][ T6102] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 330ms [ 675.156492][ T6102] gfs2: fsid=syz:syz.0: jid=0: Done [ 675.169635][T18919] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 675.183447][T18917] loop2: detected capacity change from 0 to 65536 [ 675.240265][T18917] (syz.2.6599,18917,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 675.289273][T18925] loop3: detected capacity change from 0 to 16384 [ 675.346261][T18917] (syz.2.6599,18917,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 675.405382][T18925] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 675.497040][T18925] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 676.796454][T18936] loop1: detected capacity change from 0 to 2048 [ 676.919721][T18937] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.229241][T18939] loop1: detected capacity change from 0 to 4096 [ 677.332285][T18940] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.701271][T18942] loop1: detected capacity change from 0 to 4096 [ 677.851568][T18942] ntfs: volume version 3.1. [ 678.907087][T18948] ntfs: volume version 3.1. [ 679.745499][T18954] set_capacity_and_notify: 2 callbacks suppressed [ 679.745555][T18954] loop2: detected capacity change from 0 to 8192 [ 679.836541][T18954] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 679.907357][T18957] loop3: detected capacity change from 0 to 1 [ 679.915833][T18954] REISERFS (device loop2): using ordered data mode [ 679.963407][T18954] reiserfs: using flush barriers [ 680.033690][T18954] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 680.091540][T18957] attempt to access beyond end of device [ 680.091540][T18957] loop3: rw=2048, want=8, limit=1 [ 680.111541][T18954] REISERFS (device loop2): checking transaction log (loop2) [ 680.124894][T18957] SQUASHFS error: Failed to read block 0x0: -5 [ 680.153283][T18957] unable to read squashfs_super_block [ 680.297821][T18946] loop1: detected capacity change from 0 to 65536 [ 680.359774][T18960] loop3: detected capacity change from 0 to 8 [ 680.423521][T18954] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 680.451524][T18954] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 680.491146][T18954] REISERFS (device loop2): Remounting filesystem read-only [ 680.505467][T18954] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 680.569298][T18954] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 680.634594][T18962] loop3: detected capacity change from 0 to 8 [ 680.637466][T18963] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 681.135579][T18967] loop2: detected capacity change from 0 to 128 [ 681.240296][T18967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 681.292340][T18967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.615280][T18972] loop2: detected capacity change from 0 to 2048 [ 681.729785][T18972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 682.021746][T18974] loop2: detected capacity change from 0 to 2048 [ 682.099295][T18974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 682.689559][T18980] loop0: detected capacity change from 0 to 256 [ 682.695559][T18965] loop3: detected capacity change from 0 to 65536 [ 682.734128][T18980] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 682.788258][T18965] (syz.3.6619,18965,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 682.788303][T18980] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 682.814859][T18965] (syz.3.6619,18965,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 682.829064][T18982] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 682.866149][T18980] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 682.878641][T18982] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 682.909716][T18980] UDF-fs: Scanning with blocksize 512 failed [ 682.936642][T18982] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 682.947125][T18982] UDF-fs: Scanning with blocksize 512 failed [ 682.955886][T18980] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 682.979523][T18982] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 682.982993][T18980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.037908][T18982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.092278][T18984] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 683.131635][T18984] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 683.181262][T18984] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 683.192606][T18984] UDF-fs: Scanning with blocksize 512 failed [ 683.283981][T18984] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 683.329565][T18984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.644117][T18990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 683.646564][T18988] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 683.703327][T18990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 683.734781][T18990] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 683.770691][T18990] UDF-fs: Scanning with blocksize 512 failed [ 683.813252][T18990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 683.876856][T18990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 684.130657][T18995] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 684.144630][T18995] UDF-fs: Scanning with blocksize 512 failed [ 684.174926][T18995] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 684.240732][T18995] UDF-fs: Scanning with blocksize 1024 failed [ 684.260954][T18995] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 684.286268][T18995] UDF-fs: Scanning with blocksize 2048 failed [ 684.308402][T18995] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 684.357719][T18995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 684.498010][T18997] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 684.535744][T18997] UDF-fs: Scanning with blocksize 512 failed [ 684.608431][T18997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 684.989423][T19004] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 685.033165][T19004] UDF-fs: Scanning with blocksize 512 failed [ 685.043097][T19004] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 685.062546][T19004] UDF-fs: Scanning with blocksize 1024 failed [ 685.091334][T19004] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 685.112951][T19004] UDF-fs: Scanning with blocksize 2048 failed [ 685.135420][T19004] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 685.163367][T19004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.434216][T19006] set_capacity_and_notify: 7 callbacks suppressed [ 685.434233][T19006] loop1: detected capacity change from 0 to 128 [ 685.591487][T19006] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 685.629690][T19006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.661589][T19008] loop2: detected capacity change from 0 to 256 [ 685.803874][T19010] loop1: detected capacity change from 0 to 128 [ 685.824246][T19008] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 685.885981][T19008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.187696][T19016] loop1: detected capacity change from 0 to 128 [ 686.632890][T19018] loop1: detected capacity change from 0 to 8192 [ 686.732547][T19018] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 686.744320][T19020] loop0: detected capacity change from 0 to 8 [ 686.764435][T19018] UDF-fs: Scanning with blocksize 512 failed [ 686.799005][T19018] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 686.817638][T19018] UDF-fs: Scanning with blocksize 1024 failed [ 686.877269][T19018] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 686.902854][T19018] UDF-fs: Scanning with blocksize 2048 failed [ 686.960956][T19018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.247436][T19024] loop1: detected capacity change from 0 to 512 [ 687.515587][T19026] loop1: detected capacity change from 0 to 256 [ 687.814243][T19028] loop1: detected capacity change from 0 to 512 [ 687.926840][T19022] loop0: detected capacity change from 0 to 32768 [ 687.994423][T19022] (syz.0.6645,19022,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 688.011211][T19022] (syz.0.6645,19022,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 688.527778][T19036] VFS: could not find a valid V7 on loop0. [ 688.894176][T19042] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 688.903746][T19048] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 688.911248][T19048] UDF-fs: Scanning with blocksize 512 failed [ 688.931222][T19048] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 688.952495][T19042] REISERFS (device loop4): using ordered data mode [ 688.985357][T19048] UDF-fs: Scanning with blocksize 1024 failed [ 689.018742][T19042] reiserfs: using flush barriers [ 689.075341][T19048] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 689.076773][T19042] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 689.082769][T19048] UDF-fs: Scanning with blocksize 2048 failed [ 689.131854][T19048] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 689.190594][T19048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.357155][T19042] REISERFS (device loop4): checking transaction log (loop4) [ 689.748500][T19042] REISERFS (device loop4): Using tea hash to sort names [ 689.777585][T19042] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 690.322407][T19051] XFS (loop1): Mounting V5 Filesystem [ 690.490659][T19051] XFS (loop1): Ending clean mount [ 690.617317][ T4569] XFS (loop1): Unmounting Filesystem [ 692.062153][T19069] set_capacity_and_notify: 9 callbacks suppressed [ 692.062170][T19069] loop1: detected capacity change from 0 to 32768 [ 692.319635][T19069] XFS (loop1): Mounting V5 Filesystem [ 692.527345][T19069] XFS (loop1): Ending clean mount [ 692.625016][ T4569] XFS (loop1): Unmounting Filesystem [ 693.066559][T19071] loop0: detected capacity change from 0 to 32768 [ 693.207016][T19071] XFS (loop0): Mounting V5 Filesystem [ 693.358840][T19071] XFS (loop0): Ending clean mount [ 693.434370][ T4567] XFS (loop0): Unmounting Filesystem [ 694.807988][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.814477][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.865139][T19089] loop1: detected capacity change from 0 to 65536 [ 695.076845][T19089] XFS (loop1): Mounting V5 Filesystem [ 695.181894][T19089] XFS (loop1): Ending clean mount [ 695.293326][ T4569] XFS (loop1): Unmounting Filesystem [ 695.337727][T19091] loop3: detected capacity change from 0 to 65536 [ 695.601045][T19091] XFS (loop3): Mounting V5 Filesystem [ 695.780688][T19095] loop0: detected capacity change from 0 to 65536 [ 695.833818][T19091] XFS (loop3): Ending clean mount [ 695.941878][T19095] XFS (loop0): Mounting V5 Filesystem [ 695.968085][ T4570] XFS (loop3): Unmounting Filesystem [ 696.161859][T19094] loop2: detected capacity change from 0 to 65536 [ 696.264946][T19095] XFS (loop0): Ending clean mount [ 696.386173][T19094] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 696.413404][ T4567] XFS (loop0): Unmounting Filesystem [ 697.179086][T19130] loop3: detected capacity change from 0 to 4096 [ 697.258574][T19130] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 697.279668][T19130] UDF-fs: Scanning with blocksize 512 failed [ 697.328258][T19130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.662264][T19136] loop2: detected capacity change from 0 to 128 [ 697.694213][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 697.737136][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 697.785694][T19136] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 697.815272][T19136] UDF-fs: Scanning with blocksize 512 failed [ 697.829564][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 697.850710][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 697.860340][T19136] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 697.896346][T19136] UDF-fs: Scanning with blocksize 1024 failed [ 697.914468][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 697.953131][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 697.967547][T19136] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 697.995519][T19136] UDF-fs: Scanning with blocksize 2048 failed [ 698.012844][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 698.050315][T19136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 698.075645][T19136] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 698.094340][T19136] UDF-fs: Scanning with blocksize 4096 failed [ 698.115884][T19136] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 698.274499][T19132] loop0: detected capacity change from 0 to 32768 [ 698.368298][T19128] loop1: detected capacity change from 0 to 65536 [ 698.538230][T19128] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 698.582044][T19150] loop4: detected capacity change from 0 to 512 [ 698.703428][T19132] XFS (loop0): Mounting V5 Filesystem [ 698.920764][T19132] XFS (loop0): Ending clean mount [ 699.065268][ T4567] XFS (loop0): Unmounting Filesystem [ 700.049219][T19163] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6682'. [ 700.073869][T19163] device hsr_slave_0 left promiscuous mode [ 700.093028][T19163] device hsr_slave_1 left promiscuous mode [ 700.541437][T19167] loop1: detected capacity change from 0 to 256 [ 700.826013][T19138] loop2: detected capacity change from 0 to 131072 [ 700.894445][T19159] loop0: detected capacity change from 0 to 32768 [ 700.992888][T19138] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 701.025539][ T4179] loop0: p1 p9 p11 [ 701.065682][T19176] loop1: detected capacity change from 0 to 2048 [ 701.078493][T19159] loop0: p1 p9 p11 [ 701.226046][ T9461] loop1: p1 p2 p3 [ 701.258160][T19176] loop1: p1 p2 p3 [ 701.736984][T19186] loop3: detected capacity change from 0 to 512 [ 701.872731][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 701.989190][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 702.038023][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 702.134055][T19192] overlayfs: failed to resolve 'obj_user=/ ­': -2 [ 702.166665][ T9461] udevd[9461]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 702.189400][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 702.213967][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 702.798186][T19215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.140307][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6711'. [ 703.182262][T19228] loop4: detected capacity change from 0 to 764 [ 703.530934][T19244] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6719'. [ 704.031825][T19271] overlayfs: workdir and upperdir must be separate subtrees [ 704.942808][T19318] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6756'. [ 704.983898][T19320] netlink: 'syz.3.6757': attribute type 32 has an invalid length. [ 705.220224][T19222] loop1: detected capacity change from 0 to 65536 [ 705.222145][T19282] loop2: detected capacity change from 0 to 32768 [ 705.318217][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6761'. [ 705.375427][T19222] XFS (loop1): Mounting V5 Filesystem [ 705.388038][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6761'. [ 705.402719][T19282] XFS (loop2): Mounting V5 Filesystem [ 705.429681][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6761'. [ 705.549402][T19337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.607141][T19222] XFS (loop1): Ending clean mount [ 705.737110][T19282] XFS (loop2): Ending clean mount [ 705.782647][ T4569] XFS (loop1): Unmounting Filesystem [ 705.847177][ T4575] XFS (loop2): Unmounting Filesystem [ 706.113804][ T6093] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 706.381093][ T6093] usb 1-1: Using ep0 maxpacket: 16 [ 706.692553][ T6093] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 706.735039][ T6093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.743092][ T6093] usb 1-1: Product: syz [ 706.758600][ T6093] usb 1-1: Manufacturer: syz [ 706.783900][ T6093] usb 1-1: SerialNumber: syz [ 706.806868][ T6093] usb 1-1: config 0 descriptor?? [ 706.864118][ T6093] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 707.068352][T19419] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 707.086888][ T6093] ssu100: probe of 1-1:0.0 failed with error -71 [ 707.118709][ T6093] usb 1-1: USB disconnect, device number 24 [ 707.228763][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6801'. [ 707.237784][T19432] netlink: 'syz.4.6799': attribute type 5 has an invalid length. [ 707.434925][T19440] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 707.509437][T19444] loop3: detected capacity change from 0 to 128 [ 707.630627][T19444] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 707.707022][T19444] hpfs: filesystem error: improperly stopped [ 707.714150][T19444] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 707.779688][T19444] hpfs: You really don't want any checks? You are crazy... [ 707.802173][T19444] hpfs: hpfs_map_sector(): read error [ 707.829224][T19444] hpfs: code page support is disabled [ 707.863812][T19444] hpfs: hpfs_map_4sectors(): unaligned read [ 707.887543][T19444] hpfs: hpfs_map_4sectors(): unaligned read [ 707.936440][T19444] hpfs: filesystem error: unable to find root dir [ 707.993341][T19444] hpfs: hpfs_map_4sectors(): unaligned read [ 708.018585][T19444] hpfs: hpfs_map_sector(): read error [ 708.095197][T19474] netlink: 'syz.0.6823': attribute type 3 has an invalid length. [ 708.131369][T19474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6823'. [ 708.270498][T19480] loop1: detected capacity change from 0 to 64 [ 708.321018][T19483] loop4: detected capacity change from 0 to 2048 [ 708.390979][T19483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 708.868116][T19519] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 709.098076][T19534] loop4: detected capacity change from 0 to 2048 [ 709.167300][T19534] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.502752][ T4614] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 709.695750][ T4545] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 709.757492][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6868'. [ 709.770089][ T4614] usb 3-1: Using ep0 maxpacket: 16 [ 709.898343][ T4614] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 709.936851][ T4614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.972521][ T4614] usb 3-1: config 0 has no interface number 0 [ 710.026728][ T4545] usb 2-1: Using ep0 maxpacket: 8 [ 710.144480][ T4614] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 710.166714][ T4614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.186105][ T4614] usb 3-1: Product: syz [ 710.195364][ T4614] usb 3-1: Manufacturer: syz [ 710.208421][ T4545] usb 2-1: unable to get BOS descriptor or descriptor too short [ 710.216910][ T4614] usb 3-1: SerialNumber: syz [ 710.237049][ T4614] usb 3-1: config 0 descriptor?? [ 710.347495][ T4545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 710.368146][ T4545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 710.373382][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6886'. [ 710.402532][ T4545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 710.443993][ T4545] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 710.455849][ T4545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 710.488763][ T4545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8669, setting to 64 [ 710.492820][T19607] netlink: zone id is out of range [ 710.520780][T19607] netlink: zone id is out of range [ 710.526457][T19607] netlink: zone id is out of range [ 710.539335][T19609] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 710.559445][ T4614] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 710.567705][T19607] netlink: zone id is out of range [ 710.573130][ T4614] usb 3-1: No valid video chain found. [ 710.580895][T19607] netlink: zone id is out of range [ 710.591741][T19607] netlink: zone id is out of range [ 710.609867][T19607] netlink: zone id is out of range [ 710.620739][T19607] netlink: zone id is out of range [ 710.721671][ T4545] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 710.744090][T19617] netlink: 'syz.4.6894': attribute type 5 has an invalid length. [ 710.752638][ T4545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.771711][ T4545] usb 2-1: Product: syz [ 710.779349][ T6094] usb 3-1: USB disconnect, device number 103 [ 710.787054][ T4545] usb 2-1: Manufacturer: syz [ 710.803537][ T4545] usb 2-1: SerialNumber: syz [ 710.836788][ T4545] usb 2-1: config 0 descriptor?? [ 710.888973][T19550] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 711.018698][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.173544][T19637] netlink: 399 bytes leftover after parsing attributes in process `syz.3.6902'. [ 711.231337][ T4614] usb 2-1: USB disconnect, device number 12 [ 711.351866][T19647] loop0: detected capacity change from 0 to 128 [ 711.361729][T19645] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 711.435381][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'. [ 711.486269][T19647] ================================================================== [ 711.494803][T19647] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e50 [ 711.501873][T19647] Read of size 8 at addr ffff888067009320 by task syz.0.6908/19647 [ 711.509792][T19647] [ 711.512143][T19647] CPU: 0 PID: 19647 Comm: syz.0.6908 Not tainted syzkaller #0 [ 711.519635][T19647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.529729][T19647] Call Trace: [ 711.533040][T19647] [ 711.536004][T19647] dump_stack_lvl+0x188/0x250 [ 711.540812][T19647] ? show_regs_print_info+0x20/0x20 [ 711.546049][T19647] ? load_image+0x400/0x400 [ 711.550582][T19647] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 711.556080][T19647] ? __rwlock_init+0x140/0x140 [ 711.560884][T19647] print_address_description+0x60/0x2d0 [ 711.566654][T19647] ? __ext4_iget+0x2bb/0x3e50 [ 711.571375][T19647] kasan_report+0xdf/0x130 [ 711.575835][T19647] ? __ext4_iget+0x2bb/0x3e50 [ 711.580649][T19647] __ext4_iget+0x2bb/0x3e50 [ 711.585238][T19647] ? __free_pages+0x95/0x1a0 [ 711.589874][T19647] ? apply_workqueue_attrs+0x170/0x170 [ 711.595460][T19647] ? ext4_get_projid+0x140/0x140 [ 711.600435][T19647] ? mb_cache_create+0x428/0x530 [ 711.605424][T19647] ext4_fill_super+0x73f9/0x94f0 [ 711.610398][T19647] ? format_decode+0x898/0x1300 [ 711.615312][T19647] ? ext4_mount+0x40/0x40 [ 711.619669][T19647] ? set_blocksize+0x1f3/0x370 [ 711.624482][T19647] ? sb_set_blocksize+0xa5/0xe0 [ 711.629365][T19647] mount_bdev+0x287/0x3c0 [ 711.633738][T19647] ? ext4_mount+0x40/0x40 [ 711.638108][T19647] legacy_get_tree+0xe6/0x180 [ 711.642817][T19647] ? ext4_errno_to_code+0x160/0x160 [ 711.648057][T19647] vfs_get_tree+0x88/0x270 [ 711.652524][T19647] do_new_mount+0x24a/0xa40 [ 711.657071][T19647] __se_sys_mount+0x2e3/0x3d0 [ 711.661785][T19647] ? __x64_sys_mount+0xc0/0xc0 [ 711.666589][T19647] ? lockdep_hardirqs_on+0x94/0x140 [ 711.671822][T19647] ? __x64_sys_mount+0x1c/0xc0 [ 711.676626][T19647] do_syscall_64+0x4c/0xa0 [ 711.681075][T19647] ? clear_bhb_loop+0x30/0x80 [ 711.685777][T19647] ? clear_bhb_loop+0x30/0x80 [ 711.690482][T19647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 711.696747][T19647] RIP: 0033:0x7fd71bfee0ca [ 711.701194][T19647] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.720925][T19647] RSP: 002b:00007fd71a245e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 711.729472][T19647] RAX: ffffffffffffffda RBX: 00007fd71a245ee0 RCX: 00007fd71bfee0ca [ 711.737484][T19647] RDX: 0000200000000240 RSI: 0000200000000280 RDI: 00007fd71a245ea0 [ 711.745493][T19647] RBP: 0000200000000240 R08: 00007fd71a245ee0 R09: 0000000000000004 [ 711.753495][T19647] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000280 [ 711.761493][T19647] R13: 00007fd71a245ea0 R14: 0000000000000246 R15: 0000200000000140 [ 711.769523][T19647] [ 711.772574][T19647] [ 711.774915][T19647] Allocated by task 7129: [ 711.779450][T19647] __kasan_slab_alloc+0x9c/0xd0 [ 711.784384][T19647] slab_post_alloc_hook+0x4c/0x380 [ 711.789519][T19647] kmem_cache_alloc+0x100/0x290 [ 711.794399][T19647] reiserfs_alloc_inode+0x19/0xb0 [ 711.799458][T19647] iget5_locked+0x9e/0x250 [ 711.803902][T19647] reiserfs_fill_super+0x122d/0x2440 [ 711.809217][T19647] mount_bdev+0x287/0x3c0 [ 711.813567][T19647] legacy_get_tree+0xe6/0x180 [ 711.818389][T19647] vfs_get_tree+0x88/0x270 [ 711.822845][T19647] do_new_mount+0x24a/0xa40 [ 711.827377][T19647] __se_sys_mount+0x2e3/0x3d0 [ 711.832079][T19647] do_syscall_64+0x4c/0xa0 [ 711.836524][T19647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 711.842454][T19647] [ 711.844808][T19647] Last potentially related work creation: [ 711.850549][T19647] kasan_save_stack+0x35/0x60 [ 711.855263][T19647] kasan_record_aux_stack+0xb8/0x100 [ 711.860577][T19647] call_rcu+0x189/0x950 [ 711.864748][T19647] evict+0x834/0x8d0 [ 711.868659][T19647] reiserfs_fill_super+0x14c4/0x2440 [ 711.873983][T19647] mount_bdev+0x287/0x3c0 [ 711.878342][T19647] legacy_get_tree+0xe6/0x180 [ 711.883044][T19647] vfs_get_tree+0x88/0x270 [ 711.887402][T19672] loop1: detected capacity change from 0 to 128 [ 711.887486][T19647] do_new_mount+0x24a/0xa40 [ 711.898248][T19647] __se_sys_mount+0x2e3/0x3d0 [ 711.902960][T19647] do_syscall_64+0x4c/0xa0 [ 711.907408][T19647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 711.913427][T19647] [ 711.915768][T19647] The buggy address belongs to the object at ffff888067008d40 [ 711.915768][T19647] which belongs to the cache reiser_inode_cache of size 1568 [ 711.930530][T19647] The buggy address is located 1504 bytes inside of [ 711.930530][T19647] 1568-byte region [ffff888067008d40, ffff888067009360) [ 711.943995][T19647] The buggy address belongs to the page: [ 711.949640][T19647] page:ffffea00019c0200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806700cf80 pfn:0x67008 [ 711.961096][T19647] head:ffffea00019c0200 order:3 compound_mapcount:0 compound_pincount:0 [ 711.969424][T19647] memcg:ffff88805ea57901 [ 711.973666][T19647] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 711.981662][T19647] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801d3df140 [ 711.990250][T19647] raw: ffff88806700cf80 0000000080130008 00000001ffffffff ffff88805ea57901 [ 711.998831][T19647] page dumped because: kasan: bad access detected [ 712.005245][T19647] page_owner tracks the page as allocated [ 712.010964][T19647] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6867, ts 175128216707, free_ts 77535652342 [ 712.033285][T19647] get_page_from_freelist+0x1bbd/0x1ca0 [ 712.038844][T19647] __alloc_pages+0x1ee/0x480 [ 712.043437][T19647] new_slab+0xc0/0x4b0 [ 712.047509][T19647] ___slab_alloc+0x80a/0xdd0 [ 712.052101][T19647] kmem_cache_alloc+0x195/0x290 [ 712.056952][T19647] reiserfs_alloc_inode+0x19/0xb0 [ 712.061981][T19647] iget5_locked+0x9e/0x250 [ 712.066413][T19647] reiserfs_fill_super+0x122d/0x2440 [ 712.071713][T19647] mount_bdev+0x287/0x3c0 [ 712.076042][T19647] legacy_get_tree+0xe6/0x180 [ 712.080726][T19647] vfs_get_tree+0x88/0x270 [ 712.085148][T19647] do_new_mount+0x24a/0xa40 [ 712.089741][T19647] __se_sys_mount+0x2e3/0x3d0 [ 712.094421][T19647] do_syscall_64+0x4c/0xa0 [ 712.098840][T19647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.104877][T19647] page last free stack trace: [ 712.109549][T19647] free_unref_page_prepare+0x637/0x6c0 [ 712.115015][T19647] free_unref_page+0x8f/0x2a0 [ 712.119703][T19647] __unfreeze_partials+0x1a5/0x200 [ 712.124824][T19647] put_cpu_partial+0x12d/0x190 [ 712.129586][T19647] qlist_free_all+0x35/0x90 [ 712.134089][T19647] kasan_quarantine_reduce+0x150/0x160 [ 712.139549][T19647] __kasan_slab_alloc+0x2f/0xd0 [ 712.144588][T19647] slab_post_alloc_hook+0x4c/0x380 [ 712.149698][T19647] kmem_cache_alloc+0x100/0x290 [ 712.154552][T19647] getname_flags+0xb5/0x500 [ 712.160477][T19647] do_sys_openat2+0xdd/0x4b0 [ 712.165107][T19647] __x64_sys_openat+0x135/0x160 [ 712.169980][T19647] do_syscall_64+0x4c/0xa0 [ 712.174503][T19647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.180407][T19647] [ 712.182831][T19647] Memory state around the buggy address: [ 712.188474][T19647] ffff888067009200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 712.196574][T19647] ffff888067009280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 712.204692][T19647] >ffff888067009300: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 712.212779][T19647] ^ [ 712.217906][T19647] ffff888067009380: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 712.226156][T19647] ffff888067009400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 712.234233][T19647] ================================================================== [ 712.242292][T19647] Disabling lock debugging due to kernel taint [ 712.250768][T19647] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 712.258010][T19647] CPU: 1 PID: 19647 Comm: syz.0.6908 Tainted: G B syzkaller #0 [ 712.260903][T19672] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 712.266879][T19647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 712.266894][T19647] Call Trace: [ 712.266901][T19647] [ 712.266909][T19647] dump_stack_lvl+0x188/0x250 [ 712.289288][T19672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 712.289797][T19647] ? show_regs_print_info+0x20/0x20 [ 712.311383][T19647] ? load_image+0x400/0x400 [ 712.316072][T19647] panic+0x2e5/0x810 [ 712.320009][T19647] ? bpf_jit_dump+0xd0/0xd0 [ 712.324545][T19647] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 712.330643][T19647] ? _raw_spin_unlock+0x40/0x40 [ 712.335533][T19647] ? __ext4_iget+0x2bb/0x3e50 [ 712.340325][T19647] check_panic_on_warn+0x80/0xa0 [ 712.345302][T19647] ? __ext4_iget+0x2bb/0x3e50 [ 712.350145][T19647] end_report+0x6d/0xf0 [ 712.354425][T19647] kasan_report+0x102/0x130 [ 712.358953][T19647] ? __ext4_iget+0x2bb/0x3e50 [ 712.363657][T19647] __ext4_iget+0x2bb/0x3e50 [ 712.368189][T19647] ? __free_pages+0x95/0x1a0 [ 712.372903][T19647] ? apply_workqueue_attrs+0x170/0x170 [ 712.378383][T19647] ? ext4_get_projid+0x140/0x140 [ 712.383342][T19647] ? mb_cache_create+0x428/0x530 [ 712.388310][T19647] ext4_fill_super+0x73f9/0x94f0 [ 712.393272][T19647] ? format_decode+0x898/0x1300 [ 712.398254][T19647] ? ext4_mount+0x40/0x40 [ 712.403043][T19647] ? set_blocksize+0x1f3/0x370 [ 712.407832][T19647] ? sb_set_blocksize+0xa5/0xe0 [ 712.412722][T19647] mount_bdev+0x287/0x3c0 [ 712.413432][T19675] loop2: detected capacity change from 0 to 764 [ 712.417074][T19647] ? ext4_mount+0x40/0x40 [ 712.417101][T19647] legacy_get_tree+0xe6/0x180 [ 712.432349][T19647] ? ext4_errno_to_code+0x160/0x160 [ 712.437675][T19647] vfs_get_tree+0x88/0x270 [ 712.437899][T19675] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 712.442207][T19647] do_new_mount+0x24a/0xa40 [ 712.442239][T19647] __se_sys_mount+0x2e3/0x3d0 [ 712.457654][T19647] ? __x64_sys_mount+0xc0/0xc0 [ 712.459396][T19675] ISOFS: File unit size != 0 for ISO file (1792). [ 712.462442][T19647] ? lockdep_hardirqs_on+0x94/0x140 [ 712.462472][T19647] ? __x64_sys_mount+0x1c/0xc0 [ 712.478906][T19647] do_syscall_64+0x4c/0xa0 [ 712.483361][T19647] ? clear_bhb_loop+0x30/0x80 [ 712.488063][T19647] ? clear_bhb_loop+0x30/0x80 [ 712.492770][T19647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.498697][T19647] RIP: 0033:0x7fd71bfee0ca [ 712.503141][T19647] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.517893][T19675] ISOFS: Interleaved files not (yet) supported. [ 712.522870][T19647] RSP: 002b:00007fd71a245e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 712.522903][T19647] RAX: ffffffffffffffda RBX: 00007fd71a245ee0 RCX: 00007fd71bfee0ca [ 712.530920][T19675] ISOFS: File unit size != 0 for ISO file (1856). [ 712.537542][T19647] RDX: 0000200000000240 RSI: 0000200000000280 RDI: 00007fd71a245ea0 [ 712.537561][T19647] RBP: 0000200000000240 R08: 00007fd71a245ee0 R09: 0000000000000004 [ 712.537576][T19647] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000280 [ 712.546841][T19675] ISOFS: Interleaved files not (yet) supported. [ 712.552044][T19647] R13: 00007fd71a245ea0 R14: 0000000000000246 R15: 0000200000000140 [ 712.552071][T19647] [ 712.552494][T19647] Kernel Offset: disabled [ 712.597818][T19647] Rebooting in 86400 seconds..