last executing test programs: 4.073549568s ago: executing program 4 (id=7796): r0 = openat$vim2m(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000400)={0x81, 0x30383653, 0x3, @stepwise={0xca0d, 0x3, 0xfff, 0x985a, 0x3, 0x8}}) 3.896927573s ago: executing program 4 (id=7799): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000002c0)='./file0\x00', 0x98, &(0x7f0000001180), 0x4, 0x10f6, &(0x7f00000011c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1310, 0x0) 3.476255495s ago: executing program 1 (id=7802): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x1, @win={{0x7fff, 0x3, 0x2, 0x5}, 0x2, 0x2, 0x0, 0x7ff, 0x0, 0x5}}) 3.254563871s ago: executing program 0 (id=7804): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 3.243222951s ago: executing program 1 (id=7805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040004) 3.141151014s ago: executing program 0 (id=7806): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x0, 0x5, 0xffffffff, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x14}}}}}) 3.034033857s ago: executing program 1 (id=7809): syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.95771805s ago: executing program 0 (id=7810): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x37, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25, 0x1, 0x1, 0x6, 0xf0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x25, 0x3e}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x2, 0x4, 0x5, {0x4}}}]}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 2.712265826s ago: executing program 4 (id=7813): r0 = syz_open_dev$media(&(0x7f0000000d40), 0x1, 0x800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0xfffffffffffffffe) 2.470031952s ago: executing program 4 (id=7816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000020070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800c000100636f756e746572001c0002800c00024000000000000009ce0c0002400000000000000000480000000c0a03000000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214"], 0xf8}}, 0x0) 2.293538628s ago: executing program 4 (id=7820): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@timestamp={0x44, 0x4, 0x7d, 0x0, 0xa}]}}}], 0x38}, 0x0) 2.150263031s ago: executing program 4 (id=7822): socket(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083e1ad40402000726b5b010203010902240001010740000904bcd1010101"], 0x0) 1.021251422s ago: executing program 3 (id=7835): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) 919.314885ms ago: executing program 0 (id=7838): setreuid(0xee00, 0xee01) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000000040)={0x78}, 0x20) 853.055577ms ago: executing program 3 (id=7839): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x5c04}}], 0x18, 0x4855}, 0x24000052) 786.454909ms ago: executing program 0 (id=7840): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') lseek(r0, 0xf, 0x3) 721.98276ms ago: executing program 0 (id=7842): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000006f80)='./file0\x00', 0x20108c0, &(0x7f0000000280)=ANY=[], 0xfe, 0x61b8, &(0x7f0000000dc0)="$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") removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000007c0)=@known='trusted.syz\x00') 619.739013ms ago: executing program 3 (id=7843): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) 558.932465ms ago: executing program 2 (id=7844): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x4000000) 514.245286ms ago: executing program 1 (id=7845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101, 0x2920}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @private1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 505.507886ms ago: executing program 2 (id=7846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021140011800c000100636f756e74657200040002806c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000009"], 0x104}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 439.366339ms ago: executing program 3 (id=7847): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000001000, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x291d, 0x1, {}, 0x8000}) 433.309109ms ago: executing program 2 (id=7848): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000d00000000000000000300000d00"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x1}, 0x28) 315.840071ms ago: executing program 1 (id=7849): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x6, 0xffffffffffff0001, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) 295.211002ms ago: executing program 2 (id=7850): r0 = io_uring_setup(0x6dda, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000001c0)={0x1, 0x0, 0x1000000, &(0x7f0000000000)=[{0x0}], 0x0}, 0x20) 260.074633ms ago: executing program 3 (id=7851): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0000000120003", @ANYBLOB="17c64ab0bbc2190e7e5f02d90f6d13c9c4ae703707c2902f6667249124bf16f6ec5d65dfcd007874e4c3a6b6d034162a7a4f3bea387dfa2a531a9031c22f27ec05d0624de5af8cf1542395b0231f3df482f6ddd096c25a153d68598d3d0510319c8d34a04f528139e7c87c1de971dd599fa00dd65730e51da95ba77b38391d546bab5f1d53813a1fdd"], 0xf0}}, 0x0) 145.645136ms ago: executing program 3 (id=7852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 145.323366ms ago: executing program 2 (id=7853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="d2206c96d4aadd5ff0ded75d86dd61b13d03e8dace136af3ef55a7dd091d86411486c62eb18a2e8a94d79f0f4e4ca863097ef1090412", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 102.275777ms ago: executing program 1 (id=7854): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 2 (id=7855): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40802) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000300)={{0x1, 0x3, 0x3, 0x3, 0xe}, 0x2, 0x401, 0x2}) kernel console output (not intermixed with test programs): ] usb 4-1: USB disconnect, device number 26 [ 686.602202][T19080] loop2: detected capacity change from 0 to 4096 [ 686.668378][T19080] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 686.767610][T19082] loop4: detected capacity change from 0 to 1024 [ 686.777133][T19080] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 686.784410][ T4571] usb 2-1: Using ep0 maxpacket: 16 [ 686.844375][T19082] hfsplus: unable to parse mount options [ 686.912591][ T4758] udevd[4758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.971081][ T4571] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 686.995544][ T4571] usb 2-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 687.055055][ T4571] usb 2-1: config 0 has no interface number 0 [ 687.107733][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.114234][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.302631][ T4571] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 687.311775][ T4571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 687.334400][ T4571] usb 2-1: Product: syz [ 687.338629][ T4571] usb 2-1: Manufacturer: syz [ 687.343256][ T4571] usb 2-1: SerialNumber: syz [ 687.345897][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 687.366898][ T4571] usb 2-1: config 0 descriptor?? [ 687.398738][ T4580] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 687.441402][ T4571] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 687.447830][ T4571] usb 2-1: No valid video chain found. [ 687.486889][T19096] loop3: detected capacity change from 0 to 2048 [ 687.604568][T19096] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 687.622934][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 687.634504][T19096] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 687.668669][ T4631] usb 2-1: USB disconnect, device number 17 [ 687.804867][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 687.823834][T19098] EXT4-fs (loop3): Invalid journal IO priority (must be 0-7) [ 687.847720][ T4580] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 687.867834][ T4580] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 687.885632][ T4580] usb 5-1: config 0 has no interface number 0 [ 687.892326][ T4580] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.903729][T19084] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 687.912003][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.913648][T19084] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 687.929632][ T4580] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 687.965738][ T4580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.993271][ T4580] usb 5-1: config 0 descriptor?? [ 688.003608][T19084] attempt to access beyond end of device [ 688.003608][T19084] loop0: rw=12288, want=2684526593, limit=32768 [ 688.059280][T19084] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 688.114919][ T21] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 688.145912][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.167562][ T21] usb 3-1: Product: syz [ 688.182857][T19100] ntfs: (device loop3): parse_options(): Unrecognized mount option ÿ0x000000000000ee00. [ 688.194107][ T21] usb 3-1: Manufacturer: syz [ 688.198755][ T21] usb 3-1: SerialNumber: syz [ 688.224137][T19100] ntfs: (device loop3): parse_options(): The show_sys_files option requires a boolean argument. [ 688.259722][ T4580] usb 5-1: USB disconnect, device number 18 [ 688.545025][ T21] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 688.563087][ T21] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 688.599047][ T21] usb 3-1: unknown interface protocol 0x34, assuming v1 [ 688.606381][ T21] usb 3-1: cannot find UAC_HEADER [ 688.611788][ T21] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 688.623799][ T21] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 688.665192][ T21] usb 3-1: USB disconnect, device number 3 [ 688.788747][ T4629] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 688.868313][ T4631] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 688.928609][T11892] udevd[11892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.055335][ T4629] usb 1-1: Using ep0 maxpacket: 32 [ 689.140899][ T4631] usb 4-1: Using ep0 maxpacket: 8 [ 689.280140][ T4631] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 689.288531][ T4631] usb 4-1: config 0 has no interface number 0 [ 689.294805][ T4631] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 689.305250][ T4631] usb 4-1: config 0 interface 200 has no altsetting 0 [ 689.387023][ T4629] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 689.396331][ T4629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.404471][ T4629] usb 1-1: Product: syz [ 689.409356][ T4629] usb 1-1: Manufacturer: syz [ 689.413999][ T4629] usb 1-1: SerialNumber: syz [ 689.494281][ T4631] usb 4-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 689.508297][ T4631] usb 4-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 689.517871][ T4631] usb 4-1: Product: syz [ 689.522073][ T4631] usb 4-1: Manufacturer: syz [ 689.531359][ T4631] usb 4-1: SerialNumber: syz [ 689.540173][ T4631] usb 4-1: config 0 descriptor?? [ 689.761145][ T4629] usb 1-1: unit 2 not found! [ 689.766059][ T4629] usb 1-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8203 device_setup=1 to enable and report any issues to g@b4.vu [ 689.809994][ T4629] usb 1-1: USB disconnect, device number 123 [ 689.880805][ T4631] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 689.897501][ T4631] usb 4-1: USB disconnect, device number 27 [ 690.060719][T11891] udevd[11891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.629277][ T4580] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 690.658800][ T21] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 690.943566][T19138] set_capacity_and_notify: 3 callbacks suppressed [ 690.943584][T19138] loop4: detected capacity change from 0 to 8 [ 691.032374][T19140] loop0: detected capacity change from 0 to 4096 [ 691.033551][ T4580] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 691.057266][T19138] SQUASHFS error: zlib decompression failed, data probably corrupt [ 691.069462][T19138] SQUASHFS error: Failed to read block 0x9b: -5 [ 691.078207][ T4580] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.090584][T19138] SQUASHFS error: Unable to read metadata cache entry [99] [ 691.111316][T19138] SQUASHFS error: Unable to read inode 0x127 [ 691.129595][T19140] ntfs: (device loop0): parse_options(): Unrecognized mount option show½À1SA#Sœgaelic. [ 691.138347][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 691.151322][T19140] ntfs: (device loop0): parse_options(): The gid option requires an argument. [ 691.261335][ T21] usb 2-1: config 194 has an invalid interface number: 162 but max is 0 [ 691.268887][ T4580] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.289564][ T21] usb 2-1: config 194 has no interface number 0 [ 691.305924][ T4580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.325354][ T4580] usb 3-1: Product: syz [ 691.329584][ T4580] usb 3-1: Manufacturer: syz [ 691.338104][ T21] usb 2-1: config 194 interface 162 has no altsetting 0 [ 691.357192][ T4580] usb 3-1: SerialNumber: syz [ 691.466516][T19124] loop3: detected capacity change from 0 to 32768 [ 691.513403][T19146] loop4: detected capacity change from 0 to 4096 [ 691.540314][T19124] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 691.556386][T19124] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 691.573540][ T21] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=f9.2b [ 691.584887][T19146] ntfs3: loop4: ino=3, Correct links count -> 2. [ 691.602123][T19124] attempt to access beyond end of device [ 691.602123][T19124] loop3: rw=12288, want=2684526593, limit=32768 [ 691.614409][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.628840][ T21] usb 2-1: Product: syz [ 691.637409][T19124] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 691.649332][ T21] usb 2-1: Manufacturer: syz [ 691.659009][ T21] usb 2-1: SerialNumber: syz [ 691.676765][T19146] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 691.694808][T19146] ntfs3: loop4: Failed to load $Secure. [ 691.738672][ T4580] usb 3-1: 0:2 : does not exist [ 691.743821][ T4580] usb 3-1: unit 9 not found! [ 691.825366][ T4580] usb 3-1: USB disconnect, device number 4 [ 691.963961][T19155] loop0: detected capacity change from 0 to 4096 [ 692.010677][T19155] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 692.051107][T19156] loop4: detected capacity change from 0 to 4096 [ 692.059598][ T21] kvaser_usb 2-1:194.162: Cannot get usb endpoint(s) [ 692.102568][T11891] udevd[11891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.121664][ T21] usb 2-1: USB disconnect, device number 18 [ 692.130591][T19156] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 692.201188][T19156] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 692.237268][T19156] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 692.313783][ T26] audit: type=1326 audit(2000525592.568:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19158 comm="syz.0.6973" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f701b616dd9 code=0x0 [ 692.460089][T19164] tmpfs: Bad value for 'mpol' [ 692.696592][T19178] loop2: detected capacity change from 0 to 8 [ 692.824145][T19178] SQUASHFS error: xz decompression failed, data probably corrupt [ 692.864631][T19178] SQUASHFS error: Failed to read block 0x108: -5 [ 692.871057][T19178] SQUASHFS error: Unable to read metadata cache entry [106] [ 692.932843][T19178] SQUASHFS error: Unable to read inode 0x11f [ 693.413425][T19189] loop2: detected capacity change from 0 to 4096 [ 693.450429][T19193] loop0: detected capacity change from 0 to 64 [ 693.466728][T19189] ntfs: (device loop2): parse_options(): The case_sensitive option requires a boolean argument. [ 693.562258][T19167] loop4: detected capacity change from 0 to 32768 [ 693.583095][T19193] hfs: invalid extent max_key_len 65289 [ 693.614420][T19193] hfs: unable to open extent tree [ 693.627788][T19167] (syz.4.6976,19167,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 693.645761][T19193] hfs: can't find a HFS filesystem on dev loop0 [ 693.959510][T19201] FAT-fs (loop2): bogus number of FAT sectors [ 694.003405][T19201] FAT-fs (loop2): Can't find a valid FAT filesystem [ 694.189883][T19203] EXT4-fs (loop4): invalid first ino: 10 [ 694.376086][T19213] NILFS (loop0): mounting unchecked fs [ 694.381917][ T4579] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 694.408039][T19185] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 694.432656][T19185] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 694.464473][T19213] NILFS (loop0): recovery complete [ 694.470621][T19213] NILFS (loop0): Invalid checkpoint (checkpoint number=2147483646) [ 694.479800][T19185] attempt to access beyond end of device [ 694.479800][T19185] loop1: rw=12288, want=2684526593, limit=32768 [ 694.495634][T19213] NILFS (loop0): error -22 while loading last checkpoint (checkpoint number=2147483646) [ 694.516653][T19185] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 694.670070][T19223] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 694.684176][ T4579] usb 4-1: Using ep0 maxpacket: 16 [ 694.870007][T19223] ntfs3: loop4: Failed to load root. [ 694.891839][ T4579] usb 4-1: unable to get BOS descriptor or descriptor too short [ 694.988040][ T4579] usb 4-1: config 127 has an invalid interface number: 187 but max is 0 [ 695.018109][ T4579] usb 4-1: config 127 has no interface number 0 [ 695.033061][ T4579] usb 4-1: config 127 interface 187 altsetting 9 bulk endpoint 0x7 has invalid maxpacket 64 [ 695.084016][ T4579] usb 4-1: config 127 interface 187 has no altsetting 0 [ 695.276554][ T4579] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=96.eb [ 695.285666][ T4579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.304757][ T4579] usb 4-1: Product: syz [ 695.315555][ T4579] usb 4-1: Manufacturer: syz [ 695.337014][ T4579] usb 4-1: SerialNumber: syz [ 695.373002][T19207] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 695.500883][T12038] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 695.679711][T19229] jfs_mount: Failed to read AGGREGATE_I [ 695.693375][ T4631] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 695.700988][T19229] Mount JFS Failure: -5 [ 695.701007][T19229] jfs_mount failed w/return code = -5 [ 695.715329][ T4579] kvaser_usb 4-1:127.187: Cannot get usb endpoint(s) [ 695.754112][ T4579] usb 4-1: USB disconnect, device number 28 [ 695.896611][ T4629] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 695.918107][T12038] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.950183][T12038] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.088887][T19253] EXT4-fs (loop2): Ignoring removed oldalloc option [ 696.122587][T19253] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.7020: Parent and EA inode have the same ino 15 [ 696.143907][T12038] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 696.158443][T19253] EXT4-fs (loop2): 1 orphan inode deleted [ 696.166413][ T4631] usb 2-1: descriptor type invalid, skip [ 696.172384][ T4631] usb 2-1: descriptor type invalid, skip [ 696.193929][T19253] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,bsdgroups,nouid32,i_version,delalloc,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 696.227754][T12038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.269538][T12038] usb 5-1: Product: syz [ 696.278763][T12038] usb 5-1: Manufacturer: syz [ 696.284385][ T4631] usb 2-1: not running at top speed; connect to a high speed hub [ 696.303212][T12038] usb 5-1: SerialNumber: syz [ 696.388446][ T4631] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 696.437019][T19263] tmpfs: Bad value for 'mpol' [ 696.442625][ T4629] usb 1-1: unable to get BOS descriptor or descriptor too short [ 696.490569][T19265] set_capacity_and_notify: 7 callbacks suppressed [ 696.490586][T19265] loop2: detected capacity change from 0 to 128 [ 696.560122][ T4629] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.571388][ T4629] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.606402][T19267] loop3: detected capacity change from 0 to 4096 [ 696.638022][T19267] ntfs: (device loop3): parse_options(): Unrecognized mount option uµT‰Í±~Ù—–id. [ 696.652729][T12038] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 696.690297][T12038] usb 5-1: USB disconnect, device number 19 [ 696.704588][T19267] ntfs: (device loop3): parse_options(): The umask option requires an argument. [ 696.762633][ T4631] usb 2-1: language id specifier not provided by device, defaulting to English [ 696.772058][ T4629] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 696.793568][ T4629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.814192][ T4629] usb 1-1: Product: syz [ 696.829891][ T4629] usb 1-1: Manufacturer: syz [ 696.834797][ T4629] usb 1-1: SerialNumber: syz [ 696.941993][ T4631] usb 2-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 696.959107][ T4631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.968164][ T4631] usb 2-1: Product: syz [ 696.972413][ T4631] usb 2-1: Manufacturer: syz [ 696.982866][ T4631] usb 2-1: SerialNumber: syz [ 697.249352][ T4629] usb 1-1: 0:1 : does not exist [ 697.275892][ T4629] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 697.293830][ T4629] usb 1-1: unit 13 not found! [ 697.302164][ T4631] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 697.344007][ T4631] usb 2-1: USB disconnect, device number 19 [ 697.350278][ T4629] usb 1-1: USB disconnect, device number 124 [ 697.364673][T19279] loop3: detected capacity change from 0 to 32768 [ 697.445013][T19279] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 697.445013][T19279] [ 697.500319][T19279] xtLookup: xtSearch returned -5 [ 697.505582][T19279] read_mapping_page failed! [ 697.510170][T19279] jfs_mount: diMount failed w/rc = -5 [ 697.528016][T19279] Mount JFS Failure: -5 [ 697.532900][T19279] jfs_mount failed w/return code = -5 [ 697.644606][T11892] udevd[11892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.713777][T11676] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 697.888842][T19295] loop2: detected capacity change from 0 to 32768 [ 697.922842][T19307] loop1: detected capacity change from 0 to 64 [ 697.980798][T11676] usb 5-1: Using ep0 maxpacket: 8 [ 697.986869][T19295] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 698.016412][T19295] JBD2: Ignoring recovery information on journal [ 698.115808][T19307] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 698.173430][T11676] usb 5-1: unable to get BOS descriptor or descriptor too short [ 698.173449][T19307] MINIX-fs: bad superblock [ 698.195120][T19295] (syz.2.7039,19295,1):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 698.195120][T19295] found = 1, set = 0, taken = 0, off = 0 [ 698.254052][T19295] (syz.2.7039,19295,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 698.265142][T11676] usb 5-1: config 8 has an invalid interface number: 222 but max is 0 [ 698.301524][T11676] usb 5-1: config 8 has no interface number 0 [ 698.307690][T11676] usb 5-1: config 8 interface 222 has no altsetting 0 [ 698.329237][T19295] (syz.2.7039,19295,1):ocfs2_check_volume:2465 ERROR: status = -22 [ 698.344589][T19295] (syz.2.7039,19295,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 698.352851][T19295] (syz.2.7039,19295,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 698.416763][T19295] (syz.2.7039,19295,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 698.466856][T19327] loop1: detected capacity change from 0 to 512 [ 698.537102][T11676] usb 5-1: New USB device found, idVendor=3f89, idProduct=3684, bcdDevice=c7.bb [ 698.546306][T11676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.557563][T19332] loop3: detected capacity change from 0 to 3 [ 698.565454][T11676] usb 5-1: Product: syz [ 698.579449][T19327] EXT4-fs (loop1): Invalid log cluster size: 327680 [ 698.589763][T11676] usb 5-1: Manufacturer: syz [ 698.613758][T19332] squashfs: Bad value for 'errors' [ 698.620271][T11676] usb 5-1: SerialNumber: syz [ 698.986502][T11676] usb-storage 5-1:8.222: USB Mass Storage device detected [ 699.053134][T11676] usb 5-1: USB disconnect, device number 20 [ 699.128176][T19348] loop1: detected capacity change from 0 to 512 [ 699.213651][T19348] EXT4-fs (loop1): #blocks per group too big: 16384 [ 699.299062][T19333] loop0: detected capacity change from 0 to 40427 [ 699.334282][T19333] F2FS-fs (loop0): Not support 1, larger than 256 [ 699.402563][ T21] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 699.456016][ T4571] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 699.711578][T19364] loop1: detected capacity change from 0 to 4096 [ 699.725097][T11676] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 699.733819][ T4571] usb 3-1: Using ep0 maxpacket: 8 [ 699.811743][T19364] ntfs: volume version 3.1. [ 699.823807][T19364] ntfs: (device loop1): ntfs_read_locked_inode(): Index collation rule is not COLLATION_FILE_NAME. [ 699.837494][T19364] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xb as bad. Run chkdsk. [ 699.858690][T19364] ntfs: (device loop1): load_system_files(): Failed to load $Extend. [ 699.867451][ T4571] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 699.878230][ T4571] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 699.886365][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 699.893227][ T4571] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 699.916263][T19364] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 699.995554][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 700.022569][T11676] usb 1-1: Using ep0 maxpacket: 32 [ 700.023186][ T4571] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.041246][ T4571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 700.062682][ T4571] usb 3-1: SerialNumber: syz [ 700.108967][ T21] usb 4-1: config 4 has an invalid interface number: 180 but max is 2 [ 700.117363][ T21] usb 4-1: config 4 has an invalid interface number: 248 but max is 2 [ 700.142577][ T21] usb 4-1: config 4 has an invalid interface number: 40 but max is 2 [ 700.158714][ T4571] usb 3-1: bad CDC descriptors [ 700.158894][ T21] usb 4-1: config 4 has no interface number 0 [ 700.187957][ T21] usb 4-1: config 4 has no interface number 1 [ 700.194782][T11676] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.210605][ T21] usb 4-1: config 4 has no interface number 2 [ 700.218536][T11676] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 700.229115][ T21] usb 4-1: config 4 interface 180 altsetting 121 endpoint 0xF has invalid wMaxPacketSize 0 [ 700.239514][T11676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.248114][ T21] usb 4-1: config 4 interface 40 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 700.261405][T11676] usb 1-1: config 0 descriptor?? [ 700.266567][ T21] usb 4-1: config 4 interface 180 has no altsetting 0 [ 700.288846][ T21] usb 4-1: config 4 interface 248 has no altsetting 0 [ 700.296675][ T21] usb 4-1: config 4 interface 40 has no altsetting 0 [ 700.382844][ T4567] usb 3-1: USB disconnect, device number 5 [ 700.482203][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=7682, bcdDevice=a0.43 [ 700.491487][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.514098][ T21] usb 4-1: Product: syz [ 700.518382][ T21] usb 4-1: Manufacturer: syz [ 700.523370][ T21] usb 4-1: SerialNumber: syz [ 700.546381][T11676] cdc_subset: probe of 1-1:0.0 failed with error -71 [ 700.569282][T11676] usb 1-1: USB disconnect, device number 125 [ 700.610545][ T4629] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 700.974670][ T21] usb 4-1: USB disconnect, device number 29 [ 701.038219][ T4629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 701.055521][ T4629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.278946][ T4629] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 701.293313][ T4629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.312576][ T4629] usb 5-1: Product: syz [ 701.317665][ T4629] usb 5-1: Manufacturer: syz [ 701.323754][ T4629] usb 5-1: SerialNumber: syz [ 701.335010][T19403] SQUASHFS error: zlib decompression failed, data probably corrupt [ 701.341412][ T4629] usb 5-1: config 0 descriptor?? [ 701.356364][T19403] SQUASHFS error: Failed to read block 0x9b: -5 [ 701.369713][T19381] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 701.376469][T19403] SQUASHFS error: Unable to read metadata cache entry [99] [ 701.422419][T19403] SQUASHFS error: Unable to read inode 0x127 [ 701.490339][ T4629] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 701.508183][ T4629] mcba_usb 5-1:0.0 can0: couldn't start device: -90 [ 701.605499][ T4629] mcba_usb: probe of 5-1:0.0 failed with error -90 [ 701.614726][T19415] loop0: p1 p2 p3 [ 701.681836][ T4567] usb 5-1: USB disconnect, device number 21 [ 701.899731][T11892] udevd[11892]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 701.922291][ T4759] udevd[4759]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 701.946310][T11891] udevd[11891]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 701.974034][T11892] udevd[11892]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 701.988299][ T4759] udevd[4759]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 702.001262][ T4571] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 702.016449][T11891] udevd[11891]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 702.183444][T19412] set_capacity_and_notify: 3 callbacks suppressed [ 702.183462][T19412] loop1: detected capacity change from 0 to 32768 [ 702.253048][T19412] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop1 scanned by syz.1.7096 (19412) [ 702.267175][ T4571] usb 3-1: Using ep0 maxpacket: 16 [ 702.308846][T19412] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 702.373418][T19412] BTRFS info (device loop1): using free space tree [ 702.397813][ T4571] usb 3-1: config 18 has an invalid interface number: 105 but max is 0 [ 702.407303][T19432] loop3: detected capacity change from 0 to 4096 [ 702.427548][T19412] BTRFS info (device loop1): has skinny extents [ 702.434216][ T4571] usb 3-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 702.447937][ T4571] usb 3-1: config 18 has no interface number 0 [ 702.449364][ T21] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 702.466952][ T4571] usb 3-1: config 18 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 702.495796][T19437] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:001c with DS=0x12 [ 702.497517][T19432] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 702.527544][ T4571] usb 3-1: config 18 interface 105 has no altsetting 0 [ 702.590555][T19432] ntfs3: loop3: Failed to load $MFT. [ 702.725728][T19412] BTRFS info (device loop1): enabling ssd optimizations [ 702.733196][ T4571] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 702.770648][ T4571] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 702.789716][ T4571] usb 3-1: Product: syz [ 702.791226][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 702.800514][ T4571] usb 3-1: Manufacturer: syz [ 702.820894][ T4571] usb 3-1: SerialNumber: syz [ 702.930172][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.965026][ T21] usb 1-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 702.997820][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.015533][ T4567] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 703.052934][ T21] usb 1-1: config 0 descriptor?? [ 703.132036][ T4759] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 9 /dev/loop1 scanned by udevd (4759) [ 703.147253][ T21] usb 3-1: USB disconnect, device number 6 [ 703.285238][ T4567] usb 5-1: Using ep0 maxpacket: 16 [ 703.443139][ T4567] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 703.464355][ T4567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 703.502031][ T4567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 703.562349][ T4571] usb 1-1: USB disconnect, device number 126 [ 703.711568][ T4567] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 703.732987][ T4567] usb 5-1: New USB device strings: Mfr=11, Product=2, SerialNumber=3 [ 703.741137][ T4567] usb 5-1: Product: syz [ 703.794556][ T4567] usb 5-1: Manufacturer: syz [ 703.804410][ T4567] usb 5-1: SerialNumber: syz [ 703.835399][ T4567] usb 5-1: config 0 descriptor?? [ 703.963902][T19463] loop3: detected capacity change from 0 to 32768 [ 704.079548][T19463] (syz.3.7113,19463,1):ocfs2_verify_userspace_stack:855 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 704.126315][ T4571] usb 5-1: USB disconnect, device number 22 [ 704.144351][T19463] (syz.3.7113,19463,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 704.351720][ T21] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 704.597783][ T4567] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 704.764467][T19497] loop0: detected capacity change from 0 to 8192 [ 704.832761][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 704.849907][T19497] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 704.886520][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 704.931380][T19497] REISERFS (device loop0): using ordered data mode [ 704.938267][T19497] reiserfs: using flush barriers [ 704.983143][ T21] usb 2-1: config 255 has an invalid interface number: 135 but max is 1 [ 705.002817][ T21] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 705.019331][ T21] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 705.033861][T19497] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 705.040688][ T21] usb 2-1: config 255 has no interface number 0 [ 705.057932][ T4567] usb 3-1: unable to get BOS descriptor or descriptor too short [ 705.100185][ T4567] usb 3-1: not running at top speed; connect to a high speed hub [ 705.111822][ T21] usb 2-1: config 255 interface 135 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 705.163975][ T21] usb 2-1: config 255 interface 135 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 705.198186][ T4567] usb 3-1: config 202 has an invalid interface number: 93 but max is 0 [ 705.207737][T19497] REISERFS (device loop0): checking transaction log (loop0) [ 705.223935][ T4567] usb 3-1: config 202 has no interface number 0 [ 705.239983][T19497] REISERFS warning: reiserfs-5083 is_leaf: wrong item type for item *3.6* [1 2 0x0 UNKNOWN], item_len 44, item_location 4052, free_space(entry_count) 0 [ 705.249580][ T21] usb 2-1: config 255 interface 135 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 705.265239][ T4567] usb 3-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 705.292398][ T4567] usb 3-1: config 202 interface 93 has no altsetting 0 [ 705.303240][T19497] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 705.334940][ T21] usb 2-1: config 255 interface 135 altsetting 6 endpoint 0x2 has invalid wMaxPacketSize 0 [ 705.342675][T19497] REISERFS (device loop0): Remounting filesystem read-only [ 705.383451][ T21] usb 2-1: config 255 interface 135 has no altsetting 0 [ 705.390680][T19497] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 705.464256][T19514] loop3: detected capacity change from 0 to 1024 [ 705.495590][ T4567] usb 3-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 705.539609][ T4567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.548060][ T4567] usb 3-1: Product: syz [ 705.574835][ T4567] usb 3-1: Manufacturer: syz [ 705.592194][ T4567] usb 3-1: SerialNumber: syz [ 705.602641][ T21] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=db.02 [ 705.642633][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.647015][T19484] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 705.666364][ T21] usb 2-1: Product: syz [ 705.670884][ T21] usb 2-1: Manufacturer: syz [ 705.675884][ T21] usb 2-1: SerialNumber: syz [ 705.773021][T19520] loop4: detected capacity change from 0 to 64 [ 705.965492][ T26] audit: type=1326 audit(2000525605.338:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19523 comm="syz.0.7138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f701b616dd9 code=0x0 [ 706.034615][ T4567] pl2303 3-1:202.93: required interrupt-in endpoint missing [ 706.094021][ T4567] usb 3-1: USB disconnect, device number 7 [ 706.100000][ T21] ir_toy 2-1:255.135: required endpoints not found [ 706.127165][ T21] usb 2-1: USB disconnect, device number 20 [ 706.361248][ T4629] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 706.401726][T19522] loop3: detected capacity change from 0 to 32768 [ 706.459428][T19522] JBD2: Ignoring recovery information on journal [ 706.586787][T19528] loop0: detected capacity change from 0 to 40427 [ 706.604398][T19522] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 706.626064][T19528] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 706.675691][T19528] F2FS-fs (loop0): invalid crc value [ 706.716815][T19528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 706.763513][ T4593] ocfs2: Unmounting device (7,3) on (node local) [ 706.831679][ T4629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 706.858882][T19528] F2FS-fs (loop0): recover fsync data on readonly fs [ 706.874487][ T4629] usb 5-1: not running at top speed; connect to a high speed hub [ 706.906845][T11676] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 706.914709][T19528] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 706.979912][T19528] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 706.992184][ T4629] usb 5-1: config 113 has an invalid interface number: 2 but max is 0 [ 707.000423][ T4629] usb 5-1: config 113 has no interface number 0 [ 707.008943][T19528] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 707.028470][ T4629] usb 5-1: config 113 interface 2 has no altsetting 0 [ 707.054149][T19528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 707.216355][T11676] usb 3-1: Using ep0 maxpacket: 8 [ 707.239390][ T4629] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=89.e2 [ 707.259095][ T4629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.270455][ T4629] usb 5-1: Product: syz [ 707.274862][ T4629] usb 5-1: Manufacturer: syz [ 707.288627][ T4629] usb 5-1: SerialNumber: syz [ 707.390561][T11676] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 707.408712][T11676] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 707.446404][T11676] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 707.469270][T11676] usb 3-1: config 127 has no interface number 0 [ 707.490851][T11676] usb 3-1: config 127 interface 171 has no altsetting 0 [ 707.594157][T19541] loop3: detected capacity change from 0 to 32768 [ 707.629149][T19541] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.7145 (19541) [ 707.658342][T19539] loop1: detected capacity change from 0 to 32768 [ 707.683973][T19541] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 707.696277][T19539] XFS (loop1): invalid logbufs value: 1 [not 2-8] [ 707.705005][ T4629] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 707.714303][T11676] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 707.723702][T11676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.737778][ T4629] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 707.745590][T19541] BTRFS info (device loop3): using free space tree [ 707.754952][T11676] usb 3-1: Product: syz [ 707.754976][T11676] usb 3-1: Manufacturer: syz [ 707.789748][T11676] usb 3-1: SerialNumber: syz [ 707.796259][ T4629] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 707.816104][T19541] BTRFS info (device loop3): has skinny extents [ 707.825111][ T4629] usb 5-1: USB disconnect, device number 23 [ 708.146065][T19541] BTRFS info (device loop3): enabling ssd optimizations [ 708.164596][T19543] loop0: detected capacity change from 0 to 32768 [ 708.166492][T11676] xr_serial 3-1:127.171: skipping garbage [ 708.233548][T11676] usb 3-1: USB disconnect, device number 8 [ 708.252290][T19543] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.7146 (19543) [ 708.517174][T19550] loop1: detected capacity change from 0 to 32768 [ 708.545644][ T4629] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 708.655542][T19543] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 708.666192][T19543] BTRFS info (device loop0): using free space tree [ 708.673185][T19543] BTRFS info (device loop0): has skinny extents [ 708.723542][T19550] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop1 scanned by syz.1.7147 (19550) [ 708.825954][T19543] BTRFS info (device loop0): enabling ssd optimizations [ 708.847283][T19550] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 708.862759][T19550] BTRFS info (device loop1): using free space tree [ 708.882408][T19550] BTRFS info (device loop1): has skinny extents [ 708.980363][ T4629] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.994548][T19550] BTRFS info (device loop1): enabling ssd optimizations [ 709.001806][ T4629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 709.001839][ T4629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 709.001864][ T4629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.001888][ T4629] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.001931][ T4629] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 709.002163][ T4629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.007294][ T4629] usb 5-1: config 0 descriptor?? [ 709.068348][T11676] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 709.087614][T19566] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 709.354165][ T4629] usb 5-1: USB disconnect, device number 24 [ 709.375650][T11676] usb 3-1: Using ep0 maxpacket: 32 [ 709.486736][T19608] loop3: detected capacity change from 0 to 32768 [ 709.539907][T11676] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 709.560659][T19608] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.7149 (19608) [ 709.575439][T11676] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 709.649500][T19608] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 709.680907][T19608] BTRFS info (device loop3): using free space tree [ 709.691724][T19608] BTRFS info (device loop3): has skinny extents [ 709.802288][T11676] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.820748][T11676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.830281][T11676] usb 3-1: Product: syz [ 709.834764][T11676] usb 3-1: Manufacturer: syz [ 709.847454][ T4759] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 9 /dev/loop1 scanned by udevd (4759) [ 709.866546][T11676] usb 3-1: SerialNumber: syz [ 709.937397][T19608] BTRFS info (device loop3): enabling ssd optimizations [ 710.242460][T11676] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 710.249429][T11676] cdc_ncm 3-1:1.0: bind() failure [ 710.296064][T11676] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 710.302932][T11676] cdc_ncm 3-1:1.1: bind() failure [ 710.362632][T11676] usb 3-1: USB disconnect, device number 9 [ 710.560071][T11891] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 9 /dev/loop3 scanned by udevd (11891) [ 710.562453][ T4580] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 710.605041][ T4378] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 710.713659][T19643] loop1: detected capacity change from 0 to 4096 [ 710.858504][T19643] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 710.870154][ T4580] usb 5-1: Using ep0 maxpacket: 32 [ 710.893651][T19643] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 710.954974][T19643] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 710.967398][T19643] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 710.988922][T19643] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 711.039346][T19649] loop3: detected capacity change from 0 to 128 [ 711.043343][T19643] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x400 because its location on disk could not be determined even after retrying (error code -5). [ 711.046680][ T4580] usb 5-1: unable to get BOS descriptor or descriptor too short [ 711.084977][T19643] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 711.096555][T19643] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x600 because its location on disk could not be determined even after retrying (error code -5). [ 711.122536][T19643] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 711.137140][ T4378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 711.155784][T19643] ntfs: volume version 3.1. [ 711.192946][ T4580] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 711.235729][ T4564] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 711.278519][ T4378] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 711.306588][ T4378] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 711.328050][ T4378] usb 1-1: config 63 has no interface number 0 [ 711.355593][ T4378] usb 1-1: config 63 interface 66 has no altsetting 0 [ 711.373487][T19651] loop1: detected capacity change from 0 to 724 [ 711.384866][T19653] loop3: detected capacity change from 0 to 128 [ 711.393343][ T4580] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 711.410268][ T4580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.425387][ T4580] usb 5-1: Product: syz [ 711.433938][ T4580] usb 5-1: Manufacturer: syz [ 711.439920][ T4580] usb 5-1: SerialNumber: syz [ 711.502739][ T4564] usb 3-1: Using ep0 maxpacket: 8 [ 711.550165][T19655] loop1: detected capacity change from 0 to 4096 [ 711.588451][ T4378] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 711.597740][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.614898][ T4378] usb 1-1: Product: syz [ 711.619878][ T4378] usb 1-1: Manufacturer: syz [ 711.633924][T19655] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 711.649077][ T4378] usb 1-1: SerialNumber: syz [ 711.676609][ T4564] usb 3-1: unable to get BOS descriptor or descriptor too short [ 711.702490][T19657] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 711.721630][T19657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 711.731313][T19657] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 711.742647][T19657] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,nodelalloc,,errors=continue. Quota mode: writeback. [ 711.770080][ T4564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 711.782647][T19655] ntfs3: loop1: Failed to load $Secure. [ 711.791232][ T4564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 711.803034][ T4564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 711.815563][ T4564] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 711.844952][ T4580] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 711.851824][ T4564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 711.872916][ T4564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 711.887691][ T4580] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 711.908518][ T4580] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 711.915420][ T4564] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 711.982631][ T4580] usb 5-1: USB disconnect, device number 25 [ 712.093501][T19662] erofs: (device loop3): mounted with root inode @ nid 36. [ 712.101385][ T4378] usb 1-1: USB disconnect, device number 127 [ 712.115222][ T4564] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 712.135297][ T4564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.171053][ T4564] usb 3-1: Product: syz [ 712.175306][ T4564] usb 3-1: Manufacturer: syz [ 712.194818][ T4564] usb 3-1: SerialNumber: syz [ 712.224804][ T4564] usb 3-1: config 0 descriptor?? [ 712.262913][T19645] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 712.282333][T19645] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 712.304225][ T4759] udevd[4759]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.368514][ T4572] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 712.602242][ T4378] usb 3-1: USB disconnect, device number 10 [ 712.662452][ T4572] usb 2-1: Using ep0 maxpacket: 8 [ 712.793160][T19666] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.7167 (19666) [ 712.797015][ T4572] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 712.839340][ T4572] usb 2-1: config 2 has no interface number 0 [ 712.845607][ T4572] usb 2-1: config 2 interface 31 has no altsetting 0 [ 712.894588][T19666] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 712.919438][T19666] BTRFS info (device loop3): using free space tree [ 712.933806][T19666] BTRFS info (device loop3): has skinny extents [ 712.985827][T19668] set_capacity_and_notify: 3 callbacks suppressed [ 712.985845][T19668] loop4: detected capacity change from 0 to 32768 [ 713.051517][T19668] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop4 scanned by syz.4.7168 (19668) [ 713.053773][ T4572] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 713.104285][ T4572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.131274][ T4572] usb 2-1: Product: syz [ 713.148203][ T4572] usb 2-1: Manufacturer: syz [ 713.169316][ T4572] usb 2-1: SerialNumber: syz [ 713.178121][T19670] loop0: detected capacity change from 0 to 32768 [ 713.226373][T19670] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop0 scanned by syz.0.7169 (19670) [ 713.241120][T19668] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 713.261038][T19689] loop2: detected capacity change from 0 to 16 [ 713.268654][T19668] BTRFS info (device loop4): using free space tree [ 713.275215][T19668] BTRFS info (device loop4): has skinny extents [ 713.293199][T19670] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 713.301880][T19666] BTRFS info (device loop3): enabling ssd optimizations [ 713.311184][T19670] BTRFS info (device loop0): using free space tree [ 713.329597][T19670] BTRFS info (device loop0): has skinny extents [ 713.378695][T19689] erofs: (device loop2): mounted with root inode @ nid 36. [ 713.491233][ T4572] ch9200: probe of 2-1:2.31 failed with error -71 [ 713.532671][T19668] BTRFS info (device loop4): enabling ssd optimizations [ 713.558502][ T4572] usb 2-1: USB disconnect, device number 21 [ 713.803864][ T4378] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 713.882880][ T5460] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 9 /dev/loop3 scanned by udevd (5460) [ 713.982596][T19670] BTRFS info (device loop0): enabling ssd optimizations [ 714.107397][ T4378] usb 3-1: Using ep0 maxpacket: 16 [ 714.306759][ T4378] usb 3-1: unable to get BOS descriptor or descriptor too short [ 714.387469][T19735] loop3: detected capacity change from 0 to 32768 [ 714.427428][ T4378] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.440994][ T4378] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.466760][ T4571] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 714.475234][T19735] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 scanned by syz.3.7174 (19735) [ 714.655515][T19735] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 714.667990][T19735] BTRFS info (device loop3): using free space tree [ 714.706366][T19735] BTRFS info (device loop3): has skinny extents [ 714.725743][ T4378] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 714.752461][ T4378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.803215][ T4378] usb 3-1: Product: syz [ 714.813841][ T4378] usb 3-1: Manufacturer: syz [ 714.821043][ T4378] usb 3-1: SerialNumber: syz [ 714.911418][T11891] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 9 /dev/loop0 scanned by udevd (11891) [ 714.948657][ T4571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 715.043221][ T4571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.061679][ T4571] usb 2-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 715.096725][ T4571] usb 2-1: config 1 interface 0 has no altsetting 0 [ 715.118720][T19735] BTRFS info (device loop3): enabling ssd optimizations [ 715.182711][ T4378] snd-ua101 3-1:1.1: sample format descriptor not found [ 715.211677][ T4378] snd-ua101 3-1:1.0: sample format descriptor not found [ 715.279492][ T4378] usb 3-1: USB disconnect, device number 11 [ 715.361829][ T4571] usb 2-1: string descriptor 0 read error: -22 [ 715.368356][ T4571] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 715.425843][ T4571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.485523][T19740] loop4: detected capacity change from 0 to 32768 [ 715.554215][T19740] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop4 scanned by syz.4.7173 (19740) [ 715.766508][ T4579] usb 2-1: USB disconnect, device number 22 [ 715.859463][T19766] loop2: detected capacity change from 0 to 512 [ 715.872810][T19754] loop0: detected capacity change from 0 to 32768 [ 715.884630][T19764] loop3: detected capacity change from 0 to 2048 [ 715.896293][T19740] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 715.910081][T19740] BTRFS info (device loop4): using free space tree [ 715.916778][T19740] BTRFS info (device loop4): has skinny extents [ 715.938731][T19754] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.7176 (19754) [ 715.998631][T19754] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 716.035095][T19754] BTRFS info (device loop0): using free space tree [ 716.056482][T19754] BTRFS info (device loop0): has skinny extents [ 716.064503][T19764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 716.064525][T19766] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 716.088757][T19764] ext4 filesystem being mounted at /1328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.282151][T19740] BTRFS info (device loop4): enabling ssd optimizations [ 716.490661][T19754] BTRFS info (device loop0): enabling ssd optimizations [ 716.696050][ T5460] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 9 /dev/loop4 scanned by udevd (5460) [ 716.847475][ T1108] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 717.135277][T19804] loop3: detected capacity change from 0 to 32768 [ 717.142033][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 717.223200][T19817] loop4: detected capacity change from 0 to 1024 [ 717.298273][T19804] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.7179 (19804) [ 717.362544][T19817] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 717.510361][ T1108] usb 2-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 717.521734][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.529839][ T1108] usb 2-1: Product: syz [ 717.541557][ T1108] usb 2-1: Manufacturer: syz [ 717.547839][ T1108] usb 2-1: SerialNumber: syz [ 717.581182][T19808] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 717.670612][T19804] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 717.684805][T19804] BTRFS info (device loop3): max_inline at 0 [ 717.695617][T19804] BTRFS info (device loop3): force clearing of disk cache [ 717.758805][T19804] BTRFS info (device loop3): setting nodatasum [ 717.765037][T19804] BTRFS info (device loop3): use zlib compression, level 3 [ 717.841756][T19804] BTRFS info (device loop3): allowing degraded mounts [ 717.848933][T19804] BTRFS info (device loop3): enabling disk space caching [ 717.881393][T19804] BTRFS info (device loop3): disk space caching is enabled [ 717.938910][T19804] BTRFS info (device loop3): has skinny extents [ 717.991935][ T1108] usb 2-1: MIDIStreaming interface descriptor not found [ 718.047379][ T1108] usb 2-1: USB disconnect, device number 23 [ 718.225011][ T7359] udevd[7359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.262945][T19832] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 718.270428][T19804] BTRFS info (device loop3): enabling ssd optimizations [ 718.305875][T19804] BTRFS info (device loop3): clearing free space tree [ 718.322559][T19804] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 718.343260][T19804] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 718.400093][T19820] set_capacity_and_notify: 2 callbacks suppressed [ 718.400111][T19820] loop4: detected capacity change from 0 to 32768 [ 718.523813][T19820] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop4 scanned by syz.4.7184 (19820) [ 718.562932][T19845] loop1: detected capacity change from 0 to 1024 [ 718.608901][T19847] loop0: detected capacity change from 0 to 512 [ 718.702133][T19822] loop2: detected capacity change from 0 to 32768 [ 718.716154][T19845] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 718.726241][T19847] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 718.925209][T19820] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 718.940121][T11891] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop3 scanned by udevd (11891) [ 718.961895][T19820] BTRFS info (device loop4): using free space tree [ 718.977972][T19822] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.7185 (19822) [ 718.982153][T19820] BTRFS info (device loop4): has skinny extents [ 719.261336][T19822] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 719.328310][T19822] BTRFS info (device loop2): using free space tree [ 719.380002][T19822] BTRFS info (device loop2): has skinny extents [ 719.397566][T19820] BTRFS info (device loop4): enabling ssd optimizations [ 719.409772][T19868] loop3: detected capacity change from 0 to 4096 [ 719.608687][T19891] loop0: detected capacity change from 0 to 512 [ 719.747872][T19822] BTRFS info (device loop2): enabling ssd optimizations [ 719.778253][T19868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 719.792318][T19891] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 720.156024][T19859] loop1: detected capacity change from 0 to 32768 [ 720.201991][T19859] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop1 scanned by syz.1.7190 (19859) [ 720.235349][T19859] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 720.278587][T19859] BTRFS info (device loop1): using free space tree [ 720.285267][T19859] BTRFS info (device loop1): has skinny extents [ 720.406804][T19906] loop4: detected capacity change from 0 to 512 [ 720.553684][T19906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 720.643104][T19906] ext4 filesystem being mounted at /1385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.844678][T19859] BTRFS info (device loop1): enabling ssd optimizations [ 721.691664][T19919] loop0: detected capacity change from 0 to 32768 [ 721.765844][T19917] loop3: detected capacity change from 0 to 32768 [ 721.847684][T19919] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop0 scanned by syz.0.7195 (19919) [ 721.899910][T19919] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 721.922795][T19919] BTRFS info (device loop0): using free space tree [ 721.932678][T19919] BTRFS info (device loop0): has skinny extents [ 721.958187][T19917] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop3 scanned by syz.3.7194 (19917) [ 722.013445][T19917] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 722.066201][T19917] BTRFS info (device loop3): using free space tree [ 722.073255][T19917] BTRFS info (device loop3): has skinny extents [ 722.091374][T19933] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.7197 (19933) [ 722.164574][T19933] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 722.228374][T19933] BTRFS info (device loop4): using free space tree [ 722.265620][T19919] BTRFS info (device loop0): enabling ssd optimizations [ 722.298897][T19933] BTRFS info (device loop4): has skinny extents [ 722.402967][T19917] BTRFS info (device loop3): enabling ssd optimizations [ 722.748482][T19933] BTRFS info (device loop4): enabling ssd optimizations [ 724.745286][T19998] set_capacity_and_notify: 1 callbacks suppressed [ 724.745305][T19998] loop0: detected capacity change from 0 to 32768 [ 724.894035][T19998] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 724.926190][T19998] dlm: no local IP address has been set [ 724.961644][T19998] dlm: cannot start dlm midcomms -107 [ 724.969815][T19998] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 725.883554][T20002] loop4: detected capacity change from 0 to 32768 [ 725.944722][T20002] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 725.968918][T20006] loop0: detected capacity change from 0 to 32768 [ 725.980927][T20002] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 726.024105][T20006] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.7204 (20006) [ 726.055442][T20002] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 726.080395][T20006] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 726.096633][T20006] BTRFS info (device loop0): using free space tree [ 726.105970][T11676] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 726.112825][T11676] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 726.125536][T20006] BTRFS info (device loop0): has skinny extents [ 726.364779][T11676] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 235ms [ 726.376692][T11676] gfs2: fsid=syz:syz.0: jid=0: Done [ 726.403478][T20002] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 726.529920][T20006] BTRFS info (device loop0): enabling ssd optimizations [ 726.952500][T20008] loop1: detected capacity change from 0 to 32768 [ 727.006984][T20008] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 727.022232][T20008] CPU: 0 PID: 20008 Comm: syz.1.7205 Not tainted syzkaller #0 [ 727.029873][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 727.040606][T20008] Call Trace: [ 727.043937][T20008] [ 727.046925][T20008] dump_stack_lvl+0x188/0x250 [ 727.051664][T20008] ? show_regs_print_info+0x20/0x20 [ 727.056999][T20008] ? load_image+0x400/0x400 [ 727.061563][T20008] sysfs_create_dir_ns+0x26a/0x290 [ 727.067148][T20008] ? sysfs_warn_dup+0xa0/0xa0 [ 727.072005][T20008] ? do_raw_spin_unlock+0x11d/0x230 [ 727.077280][T20008] kobject_add_internal+0x6e0/0xd90 [ 727.082869][T20008] kobject_init_and_add+0x128/0x190 [ 727.088120][T20008] ? lockdep_softirqs_off+0x430/0x430 [ 727.093554][T20008] ? kobject_add+0x230/0x230 [ 727.098187][T20008] ? __init_swait_queue_head+0xa5/0x150 [ 727.103960][T20008] gfs2_sys_fs_add+0x24f/0x4b0 [ 727.109166][T20008] ? gfs2_recover_set+0x240/0x240 [ 727.114465][T20008] ? snprintf+0xe5/0x140 [ 727.118871][T20008] ? __free_pages+0x95/0x1a0 [ 727.123512][T20008] ? vscnprintf+0x80/0x80 [ 727.127903][T20008] gfs2_fill_super+0x120f/0x1f00 [ 727.132905][T20008] ? gfs2_reconfigure+0xd30/0xd30 [ 727.138144][T20008] ? sb_set_blocksize+0xa5/0xe0 [ 727.143052][T20008] get_tree_bdev+0x3f1/0x610 [ 727.147837][T20008] ? gfs2_reconfigure+0xd30/0xd30 [ 727.153143][T20008] gfs2_get_tree+0x4d/0x1e0 [ 727.158152][T20008] vfs_get_tree+0x88/0x270 [ 727.162627][T20008] do_new_mount+0x24a/0xa40 [ 727.167540][T20008] __se_sys_mount+0x2e3/0x3d0 [ 727.172300][T20008] ? __x64_sys_mount+0xc0/0xc0 [ 727.177131][T20008] ? lockdep_hardirqs_on+0x94/0x140 [ 727.182391][T20008] ? __x64_sys_mount+0x1c/0xc0 [ 727.187212][T20008] do_syscall_64+0x4c/0xa0 [ 727.191704][T20008] ? clear_bhb_loop+0x30/0x80 [ 727.196518][T20008] ? clear_bhb_loop+0x30/0x80 [ 727.201339][T20008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 727.207377][T20008] RIP: 0033:0x7f5c23df504a [ 727.211860][T20008] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.231610][T20008] RSP: 002b:00007f5c2204ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 727.240080][T20008] RAX: ffffffffffffffda RBX: 00007f5c2204cee0 RCX: 00007f5c23df504a [ 727.248106][T20008] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f5c2204cea0 [ 727.256420][T20008] RBP: 00002000000124c0 R08: 00007f5c2204cee0 R09: 0000000000000000 [ 727.264965][T20008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 727.273091][T20008] R13: 00007f5c2204cea0 R14: 00000000000124ab R15: 0000200000012540 [ 727.281216][T20008] [ 727.483194][T20008] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 727.525821][T20008] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 728.251218][T20035] loop1: detected capacity change from 0 to 4096 [ 728.338293][ T2302] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 728.392155][T20035] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 728.637537][ T2302] usb 4-1: Using ep0 maxpacket: 16 [ 728.776662][ T2302] usb 4-1: config 18 has an invalid interface number: 105 but max is 0 [ 728.785073][ T2302] usb 4-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 728.830227][ T2302] usb 4-1: config 18 has no interface number 0 [ 728.836623][ T2302] usb 4-1: config 18 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 728.897055][T20046] loop1: detected capacity change from 0 to 4096 [ 728.904839][ T2302] usb 4-1: config 18 interface 105 has no altsetting 0 [ 728.974853][T20046] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 729.140093][ T2302] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 729.161252][ T2302] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 729.172357][ T2302] usb 4-1: Product: syz [ 729.182940][ T2302] usb 4-1: Manufacturer: syz [ 729.191370][ T2302] usb 4-1: SerialNumber: syz [ 729.381080][T20040] loop2: detected capacity change from 0 to 32768 [ 729.464874][T20040] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop2 scanned by syz.2.7210 (20040) [ 729.487213][T20051] loop1: detected capacity change from 0 to 1024 [ 729.512494][T20040] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 729.537361][T20040] BTRFS info (device loop2): using free space tree [ 729.546714][T20040] BTRFS info (device loop2): has skinny extents [ 729.557160][ T4626] usb 4-1: USB disconnect, device number 30 [ 729.864344][T20040] BTRFS info (device loop2): enabling ssd optimizations [ 730.581340][T20072] loop1: detected capacity change from 0 to 40427 [ 730.634976][T20072] F2FS-fs (loop1): build fault injection attr: rate: 16, type: 0x1ffff [ 730.663088][T20072] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x3 [ 730.706980][T20072] F2FS-fs (loop1): invalid crc value [ 730.759084][T20072] F2FS-fs (loop1) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4480/0x6de0 [ 730.781866][T20072] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 731.383930][T20076] loop2: detected capacity change from 0 to 32768 [ 731.475058][T20076] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 scanned by syz.2.7216 (20076) [ 731.544634][T20076] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 731.567275][T20076] BTRFS info (device loop2): using free space tree [ 731.577370][T20076] BTRFS info (device loop2): has skinny extents [ 731.951170][T20076] BTRFS info (device loop2): enabling ssd optimizations [ 732.720116][T20104] loop4: detected capacity change from 0 to 256 [ 732.748359][T20105] loop2: detected capacity change from 0 to 64 [ 733.034299][T20107] loop4: detected capacity change from 0 to 512 [ 733.081666][T20109] loop2: detected capacity change from 0 to 1024 [ 733.178062][T20107] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 733.225235][T20109] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 733.648624][T20118] loop2: detected capacity change from 0 to 128 [ 733.970538][T20120] loop2: detected capacity change from 0 to 1024 [ 734.186740][T20122] loop3: detected capacity change from 0 to 128 [ 734.204545][T20114] loop4: detected capacity change from 0 to 32768 [ 734.276764][T20114] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.7224 (20114) [ 734.380758][T20114] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 734.454998][T20114] BTRFS info (device loop4): using free space tree [ 734.461805][T20114] BTRFS info (device loop4): has skinny extents [ 734.959515][T20114] BTRFS info (device loop4): enabling ssd optimizations [ 736.018483][T20159] set_capacity_and_notify: 3 callbacks suppressed [ 736.018501][T20159] loop4: detected capacity change from 0 to 2048 [ 736.350663][T20161] loop4: detected capacity change from 0 to 128 [ 736.452483][T20155] loop0: detected capacity change from 0 to 32768 [ 736.503315][T20155] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop0 scanned by syz.0.7237 (20155) [ 736.560204][T20163] loop4: detected capacity change from 0 to 256 [ 736.603671][T20155] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 736.668841][T20155] BTRFS info (device loop0): using free space tree [ 736.699219][T20155] BTRFS info (device loop0): has skinny extents [ 736.796325][T20167] loop4: detected capacity change from 0 to 128 [ 737.092779][T20155] BTRFS info (device loop0): enabling ssd optimizations [ 737.154815][T20157] loop1: detected capacity change from 0 to 32768 [ 737.256811][T20157] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 737.306533][T20157] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 737.360546][T20157] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 737.424371][ T4628] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 737.431287][ T4628] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 737.711053][ T4628] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 261ms [ 737.734525][ T4628] gfs2: fsid=syz:syz.0: jid=0: Done [ 737.751566][T20157] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 738.788604][T20190] loop0: detected capacity change from 0 to 8192 [ 739.124908][T20196] loop1: detected capacity change from 0 to 512 [ 739.148033][T20194] loop0: detected capacity change from 0 to 4096 [ 739.164682][T20192] loop2: detected capacity change from 0 to 8192 [ 739.279381][T20194] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 739.306317][T20199] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.445126][T20198] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 739.690565][T20201] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 739.815481][T20206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.912822][T20208] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 740.414570][T20214] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 740.632587][T20205] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop0 scanned by syz.0.7249 (20205) [ 740.690655][T20205] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 740.761465][T20205] BTRFS info (device loop0): using free space tree [ 740.802072][T20205] BTRFS info (device loop0): has skinny extents [ 740.866217][T20210] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7251 (20210) [ 740.913620][T20210] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 741.031624][T20210] BTRFS info (device loop1): max_inline at 0 [ 741.090555][T20210] BTRFS info (device loop1): force clearing of disk cache [ 741.134326][T20210] BTRFS info (device loop1): setting nodatasum [ 741.140943][T20210] BTRFS info (device loop1): use zlib compression, level 3 [ 741.149171][T20210] BTRFS info (device loop1): allowing degraded mounts [ 741.156200][T20210] BTRFS info (device loop1): enabling disk space caching [ 741.163660][T20205] BTRFS info (device loop0): enabling ssd optimizations [ 741.172124][T20210] BTRFS info (device loop1): disk space caching is enabled [ 741.179542][T20210] BTRFS info (device loop1): has skinny extents [ 741.244274][T20216] (syz.3.7254,20216,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 741.261600][T20216] (syz.3.7254,20216,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 741.589815][T20210] BTRFS info (device loop1): enabling ssd optimizations [ 741.615029][T20210] BTRFS info (device loop1): clearing free space tree [ 741.667725][T20210] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 741.699454][T20210] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 741.731084][T20250] set_capacity_and_notify: 8 callbacks suppressed [ 741.731102][T20250] loop3: detected capacity change from 0 to 4096 [ 741.909547][T20260] loop0: detected capacity change from 0 to 4096 [ 742.039002][T20260] ntfs: volume version 3.1. [ 742.059645][T20218] loop4: detected capacity change from 0 to 32768 [ 742.115155][T20250] ntfs: volume version 3.1. [ 742.154200][T20218] (syz.4.7255,20218,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 742.234860][T20218] (syz.4.7255,20218,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 742.669351][T20263] loop0: detected capacity change from 0 to 4096 [ 742.854376][T20263] ntfs: volume version 3.1. [ 743.267233][T20269] loop1: detected capacity change from 0 to 4096 [ 743.504160][T20269] ntfs: volume version 3.1. [ 743.617717][T20265] loop4: detected capacity change from 0 to 32768 [ 743.693853][T20265] (syz.4.7261,20265,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 743.726085][T20265] (syz.4.7261,20265,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 743.807128][T20273] loop2: detected capacity change from 0 to 4096 [ 743.977556][T20275] loop1: detected capacity change from 0 to 4096 [ 744.001578][T20278] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 744.040717][T20275] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 744.055818][T20268] loop3: detected capacity change from 0 to 32768 [ 744.123615][T20268] (syz.3.7260,20268,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 744.176545][T20268] (syz.3.7260,20268,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 745.091770][T20280] loop2: detected capacity change from 0 to 32768 [ 745.934383][T20282] (syz.3.7267,20282,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 745.975455][T20282] (syz.3.7267,20282,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 746.249320][T20286] (syz.2.7269,20286,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 746.310597][T20286] (syz.2.7269,20286,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 747.080588][T20288] (syz.3.7270,20288,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 747.160716][T20288] (syz.3.7270,20288,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 747.409026][T20290] set_capacity_and_notify: 3 callbacks suppressed [ 747.409042][T20290] loop2: detected capacity change from 0 to 32768 [ 747.473388][T20290] (syz.2.7271,20290,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 747.516883][T20290] (syz.2.7271,20290,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 747.808537][T20296] loop2: detected capacity change from 0 to 4096 [ 747.924909][T20299] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 748.133244][T20292] loop0: detected capacity change from 0 to 32768 [ 750.914161][T20298] loop4: detected capacity change from 0 to 131072 [ 750.978357][T20298] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 750.987687][T20298] REISERFS (device loop4): using ordered data mode [ 751.083620][T20298] reiserfs: using flush barriers [ 751.144043][T20298] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 751.250697][T20298] REISERFS (device loop4): checking transaction log (loop4) [ 752.357436][T20310] loop3: detected capacity change from 0 to 32768 [ 752.414571][T20310] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 752.437771][T20310] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 752.509514][T20310] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 13ms [ 752.560446][ T4565] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 752.567734][ T4565] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 752.775505][ T4565] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 194ms [ 752.786282][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.792696][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.827763][ T4565] gfs2: fsid=syz:syz.0: jid=0: Done [ 752.833166][T20310] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 753.443795][T20322] loop1: detected capacity change from 0 to 8 [ 753.705312][T20324] loop1: detected capacity change from 0 to 8 [ 754.131660][T20326] loop1: detected capacity change from 0 to 3 [ 754.193092][T20328] loop3: detected capacity change from 0 to 1 [ 754.237108][T20326] attempt to access beyond end of device [ 754.237108][T20326] loop1: rw=2048, want=8, limit=3 [ 754.279630][T20326] SQUASHFS error: Failed to read block 0x0: -5 [ 754.292829][T20328] attempt to access beyond end of device [ 754.292829][T20328] loop3: rw=2048, want=8, limit=1 [ 754.312265][T20326] unable to read squashfs_super_block [ 754.342001][T20328] SQUASHFS error: Failed to read block 0x0: -5 [ 754.386343][T20328] unable to read squashfs_super_block [ 754.647103][T20332] loop3: detected capacity change from 0 to 128 [ 754.721462][T20332] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 754.791399][T20332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 755.098420][T20334] loop3: detected capacity change from 0 to 2048 [ 755.217350][T20334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.550348][T20338] loop2: detected capacity change from 0 to 4096 [ 756.553590][T20336] loop3: detected capacity change from 0 to 32768 [ 756.614043][T20336] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 756.643760][T20336] dlm: no local IP address has been set [ 756.661814][T20336] dlm: cannot start dlm midcomms -107 [ 756.675364][T20336] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 756.757859][T20338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 756.771527][T20340] loop0: detected capacity change from 0 to 512 [ 756.800684][T20338] UDF-fs: Scanning with blocksize 512 failed [ 756.862256][T20338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.947849][T20340] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 756.986441][T20342] loop3: detected capacity change from 0 to 512 [ 756.988383][T20340] UDF-fs: Scanning with blocksize 512 failed [ 757.034959][T20340] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 757.071520][T20340] UDF-fs: Scanning with blocksize 1024 failed [ 757.133538][T20342] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 757.135896][T20340] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 757.156945][T20342] UDF-fs: Scanning with blocksize 512 failed [ 757.174545][T20342] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 757.195671][T20340] UDF-fs: Scanning with blocksize 2048 failed [ 757.201935][T20342] UDF-fs: Scanning with blocksize 1024 failed [ 757.211325][T20344] attempt to access beyond end of device [ 757.211325][T20344] loop2: rw=2048, want=8, limit=1 [ 757.235551][T20340] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 757.242549][T20344] SQUASHFS error: Failed to read block 0x0: -5 [ 757.270883][T20342] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 757.290617][T20344] unable to read squashfs_super_block [ 757.300442][T20342] UDF-fs: Scanning with blocksize 2048 failed [ 757.308640][T20340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.346525][T20342] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 757.405041][T20342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.651684][T20346] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 757.723390][T20346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.771366][T20352] ufs: You didn't specify the type of your ufs filesystem [ 757.771366][T20352] [ 757.771366][T20352] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 757.771366][T20352] [ 757.771366][T20352] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 757.925663][T20352] ufs: ufstype=old is supported read-only [ 757.987105][T20352] ufs: ufs_fill_super(): bad magic number [ 758.517453][T20358] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 758.552041][T20358] REISERFS (device loop0): using ordered data mode [ 758.570032][T20358] reiserfs: using flush barriers [ 758.610975][T20358] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 758.631642][T20358] REISERFS (device loop0): checking transaction log (loop0) [ 758.942159][T20358] REISERFS (device loop0): Using tea hash to sort names [ 758.949831][T20358] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 758.969969][T20363] set_capacity_and_notify: 6 callbacks suppressed [ 758.969986][T20363] loop1: detected capacity change from 0 to 512 [ 758.994978][T20298] REISERFS (device loop4): Using rupasov hash to sort names [ 759.004139][T20298] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 759.205576][T20356] loop2: detected capacity change from 0 to 32768 [ 759.245563][T20365] loop1: detected capacity change from 0 to 8 [ 759.612348][T20368] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 759.642804][T20370] loop0: detected capacity change from 0 to 512 [ 759.743622][T20367] loop1: detected capacity change from 0 to 8192 [ 759.929450][T20372] loop0: detected capacity change from 0 to 2048 [ 760.390313][T20380] loop0: detected capacity change from 0 to 256 [ 760.726063][T20378] loop2: detected capacity change from 0 to 16384 [ 760.809565][T20378] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 760.841709][T20378] UDF-fs: Scanning with blocksize 512 failed [ 760.872756][T20378] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 760.920543][T20378] UDF-fs: Scanning with blocksize 1024 failed [ 760.951376][T20378] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 760.980922][T20378] UDF-fs: Scanning with blocksize 2048 failed [ 761.007300][T20378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 762.071736][T20387] loop3: detected capacity change from 0 to 32768 [ 762.257825][T20390] loop4: detected capacity change from 0 to 8192 [ 762.330878][T20390] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 762.424124][T20390] REISERFS (device loop4): using ordered data mode [ 762.485608][T20390] reiserfs: using flush barriers [ 762.528476][T20390] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 762.603047][T20390] REISERFS (device loop4): checking transaction log (loop4) [ 762.876540][T20390] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 762.929139][T20390] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 762.960628][T20390] REISERFS (device loop4): Remounting filesystem read-only [ 762.989615][T20390] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 763.024869][T20390] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 764.431789][T20395] XFS (loop3): Mounting V5 Filesystem [ 764.611992][T20395] XFS (loop3): Ending clean mount [ 764.742322][ T4593] XFS (loop3): Unmounting Filesystem [ 764.755309][T20409] set_capacity_and_notify: 2 callbacks suppressed [ 764.755325][T20409] loop0: detected capacity change from 0 to 128 [ 764.849876][T20409] zonefs (loop0) ERROR: Not a zoned block device [ 765.228738][T20399] loop1: detected capacity change from 0 to 65536 [ 766.221666][T20415] loop1: detected capacity change from 0 to 32768 [ 766.859611][T20411] loop0: detected capacity change from 0 to 65536 [ 767.067350][T20411] XFS (loop0): Mounting V5 Filesystem [ 767.275894][T20411] XFS (loop0): Ending clean mount [ 767.367701][ T4589] XFS (loop0): Unmounting Filesystem [ 767.957699][T20419] loop1: detected capacity change from 0 to 65536 [ 768.063736][T20419] XFS (loop1): Mounting V5 Filesystem [ 768.251573][T20413] loop2: detected capacity change from 0 to 131072 [ 768.303447][T20419] XFS (loop1): Ending clean mount [ 768.405279][T20413] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 768.429852][T20417] loop3: detected capacity change from 0 to 131072 [ 768.435037][T20413] REISERFS (device loop2): using ordered data mode [ 768.443167][T20413] reiserfs: using flush barriers [ 768.456009][T20413] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 768.480764][T20413] REISERFS (device loop2): checking transaction log (loop2) [ 768.489432][ T4590] XFS (loop1): Unmounting Filesystem [ 768.633870][T20417] REISERFS (device loop3): found reiserfs format "3.6" with standard journal [ 768.687360][T20417] REISERFS (device loop3): using ordered data mode [ 768.694129][T20417] reiserfs: using flush barriers [ 768.709695][T20417] REISERFS (device loop3): journal params: device loop3, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 768.758058][T20417] REISERFS (device loop3): checking transaction log (loop3) [ 772.041583][T20447] loop0: detected capacity change from 0 to 512 [ 772.408729][T20417] REISERFS (device loop3): Using r5 hash to sort names [ 772.440636][T20417] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 773.913512][T20449] loop0: detected capacity change from 0 to 65536 [ 774.070612][T20449] XFS (loop0): Mounting V5 Filesystem [ 774.188614][T20449] XFS (loop0): Ending clean mount [ 774.253972][ T4589] XFS (loop0): Unmounting Filesystem [ 775.007213][T20413] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 775.050211][T20413] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 775.085087][T20413] REISERFS (device loop2): Remounting filesystem read-only [ 775.092386][T20413] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 775.158365][T20413] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 775.312568][T20465] dlm: dev_write: no op 0 74000000000000 [ 776.747507][T20467] loop0: detected capacity change from 0 to 65536 [ 776.858672][T20467] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 777.102852][T20471] loop4: detected capacity change from 0 to 65536 [ 777.236763][T20471] XFS (loop4): Mounting V5 Filesystem [ 777.511483][T20471] XFS (loop4): Ending clean mount [ 777.649348][ T4597] XFS (loop4): Unmounting Filesystem [ 779.051496][T20529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.500540][T20550] device geneve1 entered promiscuous mode [ 779.632474][T20556] loop4: detected capacity change from 0 to 64 [ 779.879253][T20486] loop2: detected capacity change from 0 to 65536 [ 780.008998][T20486] XFS (loop2): Mounting V5 Filesystem [ 780.167306][T20486] XFS (loop2): Ending clean mount [ 780.205011][T20592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.320532][ T4594] XFS (loop2): Unmounting Filesystem [ 780.630042][T20606] loop1: detected capacity change from 0 to 1024 [ 780.753530][T20612] xt_connbytes: Forcing CT accounting to be enabled [ 780.807641][T20614] netlink: 'syz.3.7399': attribute type 1 has an invalid length. [ 781.139290][T20626] netlink: 'syz.3.7405': attribute type 1 has an invalid length. [ 781.179634][T20626] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.7405'. [ 781.405983][T20638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7409'. [ 781.431726][T20638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7409'. [ 781.453730][T20641] netlink: 'syz.2.7412': attribute type 12 has an invalid length. [ 781.463672][T20643] xt_connbytes: Forcing CT accounting to be enabled [ 781.594335][T20650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7414'. [ 781.890605][T20664] loop1: detected capacity change from 0 to 64 [ 781.912887][ T4577] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 782.179923][ T4577] usb 4-1: Using ep0 maxpacket: 32 [ 782.308565][ T4577] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 782.329919][T20688] (syz.4.7435,20688,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 782.339721][ T4577] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 782.359825][ T4577] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 782.380210][T20688] (syz.4.7435,20688,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 782.389164][ T4577] usb 4-1: config 1 has no interface number 0 [ 782.402047][ T4577] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.439005][ T4577] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 782.484876][ T4577] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 782.528114][ T4577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.610210][ T4577] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 782.626920][T20703] MTD: Couldn't look up '': -22 [ 782.793021][T20711] netlink: 'syz.0.7448': attribute type 4 has an invalid length. [ 782.821010][T20711] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.7448'. [ 782.843859][ T4577] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 783.066918][ T4632] usb 4-1: USB disconnect, device number 31 [ 783.084611][ T4632] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 783.168995][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7456'. [ 783.188836][T20735] loop1: detected capacity change from 0 to 256 [ 783.201096][T20736] netlink: 'syz.2.7458': attribute type 2 has an invalid length. [ 783.232365][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7456'. [ 783.314072][T20735] FAT-fs (loop1): Directory bread(block 64) failed [ 783.320673][T20735] FAT-fs (loop1): Directory bread(block 65) failed [ 783.384004][T20735] FAT-fs (loop1): Directory bread(block 66) failed [ 783.416335][T20735] FAT-fs (loop1): Directory bread(block 67) failed [ 783.431007][T20735] FAT-fs (loop1): Directory bread(block 68) failed [ 783.437695][T20735] FAT-fs (loop1): Directory bread(block 69) failed [ 783.496216][T20735] FAT-fs (loop1): Directory bread(block 70) failed [ 783.524783][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7464'. [ 783.544365][T20735] FAT-fs (loop1): Directory bread(block 71) failed [ 783.559910][T20735] FAT-fs (loop1): Directory bread(block 72) failed [ 783.601830][T20735] FAT-fs (loop1): Directory bread(block 73) failed [ 783.750038][T20753] loop4: detected capacity change from 0 to 1764 [ 783.907476][T20753] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 784.049079][T20772] loop1: detected capacity change from 0 to 256 [ 784.328164][T20785] netlink: 'syz.1.7478': attribute type 5 has an invalid length. [ 784.381576][T20785] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7478'. [ 784.499927][ T2302] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 784.652292][T20802] loop4: detected capacity change from 0 to 4096 [ 784.744587][T20802] __ntfs_error: 8 callbacks suppressed [ 784.744606][T20802] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 784.821187][T20802] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 784.932911][T20802] ntfs: volume version 0.0. [ 784.957068][T20823] loop2: detected capacity change from 0 to 16 [ 785.053157][T20823] erofs: (device loop2): mounted with root inode @ nid 36. [ 785.066121][ T2302] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 785.075248][ T2302] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 785.135937][ T2302] usb 4-1: Product: syz [ 785.140300][ T2302] usb 4-1: SerialNumber: syz [ 785.195252][ T2302] usb 4-1: config 0 descriptor?? [ 785.403878][T20841] loop1: detected capacity change from 0 to 2048 [ 785.474803][T20841] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 785.507650][ T2302] ldusb 4-1:0.0: Interrupt in endpoint not found [ 785.521983][T20841] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 785.546814][ T2302] usb 4-1: USB disconnect, device number 32 [ 785.590352][T11677] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 785.598096][ T4632] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 785.899999][T11677] usb 3-1: Using ep0 maxpacket: 16 [ 786.028440][T11677] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 786.042516][T11677] usb 3-1: config 0 has no interface number 0 [ 786.056792][T11677] usb 3-1: config 0 interface 246 has no altsetting 0 [ 786.103244][T11670] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 786.210292][ T4632] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 786.230305][ T4632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.250377][ T4632] usb 5-1: Product: syz [ 786.255218][T11677] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 786.267867][T20885] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7527'. [ 786.277420][ T4632] usb 5-1: Manufacturer: syz [ 786.282063][ T4632] usb 5-1: SerialNumber: syz [ 786.287271][T11677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.300999][T11677] usb 3-1: Product: syz [ 786.305321][T11677] usb 3-1: Manufacturer: syz [ 786.312576][ T4632] usb 5-1: config 0 descriptor?? [ 786.326347][T11677] usb 3-1: SerialNumber: syz [ 786.340352][T11677] usb 3-1: config 0 descriptor?? [ 786.360526][ T4632] hub 5-1:0.0: bad descriptor, ignoring hub [ 786.366575][ T4632] hub: probe of 5-1:0.0 failed with error -5 [ 786.388555][ T4632] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 786.397217][T11670] usb 2-1: Using ep0 maxpacket: 16 [ 786.406874][ T4632] usb 5-1: Detected FT-X [ 786.493278][T20895] tmpfs: Bad value for 'mpol' [ 786.566269][T11670] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 786.594801][ T4632] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 786.611737][T20901] loop3: detected capacity change from 0 to 256 [ 786.619642][ T4632] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 786.653832][ T4632] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 786.662735][ T4632] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 786.728237][ T4632] usb 5-1: USB disconnect, device number 26 [ 786.750575][T11677] usb 3-1: USB disconnect, device number 12 [ 786.762388][ T4632] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 786.791118][T11670] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 786.812512][T11670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.821875][ T4632] ftdi_sio 5-1:0.0: device disconnected [ 786.827968][T20901] FAT-fs (loop3): Directory bread(block 64) failed [ 786.848938][T11670] usb 2-1: Product: syz [ 786.863675][T11670] usb 2-1: Manufacturer: syz [ 786.871437][T20901] FAT-fs (loop3): Directory bread(block 65) failed [ 786.891276][T11670] usb 2-1: SerialNumber: syz [ 786.908422][T11670] r8152-cfgselector 2-1: config 0 descriptor?? [ 786.929953][T20901] FAT-fs (loop3): Directory bread(block 66) failed [ 786.945910][T20901] FAT-fs (loop3): Directory bread(block 67) failed [ 786.955811][T20901] FAT-fs (loop3): Directory bread(block 68) failed [ 786.963006][T20901] FAT-fs (loop3): Directory bread(block 69) failed [ 786.970273][T20901] FAT-fs (loop3): Directory bread(block 70) failed [ 786.977286][T20901] FAT-fs (loop3): Directory bread(block 71) failed [ 786.986036][T20901] FAT-fs (loop3): Directory bread(block 72) failed [ 786.997545][T20911] netlink: 'syz.0.7540': attribute type 1 has an invalid length. [ 787.008062][T20901] FAT-fs (loop3): Directory bread(block 73) failed [ 787.264876][T20919] netlink: 'syz.4.7544': attribute type 1 has an invalid length. [ 787.330899][T20925] loop3: detected capacity change from 0 to 16 [ 787.428373][T11670] r8152-cfgselector 2-1: Unknown version 0x0000 [ 787.444583][T20925] erofs: (device loop3): mounted with root inode @ nid 36. [ 787.464410][T11670] r8152-cfgselector 2-1: USB disconnect, device number 24 [ 787.646477][T20942] loop4: detected capacity change from 0 to 256 [ 787.654752][T20938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 787.678676][T20941] loop0: detected capacity change from 0 to 256 [ 787.798104][T20942] FAT-fs (loop4): Directory bread(block 64) failed [ 787.818273][T20941] FAT-fs (loop0): Directory bread(block 64) failed [ 787.828631][T20954] xt_hashlimit: overflow, try lower: 3/0 [ 787.837332][T20942] FAT-fs (loop4): Directory bread(block 65) failed [ 787.855997][T20941] FAT-fs (loop0): Directory bread(block 65) failed [ 787.866783][T20941] FAT-fs (loop0): Directory bread(block 66) failed [ 787.873402][T20941] FAT-fs (loop0): Directory bread(block 67) failed [ 787.880428][T20941] FAT-fs (loop0): Directory bread(block 68) failed [ 787.887019][T20941] FAT-fs (loop0): Directory bread(block 69) failed [ 787.894232][T20942] FAT-fs (loop4): Directory bread(block 66) failed [ 787.894274][T20942] FAT-fs (loop4): Directory bread(block 67) failed [ 787.894342][T20942] FAT-fs (loop4): Directory bread(block 68) failed [ 787.894373][T20942] FAT-fs (loop4): Directory bread(block 69) failed [ 787.894449][T20942] FAT-fs (loop4): Directory bread(block 70) failed [ 787.894480][T20942] FAT-fs (loop4): Directory bread(block 71) failed [ 787.894555][T20942] FAT-fs (loop4): Directory bread(block 72) failed [ 787.894586][T20942] FAT-fs (loop4): Directory bread(block 73) failed [ 787.957038][T20941] FAT-fs (loop0): Directory bread(block 70) failed [ 787.964904][T20942] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 787.989679][T20941] FAT-fs (loop0): Directory bread(block 71) failed [ 788.008264][T20941] FAT-fs (loop0): Directory bread(block 72) failed [ 788.043825][T20941] FAT-fs (loop0): Directory bread(block 73) failed [ 788.067420][T20959] netlink: 'syz.3.7564': attribute type 1 has an invalid length. [ 788.237945][T20964] loop2: detected capacity change from 0 to 2048 [ 788.270001][T20966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.424313][T20978] loop0: detected capacity change from 0 to 256 [ 788.466098][T20964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 788.508684][T20964] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 788.754144][T20990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7577'. [ 788.966947][T21003] loop3: detected capacity change from 0 to 256 [ 788.981952][T21001] netlink: 'syz.2.7583': attribute type 30 has an invalid length. [ 789.016715][T21001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7583'. [ 789.239129][T21018] loop0: detected capacity change from 0 to 2048 [ 789.286359][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7592'. [ 789.345874][T21018] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 789.395694][T21018] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 789.433848][T21034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7594'. [ 789.460838][T21034] IPv6: sit1: Disabled Multicast RS [ 789.643675][T21042] loop1: detected capacity change from 0 to 128 [ 789.676310][T21046] 9pnet: Insufficient options for proto=fd [ 789.860915][ T4590] sysv_free_block: flc_count > flc_size [ 789.889566][ T4590] sysv_free_block: flc_count > flc_size [ 789.903559][ T4590] sysv_free_block: flc_count > flc_size [ 789.916925][ T4590] sysv_free_block: flc_count > flc_size [ 789.930927][ T4590] sysv_free_block: flc_count > flc_size [ 789.936646][ T4590] sysv_free_block: flc_count > flc_size [ 789.942866][ T4590] sysv_free_block: flc_count > flc_size [ 789.948626][ T4590] sysv_free_block: flc_count > flc_size [ 789.954887][ T4590] sysv_free_block: flc_count > flc_size [ 789.960683][ T4590] sysv_free_block: flc_count > flc_size [ 789.967546][ T4590] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 789.979493][T21054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 790.057398][T21063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7608'. [ 790.079799][T21063] IPv6: sit1: Disabled Multicast RS [ 790.228235][T21066] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 790.454182][T21084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7618'. [ 790.484456][T21072] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 790.677386][T21095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 790.730346][T21100] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 790.736939][T21100] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 790.790962][T21100] vhci_hcd vhci_hcd.0: Device attached [ 790.865110][T21105] FAT-fs (loop4): Directory bread(block 64) failed [ 790.875474][T21106] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 790.882045][T21106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 790.899702][T21105] FAT-fs (loop4): Directory bread(block 65) failed [ 790.919062][T21112] netlink: 'syz.0.7628': attribute type 3 has an invalid length. [ 790.942856][T21105] FAT-fs (loop4): Directory bread(block 66) failed [ 790.955855][T21105] FAT-fs (loop4): Directory bread(block 67) failed [ 790.963531][T21112] netlink: 'syz.0.7628': attribute type 1 has an invalid length. [ 790.993935][T21106] vhci_hcd vhci_hcd.0: Device attached [ 790.999957][T11670] vhci_hcd: vhci_device speed not set [ 791.017456][T21105] FAT-fs (loop4): Directory bread(block 68) failed [ 791.036320][T21107] vhci_hcd: connection closed [ 791.036685][T21101] vhci_hcd: connection closed [ 791.041981][ T1280] vhci_hcd: stop threads [ 791.057361][ T1280] vhci_hcd: release socket [ 791.074474][T21105] FAT-fs (loop4): Directory bread(block 69) failed [ 791.084870][T11670] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 791.093553][T21105] FAT-fs (loop4): Directory bread(block 70) failed [ 791.102789][T21103] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 791.130625][ T1280] vhci_hcd: disconnect device [ 791.146383][T21105] FAT-fs (loop4): Directory bread(block 71) failed [ 791.179996][ T1280] vhci_hcd: stop threads [ 791.186627][T21105] FAT-fs (loop4): Directory bread(block 72) failed [ 791.208921][ T1280] vhci_hcd: release socket [ 791.225749][T21105] FAT-fs (loop4): Directory bread(block 73) failed [ 791.233911][ T1280] vhci_hcd: disconnect device [ 791.547640][T21131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.907695][T21153] sctp: [Deprecated]: syz.3.7649 (pid 21153) Use of int in max_burst socket option deprecated. [ 791.907695][T21153] Use struct sctp_assoc_value instead [ 791.986238][T21161] set_capacity_and_notify: 3 callbacks suppressed [ 791.986258][T21161] loop2: detected capacity change from 0 to 256 [ 792.144814][T21167] netlink: 'syz.3.7656': attribute type 4 has an invalid length. [ 792.153001][T21167] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7656'. [ 792.162378][T21161] FAT-fs (loop2): Directory bread(block 64) failed [ 792.174893][T21161] FAT-fs (loop2): Directory bread(block 65) failed [ 792.192841][T21161] FAT-fs (loop2): Directory bread(block 66) failed [ 792.196127][T21162] loop4: detected capacity change from 0 to 2048 [ 792.206740][T21161] FAT-fs (loop2): Directory bread(block 67) failed [ 792.217328][T21161] FAT-fs (loop2): Directory bread(block 68) failed [ 792.223912][T21161] FAT-fs (loop2): Directory bread(block 69) failed [ 792.261149][T21167] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 792.297045][T21161] FAT-fs (loop2): Directory bread(block 70) failed [ 792.345217][T21161] FAT-fs (loop2): Directory bread(block 71) failed [ 792.404544][T21161] FAT-fs (loop2): Directory bread(block 72) failed [ 792.435297][T21167] syz.3.7656 (21167) used greatest stack depth: 20144 bytes left [ 792.450777][T21161] FAT-fs (loop2): Directory bread(block 73) failed [ 792.484115][T21161] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 792.547142][T21170] loop0: detected capacity change from 0 to 8192 [ 792.604449][T21177] netlink: 'syz.3.7660': attribute type 10 has an invalid length. [ 792.635455][T21170] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 792.653363][T21170] REISERFS (device loop0): using ordered data mode [ 792.666192][T21170] reiserfs: using flush barriers [ 792.690878][T21170] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 792.838813][T21170] REISERFS (device loop0): checking transaction log (loop0) [ 793.055073][T21200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7671'. [ 793.126292][T21170] REISERFS (device loop0): Using tea hash to sort names [ 793.133685][T21170] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 793.321228][T21207] loop1: detected capacity change from 0 to 2048 [ 793.480302][T21215] netlink: 'syz.2.7678': attribute type 1 has an invalid length. [ 793.505595][T21215] netlink: 'syz.2.7678': attribute type 2 has an invalid length. [ 793.540087][T21215] netlink: 'syz.2.7678': attribute type 1 has an invalid length. [ 793.622126][T21219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7681'. [ 793.682221][T21219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7681'. [ 793.788949][T21223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 793.979221][T21231] tmpfs: Bad value for 'mpol' [ 794.165441][T21227] loop4: detected capacity change from 0 to 4096 [ 794.217850][T21242] __nla_validate_parse: 1 callbacks suppressed [ 794.217870][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7689'. [ 794.261458][T21227] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 794.295184][T21227] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 794.384316][T21227] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 794.436001][T21250] device batadv0 entered promiscuous mode [ 794.457462][T21227] ntfs: volume version 3.1. [ 794.504847][T21227] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 794.546371][T21227] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 794.638353][T21227] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 794.665097][T21227] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 794.772016][T21227] ntfs: (device loop4): ntfs_read_locked_inode(): Inode is an extent inode! [ 794.781387][T21227] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x44 as bad. Run chkdsk. [ 795.069722][T21271] loop1: detected capacity change from 0 to 8192 [ 795.184154][T21271] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 795.226712][T21271] REISERFS (device loop1): using ordered data mode [ 795.233946][T21271] reiserfs: using flush barriers [ 795.249197][T21271] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 795.335388][T21289] loop2: detected capacity change from 0 to 512 [ 795.370912][T21271] REISERFS (device loop1): checking transaction log (loop1) [ 795.540964][T21289] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 795.648888][T21289] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.7710: Failed to acquire dquot type 1 [ 795.669832][ T4577] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 795.692328][T21271] REISERFS (device loop1): Using tea hash to sort names [ 795.713642][T21289] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.7710: corrupted inode contents [ 795.757053][T21289] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.7710: mark_inode_dirty error [ 795.757148][T21271] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 795.805419][T21289] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.7710: corrupted inode contents [ 795.859266][T21289] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.7710: mark_inode_dirty error [ 795.928589][T21289] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.7710: corrupted inode contents [ 795.931803][T21271] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 795.951027][ T4577] usb 5-1: Using ep0 maxpacket: 16 [ 795.972918][T21289] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 796.017730][T21289] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.7710: corrupted inode contents [ 796.040337][T21289] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.7710: mark_inode_dirty error [ 796.077752][T21289] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 796.097697][ T4577] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.120687][T21289] EXT4-fs (loop2): 1 truncate cleaned up [ 796.126860][T21289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 796.144616][T21312] device sit0 entered promiscuous mode [ 796.176884][T21312] netlink: 'syz.3.7721': attribute type 1 has an invalid length. [ 796.180465][T21289] ext4 filesystem being mounted at /1572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.195945][T21312] netlink: 'syz.3.7721': attribute type 3 has an invalid length. [ 796.316988][ T4577] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 796.343230][ T4577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.389604][ T4577] usb 5-1: Product: syz [ 796.415740][ T4577] usb 5-1: Manufacturer: syz [ 796.431146][ T4577] usb 5-1: SerialNumber: syz [ 796.485940][ T4577] usb 5-1: config 0 descriptor?? [ 796.520136][T21314] loop0: detected capacity change from 0 to 4096 [ 796.568413][T11670] vhci_hcd: vhci_device speed not set [ 796.607001][T21316] loop3: detected capacity change from 0 to 8192 [ 796.655695][T21316] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 796.655774][T21316] REISERFS (device loop3): using ordered data mode [ 796.655788][T21316] reiserfs: using flush barriers [ 796.657201][T21316] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 796.657555][T21316] REISERFS (device loop3): checking transaction log (loop3) [ 796.756650][ T4574] usb 5-1: USB disconnect, device number 27 [ 796.790399][T21314] ntfs: volume version 3.1. [ 797.066701][T21316] REISERFS (device loop3): Using tea hash to sort names [ 797.156009][T21316] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 797.200127][T21335] program syz.2.7731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.464264][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7736'. [ 797.495468][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7736'. [ 797.633335][T21347] loop4: detected capacity change from 0 to 128 [ 797.689160][T21347] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 797.768841][T21347] hpfs: filesystem error: improperly stopped [ 797.775025][T21347] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 797.868063][T21347] hpfs: You really don't want any checks? You are crazy... [ 797.868334][T21347] hpfs: hpfs_map_sector(): read error [ 797.868349][T21347] hpfs: code page support is disabled [ 797.868406][T21347] hpfs: hpfs_map_4sectors(): unaligned read [ 797.868442][T21347] hpfs: hpfs_map_4sectors(): unaligned read [ 797.868454][T21347] hpfs: filesystem error: unable to find root dir [ 797.889614][T21347] hpfs: hpfs_map_4sectors(): unaligned read [ 797.890357][T21347] hpfs: hpfs_map_sector(): read error [ 798.328825][T21387] loop1: detected capacity change from 0 to 256 [ 798.370893][T21378] loop2: detected capacity change from 0 to 8192 [ 798.411698][T21387] FAT-fs (loop1): Directory bread(block 64) failed [ 798.425451][T21389] loop3: detected capacity change from 0 to 128 [ 798.432496][T21387] FAT-fs (loop1): Directory bread(block 65) failed [ 798.454871][T21387] FAT-fs (loop1): Directory bread(block 66) failed [ 798.465988][T21387] FAT-fs (loop1): Directory bread(block 67) failed [ 798.475991][T21387] FAT-fs (loop1): Directory bread(block 68) failed [ 798.498410][T21387] FAT-fs (loop1): Directory bread(block 69) failed [ 798.507548][T21387] FAT-fs (loop1): Directory bread(block 70) failed [ 798.514473][T21396] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 798.524348][T21378] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 798.524826][T21378] REISERFS (device loop2): using ordered data mode [ 798.524842][T21378] reiserfs: using flush barriers [ 798.550973][T21389] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 798.574215][T21387] FAT-fs (loop1): Directory bread(block 71) failed [ 798.600363][T21378] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 798.618021][T21387] FAT-fs (loop1): Directory bread(block 72) failed [ 798.640120][T21389] hpfs: filesystem error: improperly stopped [ 798.679157][T21387] FAT-fs (loop1): Directory bread(block 73) failed [ 798.685487][T21378] REISERFS (device loop2): checking transaction log (loop2) [ 798.694832][T21389] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 798.712592][T21389] hpfs: You really don't want any checks? You are crazy... [ 798.766727][T21378] REISERFS (device loop2): Using r5 hash to sort names [ 798.785399][T21389] hpfs: hpfs_map_sector(): read error [ 798.793778][T21378] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 798.813177][T21389] hpfs: code page support is disabled [ 798.818708][T21389] hpfs: hpfs_map_4sectors(): unaligned read [ 798.893399][T21378] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 798.898838][T21389] hpfs: hpfs_map_4sectors(): unaligned read [ 798.957233][T21389] hpfs: filesystem error: unable to find root dir [ 799.044531][T21389] hpfs: hpfs_map_4sectors(): unaligned read [ 799.090786][T21389] hpfs: hpfs_map_sector(): read error [ 799.675786][T21427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7778'. [ 799.731890][T21427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7778'. [ 800.226503][T21458] sctp: [Deprecated]: syz.0.7793 (pid 21458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.226503][T21458] Use struct sctp_sack_info instead [ 800.265360][T21460] syz.1.7792 (21460): /proc/21459/oom_adj is deprecated, please use /proc/21459/oom_score_adj instead. [ 800.315187][T21449] loop3: detected capacity change from 0 to 4096 [ 800.340502][T21464] loop2: detected capacity change from 0 to 512 [ 800.395852][T21449] __ntfs_warning: 3 callbacks suppressed [ 800.395870][T21449] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 800.465294][T21464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 800.533656][T21464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 800.608137][T21464] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.7795: inode #15: comm syz.2.7795: iget: illegal inode # [ 800.645425][T21449] ntfs: volume version 3.1. [ 800.646086][T21472] loop4: detected capacity change from 0 to 8192 [ 800.678017][T21464] EXT4-fs (loop2): Remounting filesystem read-only [ 800.687932][T21464] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.7795: couldn't read orphan inode 15 (err -117) [ 800.717794][T21472] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 800.766245][T21472] REISERFS (device loop4): using ordered data mode [ 800.773412][T21472] reiserfs: using flush barriers [ 800.809015][T21472] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 800.883959][T21464] EXT4-fs (loop2): Remounting filesystem read-only [ 800.902013][T21472] REISERFS (device loop4): checking transaction log (loop4) [ 800.998826][T21464] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 801.128875][T21464] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.7795: inode #15: comm syz.2.7795: iget: illegal inode # [ 801.320229][T21472] REISERFS (device loop4): Using tea hash to sort names [ 801.342657][T21472] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 801.399845][T21472] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 801.475093][T21494] loop1: detected capacity change from 0 to 2048 [ 801.595377][ T5460] loop1: p3 < > p4 < > [ 801.599649][ T5460] loop1: partition table partially beyond EOD, truncated [ 801.637424][ T5460] loop1: p3 start 4284289 is beyond EOD, truncated [ 801.651389][T21501] program syz.3.7811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 801.695855][T21494] loop1: p3 < > p4 < > [ 801.701259][T21494] loop1: partition table partially beyond EOD, truncated [ 801.719007][T21504] dlm: non-version read from control device 4096 [ 801.752322][T21494] loop1: p3 start 4284289 is beyond EOD, truncated [ 801.826858][ T4574] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 801.976531][T11670] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 802.254708][ T4574] usb 1-1: unable to get BOS descriptor or descriptor too short [ 802.295245][T21526] netlink: 'syz.2.7823': attribute type 1 has an invalid length. [ 802.315509][T21526] netlink: 'syz.2.7823': attribute type 2 has an invalid length. [ 802.339384][T21526] netlink: 'syz.2.7823': attribute type 2 has an invalid length. [ 802.361297][T21526] netlink: 'syz.2.7823': attribute type 2 has an invalid length. [ 802.372547][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7823'. [ 802.404340][T11670] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 802.423587][T11670] usb 2-1: config 220 descriptor has 1 excess byte, ignoring [ 802.436312][T11670] usb 2-1: config 220 has no interface number 2 [ 802.456012][T11670] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 802.486810][T21530] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.7825'. [ 802.499414][T11670] usb 2-1: config 220 interface 0 has no altsetting 0 [ 802.507433][T21528] loop3: detected capacity change from 0 to 4096 [ 802.521869][ T4574] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 802.522466][T11670] usb 2-1: config 220 interface 76 has no altsetting 0 [ 802.542242][ T4574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.549369][T11670] usb 2-1: config 220 interface 1 has no altsetting 0 [ 802.575098][ T4574] usb 1-1: Product: syz [ 802.579431][ T4574] usb 1-1: Manufacturer: syz [ 802.584498][ T4574] usb 1-1: SerialNumber: syz [ 802.598656][T21528] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 802.610635][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7826'. [ 802.646023][T21528] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 802.669424][T21528] System zones: 0-5 [ 802.712081][T21528] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 802.736602][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.746673][ T4632] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 802.805340][T11670] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 802.821554][T11670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.852775][T11670] usb 2-1: Product: syz [ 802.881595][T11670] usb 2-1: Manufacturer: syz [ 802.917158][T11670] usb 2-1: SerialNumber: syz [ 802.940955][ T4574] usb 1-1: selecting invalid altsetting 1 [ 802.983093][ T4574] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 803.034124][ T4574] usb 1-1: USB disconnect, device number 2 [ 803.217541][ T4632] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 803.225973][ T4632] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.276625][ T4632] usb 5-1: config 1 has no interface number 0 [ 803.285185][T11891] udevd[11891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.301279][ T4632] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.344624][ T4632] usb 5-1: config 1 interface 188 has no altsetting 0 [ 803.377234][T11670] usb 2-1: selecting invalid altsetting 0 [ 803.383613][T11670] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 803.395170][T11670] usb 2-1: No valid video chain found. [ 803.517268][T11670] usb 2-1: selecting invalid altsetting 0 [ 803.523107][T11670] usbtest: probe of 2-1:220.1 failed with error -22 [ 803.596545][ T4632] usb 5-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 803.606863][T11670] usb 2-1: USB disconnect, device number 25 [ 803.625792][ T4632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.687922][ T4632] usb 5-1: Product: syz [ 803.692230][ T4632] usb 5-1: Manufacturer: syz [ 803.697015][ T4632] usb 5-1: SerialNumber: syz [ 803.785943][ T4632] usb 5-1: cannot find UAC_HEADER [ 803.861334][ T4632] snd-usb-audio: probe of 5-1:1.188 failed with error -22 [ 803.975649][T21574] netlink: 'syz.1.7845': attribute type 5 has an invalid length. [ 804.025602][T11670] usb 5-1: USB disconnect, device number 28 [ 804.208451][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7851'. [ 804.291874][T11891] udevd[11891]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.420287][ T154] [ 804.422943][ T154] ====================================================== [ 804.430391][ T154] WARNING: possible circular locking dependency detected [ 804.438521][ T154] syzkaller #0 Not tainted [ 804.443057][ T154] ------------------------------------------------------ [ 804.450378][ T154] kworker/u4:2/154 is trying to acquire lock: [ 804.456686][ T154] ffff88807fa1e990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 804.466338][ T154] [ 804.466338][ T154] but task is already holding lock: [ 804.473813][ T154] ffff88807fa1cc58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 804.484231][ T154] [ 804.484231][ T154] which lock already depends on the new lock. [ 804.484231][ T154] [ 804.495057][ T154] [ 804.495057][ T154] the existing dependency chain (in reverse order) is: [ 804.504648][ T154] [ 804.504648][ T154] -> #2 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 804.513863][ T154] percpu_down_read+0x46/0x1b0 [ 804.519594][ T154] ext4_writepages+0x20f/0x2df0 [ 804.525465][ T154] do_writepages+0x476/0x6e0 [ 804.530983][ T154] __writeback_single_inode+0x153/0xda0 [ 804.537960][ T154] writeback_single_inode+0x3cb/0x8e0 [ 804.544236][ T154] write_inode_now+0x23b/0x2c0 [ 804.549671][ T154] iput+0x5ab/0x8a0 [ 804.554137][ T154] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 804.560510][ T154] ext4_xattr_block_set+0x4fd/0x2d20 [ 804.566354][ T154] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 804.572826][ T154] __ext4_expand_extra_isize+0x301/0x3e0 [ 804.579661][ T154] __ext4_mark_inode_dirty+0x469/0x700 [ 804.585758][ T154] ext4_evict_inode+0xa8d/0x1090 [ 804.591347][ T154] evict+0x4c9/0x8d0 [ 804.595832][ T154] ext4_orphan_cleanup+0xad2/0x1320 [ 804.601802][ T154] ext4_fill_super+0x8d6e/0x94f0 [ 804.608021][ T154] mount_bdev+0x287/0x3c0 [ 804.613351][ T154] legacy_get_tree+0xe6/0x180 [ 804.618606][ T154] vfs_get_tree+0x88/0x270 [ 804.623773][ T154] do_new_mount+0x24a/0xa40 [ 804.629041][ T154] __se_sys_mount+0x2e3/0x3d0 [ 804.634360][ T154] do_syscall_64+0x4c/0xa0 [ 804.639365][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 804.645825][ T154] [ 804.645825][ T154] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 804.653578][ T154] down_read+0x44/0x2e0 [ 804.658297][ T154] ext4_setattr+0x728/0x1b60 [ 804.663675][ T154] notify_change+0xbcd/0xee0 [ 804.669262][ T154] chown_common+0x4a7/0x660 [ 804.674365][ T154] do_fchownat+0x147/0x240 [ 804.679340][ T154] __x64_sys_chown+0x7e/0x90 [ 804.684585][ T154] do_syscall_64+0x4c/0xa0 [ 804.689648][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 804.696687][ T154] [ 804.696687][ T154] -> #0 (jbd2_handle){++++}-{0:0}: [ 804.704024][ T154] __lock_acquire+0x2c42/0x7d10 [ 804.709525][ T154] lock_acquire+0x19e/0x400 [ 804.714592][ T154] wait_transaction_locked+0x1bb/0x270 [ 804.720709][ T154] add_transaction_credits+0x103/0xc80 [ 804.727099][ T154] start_this_handle+0x74d/0x15c0 [ 804.733014][ T154] jbd2__journal_start+0x2b7/0x5a0 [ 804.739147][ T154] __ext4_journal_start_sb+0x167/0x360 [ 804.745190][ T154] ext4_writepages+0xe53/0x2df0 [ 804.750734][ T154] do_writepages+0x476/0x6e0 [ 804.756062][ T154] __writeback_single_inode+0x153/0xda0 [ 804.762181][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 804.768047][ T154] __writeback_inodes_wb+0x12a/0x3f0 [ 804.774073][ T154] wb_writeback+0x46f/0xbe0 [ 804.779158][ T154] wb_workfn+0xb15/0xf20 [ 804.784052][ T154] process_one_work+0x85f/0x1010 [ 804.789808][ T154] worker_thread+0xaa6/0x1290 [ 804.795244][ T154] kthread+0x436/0x520 [ 804.799871][ T154] ret_from_fork+0x1f/0x30 [ 804.804846][ T154] [ 804.804846][ T154] other info that might help us debug this: [ 804.804846][ T154] [ 804.815106][ T154] Chain exists of: [ 804.815106][ T154] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 804.815106][ T154] [ 804.828594][ T154] Possible unsafe locking scenario: [ 804.828594][ T154] [ 804.836225][ T154] CPU0 CPU1 [ 804.841719][ T154] ---- ---- [ 804.847119][ T154] lock(&sbi->s_writepages_rwsem); [ 804.852360][ T154] lock(&ei->xattr_sem); [ 804.859275][ T154] lock(&sbi->s_writepages_rwsem); [ 804.867039][ T154] lock(jbd2_handle); [ 804.871152][ T154] [ 804.871152][ T154] *** DEADLOCK *** [ 804.871152][ T154] [ 804.880278][ T154] 4 locks held by kworker/u4:2/154: [ 804.885829][ T154] #0: ffff888142598138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 804.896736][ T154] #1: ffffc90002017d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 804.908979][ T154] #2: ffff88807fa1a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 804.918990][ T154] #3: ffff88807fa1cc58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 804.929849][ T154] [ 804.929849][ T154] stack backtrace: [ 804.935887][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 804.943691][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.954267][ T154] Workqueue: writeback wb_workfn (flush-8:0) [ 804.960552][ T154] Call Trace: [ 804.963873][ T154] [ 804.966847][ T154] dump_stack_lvl+0x188/0x250 [ 804.971567][ T154] ? load_image+0x400/0x400 [ 804.976191][ T154] ? show_regs_print_info+0x20/0x20 [ 804.981560][ T154] ? print_circular_bug+0x12b/0x1a0 [ 804.986808][ T154] check_noncircular+0x296/0x330 [ 804.991792][ T154] ? add_chain_block+0x940/0x940 [ 804.996764][ T154] ? lockdep_lock+0xf1/0x1f0 [ 805.001396][ T154] ? mark_lock+0x94/0x320 [ 805.005771][ T154] ? _find_first_zero_bit+0xce/0xf0 [ 805.011016][ T154] __lock_acquire+0x2c42/0x7d10 [ 805.015926][ T154] ? mark_lock+0x94/0x320 [ 805.020292][ T154] ? verify_lock_unused+0x140/0x140 [ 805.025532][ T154] ? mark_lock+0x94/0x320 [ 805.029909][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 805.035934][ T154] ? lock_chain_count+0x20/0x20 [ 805.039889][T21565] loop0: detected capacity change from 0 to 32768 [ 805.040830][ T154] lock_acquire+0x19e/0x400 [ 805.051813][ T154] ? wait_transaction_locked+0x19f/0x270 [ 805.057486][ T154] ? wait_transaction_locked+0x17c/0x270 [ 805.063167][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 805.068368][ T154] ? read_lock_is_recursive+0x10/0x10 [ 805.073841][ T154] wait_transaction_locked+0x1bb/0x270 [ 805.079354][ T154] ? wait_transaction_locked+0x19f/0x270 [ 805.085061][ T154] ? ret_from_fork+0x1f/0x30 [ 805.089706][ T154] ? add_transaction_credits+0xc80/0xc80 [ 805.095376][ T154] ? init_wait_entry+0xd0/0xd0 [ 805.100269][ T154] ? ret_from_fork+0x1f/0x30 [ 805.104932][ T154] add_transaction_credits+0x103/0xc80 [ 805.110431][ T154] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 805.117219][ T154] ? read_lock_is_recursive+0x10/0x10 [ 805.122637][ T154] ? slab_post_alloc_hook+0x4c/0x380 [ 805.128170][ T154] ? jbd2__journal_start+0x1d2/0x5a0 [ 805.133584][ T154] ? __ext4_journal_start_sb+0x167/0x360 [ 805.139383][ T154] ? ext4_writepages+0xe53/0x2df0 [ 805.144461][ T154] ? __writeback_single_inode+0x153/0xda0 [ 805.150237][ T154] ? writeback_sb_inodes+0xa4e/0x1680 [ 805.155651][ T154] ? __writeback_inodes_wb+0x12a/0x3f0 [ 805.161245][ T154] ? wb_workfn+0xb15/0xf20 [ 805.165711][ T154] ? process_one_work+0x85f/0x1010 [ 805.170876][ T154] ? worker_thread+0xaa6/0x1290 [ 805.175788][ T154] ? ret_from_fork+0x1f/0x30 [ 805.180424][ T154] start_this_handle+0x74d/0x15c0 [ 805.185505][ T154] ? jbd2__journal_start+0x5a0/0x5a0 [ 805.191003][ T154] ? slab_post_alloc_hook+0x68/0x380 [ 805.196326][ T154] ? jbd2__journal_start+0x1d2/0x5a0 [ 805.201737][ T154] ? rcu_is_watching+0x11/0xa0 [ 805.206537][ T154] ? jbd2__journal_start+0x1d2/0x5a0 [ 805.211881][ T154] jbd2__journal_start+0x2b7/0x5a0 [ 805.217132][ T154] __ext4_journal_start_sb+0x167/0x360 [ 805.222679][ T154] ext4_writepages+0xe53/0x2df0 [ 805.227622][ T154] ? ext4_readpage+0x2e0/0x2e0 [ 805.232445][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 805.237514][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 805.242583][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 805.247814][ T154] ? ext4_readpage+0x2e0/0x2e0 [ 805.252616][ T154] do_writepages+0x476/0x6e0 [ 805.257260][ T154] ? __writepage+0x130/0x130 [ 805.261888][ T154] ? writeback_sb_inodes+0x67d/0x1680 [ 805.267391][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 805.272454][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 805.277511][ T154] __writeback_single_inode+0x153/0xda0 [ 805.283114][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 805.288341][ T154] ? queue_io+0x550/0x550 [ 805.292710][ T154] __writeback_inodes_wb+0x12a/0x3f0 [ 805.298191][ T154] wb_writeback+0x46f/0xbe0 [ 805.302789][ T154] ? rcu_lock_release+0x20/0x20 [ 805.307650][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 805.313758][ T154] wb_workfn+0xb15/0xf20 [ 805.318016][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 805.323761][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 805.329827][ T154] ? read_lock_is_recursive+0x10/0x10 [ 805.335259][ T154] ? preempt_schedule_thunk+0x16/0x18 [ 805.340680][ T154] process_one_work+0x85f/0x1010 [ 805.345678][ T154] ? worker_detach_from_pool+0x240/0x240 [ 805.351340][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 805.356695][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 805.361748][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 805.367348][ T154] ? wq_worker_running+0x97/0x170 [ 805.372646][ T154] worker_thread+0xaa6/0x1290 [ 805.377354][ T154] kthread+0x436/0x520 [ 805.381719][ T154] ? rcu_lock_release+0x20/0x20 [ 805.386702][ T154] ? kthread_blkcg+0xd0/0xd0 [ 805.391344][ T154] ret_from_fork+0x1f/0x30 [ 805.395797][ T154] [ 805.398900][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.578710][T11670] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 805.846073][T11670] usb 2-1: Using ep0 maxpacket: 16 [ 805.996224][T11670] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 806.004278][T11670] usb 2-1: config 0 has no interface number 0 [ 806.010548][T11670] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 806.156180][T11670] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 806.165290][T11670] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 806.173709][T11670] usb 2-1: Product: syz [ 806.177958][T11670] usb 2-1: SerialNumber: syz [ 806.184114][T11670] usb 2-1: config 0 descriptor?? [ 806.209595][T21586] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 806.232768][T11670] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 807.536677][ T4632] usb 2-1: USB disconnect, device number 26