last executing test programs: 1.359479495s ago: executing program 3 (id=6448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001400ff37193c0800130006"], 0x44}}, 0x4004000) 1.056774231s ago: executing program 3 (id=6455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, &(0x7f00000008c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f00000008c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 925.459527ms ago: executing program 4 (id=6459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 909.787554ms ago: executing program 3 (id=6460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x5c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_METRICS={0x35, 0x8, 0x0, 0x1, "8c5f8a2f45e7f083fe02a767683debe079642fd0184458f55b60e347b2ac2154d080b90e4ac96e0dcd02e02c9a361762aa"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) 820.182657ms ago: executing program 4 (id=6463): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x0, [0x2], [0x2000800]}) 819.797837ms ago: executing program 3 (id=6464): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@shortname_lower}, {}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@numtail}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@shortname_mixed}, {@utf8no}]}, 0x1, 0x371, &(0x7f0000002980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 802.194144ms ago: executing program 0 (id=6465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0xc, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 711.203438ms ago: executing program 0 (id=6469): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000c80)={0x0, [[0x8, 0x82, 0x6, 0x0, 0x4], [0x1, 0x0, 0x587c5f32], [0x4000091, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x8]], '\x00', [{0x400000, 0xfffffffe}, {}, {}, {}, {0x0, 0xfffffffc}, {0x3fec7e55, 0xfffffffd}, {}, {}, {0xfffffffc}, {}, {0x6}, {0xcbe, 0x3}], '\x00', 0x1300}) 708.762457ms ago: executing program 4 (id=6470): r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "9ecad92a17d6ac5045e3ade29f28bd6af5e44e631a4702a428f50287378eef4ec6c408956f3da90d6001df99e2a82b761f900e9c0942e2d1e01d4766c4ad2cf7", 0x25}, 0x48, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 702.932966ms ago: executing program 1 (id=6471): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x1f, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x9]}}}) 615.27994ms ago: executing program 4 (id=6472): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffe, 0x7}, 0x6) 615.1226ms ago: executing program 1 (id=6473): r0 = syz_open_dev$video(&(0x7f0000000580), 0x20100009, 0xe8480) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 615.03742ms ago: executing program 0 (id=6474): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 543.496207ms ago: executing program 4 (id=6476): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xfc, 0x553, &(0x7f00000009c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xac) 526.133114ms ago: executing program 2 (id=6477): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x45, 0x0, 0x0, {0x0, @tcp_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @local}, {0x0, @random="bd71ba5778f3"}, @ether_spec={@dev, @random="936938fc02cd"}, {0x0, @multicast}}}}) 523.907754ms ago: executing program 1 (id=6478): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e121f00040000000401a80016000800014009000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 500.89426ms ago: executing program 0 (id=6479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x404, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}], 0x30}, 0x0) 446.139679ms ago: executing program 2 (id=6480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x114}}, 0x0) 362.728534ms ago: executing program 0 (id=6481): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 362.449734ms ago: executing program 2 (id=6482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x88}}, 0x0) 297.159752ms ago: executing program 1 (id=6483): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x3a, 0x7, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}}) 286.439441ms ago: executing program 3 (id=6484): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000004900010036560000000000000a0000800000200000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 231.004361ms ago: executing program 2 (id=6485): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000080"], 0x50) rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f00000000c0)={0x2, 0x7fffffff, 0xffff0000}) 205.912236ms ago: executing program 2 (id=6486): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x9b, &(0x7f0000000080), &(0x7f0000000440)=0x4) 159.244058ms ago: executing program 1 (id=6487): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 122.592251ms ago: executing program 2 (id=6488): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 77.836153ms ago: executing program 1 (id=6489): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "b814e505bff64c508777be396801b1069eeb06254fc1e57b090ff3d09404b24b04465a4124c5119598b05ac0f2ba54c0a5c448e8b6f984692d267a2cb1dbb1d8", 0x36}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000017c0)='\x00', 0x0) 48.685657ms ago: executing program 3 (id=6490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a31000000002c000000020a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000faff00000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31"], 0xc8}}, 0x0) 36.641936ms ago: executing program 4 (id=6491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=@delnexthop={0x50, 0x69, 0x1, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x4, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 0s ago: executing program 0 (id=6492): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) kernel console output (not intermixed with test programs): 0: Unable to write latency timer: -71 [ 529.391165][T16838] set_capacity_and_notify: 3 callbacks suppressed [ 529.391178][T16838] loop4: detected capacity change from 0 to 8192 [ 529.416654][ T8641] ftdi_sio 3-1:0.123: GPIO initialisation failed: -71 [ 529.424613][ T8641] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 529.438817][ T8641] usb 3-1: USB disconnect, device number 24 [ 529.447444][ T8641] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 529.447947][ T6931] usb 4-1: USB disconnect, device number 13 [ 529.457330][ T8641] ftdi_sio 3-1:0.123: device disconnected [ 529.539487][ T8913] usb 1-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=76.8d [ 529.550117][ T8913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.563718][ T8913] usb 1-1: Product: syz [ 529.568201][ T8913] usb 1-1: Manufacturer: syz [ 529.572813][ T8913] usb 1-1: SerialNumber: syz [ 529.885945][ T150] block nbd2: Attempted send on invalid socket [ 529.893106][ T150] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 529.904567][T16848] qnx4: unable to read the superblock [ 529.920966][ T8913] HFC-S_USB: probe of 1-1:255.180 failed with error -5 [ 529.941621][ T8913] usb 1-1: USB disconnect, device number 21 [ 529.974266][ T9160] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 530.088357][T16852] loop3: detected capacity change from 0 to 16 [ 530.126271][T16852] erofs: (device loop3): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 530.142085][T16852] erofs: (device loop3): mounted with root inode @ nid 36. [ 530.209338][T16854] binder: Binderfs stats mode cannot be changed during a remount [ 530.221531][T16850] loop2: detected capacity change from 0 to 32768 [ 530.292444][T16850] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 530.326601][T16850] BTRFS info (device loop2): enabling disk space caching [ 530.337290][T16850] BTRFS info (device loop2): turning on sync discard [ 530.371192][T16850] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 530.410997][T16850] BTRFS error (device loop2): cannot disable free space tree [ 530.426343][T16850] BTRFS error (device loop2): open_ctree failed: -22 [ 530.614235][ T9160] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 530.623337][ T9160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.674659][ T9160] usb 5-1: Product: syz [ 530.679896][ T9160] usb 5-1: Manufacturer: syz [ 530.689802][ T9160] usb 5-1: SerialNumber: syz [ 531.019122][T16889] loop2: detected capacity change from 0 to 4096 [ 531.090032][T16893] dns_resolver: Unsupported server list version (0) [ 531.099148][T16889] __ntfs_error: 9 callbacks suppressed [ 531.099163][T16889] ntfs: (device loop2): parse_options(): Unrecognized mount option show½À1SA#Sœgaelic. [ 531.106048][ T9160] usb 5-1: unit 8 not found! [ 531.135903][ T9160] usb 5-1: unit 6 not found! [ 531.152916][ T9160] usb 5-1: USB disconnect, device number 11 [ 531.177313][T16889] ntfs: (device loop2): parse_options(): The gid option requires an argument. [ 531.298373][T16875] loop3: detected capacity change from 0 to 40427 [ 531.331260][T16875] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 531.338678][T16875] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 531.377234][T16875] F2FS-fs (loop3): Invalid uid value -1 [ 531.453760][ T8000] udevd[8000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.930802][T16929] loop0: detected capacity change from 0 to 4096 [ 532.008352][T16929] NILFS (loop0): mounting unchecked fs [ 532.066305][T16929] NILFS (loop0): recovery complete [ 532.071786][ T4265] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 532.090472][T16929] NILFS (loop0): Invalid checkpoint (checkpoint number=2147483646) [ 532.098507][T16929] NILFS (loop0): error -22 while loading last checkpoint (checkpoint number=2147483646) [ 532.108568][ T9162] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 532.345676][ T4265] usb 3-1: Using ep0 maxpacket: 8 [ 532.469316][T16955] loop0: detected capacity change from 0 to 32768 [ 532.474070][ T4265] usb 3-1: config 64 has an invalid interface number: 19 but max is 0 [ 532.484132][ T4265] usb 3-1: config 64 has no interface number 0 [ 532.493177][ T4265] usb 3-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 532.503609][ T4265] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 532.512802][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.527740][ T9162] usb 5-1: config 1 has an invalid interface number: 79 but max is 0 [ 532.536081][ T9162] usb 5-1: config 1 has no interface number 0 [ 532.548781][ T9162] usb 5-1: config 1 interface 79 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 532.559683][T16955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.5762 (16955) [ 532.572132][ T9160] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 532.581677][ T4265] usb 3-1: probing VID:PID(2201:012C) [ 532.587513][ T9162] usb 5-1: config 1 interface 79 has no altsetting 0 [ 532.599039][ T4265] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 532.605956][ T4265] usb 3-1: vub300 ignoring EndPoint(0) 02 [ 532.618544][ T4265] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 532.627481][ T4265] vub300: probe of 3-1:64.19 failed with error -22 [ 532.637599][T16955] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 532.654073][T16955] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 532.665195][T16955] BTRFS info (device loop0): trying to use backup root at mount time [ 532.673802][T16955] BTRFS info (device loop0): enabling ssd optimizations [ 532.681381][T16955] BTRFS info (device loop0): force zlib compression, level 3 [ 532.689500][T16955] BTRFS info (device loop0): setting nodatacow [ 532.695779][T16955] BTRFS info (device loop0): disabling tree log [ 532.702465][T16955] BTRFS info (device loop0): using free space tree [ 532.709433][T16955] BTRFS info (device loop0): has skinny extents [ 532.729723][ T628] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x9fd177ea level 0 [ 532.742300][T16955] BTRFS warning (device loop0): couldn't read tree root [ 532.749867][ T628] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 532.770168][T16955] BTRFS warning (device loop0): couldn't read tree root [ 532.784285][T16955] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 532.792622][ T8641] usb 3-1: USB disconnect, device number 25 [ 532.807461][T16955] BTRFS warning (device loop0): couldn't read tree root [ 532.814955][ T3031] BTRFS warning (device loop0): checksum verify failed on 5242880 wanted 0xc0857788 found 0x44e8ead6 level 0 [ 532.830648][T16955] BTRFS warning (device loop0): couldn't read tree root [ 532.882396][T16955] BTRFS error (device loop0): open_ctree failed: -22 [ 532.889941][ T4403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4403) [ 532.911447][ T9162] usb 5-1: string descriptor 0 read error: -22 [ 532.918020][ T9162] usb 5-1: New USB device found, idVendor=25f8, idProduct=2850, bcdDevice= 4.c7 [ 532.928309][ T9162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.972022][T16924] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 532.993421][ T9162] usb-storage 5-1:1.79: USB Mass Storage device detected [ 533.052190][ T9160] usb 4-1: unable to get BOS descriptor or descriptor too short [ 533.094612][ T9160] usb 4-1: not running at top speed; connect to a high speed hub [ 533.190325][ T9160] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 533.201475][ T9160] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 22, changing to 4 [ 533.227727][ T9160] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 39669, setting to 1023 [ 533.242198][ T9161] usb 5-1: USB disconnect, device number 12 [ 533.414947][ T9160] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 533.421990][T16988] loop0: detected capacity change from 0 to 512 [ 533.433919][ T9160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.446301][ T9160] usb 4-1: Product: syz [ 533.451129][ T9160] usb 4-1: Manufacturer: syz [ 533.455814][ T9160] usb 4-1: SerialNumber: syz [ 533.469416][T16988] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 533.477221][T16988] UDF-fs: Scanning with blocksize 512 failed [ 533.487699][T16988] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 533.495844][T16988] UDF-fs: Scanning with blocksize 1024 failed [ 533.504513][T16988] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 533.512306][T16988] UDF-fs: Scanning with blocksize 2048 failed [ 533.519300][T16988] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 533.536923][T16988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.703647][ T8913] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 533.926308][T16995] loop0: detected capacity change from 0 to 32768 [ 533.938987][ T9160] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 533.981401][ T9160] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 534.000853][T16995] (syz.0.5771,16995,1):ocfs2_check_set_options:1214 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 534.035274][ T9160] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 534.051330][T16995] (syz.0.5771,16995,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 534.090459][ T9160] usb 4-1: USB disconnect, device number 14 [ 534.099327][ T8913] usb 3-1: config 29 has an invalid interface number: 91 but max is 0 [ 534.118376][ T8913] usb 3-1: config 29 has no interface number 0 [ 534.139976][ T8913] usb 3-1: config 29 interface 91 has no altsetting 0 [ 534.204424][T17012] loop1: detected capacity change from 0 to 256 [ 534.301669][T17006] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 534.313204][ T8913] usb 3-1: New USB device found, idVendor=50ff, idProduct=2657, bcdDevice=56.04 [ 534.322271][ T8913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.346142][ T8000] udevd[8000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.389366][T17006] REISERFS (device loop4): using ordered data mode [ 534.439654][T17006] reiserfs: using flush barriers [ 534.453346][ T8913] usb 3-1: Product: syz [ 534.470802][ T8913] usb 3-1: Manufacturer: syz [ 534.484722][T17006] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 534.505812][ T8913] usb 3-1: SerialNumber: syz [ 534.566306][T17006] REISERFS (device loop4): checking transaction log (loop4) [ 534.605103][T17006] REISERFS warning: reiserfs-5083 is_leaf: wrong item type for item *3.5*[1 1 0x1 UNKNOWN], item_len 48, item_location 4004, free_space(entry_count) 0 [ 534.666785][T17006] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 534.692585][T17006] REISERFS (device loop4): Remounting filesystem read-only [ 534.716257][T17006] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 534.736554][T17006] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 534.850811][T17028] set_capacity_and_notify: 2 callbacks suppressed [ 534.850827][T17028] loop1: detected capacity change from 0 to 32768 [ 534.887832][ T8913] cdc_eem: probe of 3-1:29.91 failed with error -22 [ 534.910207][ T8913] usb 3-1: USB disconnect, device number 26 [ 534.922741][T17028] (syz.1.5787,17028,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 534.963322][T17028] (syz.1.5787,17028,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 534.964988][ T9148] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 535.080505][T17038] loop4: detected capacity change from 0 to 1024 [ 535.087533][T17028] (syz.1.5787,17028,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x61b969d4. Applying ECC. [ 535.107006][T17028] (syz.1.5787,17028,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0xa59d1428 [ 535.121496][T17028] (syz.1.5787,17028,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 25 [ 535.122540][T17033] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 535.132693][T17028] (syz.1.5787,17028,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 535.149491][T17028] (syz.1.5787,17028,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 535.162453][T17038] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 535.179022][T17038] EXT4-fs (loop4): Invalid want_extra_isize 7 [ 535.185742][T17028] (syz.1.5787,17028,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 535.205814][T17028] (syz.1.5787,17028,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 535.205853][T17028] (syz.1.5787,17028,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 535.244221][T17028] (syz.1.5787,17028,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 535.286685][ T9148] usb 1-1: Using ep0 maxpacket: 16 [ 535.300179][T17040] loop4: detected capacity change from 0 to 256 [ 535.304396][T17028] (syz.1.5787,17028,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 535.394879][T17040] FAT-fs (loop4): bogus logical sector size 128 [ 535.414061][ T9148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.432284][T17040] FAT-fs (loop4): Can't find a valid FAT filesystem [ 535.613694][ T9148] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 535.630560][ T9148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.642074][ T9148] usb 1-1: Product: syz [ 535.646880][ T9148] usb 1-1: Manufacturer: syz [ 535.655095][ T9148] usb 1-1: SerialNumber: syz [ 535.659850][ T8651] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 535.684177][ T9148] usb 1-1: config 0 descriptor?? [ 535.727076][ T9148] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.777442][ T9160] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 535.894925][ T8913] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 535.958374][ T9148] usb 1-1: USB disconnect, device number 22 [ 535.970138][ T628] usb 1-1: Failed to submit usb control message: -71 [ 535.977231][ T628] usb 1-1: unable to send the bmi data to the device: -71 [ 535.984504][ T628] usb 1-1: unable to get target info from device [ 535.990873][ T628] usb 1-1: could not get target info (-71) [ 535.996862][ T628] usb 1-1: could not probe fw (-71) [ 536.044776][ T9160] usb 3-1: Using ep0 maxpacket: 32 [ 536.066295][ T8651] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 536.077305][ T8651] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 536.089208][ T8651] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 536.100233][ T8651] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 536.151587][ T8913] usb 5-1: Using ep0 maxpacket: 16 [ 536.183860][ T9160] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 536.192163][ T9160] usb 3-1: config 0 has no interface number 0 [ 536.198306][ T9160] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 536.209188][ T8651] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.218255][ T9160] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 536.229700][ T8651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 536.237814][ T8651] usb 4-1: SerialNumber: syz [ 536.242896][ T9160] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.270765][T17042] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 536.279988][ T8913] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 536.288344][ T8913] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 536.298815][ T8913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.309267][ T8913] usb 5-1: config 0 has no interface number 0 [ 536.440728][ T9160] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 536.450011][ T9160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.458166][ T9160] usb 3-1: Product: syz [ 536.462424][ T9160] usb 3-1: Manufacturer: syz [ 536.467024][ T9160] usb 3-1: SerialNumber: syz [ 536.473376][ T9160] usb 3-1: config 0 descriptor?? [ 536.483154][ T8913] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 536.492412][ T8913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.500555][ T8913] usb 5-1: Product: syz [ 536.504647][T17048] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 536.504902][ T8913] usb 5-1: Manufacturer: syz [ 536.525914][ T8913] usb 5-1: SerialNumber: syz [ 536.531742][ T9160] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input40 [ 536.558525][ T8913] usb 5-1: config 0 descriptor?? [ 536.587019][ T8651] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 536.607730][ T8651] usb 4-1: USB disconnect, device number 15 [ 536.778326][ T9148] usb 3-1: USB disconnect, device number 27 [ 536.878657][ T8913] usb 5-1: Found UVC 0.00 device syz (046c:14e0) [ 536.885221][ T8913] usb 5-1: No valid video chain found. [ 536.894989][ T8913] usb 5-1: USB disconnect, device number 13 [ 536.932029][ T9160] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 537.188601][ T9160] usb 1-1: Using ep0 maxpacket: 16 [ 537.359758][ T9160] usb 1-1: unable to get BOS descriptor or descriptor too short [ 537.368291][T17069] loop2: detected capacity change from 0 to 128 [ 537.422935][T17069] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 537.450444][ T8913] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 537.456036][ T9160] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.468707][T17069] hpfs: filesystem error: improperly stopped [ 537.474713][T17069] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 537.484539][ T9160] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 537.488136][T17069] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 537.615674][T17073] loop4: detected capacity change from 0 to 32768 [ 537.694455][T17073] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.5805 (17073) [ 537.694592][ T9160] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 537.733915][ T8913] usb 4-1: Using ep0 maxpacket: 8 [ 537.742939][ T9160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.769039][ T9160] usb 1-1: Product: syz [ 537.773368][ T9160] usb 1-1: Manufacturer: syz [ 537.780883][ T9160] usb 1-1: SerialNumber: syz [ 537.805072][T17073] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 537.815851][T17073] BTRFS error (device loop4): superblock checksum mismatch [ 537.828816][T17073] BTRFS error (device loop4): open_ctree failed: -22 [ 537.839053][ T8000] udevd[8000]: incorrect btrfs checksum on /dev/loop4 [ 537.890362][ T8913] usb 4-1: config index 0 descriptor too short (expected 29970, got 18) [ 537.900417][ T8913] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 537.925665][ T8913] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 538.117825][T17085] loop4: detected capacity change from 0 to 8192 [ 538.142155][ T8913] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 538.160000][T17085] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 538.162803][T17081] loop2: detected capacity change from 0 to 32768 [ 538.175092][ T8913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.176213][T17085] REISERFS (device loop4): using ordered data mode [ 538.189369][ T8913] usb 4-1: Product: syz [ 538.196114][ T8913] usb 4-1: Manufacturer: syz [ 538.200758][ T8913] usb 4-1: SerialNumber: syz [ 538.203426][ T9160] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 538.207146][T17085] reiserfs: using flush barriers [ 538.214629][ T9160] disable ehci-hcd to run US-144 [ 538.223963][ T8913] usb 4-1: config 0 descriptor?? [ 538.225751][ T9160] disable ehci-hcd to run US-144 [ 538.236369][T17085] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 538.249688][ T9160] usb 1-1: USB disconnect, device number 23 [ 538.264342][T17085] REISERFS (device loop4): checking transaction log (loop4) [ 538.276566][ T8913] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 538.281458][T17085] REISERFS (device loop4): Using r5 hash to sort names [ 538.288102][T17081] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.5809 (17081) [ 538.304998][ T8913] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 538.316236][T17085] REISERFS warning (device loop4): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 538.330740][T17085] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 538.354654][T17081] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 538.372191][T17081] BTRFS error (device loop2): superblock checksum mismatch [ 538.404094][T17081] BTRFS error (device loop2): open_ctree failed: -22 [ 538.480948][ T4404] udevd[4404]: incorrect btrfs checksum on /dev/loop2 [ 538.493835][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.524939][ T9148] usb 4-1: USB disconnect, device number 16 [ 538.661593][T17090] loop2: detected capacity change from 0 to 4096 [ 538.749176][T17094] loop4: detected capacity change from 0 to 512 [ 538.965077][T17094] EXT4-fs error (device loop4): ext4_quota_enable:6442: inode #4: comm syz.4.5814: iget: bogus i_mode (11) [ 539.015124][T17094] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.5814: Bad quota inode: 4, type: 1 [ 539.031691][T17094] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 539.054340][T17094] EXT4-fs (loop4): mount failed [ 539.322171][T17119] loop3: detected capacity change from 0 to 8 [ 539.424064][ T9160] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 539.443213][T17119] Major/Minor mismatch, trying to mount newer 17.0 filesystem [ 539.467075][T17100] JBD2: Ignoring recovery information on journal [ 539.473890][T17119] Please update your kernel [ 539.530320][T17100] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 539.685378][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 539.807917][ T9160] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 539.842812][ T9160] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 539.989563][ T9160] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.05 [ 540.025031][ T9160] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 540.042876][ T9160] usb 1-1: Product: syz [ 540.053914][ T9160] usb 1-1: SerialNumber: syz [ 540.058164][T17148] NILFS (loop2): couldn't find nilfs on the device [ 540.112692][ T9160] usb 1-1: bad CDC descriptors [ 540.137249][ T9160] usb 1-1: bad CDC descriptors [ 540.150068][ T4403] udevd[4403]: incorrect nilfs2 checksum on /dev/loop2 [ 540.158705][ T9160] option 1-1:7.0: GSM modem (1-port) converter detected [ 540.348468][ T6931] usb 1-1: USB disconnect, device number 24 [ 540.358039][ T6931] option 1-1:7.0: device disconnected [ 540.427008][T17166] set_capacity_and_notify: 4 callbacks suppressed [ 540.427023][T17166] loop4: detected capacity change from 0 to 4096 [ 540.466635][T17166] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 540.496499][T17166] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 540.518241][T17166] ntfs3: loop4: Failed to load $MFT. [ 540.888239][T17169] loop3: detected capacity change from 0 to 32768 [ 540.964003][T17169] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 540.993796][T17169] JBD2: Ignoring recovery information on journal [ 541.086378][T17169] (syz.3.5848,17169,1):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 541.086378][T17169] found = 1, set = 0, taken = 0, off = 0 [ 541.110622][T17169] (syz.3.5848,17169,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 541.120620][T17169] (syz.3.5848,17169,1):ocfs2_check_volume:2465 ERROR: status = -22 [ 541.128866][T17169] (syz.3.5848,17169,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 541.137516][T17169] (syz.3.5848,17169,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 541.150178][T17169] (syz.3.5848,17169,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 541.158177][ T8651] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 541.234110][T17199] loop2: detected capacity change from 0 to 8192 [ 541.284695][T17199] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfstransmute=overlay" [ 541.394729][ T6931] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 541.550417][ T8651] usb 5-1: config 5 has an invalid interface number: 97 but max is 0 [ 541.558608][ T8651] usb 5-1: config 5 has no interface number 0 [ 541.566067][ T8651] usb 5-1: config 5 interface 97 has no altsetting 0 [ 541.775010][ T6931] usb 1-1: not running at top speed; connect to a high speed hub [ 541.796332][ T8651] usb 5-1: New USB device found, idVendor=0731, idProduct=2003, bcdDevice=37.50 [ 541.805814][ T9160] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 541.813681][ T8651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.821760][ T8651] usb 5-1: Product: syz [ 541.826059][ T8651] usb 5-1: Manufacturer: syz [ 541.828432][ T9148] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 541.830962][ T8651] usb 5-1: SerialNumber: syz [ 541.871283][ T6931] usb 1-1: config 5 has an invalid interface number: 38 but max is 0 [ 541.879488][ T6931] usb 1-1: config 5 has no interface number 0 [ 541.885739][ T6931] usb 1-1: config 5 interface 38 has no altsetting 0 [ 542.084976][ T6931] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 542.094066][ T6931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.105518][ T6931] usb 1-1: Product: syz [ 542.109982][ T6931] usb 1-1: Manufacturer: syz [ 542.114581][ T6931] usb 1-1: SerialNumber: syz [ 542.171420][ T8651] pl2303 5-1:5.97: required endpoints missing [ 542.180668][ T8651] usb 5-1: USB disconnect, device number 14 [ 542.218512][ T9160] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 542.240071][ T9160] usb 4-1: config 0 has no interface number 0 [ 542.243115][T17209] loop1: detected capacity change from 0 to 8192 [ 542.256023][ T9160] usb 4-1: config 0 interface 123 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 542.270099][ T9160] usb 4-1: config 0 interface 123 has no altsetting 0 [ 542.290224][T17209] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 542.299815][ T9148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 542.307778][T17209] REISERFS (device loop1): using ordered data mode [ 542.316185][T17209] reiserfs: using flush barriers [ 542.326584][T17209] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 542.343396][ T9148] usb 3-1: not running at top speed; connect to a high speed hub [ 542.349569][T17209] REISERFS (device loop1): checking transaction log (loop1) [ 542.361097][T17209] REISERFS (device loop1): Using r5 hash to sort names [ 542.368545][T17209] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 542.381717][T17209] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 542.405743][ T9160] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 542.415517][ T9160] usb 4-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 542.423870][ T9160] usb 4-1: Product: syz [ 542.427674][ T9148] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 542.428420][ T9160] usb 4-1: Manufacturer: syz [ 542.447157][ T9160] usb 4-1: config 0 descriptor?? [ 542.470535][ T6931] usb 1-1: unsupported MDLM descriptors [ 542.510410][ T6931] usb 1-1: USB disconnect, device number 25 [ 542.630176][ T9148] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 542.639273][ T9148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.647819][ T9148] usb 3-1: Product: syz [ 542.652173][ T9148] usb 3-1: Manufacturer: syz [ 542.656790][ T9148] usb 3-1: SerialNumber: syz [ 542.759332][ T9160] ftdi_sio 4-1:0.123: FTDI USB Serial Device converter detected [ 542.767916][ T9160] usb 4-1: Detected FT-X [ 542.790683][ T9160] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 542.823250][ T9160] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 542.844668][ T9160] ftdi_sio 4-1:0.123: GPIO initialisation failed: -71 [ 542.852835][ T9160] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 542.863956][ T9160] usb 4-1: USB disconnect, device number 17 [ 542.874029][ T9160] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 542.884220][ T9160] ftdi_sio 4-1:0.123: device disconnected [ 543.003230][T17219] loop0: detected capacity change from 0 to 4096 [ 543.025684][ T9161] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 543.048092][T17219] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 543.067086][ T9148] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 543.075761][ T9148] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 543.084587][ T9148] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 543.094055][ T9148] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 543.175958][ T9148] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 543.259293][ T9148] usb 3-1: USB disconnect, device number 28 [ 543.421608][ T9161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 543.439408][ T9161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 543.459098][ T9160] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 543.660386][ T9161] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 543.681822][ T9161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.691716][T17229] loop3: detected capacity change from 0 to 40427 [ 543.701101][ T9161] usb 5-1: Product: syz [ 543.727898][ T9161] usb 5-1: Manufacturer: syz [ 543.736609][ T9161] usb 5-1: SerialNumber: syz [ 543.753944][ T9161] usb 5-1: config 0 descriptor?? [ 543.890607][ T9160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.917259][ T9160] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 231 [ 543.930037][ T9160] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.958894][ T9160] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 543.971394][ T9160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.984447][ T9160] usb 1-1: config 0 descriptor?? [ 544.030907][T17221] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 544.054012][ T9161] usb 5-1: USB disconnect, device number 15 [ 544.195959][T17241] loop2: detected capacity change from 0 to 32768 [ 544.225896][T17254] futex_wake_op: syz.3.5887 tries to shift op by 32; fix this program [ 544.279973][T17241] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 544.308656][ T9160] ath6kl: Failed to submit usb control message: -71 [ 544.326202][ T9160] ath6kl: unable to send the bmi data to the device: -71 [ 544.335963][T17241] JBD2: Ignoring recovery information on journal [ 544.344081][ T9160] ath6kl: Unable to send get target info: -71 [ 544.354303][T16238] udevd[16238]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.395335][ T9160] ath6kl: Failed to init ath6kl core: -71 [ 544.403472][T17241] (syz.2.5880,17241,1):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 544.403472][T17241] found = 1, set = 0, taken = 0, off = 0 [ 544.424836][T17241] (syz.2.5880,17241,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 544.428048][ T9160] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 544.434080][T17241] (syz.2.5880,17241,1):ocfs2_check_volume:2465 ERROR: status = -22 [ 544.449079][T17241] (syz.2.5880,17241,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 544.459020][T17241] (syz.2.5880,17241,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 544.479594][T17241] (syz.2.5880,17241,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 544.487967][ T9160] usb 1-1: USB disconnect, device number 26 [ 544.693374][ T9161] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 544.896613][ T8651] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 545.163733][ T9148] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 545.163982][ T9161] usb 4-1: unable to get BOS descriptor or descriptor too short [ 545.238768][ T9161] usb 4-1: not running at top speed; connect to a high speed hub [ 545.266941][T17290] loop0: detected capacity change from 0 to 40427 [ 545.292298][ T8651] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 545.301205][ T8651] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.312179][ T8651] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 545.329783][ T8651] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.343657][ T9161] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.356850][ T9161] usb 4-1: config 1 interface 0 has no altsetting 0 [ 545.366156][T17290] F2FS-fs (loop0): Found nat_bits in checkpoint [ 545.408172][T17290] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 545.424337][T17290] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 545.436524][T17290] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 545.548778][ T9148] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 545.564513][ T9148] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 545.573917][ T9148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.580937][ T9161] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 545.591789][ T8651] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.600989][ T8651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.610092][ T9161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.618686][ T8651] usb 5-1: Product: syz [ 545.623045][ T9161] usb 4-1: Product: syz [ 545.627516][ T8651] usb 5-1: Manufacturer: syz [ 545.629368][ T9148] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 545.632501][ T8651] usb 5-1: SerialNumber: syz [ 545.647122][ T9161] usb 4-1: Manufacturer: syz [ 545.651834][ T9161] usb 4-1: SerialNumber: syz [ 545.720799][ T8651] cdc_ncm 5-1:1.0: skipping garbage [ 545.726025][ T8651] cdc_ncm 5-1:1.0: skipping garbage [ 545.731919][ T8651] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 545.738509][ T8651] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 545.746294][ T8651] cdc_ncm 5-1:1.0: bind() failure [ 545.843635][T17300] loop1: detected capacity change from 0 to 512 [ 545.861912][ T5089] usb 3-1: USB disconnect, device number 29 [ 545.864374][T17300] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 545.888391][T17300] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 545.898728][T17300] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.5907: Invalid inode table block 1 in block_group 0 [ 545.914892][T17300] EXT4-fs (loop1): get root inode failed [ 545.920672][T17300] EXT4-fs (loop1): mount failed [ 545.966323][ T8651] usb 5-1: USB disconnect, device number 16 [ 545.986961][ T9148] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 546.170844][T17305] loop1: detected capacity change from 0 to 1024 [ 546.211579][T17305] hfsplus: invalid secondary volume header [ 546.217754][T17305] hfsplus: unable to find HFS+ superblock [ 546.243560][ T9148] usb 1-1: Using ep0 maxpacket: 16 [ 546.265034][ T9161] usbhid 4-1:1.0: can't add hid device: -71 [ 546.271072][ T9161] usbhid: probe of 4-1:1.0 failed with error -71 [ 546.310328][ T9161] usb 4-1: USB disconnect, device number 18 [ 546.372040][ T9148] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.394269][ T9148] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 546.414507][ T9148] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 546.426390][T17311] loop1: detected capacity change from 0 to 1024 [ 546.448072][ T9148] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 546.499555][T17317] loop2: detected capacity change from 0 to 2048 [ 546.521640][T17311] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 546.561223][T17311] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #8: comm syz.1.5912: inode has both inline data and extents flags [ 546.597779][T17317] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 546.634077][T17311] EXT4-fs (loop1): no journal found [ 546.639182][ T9148] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 546.656307][ T9148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.675454][T17317] FAT-fs (loop2): Filesystem has been set read-only [ 546.696909][ T9148] usb 1-1: Product: syz [ 546.703393][ T9148] usb 1-1: Manufacturer: syz [ 546.708024][ T9148] usb 1-1: SerialNumber: syz [ 546.956313][T17332] loop1: detected capacity change from 0 to 2048 [ 547.006030][T17332] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 547.024019][ T9161] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 547.044033][ T9148] hub 1-1:1.2: Invalid hub with more than one config or interface [ 547.056169][T17332] EXT4-fs (loop1): group descriptors corrupted! [ 547.066980][ T9148] hub: probe of 1-1:1.2 failed with error -22 [ 547.121259][ T9148] usb 1-1: USB disconnect, device number 27 [ 547.143280][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.222084][T17335] loop3: detected capacity change from 0 to 65 [ 547.290229][T17335] BFS-fs: bfs_fill_super(): Impossible last inode number 67108856 > 513 on loop3 [ 547.312752][ T9161] usb 5-1: Using ep0 maxpacket: 32 [ 547.352808][T17333] loop2: detected capacity change from 0 to 32768 [ 547.436089][T17333] (syz.2.5923,17333,0):ocfs2_verify_userspace_stack:855 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 547.464497][ T9161] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 547.482277][ T9161] usb 5-1: config 0 has no interface number 1 [ 547.485748][T17333] (syz.2.5923,17333,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 547.587654][T17342] loop3: detected capacity change from 0 to 4096 [ 547.664452][T17351] loop0: detected capacity change from 0 to 64 [ 547.691823][ T9161] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 547.701192][ T9161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.715142][ T9161] usb 5-1: Product: syz [ 547.721485][T17351] hfs: unable to parse mount options [ 547.729920][T17342] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 547.758703][ T9161] usb 5-1: Manufacturer: syz [ 547.763920][ T9161] usb 5-1: SerialNumber: syz [ 547.772437][ T9161] usb 5-1: config 0 descriptor?? [ 547.965620][ T9160] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 548.029025][ T9161] viperboard 5-1:0.61: version 0.00 found at bus 005 address 017 [ 548.093008][ T9161] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 548.101953][ T9161] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 548.167906][ T9161] viperboard 5-1:0.0: version 0.00 found at bus 005 address 017 [ 548.200473][ T9161] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 548.209365][ T9161] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 548.230211][ T9161] usb 5-1: USB disconnect, device number 17 [ 548.264716][ T9160] usb 3-1: Using ep0 maxpacket: 8 [ 548.267770][T17358] loop3: detected capacity change from 0 to 40427 [ 548.337673][T17358] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 548.360278][ T5089] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 548.364780][T17358] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 548.388450][T17358] F2FS-fs (loop3): invalid crc value [ 548.398410][T17358] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 548.413323][T17358] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 548.447689][ T9160] usb 3-1: config 2 has an invalid interface number: 73 but max is 0 [ 548.461534][ T9160] usb 3-1: config 2 has no interface number 0 [ 548.468288][ T9160] usb 3-1: config 2 interface 73 has no altsetting 0 [ 548.476102][T17358] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 548.484428][T17358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 548.627804][ T5089] usb 1-1: Using ep0 maxpacket: 16 [ 548.670400][ T9160] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=c6.a5 [ 548.679582][ T9160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.692842][ T9160] usb 3-1: Product: syz [ 548.701692][ T9160] usb 3-1: Manufacturer: syz [ 548.720344][ T9160] usb 3-1: SerialNumber: syz [ 548.777378][ T5089] usb 1-1: config index 0 descriptor too short (expected 2066, got 18) [ 548.794108][T17370] dccp_invalid_packet: pskb_may_pull failed [ 548.899157][T17378] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 548.913561][T17378] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 548.925532][T17378] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 548.936182][T17378] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 548.947181][T17378] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 548.955583][T17378] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e01c, mo2=0000] [ 548.963775][T17378] EXT4-fs (loop4): failed to initialize system zone (-117) [ 548.971386][T17378] EXT4-fs (loop4): mount failed [ 548.991169][ T5089] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 549.000337][ T5089] usb 1-1: New USB device strings: Mfr=1, Product=253, SerialNumber=2 [ 549.009916][ T5089] usb 1-1: Product: syz [ 549.016962][ T5089] usb 1-1: Manufacturer: syz [ 549.021557][ T5089] usb 1-1: SerialNumber: syz [ 549.028561][ T5089] usb 1-1: config 0 descriptor?? [ 549.076591][ T9161] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 549.126751][ T9160] usb 3-1: USB disconnect, device number 30 [ 549.219847][T17381] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 549.236985][T17381] REISERFS (device loop4): using ordered data mode [ 549.243615][T17381] reiserfs: using flush barriers [ 549.250993][T17381] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 549.268142][T17381] REISERFS (device loop4): checking transaction log (loop4) [ 549.277019][T17381] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.6* [1 2 0x0 SD], item_len 30764, item_location 3847, free_space(entry_count) 0 [ 549.293920][T17381] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 549.305040][T17381] REISERFS (device loop4): Remounting filesystem read-only [ 549.305751][ T5089] usb 1-1: USB disconnect, device number 28 [ 549.318705][T17381] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 549.515315][ T9161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.537211][ T9161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.547197][ T9161] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 549.580349][ T9161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.603867][ T9161] usb 4-1: config 0 descriptor?? [ 549.646020][ T9161] usbhid 4-1:0.0: can't add hid device: -22 [ 549.652050][ T9161] usbhid: probe of 4-1:0.0 failed with error -22 [ 549.657724][T17389] qnx6: wrong signature (magic) in superblock #1. [ 549.866402][ T9148] usb 4-1: USB disconnect, device number 19 [ 549.899086][T17396] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 549.932202][T17396] REISERFS (device loop4): using ordered data mode [ 549.938922][T17396] reiserfs: using flush barriers [ 549.946584][T17396] REISERFS warning (device loop4): sh-457 journal_init_dev: journal_init_dev: Cannot open './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 549.976915][T17396] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 550.009323][ T9161] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 550.200568][T17409] IPv6: addrconf: prefix option has invalid lifetime [ 550.284482][ T9161] usb 3-1: Using ep0 maxpacket: 32 [ 550.360609][T17413] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 550.370997][T17413] REISERFS (device loop0): using ordered data mode [ 550.378510][T17413] reiserfs: using flush barriers [ 550.415347][T17413] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 550.439605][ T9161] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 550.448424][T17413] REISERFS (device loop0): checking transaction log (loop0) [ 550.469346][ T9161] usb 3-1: config 0 has no interface number 1 [ 550.479195][T17413] REISERFS warning: reiserfs-5084 is_leaf: item location seems wrong: *3.6* [1 2 2147483520(127) DIR], item_len 0, item_location 0, free_space(entry_count) 0 [ 550.504053][T17413] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 550.533413][T17413] REISERFS (device loop0): Remounting filesystem read-only [ 550.567626][T17413] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 550.583703][T17413] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 550.669514][ T9161] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 550.696020][T17424] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 550.708901][ T9161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.712472][T17424] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 550.739707][ T9161] usb 3-1: Product: syz [ 550.744546][ T9161] usb 3-1: Manufacturer: syz [ 550.749172][ T9161] usb 3-1: SerialNumber: syz [ 550.787298][T17424] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 550.802767][ T9161] usb 3-1: config 0 descriptor?? [ 551.054554][ T9161] viperboard 3-1:0.61: version 0.00 found at bus 003 address 031 [ 551.069130][T17426] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 551.104119][T17426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 551.114298][ T9161] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 551.123869][ T9161] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 551.193467][ T9161] viperboard 3-1:0.0: version 0.00 found at bus 003 address 031 [ 551.243350][ T9161] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 551.255943][ T9161] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 551.264572][ T5089] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 551.319941][ T9161] usb 3-1: USB disconnect, device number 31 [ 551.681497][T17459] set_capacity_and_notify: 7 callbacks suppressed [ 551.681512][T17459] loop3: detected capacity change from 0 to 8 [ 551.759961][ T5089] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.771368][T17459] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 551.792184][T17459] cramfs: root is not a directory [ 551.796172][ T4403] udevd[4403]: incorrect cramfs checksum on /dev/loop3 [ 551.891026][ T5089] usb 5-1: config 6 has too many interfaces: 255, using maximum allowed: 32 [ 551.920163][ T5089] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 551.950733][ T5089] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 255 [ 552.134203][ T5089] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 552.143524][ T4230] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 552.155971][ T5089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.164075][ T5089] usb 5-1: Product: syz [ 552.172018][ T5089] usb 5-1: Manufacturer: syz [ 552.176697][ T5089] usb 5-1: SerialNumber: syz [ 552.368627][T17481] loop0: detected capacity change from 0 to 32768 [ 552.466890][ T8000] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 scanned by udevd (8000) [ 552.498656][ T9161] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 552.540667][ T5089] rtsx_usb: probe of 5-1:6.0 failed with error -22 [ 552.570250][ T5089] usb 5-1: USB disconnect, device number 18 [ 552.593784][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.615353][ T4230] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 552.624426][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.649331][ T4230] usb 3-1: config 0 descriptor?? [ 552.701699][ T4230] usb 3-1: bad CDC descriptors [ 552.796917][ T9161] usb 4-1: Using ep0 maxpacket: 8 [ 552.839765][ T7] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 552.920710][ T9148] usb 3-1: USB disconnect, device number 32 [ 552.990153][ T9161] usb 4-1: unable to get BOS descriptor or descriptor too short [ 553.101856][ T9161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 553.128332][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 553.139089][ T9161] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 553.148860][ T9161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 553.169393][T17488] loop4: detected capacity change from 0 to 4096 [ 553.177358][ T9161] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 553.278172][ T7] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 553.286292][ T7] usb 1-1: config 0 has no interface number 1 [ 553.328785][T17488] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 553.353634][T17488] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 553.492064][ T7] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 553.508206][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.516654][T17490] loop4: detected capacity change from 0 to 1024 [ 553.524339][ T9161] usb 4-1: string descriptor 0 read error: -22 [ 553.531379][ T9161] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.540258][T17490] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 553.551378][ T9161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.565231][ T7] usb 1-1: Product: syz [ 553.570686][ T7] usb 1-1: Manufacturer: syz [ 553.572755][T17490] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #8: comm syz.4.5996: inode has both inline data and extents flags [ 553.577753][ T7] usb 1-1: SerialNumber: syz [ 553.610938][ T7] usb 1-1: config 0 descriptor?? [ 553.612705][T17490] EXT4-fs (loop4): no journal found [ 553.625274][ T9161] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 553.801904][ T6931] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 553.833951][ T7] viperboard 1-1:0.61: version 0.00 found at bus 001 address 029 [ 553.857337][ T9161] usb 4-1: USB disconnect, device number 20 [ 553.866216][ T7] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 553.875037][ T7] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 553.930276][ T7] viperboard 1-1:0.0: version 0.00 found at bus 001 address 029 [ 553.962342][ T7] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 553.971091][ T7] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 553.996398][ T7] usb 1-1: USB disconnect, device number 29 [ 554.058473][ T8913] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 554.158157][T17500] loop1: detected capacity change from 0 to 512 [ 554.202325][T17500] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 554.225684][T17500] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.6001: iget: bogus i_mode (1355) [ 554.237584][ T6931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 554.240937][T17500] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.6001: couldn't read orphan inode 15 (err -117) [ 554.261216][T17500] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,data_err=abort,noload,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 554.283167][ T6931] usb 3-1: not running at top speed; connect to a high speed hub [ 554.316707][ T8913] usb 5-1: Using ep0 maxpacket: 16 [ 554.379362][ T6931] usb 3-1: config 255 has an invalid interface number: 180 but max is 0 [ 554.388102][ T6931] usb 3-1: config 255 has no interface number 0 [ 554.395327][ T6931] usb 3-1: config 255 interface 180 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 554.422052][ T6931] usb 3-1: config 255 interface 180 has no altsetting 0 [ 554.454052][ T8913] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 554.462779][T17506] dccp_invalid_packet: P.CsCov 9 exceeds packet length 28 [ 554.475001][T17504] loop1: detected capacity change from 0 to 4096 [ 554.481633][ T8913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.494518][ T8913] usb 5-1: config 0 has no interface number 0 [ 554.501932][ T8913] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 554.512740][ T8913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.545210][ T8913] usb 5-1: config 0 descriptor?? [ 554.575424][T17504] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 554.593238][ T6931] usb 3-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=76.8d [ 554.596922][T17504] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 554.606035][ T8913] usb 5-1: Found UVC 0.00 device (0bd3:0555) [ 554.633179][ T6931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.648176][ T8913] usb 5-1: No valid video chain found. [ 554.655801][ T6931] usb 3-1: Product: syz [ 554.660583][ T6931] usb 3-1: Manufacturer: syz [ 554.665245][ T6931] usb 3-1: SerialNumber: syz [ 554.673100][T17504] ntfs: volume version 3.1. [ 554.695333][T17504] ntfs: (device loop1): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 554.736203][T17504] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 554.749437][T17504] ntfs: (device loop1): load_system_files(): Failed to load root directory. [ 554.759132][T17504] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 554.776344][T17514] loop3: detected capacity change from 0 to 4096 [ 554.822969][ T5089] usb 5-1: USB disconnect, device number 19 [ 554.849501][ T4265] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 554.885242][T17514] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 555.009142][T17520] loop1: detected capacity change from 0 to 512 [ 555.033731][ T6931] HFC-S_USB: probe of 3-1:255.180 failed with error -5 [ 555.048885][ T6931] usb 3-1: USB disconnect, device number 33 [ 555.250521][ T4265] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.273422][ T4265] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.292834][T17536] loop3: detected capacity change from 0 to 128 [ 555.307973][ T4265] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 555.323077][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.339245][ T4265] usb 1-1: config 0 descriptor?? [ 555.358043][T17538] loop1: detected capacity change from 0 to 4096 [ 555.386016][ T4265] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 555.624281][ T4265] pwc: send_video_command error -71 [ 555.629629][ T4265] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 555.676577][ T4265] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 555.708765][ T4265] usb 1-1: USB disconnect, device number 30 [ 555.891303][T17540] jfs_mount: Failed to read FILESYSTEM_I [ 555.897174][ T8913] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 555.908138][T17540] Mount JFS Failure: -5 [ 555.912330][T17540] jfs_mount failed w/return code = -5 [ 555.982813][ T5089] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 556.168445][T17562] __ntfs_error: 8 callbacks suppressed [ 556.168466][T17562] ntfs: (device loop4): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 556.197764][T17562] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 556.263754][ T5089] usb 4-1: Using ep0 maxpacket: 8 [ 556.293024][ T8913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 556.324448][ T8913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 556.388893][T17568] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh [ 556.407100][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.419672][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.431272][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.444191][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.463916][ T5089] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.476032][T17572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.487679][T17568] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 556.503450][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.503511][T17572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.525232][ T8913] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 556.530809][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.544599][ T8913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.564333][ T8913] usb 3-1: Product: syz [ 556.568541][ T8913] usb 3-1: Manufacturer: syz [ 556.569060][T17568] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 556.581455][ T8913] usb 3-1: SerialNumber: syz [ 556.584800][ T5089] usb 4-1: config 9 has an invalid interface number: 66 but max is 0 [ 556.607662][ T5089] usb 4-1: config 9 has no interface number 0 [ 556.609673][ T8913] usb 3-1: config 0 descriptor?? [ 556.622868][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.633960][T17568] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 556.643385][T17572] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 556.644046][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.662488][T17572] UDF-fs: Scanning with blocksize 512 failed [ 556.668011][T17568] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.682989][T17568] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 556.685223][T17572] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 556.726699][T17572] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 556.737035][T17572] UDF-fs: Scanning with blocksize 1024 failed [ 556.746134][T17572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.757226][T17572] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 556.806001][T17572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.826474][T17572] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 556.832432][ T5089] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d95, bcdDevice=a2.a6 [ 556.842258][T17572] UDF-fs: Scanning with blocksize 2048 failed [ 556.849780][ T5089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.858460][ T5089] usb 4-1: Product: syz [ 556.867129][ T5089] usb 4-1: Manufacturer: syz [ 556.867195][T17572] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 556.876023][ T5089] usb 4-1: SerialNumber: syz [ 556.898218][T17572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.912894][T17572] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 556.943438][T17572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 556.948549][ T8913] usb 3-1: USB disconnect, device number 34 [ 556.962702][T17572] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 556.984763][T17572] UDF-fs: Scanning with blocksize 4096 failed [ 556.992363][T17572] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 557.226646][ T5089] usb 4-1: USB disconnect, device number 21 [ 557.234923][ T9148] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 557.246536][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.415618][T17584] set_capacity_and_notify: 4 callbacks suppressed [ 557.415628][T17584] loop0: detected capacity change from 0 to 40427 [ 557.444880][T17584] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 557.453069][T17584] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 557.495545][T17584] F2FS-fs (loop0): invalid crc value [ 557.533428][T17586] loop2: detected capacity change from 0 to 4096 [ 557.542688][T17584] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 557.545895][T17586] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 557.569385][T17584] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 557.575740][T17586] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 557.612388][T17586] ntfs: (device loop2): ntfs_read_inode_mount(): $MFT is too big! Aborting. [ 557.628981][T17586] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 557.637967][T17586] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 557.656384][ T9148] usb 5-1: not running at top speed; connect to a high speed hub [ 557.700212][T17584] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 557.709471][T17584] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 557.768025][ T9148] usb 5-1: config 9 has an invalid interface number: 7 but max is 0 [ 557.776058][ T9148] usb 5-1: config 9 has no interface number 0 [ 557.786140][T17593] loop2: detected capacity change from 0 to 512 [ 557.843339][T17593] FAT-fs (loop2): bread failed, FSINFO block (sector = 2048) [ 558.013338][T17604] futex_wake_op: syz.0.6046 tries to shift op by 35; fix this program [ 558.026393][ T9148] usb 5-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00 [ 558.046347][ T9148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.072372][ T9148] usb 5-1: Product: syz [ 558.081317][ T9148] usb 5-1: Manufacturer: syz [ 558.104204][T17606] loop3: detected capacity change from 0 to 256 [ 558.116289][ T9148] usb 5-1: SerialNumber: syz [ 558.169688][T17609] delete_channel: no stack [ 558.202860][T17608] loop2: detected capacity change from 0 to 4096 [ 558.223419][T17612] loop0: detected capacity change from 0 to 8 [ 558.239291][T17606] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 558.261271][T17606] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 558.278190][T17612] SQUASHFS error: Unable to read inode 0x11f [ 558.285482][T17606] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 558.301610][T17606] UDF-fs: Scanning with blocksize 512 failed [ 558.326468][T17606] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 558.344238][T17606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.480882][T17614] loop2: detected capacity change from 0 to 2048 [ 558.497049][ T9148] usb-storage 5-1:9.7: USB Mass Storage device detected [ 558.505098][T17617] dns_resolver: Unsupported content type (4) [ 558.587628][ T9148] usb 5-1: USB disconnect, device number 20 [ 558.953079][T17636] loop0: detected capacity change from 0 to 4096 [ 558.962265][ T5089] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 559.015506][T17636] NILFS: invalid option "cp=0x00": invalid checkpoint number 0 [ 559.220411][T17626] loop2: detected capacity change from 0 to 40427 [ 559.234849][ T5089] usb 4-1: Using ep0 maxpacket: 32 [ 559.339402][T17626] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 559.347171][T17626] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 559.371903][ T5089] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 559.387346][ T5089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.400181][T17626] F2FS-fs (loop2): invalid crc value [ 559.423393][ T5089] usb 4-1: config 0 has no interface number 0 [ 559.449955][ T5089] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 559.471286][ T5089] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.479870][T17626] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 559.536162][T17626] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 559.595695][T17665] loop4: detected capacity change from 0 to 2048 [ 559.632916][T17626] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 559.640668][T17626] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 559.671786][ T5089] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 559.680893][ T5089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.692238][ T4403] loop4: p1 p2 p3 [ 559.692238][ T4403] p1: [ 559.703419][ T4403] loop4: p2 size 458752 extends beyond EOD, truncated [ 559.721639][ T5089] usb 4-1: Product: syz [ 559.726161][ T5089] usb 4-1: Manufacturer: syz [ 559.731011][ T4403] loop4: p3 start 65280 is beyond EOD, truncated [ 559.737525][ T5089] usb 4-1: SerialNumber: syz [ 559.749274][ T5089] usb 4-1: config 0 descriptor?? [ 559.763841][T17665] loop4: p1 p2 p3 [ 559.763841][T17665] p1: [ 559.784050][T17665] loop4: p2 size 458752 extends beyond EOD, truncated [ 559.792172][ T5089] plusb: probe of 4-1:0.231 failed with error -22 [ 559.817108][T17665] loop4: p3 start 65280 is beyond EOD, truncated [ 559.878116][T17672] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 559.972118][ T4403] udevd[4403]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 559.974742][ T4404] udevd[4404]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 560.072557][ T4404] udevd[4404]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 560.079954][ T4403] udevd[4403]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 560.082736][ T4265] usb 4-1: USB disconnect, device number 22 [ 560.185754][T17676] ntfs: (device loop0): parse_options(): Unrecognized mount option mft_Zone_multiplier. [ 560.205105][T17676] ntfs: (device loop0): parse_options(): Unrecognized mount option disable_sparse}yes. [ 560.233332][T17674] ntfs: (device loop4): parse_options(): The nls option requires an argument. [ 560.279791][T17679] tmpfs: Bad value for 'size' [ 560.302865][T17680] tmpfs: Bad value for 'mpol' [ 560.768966][T17702] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 560.896654][T17702] block device autoloading is deprecated and will be removed. [ 560.919138][T17702] EXT4-fs (loop3): couldn't read superblock of external journal [ 561.074889][T17690] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.6092 (17690) [ 561.163421][T17690] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 561.179265][T17690] BTRFS info (device loop2): using free space tree [ 561.194615][T17690] BTRFS info (device loop2): has skinny extents [ 561.280797][T17700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.6095 (17700) [ 561.345630][T17696] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 561.374041][T17700] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 561.402861][T17696] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 561.443550][T17700] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 561.467219][T17700] BTRFS info (device loop0): force zstd compression, level 3 [ 561.497553][T17696] F2FS-fs (loop4): invalid crc value [ 561.520526][T17700] BTRFS info (device loop0): setting nodatasum [ 561.526739][T17700] BTRFS info (device loop0): turning off barriers [ 561.541928][T17700] BTRFS info (device loop0): use zstd compression, level 3 [ 561.549220][T17700] BTRFS info (device loop0): using free space tree [ 561.573948][T17700] BTRFS info (device loop0): has skinny extents [ 561.587062][T17696] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 561.599409][T17709] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop3 scanned by syz.3.6098 (17709) [ 561.630510][T17696] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 561.650047][T17709] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 561.659928][T17690] BTRFS info (device loop2): enabling ssd optimizations [ 561.705548][T17709] BTRFS info (device loop3): using free space tree [ 561.716309][T17709] BTRFS info (device loop3): has skinny extents [ 561.767191][T17696] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 561.774278][T17696] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 561.877988][ T4404] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop2 scanned by udevd (4404) [ 562.101667][T17709] BTRFS info (device loop3): enabling ssd optimizations [ 562.675394][T17774] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 562.682429][T17774] cramfs: wrong endianness [ 563.078207][T17780] set_capacity_and_notify: 9 callbacks suppressed [ 563.078224][T17780] loop1: detected capacity change from 0 to 128 [ 563.285898][T17771] loop2: detected capacity change from 0 to 32768 [ 563.342226][T17771] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.6099 (17771) [ 563.413142][ T5089] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 563.438680][T17771] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 563.466766][T17771] BTRFS info (device loop2): using free space tree [ 563.486414][T17786] loop1: detected capacity change from 0 to 128 [ 563.495069][T17771] BTRFS info (device loop2): has skinny extents [ 563.579244][T17777] loop3: detected capacity change from 0 to 32768 [ 563.596939][T17777] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.6101 (17777) [ 563.653535][T17777] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 563.664564][T17777] BTRFS info (device loop3): using free space tree [ 563.671446][T17777] BTRFS info (device loop3): has skinny extents [ 563.701379][ T5089] usb 5-1: Using ep0 maxpacket: 8 [ 563.714195][T17771] BTRFS info (device loop2): enabling ssd optimizations [ 563.875451][ T5089] usb 5-1: unable to get BOS descriptor or descriptor too short [ 563.992455][ T5089] usb 5-1: config 240 has an invalid interface number: 177 but max is 0 [ 564.002560][T17778] loop0: detected capacity change from 0 to 32768 [ 564.011328][ T5089] usb 5-1: config 240 has no interface number 0 [ 564.017653][ T5089] usb 5-1: config 240 interface 177 has no altsetting 0 [ 564.062737][T17778] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.6102 (17778) [ 564.153620][T17777] BTRFS info (device loop3): enabling ssd optimizations [ 564.168127][T17822] loop1: detected capacity change from 0 to 2048 [ 564.204010][ T5089] usb 5-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=9d.b9 [ 564.228818][ T5089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.248016][T17822] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000; already mounted read-only [ 564.267815][ T5089] usb 5-1: Product: syz [ 564.272007][ T5089] usb 5-1: Manufacturer: syz [ 564.284127][ T5089] usb 5-1: SerialNumber: syz [ 564.435942][T17833] loop1: detected capacity change from 0 to 512 [ 564.475701][T17778] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 564.492483][T17778] BTRFS info (device loop0): using free space tree [ 564.499075][T17778] BTRFS info (device loop0): has skinny extents [ 564.523784][T17837] loop2: detected capacity change from 0 to 2048 [ 564.545883][T17833] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 564.579727][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.586096][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.604306][ T4403] loop2: p1 < > p4 [ 564.604306][ T4403] p4: [ 564.636595][T17833] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 564.670110][T17833] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 564.697759][ T5089] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 564.704626][ T4403] loop2: p4 size 722688 extends beyond EOD, truncated [ 564.724129][T17833] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 564.728952][ T5089] gspca_sn9c20x: Write register 1000 failed -71 [ 564.746313][ T5089] gspca_sn9c20x: Device initialization failed [ 564.753526][ T5089] gspca_sn9c20x: probe of 5-1:240.177 failed with error -71 [ 564.770152][ T5089] usb 5-1: USB disconnect, device number 21 [ 564.809548][T17833] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 564.822878][T17837] loop2: p1 < > p4 [ 564.822878][T17837] p4: [ 564.863513][T17833] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e11c, mo2=0000] [ 564.873275][T17837] loop2: p4 size 722688 extends beyond EOD, truncated [ 564.901914][T17833] EXT4-fs (loop1): failed to initialize system zone (-117) [ 564.914844][T17778] BTRFS info (device loop0): enabling ssd optimizations [ 564.947481][T17833] EXT4-fs (loop1): mount failed [ 565.182969][ T4404] udevd[4404]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 565.235499][ T4403] udevd[4403]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 565.338075][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 565.365850][ T4403] udevd[4403]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 565.869976][T17859] loop2: detected capacity change from 0 to 32768 [ 565.919055][T17859] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.6113 (17859) [ 566.007695][T17859] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 566.038395][T17859] BTRFS info (device loop2): using free space tree [ 566.062390][T17859] BTRFS info (device loop2): has skinny extents [ 566.137531][T17864] loop1: detected capacity change from 0 to 32768 [ 566.157504][T17864] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop1 scanned by syz.1.6116 (17864) [ 566.181542][ T9147] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 566.213144][T17864] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 566.251804][T17864] BTRFS info (device loop1): using free space tree [ 566.278899][T17864] BTRFS info (device loop1): has skinny extents [ 566.309406][T17862] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(0) [ 566.350911][T17866] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop3 scanned by syz.3.6112 (17866) [ 566.352666][T17859] BTRFS info (device loop2): enabling ssd optimizations [ 566.406373][T17862] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 566.421027][T17866] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 566.452061][T17866] BTRFS info (device loop3): using free space tree [ 566.479676][T17862] F2FS-fs (loop4): invalid crc value [ 566.480292][T17866] BTRFS info (device loop3): has skinny extents [ 566.509887][T17862] F2FS-fs (loop4): Found nat_bits in checkpoint [ 566.601812][T17864] BTRFS info (device loop1): enabling ssd optimizations [ 566.652177][ T9147] usb 1-1: unable to get BOS descriptor or descriptor too short [ 566.672685][T17862] F2FS-fs (loop4): Start checkpoint disabled! [ 566.845332][T17866] BTRFS info (device loop3): enabling ssd optimizations [ 566.959411][T17862] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 566.978159][T17862] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 567.015713][ T9147] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 567.038082][ T9147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.052756][ T9147] usb 1-1: Product: syz [ 567.057006][ T9147] usb 1-1: Manufacturer: syz [ 567.061739][ T9147] usb 1-1: SerialNumber: syz [ 567.484711][ T9147] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 567.525021][ T9147] usb 1-1: unit 13 not found! [ 567.625186][ T9147] usb 1-1: USB disconnect, device number 31 [ 567.926084][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.196575][T17941] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 568.346559][T17933] (syz.2.6121,17933,0):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small! (size 0, needed 8) [ 568.514753][T17937] set_capacity_and_notify: 4 callbacks suppressed [ 568.514769][T17937] loop1: detected capacity change from 0 to 32768 [ 568.586165][T17937] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop1 scanned by syz.1.6118 (17937) [ 568.624046][T17937] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 568.633787][T17946] loop2: detected capacity change from 0 to 2048 [ 568.644595][T17937] BTRFS info (device loop1): using free space tree [ 568.659054][T17937] BTRFS info (device loop1): has skinny extents [ 568.699864][T17939] loop4: detected capacity change from 0 to 32768 [ 568.787358][T17939] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop4 scanned by syz.4.6120 (17939) [ 568.817845][T17946] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 568.860092][T17944] loop0: detected capacity change from 0 to 32768 [ 568.881866][T17939] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 568.967235][T17939] BTRFS info (device loop4): using free space tree [ 568.977339][T17944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6123 (17944) [ 568.990005][T17936] loop3: detected capacity change from 0 to 32768 [ 569.012954][T17939] BTRFS info (device loop4): has skinny extents [ 569.051841][T17936] gfs2: can't find protocol dlm [ 569.072581][T17937] BTRFS info (device loop1): enabling ssd optimizations [ 569.107421][T17944] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 569.116537][T17944] BTRFS info (device loop0): using free space tree [ 569.122881][T17979] loop2: detected capacity change from 0 to 64 [ 569.123704][T17944] BTRFS info (device loop0): has skinny extents [ 569.202802][T17939] BTRFS info (device loop4): enabling ssd optimizations [ 569.565734][T17944] BTRFS info (device loop0): enabling ssd optimizations [ 569.604001][ T4404] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 9 /dev/loop4 scanned by udevd (4404) [ 569.707864][T18010] loop2: detected capacity change from 0 to 512 [ 569.924284][T18010] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 570.021979][T18017] loop3: detected capacity change from 0 to 4096 [ 570.086335][T18019] loop1: detected capacity change from 0 to 512 [ 570.153819][T18017] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 570.165877][T18019] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 570.694794][T18046] loop2: detected capacity change from 0 to 512 [ 570.999969][T18044] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 571.003673][T18046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 571.065831][T18044] ext4 filesystem being mounted at /1262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.532079][T18040] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop4 scanned by syz.4.6126 (18040) [ 571.611086][T18040] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 571.632924][T18040] BTRFS info (device loop4): using free space tree [ 571.665263][T18040] BTRFS info (device loop4): has skinny extents [ 571.865945][T18056] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6135 (18056) [ 571.944144][T18056] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 571.964550][T18056] BTRFS info (device loop2): using free space tree [ 571.975371][T18040] BTRFS info (device loop4): enabling ssd optimizations [ 572.066071][T18054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.6136 (18054) [ 572.166014][T18056] BTRFS info (device loop2): enabling ssd optimizations [ 572.268054][T18054] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 572.311659][T18052] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop0 scanned by syz.0.6134 (18052) [ 572.358633][T18054] BTRFS info (device loop3): using free space tree [ 572.377395][T18054] BTRFS info (device loop3): has skinny extents [ 572.397870][ T8000] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 9 /dev/loop4 scanned by udevd (8000) [ 572.464733][T18052] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 572.504641][T18052] BTRFS info (device loop0): using free space tree [ 572.532258][T18052] BTRFS info (device loop0): has skinny extents [ 572.744416][T18054] BTRFS info (device loop3): enabling ssd optimizations [ 572.864598][T18052] BTRFS info (device loop0): enabling ssd optimizations [ 573.273397][ T8000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (8000) [ 573.580648][T18144] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 573.814979][T18140] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 573.861102][T18140] dlm: no local IP address has been set [ 573.886888][T18140] dlm: cannot start dlm midcomms -107 [ 573.910805][T18140] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 574.632900][T18156] set_capacity_and_notify: 7 callbacks suppressed [ 574.632916][T18156] loop4: detected capacity change from 0 to 32768 [ 574.699638][T18156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.6145 (18156) [ 574.750042][T18156] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 574.776833][T18156] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 574.808645][T18156] BTRFS error (device loop4): open_ctree failed: -22 [ 574.850190][ T4403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4403) [ 575.089015][T18166] loop0: detected capacity change from 0 to 32768 [ 575.196871][T18166] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 575.220343][T18166] dlm: no local IP address has been set [ 575.242507][T18166] dlm: cannot start dlm midcomms -107 [ 575.289846][T18166] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 575.515577][T18175] loop0: detected capacity change from 0 to 1024 [ 575.527605][ T2420] pvrusb2: request_firmware fatal error with code=-110 [ 575.554824][T18168] loop3: detected capacity change from 0 to 32768 [ 575.556155][ T2420] pvrusb2: Failure uploading firmware1 [ 575.622492][ T2420] pvrusb2: Device initialization was not successful. [ 575.630234][T18168] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 575.664232][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 575.664346][T18168] dlm: no local IP address has been set [ 575.674464][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 575.689608][ T8643] pvrusb2: Device being rendered inoperable [ 575.717472][T18168] dlm: cannot start dlm midcomms -107 [ 575.733504][T18168] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 575.922154][T18177] loop0: detected capacity change from 0 to 1024 [ 576.552457][T18164] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 577.037761][T18164] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 577.058806][T18164] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 577.150124][T18170] loop2: detected capacity change from 0 to 131072 [ 577.205881][T18170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 577.336009][T18170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 577.398309][T18164] usb 1-1: string descriptor 0 read error: -22 [ 577.404582][T18164] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 577.431403][T18164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.763084][ T9148] usb 1-1: USB disconnect, device number 32 [ 578.290081][T18189] loop2: detected capacity change from 0 to 1024 [ 578.361594][T18191] loop0: detected capacity change from 0 to 724 [ 579.839286][T18197] loop4: detected capacity change from 0 to 32768 [ 579.973026][T18197] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 579.981227][T18197] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 580.031132][T18197] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 580.070486][T18033] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 580.077432][T18033] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 580.320457][T18033] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 227ms [ 580.347385][T18033] gfs2: fsid=syz:syz.0: jid=0: Done [ 580.362829][T18197] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 581.642487][T18203] loop4: detected capacity change from 0 to 2368 [ 581.909255][T18205] loop1: detected capacity change from 0 to 1768 [ 582.770670][T18207] loop4: detected capacity change from 0 to 32768 [ 582.814597][T18207] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 582.846006][T18207] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 582.900214][T18207] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 582.945230][ T9148] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 582.952031][ T9148] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 582.975853][T18209] loop1: detected capacity change from 0 to 32768 [ 583.051294][T18209] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 583.080777][T18209] CPU: 0 PID: 18209 Comm: syz.1.6161 Not tainted syzkaller #0 [ 583.088288][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 583.098362][T18209] Call Trace: [ 583.101655][T18209] [ 583.104600][T18209] dump_stack_lvl+0x188/0x250 [ 583.109308][T18209] ? show_regs_print_info+0x20/0x20 [ 583.114540][T18209] ? load_image+0x400/0x400 [ 583.119081][T18209] sysfs_create_dir_ns+0x26a/0x290 [ 583.124215][T18209] ? sysfs_warn_dup+0xa0/0xa0 [ 583.128921][T18209] ? do_raw_spin_unlock+0x11d/0x230 [ 583.134149][T18209] kobject_add_internal+0x6e0/0xd90 [ 583.139376][T18209] kobject_init_and_add+0x128/0x190 [ 583.144593][T18209] ? lockdep_softirqs_off+0x430/0x430 [ 583.146903][ T9148] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 182ms [ 583.149982][T18209] ? kobject_add+0x230/0x230 [ 583.150012][T18209] ? __init_swait_queue_head+0xa5/0x150 [ 583.167670][T18209] gfs2_sys_fs_add+0x24f/0x4b0 [ 583.172455][T18209] ? gfs2_recover_set+0x240/0x240 [ 583.177510][T18209] ? snprintf+0xe5/0x140 [ 583.181768][T18209] ? __free_pages+0x95/0x1a0 [ 583.182273][ T9148] gfs2: fsid=syz:syz.0: jid=0: Done [ 583.186369][T18209] ? vscnprintf+0x80/0x80 [ 583.186402][T18209] gfs2_fill_super+0x120f/0x1f00 [ 583.186437][T18209] ? gfs2_reconfigure+0xd30/0xd30 [ 583.186475][T18209] ? sb_set_blocksize+0xa5/0xe0 [ 583.186498][T18209] get_tree_bdev+0x3f1/0x610 [ 583.186523][T18209] ? gfs2_reconfigure+0xd30/0xd30 [ 583.186570][T18209] gfs2_get_tree+0x4d/0x1e0 [ 583.186596][T18209] vfs_get_tree+0x88/0x270 [ 583.186621][T18209] do_new_mount+0x24a/0xa40 [ 583.186651][T18209] __se_sys_mount+0x2e3/0x3d0 [ 583.186679][T18209] ? __x64_sys_mount+0xc0/0xc0 [ 583.186699][T18209] ? lockdep_hardirqs_on+0x94/0x140 [ 583.186718][T18209] ? __x64_sys_mount+0x1c/0xc0 [ 583.186738][T18209] do_syscall_64+0x4c/0xa0 [ 583.186755][T18209] ? clear_bhb_loop+0x30/0x80 [ 583.186774][T18209] ? clear_bhb_loop+0x30/0x80 [ 583.186794][T18209] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 583.186814][T18209] RIP: 0033:0x7fede0ba6a0a [ 583.215471][T18207] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 583.215644][T18209] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.304282][T18209] RSP: 002b:00007feddedfee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 583.312712][T18209] RAX: ffffffffffffffda RBX: 00007feddedfeee0 RCX: 00007fede0ba6a0a [ 583.320697][T18209] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007feddedfeea0 [ 583.328680][T18209] RBP: 00002000000124c0 R08: 00007feddedfeee0 R09: 0000000000000000 [ 583.336656][T18209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 583.344631][T18209] R13: 00007feddedfeea0 R14: 00000000000124ab R15: 0000200000012540 [ 583.352635][T18209] [ 583.512082][T18209] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 583.548144][T18209] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 583.569348][T18218] loop2: detected capacity change from 0 to 1024 [ 583.797618][T18218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 583.998030][T18222] loop1: detected capacity change from 0 to 2 [ 584.009691][T18224] loop2: detected capacity change from 0 to 2 [ 584.049992][T18226] loop3: detected capacity change from 0 to 732 [ 584.068655][T18222] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 584.075971][T18224] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 584.344265][T18230] loop2: detected capacity change from 0 to 64 [ 584.723873][T18236] loop2: detected capacity change from 0 to 256 [ 584.877413][T18228] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop3 scanned by syz.3.6167 (18228) [ 584.984191][T18228] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 585.018953][T18228] BTRFS info (device loop3): using free space tree [ 585.046413][T18228] BTRFS info (device loop3): has skinny extents [ 585.409902][T18232] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 585.495835][T18232] dlm: no local IP address has been set [ 585.516418][T18228] BTRFS info (device loop3): enabling ssd optimizations [ 585.552075][T18232] dlm: cannot start dlm midcomms -107 [ 585.638456][T18232] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 586.234788][T18254] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.6175 (18254) [ 586.381442][T18254] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 586.450618][T18254] BTRFS info (device loop4): using free space tree [ 586.475124][T18254] BTRFS info (device loop4): has skinny extents [ 586.755961][T18271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 586.929234][T18254] BTRFS info (device loop4): enabling ssd optimizations [ 587.540428][T18297] set_capacity_and_notify: 7 callbacks suppressed [ 587.540446][T18297] loop4: detected capacity change from 0 to 2048 [ 587.962178][T18273] loop0: detected capacity change from 0 to 32768 [ 588.081420][T18273] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 588.131633][T18301] loop4: detected capacity change from 0 to 128 [ 588.138580][T18273] dlm: no local IP address has been set [ 588.158149][T18273] dlm: cannot start dlm midcomms -107 [ 588.198576][T18273] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 588.401959][T18305] loop0: detected capacity change from 0 to 1024 [ 588.703781][T18307] loop0: detected capacity change from 0 to 256 [ 589.105401][T18309] loop0: detected capacity change from 0 to 8192 [ 589.376882][T18311] loop0: detected capacity change from 0 to 256 [ 589.886143][T18318] loop0: detected capacity change from 0 to 8192 [ 590.933232][T18328] loop2: detected capacity change from 0 to 4096 [ 591.072292][T18331] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.084946][T18326] loop0: detected capacity change from 0 to 32768 [ 591.370987][T18334] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.956630][T18336] ntfs: (device loop0): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 592.043677][T18336] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 592.066859][T18338] ntfs: volume version 3.1. [ 592.092819][T18340] ntfs: volume version 3.1. [ 593.107714][T18342] set_capacity_and_notify: 6 callbacks suppressed [ 593.107729][T18342] loop0: detected capacity change from 0 to 32768 [ 593.154883][T18342] (syz.0.6205,18342,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 593.208650][T18342] (syz.0.6205,18342,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 593.235627][T18346] loop2: detected capacity change from 0 to 32768 [ 593.246062][T18348] loop3: detected capacity change from 0 to 32768 [ 593.280939][T18346] (syz.2.6206,18346,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 593.321885][T18346] (syz.2.6206,18346,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 593.326125][T18348] (syz.3.6207,18348,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 593.356981][T18348] (syz.3.6207,18348,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 593.440476][T18354] loop0: detected capacity change from 0 to 512 [ 593.866326][T18352] loop4: detected capacity change from 0 to 32768 [ 593.920318][T18352] (syz.4.6209,18352,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 594.005998][T18352] (syz.4.6209,18352,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 594.031824][T18360] loop0: detected capacity change from 0 to 4096 [ 594.139722][T18360] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 594.591602][T18358] loop3: detected capacity change from 0 to 32768 [ 594.627034][T18356] loop2: detected capacity change from 0 to 32768 [ 594.658166][T18358] (syz.3.6211,18358,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 594.732893][T18358] (syz.3.6211,18358,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 594.747996][T18356] (syz.2.6212,18356,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 594.782674][T18356] (syz.2.6212,18356,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 595.031344][T18368] loop3: detected capacity change from 0 to 2048 [ 595.535830][T18372] loop3: detected capacity change from 0 to 4096 [ 595.598202][T18372] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 595.769926][T18370] (syz.2.6218,18370,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 595.809724][T18370] (syz.2.6218,18370,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 596.184813][T18364] (syz.0.6215,18364,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 596.188006][T18362] (syz.4.6214,18362,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 596.204433][T18364] (syz.0.6215,18364,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 596.270448][T18362] (syz.4.6214,18362,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 596.522938][T18366] (syz.1.6216,18366,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 596.564315][T18366] (syz.1.6216,18366,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 596.841063][T18381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.099775][T18383] attempt to access beyond end of device [ 597.099775][T18383] loop1: rw=2048, want=8, limit=1 [ 597.130808][T18383] SQUASHFS error: Failed to read block 0x0: -5 [ 597.141958][T18383] unable to read squashfs_super_block [ 598.300777][T18390] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 598.343574][T18390] REISERFS (device loop3): using ordered data mode [ 598.415980][T18390] reiserfs: using flush barriers [ 598.454367][T18390] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 598.539612][T18390] REISERFS (device loop3): checking transaction log (loop3) [ 598.808191][T18390] REISERFS (device loop3): Using r5 hash to sort names [ 598.832860][T18390] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 599.465249][T18380] set_capacity_and_notify: 7 callbacks suppressed [ 599.465264][T18380] loop4: detected capacity change from 0 to 131072 [ 599.554629][T18380] REISERFS (device loop4): found reiserfs format "3.6" with standard journal [ 599.571745][T18380] REISERFS (device loop4): using ordered data mode [ 599.586107][T18380] reiserfs: using flush barriers [ 599.610624][T18380] REISERFS (device loop4): journal params: device loop4, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 599.642296][T18380] REISERFS (device loop4): checking transaction log (loop4) [ 600.075767][T18396] loop2: detected capacity change from 0 to 16384 [ 600.121805][T18396] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 600.172572][T18396] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 600.848047][T18401] loop2: detected capacity change from 0 to 4096 [ 600.925040][T18401] ntfs: volume version 3.1. [ 601.206805][T18405] loop2: detected capacity change from 0 to 256 [ 601.578720][T18409] loop2: detected capacity change from 0 to 128 [ 601.646218][T18409] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 601.700563][T18409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.075647][T18413] loop2: detected capacity change from 0 to 8192 [ 602.122150][T18413] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 602.169317][T18413] REISERFS (device loop2): using ordered data mode [ 602.175871][T18413] reiserfs: using flush barriers [ 602.239082][T18413] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 602.327866][T18413] REISERFS (device loop2): checking transaction log (loop2) [ 602.553224][T18413] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 602.641974][T18413] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 602.685237][T18413] REISERFS (device loop2): Remounting filesystem read-only [ 602.700698][T18413] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 602.750294][T18413] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 603.345313][T18416] loop2: detected capacity change from 0 to 4096 [ 603.383198][T18380] REISERFS (device loop4): Using rupasov hash to sort names [ 603.417375][T18380] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 603.455813][T18416] ntfs: volume version 3.1. [ 603.829304][T18420] loop2: detected capacity change from 0 to 4096 [ 604.016547][T18420] ntfs: volume version 3.1. [ 604.236221][T18418] loop3: detected capacity change from 0 to 32768 [ 604.266032][T18424] loop2: detected capacity change from 0 to 256 [ 604.306841][T18424] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 604.340757][T18424] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 604.357160][T18424] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 604.370704][T18424] UDF-fs: Scanning with blocksize 512 failed [ 604.378160][T18424] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 604.439346][T18424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 604.795355][T18430] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 604.813230][T18430] UDF-fs: Scanning with blocksize 512 failed [ 604.840077][T18430] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 604.866159][T18411] set_capacity_and_notify: 1 callbacks suppressed [ 604.866176][T18411] loop1: detected capacity change from 0 to 131072 [ 604.873060][T18430] UDF-fs: Scanning with blocksize 1024 failed [ 604.922822][T18430] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 604.968883][T18411] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 605.012265][T18411] REISERFS (device loop1): using ordered data mode [ 605.020792][T18430] UDF-fs: Scanning with blocksize 2048 failed [ 605.052637][T18411] reiserfs: using flush barriers [ 605.080287][T18430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 605.099809][T18433] loop4: detected capacity change from 0 to 256 [ 605.124237][T18411] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 605.126715][T18433] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 605.161156][T18430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.234375][T18411] REISERFS (device loop1): checking transaction log (loop1) [ 605.269677][T18433] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 605.297257][T18433] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 605.318121][T18433] UDF-fs: Scanning with blocksize 512 failed [ 605.326700][T18433] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 605.345603][T18433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.430058][T18436] loop2: detected capacity change from 0 to 256 [ 605.484198][T18436] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 605.514217][T18436] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 605.558229][T18436] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 605.608104][T18436] UDF-fs: Scanning with blocksize 512 failed [ 605.641008][T18436] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 605.688921][T18436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.878990][T18445] loop0: detected capacity change from 0 to 512 [ 607.947944][T18445] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 607.992685][T18445] UDF-fs: Scanning with blocksize 512 failed [ 608.022360][T18445] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 608.046102][T18445] UDF-fs: Scanning with blocksize 1024 failed [ 608.091255][T18445] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 608.099716][T18445] UDF-fs: Scanning with blocksize 2048 failed [ 608.126648][T18445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 608.156929][T18445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.375641][T18447] loop0: detected capacity change from 0 to 256 [ 608.437209][T18447] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 608.488731][T18447] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 608.505841][T18447] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 608.527190][T18447] UDF-fs: Scanning with blocksize 512 failed [ 608.547233][T18447] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 608.584244][T18447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.469983][T18453] loop4: detected capacity change from 0 to 512 [ 609.537745][T18453] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 609.560416][T18453] UDF-fs: Scanning with blocksize 512 failed [ 609.614109][T18453] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 609.653612][T18453] UDF-fs: Scanning with blocksize 1024 failed [ 609.697012][T18453] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 609.713718][T18453] UDF-fs: Scanning with blocksize 2048 failed [ 609.732431][T18453] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 609.779161][T18453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.066209][T18456] loop2: detected capacity change from 0 to 512 [ 610.194788][T18456] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 610.225753][T18456] UDF-fs: Scanning with blocksize 512 failed [ 610.252430][T18456] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 610.279974][T18456] UDF-fs: Scanning with blocksize 1024 failed [ 610.306526][T18456] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 610.343196][T18456] UDF-fs: Scanning with blocksize 2048 failed [ 610.370225][T18456] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 610.408108][T18456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.555120][T18411] REISERFS (device loop1): Using tea hash to sort names [ 610.576654][T18411] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 610.626800][T18461] loop2: detected capacity change from 0 to 128 [ 611.984001][T18463] loop2: detected capacity change from 0 to 65536 [ 612.269779][T18464] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.544924][T18466] loop3: detected capacity change from 0 to 2048 [ 612.556328][T18457] loop4: detected capacity change from 0 to 131072 [ 612.712101][T18457] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 612.742826][T18457] REISERFS (device loop4): using ordered data mode [ 612.749387][T18457] reiserfs: using flush barriers [ 612.875158][T18470] loop2: detected capacity change from 0 to 512 [ 612.881660][T18457] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 612.939016][T18457] REISERFS (device loop4): checking transaction log (loop4) [ 613.013323][T18475] loop1: detected capacity change from 0 to 256 [ 613.109455][T18475] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 613.179474][T18475] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 613.235538][T18475] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 613.281267][T18477] loop2: detected capacity change from 0 to 2048 [ 613.284441][T18475] UDF-fs: Scanning with blocksize 512 failed [ 613.340847][T18475] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 613.380236][T18475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.651571][T18480] loop1: detected capacity change from 0 to 2048 [ 613.719477][T18480] loop1: p1 p2 p3 [ 613.860960][ T3560] loop1: p1 p2 p3 [ 614.003890][ T4403] udevd[4403]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 614.016622][ T8000] udevd[8000]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 614.035393][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 614.114091][ T4403] udevd[4403]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 614.127005][ T8000] udevd[8000]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 614.141367][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 614.352315][T18481] loop2: detected capacity change from 0 to 32768 [ 614.513293][T18481] XFS (loop2): Mounting V5 Filesystem [ 614.587813][T18481] XFS (loop2): Ending clean mount [ 614.712761][ T4185] XFS (loop2): Unmounting Filesystem [ 615.655893][T18483] loop1: detected capacity change from 0 to 65536 [ 615.829037][T18483] XFS (loop1): Mounting V5 Filesystem [ 615.980275][T18493] loop2: detected capacity change from 0 to 32768 [ 616.074270][T18493] XFS (loop2): Mounting V5 Filesystem [ 616.141150][T18483] XFS (loop1): Ending clean mount [ 616.262161][T18493] XFS (loop2): Ending clean mount [ 616.301366][ T4191] XFS (loop1): Unmounting Filesystem [ 616.376161][ T4185] XFS (loop2): Unmounting Filesystem [ 616.986168][T18513] loop3: detected capacity change from 0 to 2048 [ 618.607941][T18519] loop1: detected capacity change from 0 to 65536 [ 618.741675][T18519] XFS (loop1): Mounting V5 Filesystem [ 618.888526][T18519] XFS (loop1): Ending clean mount [ 619.015080][ T4191] XFS (loop1): Unmounting Filesystem [ 619.272902][T18457] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 619.315883][T18457] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 619.349121][T18457] REISERFS (device loop4): Remounting filesystem read-only [ 619.370548][T18457] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 619.406494][T18457] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 619.883902][T18517] loop3: detected capacity change from 0 to 131072 [ 619.982066][T18517] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 621.729862][T17836] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 622.114954][T17836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.146775][T17836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 622.155828][T17836] usb 4-1: config 1 has no interface number 0 [ 622.163138][T17836] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.200261][T17836] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 622.230979][T17836] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 622.263827][T17836] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 622.467668][T17836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.487727][T17836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.520060][T17836] usb 4-1: Product: syz [ 622.524679][T17836] usb 4-1: Manufacturer: syz [ 622.529520][T17836] usb 4-1: SerialNumber: syz [ 623.119882][T17836] cdc_ncm 4-1:1.1: bind() failure [ 623.140733][T17836] usb 4-1: USB disconnect, device number 23 [ 624.749069][T18556] loop1: detected capacity change from 0 to 32768 [ 624.859405][T18556] XFS (loop1): Mounting V5 Filesystem [ 625.111981][T18572] loop0: detected capacity change from 0 to 164 [ 625.132648][T18556] XFS (loop1): Ending clean mount [ 625.208802][ T4191] XFS (loop1): Unmounting Filesystem [ 625.219481][T18562] loop3: detected capacity change from 0 to 32768 [ 625.329202][T18572] Unable to read rock-ridge attributes [ 625.356922][T18572] Unable to read rock-ridge attributes [ 625.368092][T18572] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 625.450554][T18562] XFS (loop3): Mounting V5 Filesystem [ 625.736614][T18562] XFS (loop3): Ending clean mount [ 625.794630][T18604] Scaler: ================= START STATUS ================= [ 625.802035][T18604] Scaler: ================== END STATUS ================== [ 625.895125][ T4194] XFS (loop3): Unmounting Filesystem [ 626.161969][T18625] dlm: Unknown command passed to DLM device : 132 [ 626.161969][T18625] [ 627.086114][ T9148] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 627.389030][ T9148] usb 5-1: Using ep0 maxpacket: 8 [ 627.451526][T18692] netlink: 'syz.3.6340': attribute type 1 has an invalid length. [ 627.524482][ T9148] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 627.543676][ T9148] usb 5-1: config 0 has no interface number 0 [ 627.571345][ T9148] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 627.574840][T18619] loop2: detected capacity change from 0 to 65536 [ 627.613381][ T9148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.641594][ T9148] usb 5-1: config 0 descriptor?? [ 627.829641][T18619] XFS (loop2): Mounting V5 Filesystem [ 627.866350][ T9148] viperboard 5-1:0.143: version 0.00 found at bus 005 address 022 [ 627.910354][ T9148] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 627.927805][ T9148] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 627.949746][ T9148] usb 5-1: USB disconnect, device number 22 [ 627.962764][T18619] XFS (loop2): Ending clean mount [ 628.016273][T18163] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 628.074860][ T4185] XFS (loop2): Unmounting Filesystem [ 628.635995][T18031] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 628.684643][T18163] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 628.715543][T18163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.753673][T18163] usb 4-1: Product: syz [ 628.764678][T18163] usb 4-1: Manufacturer: syz [ 628.775691][T18163] usb 4-1: SerialNumber: syz [ 628.851060][T18163] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 628.892723][T18031] usb 1-1: Using ep0 maxpacket: 32 [ 629.021188][T18031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 629.051059][T18031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 629.106202][T18031] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.107231][T18756] Cannot find set identified by id 0 to match [ 629.299492][T18031] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 629.308583][T18031] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 629.361362][T18031] usb 1-1: Product: syz [ 629.371275][T18031] usb 1-1: Manufacturer: syz [ 629.406185][T18031] usb 1-1: SerialNumber: syz [ 629.439427][T18731] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 629.461971][T18031] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input43 [ 629.468322][T18688] loop1: detected capacity change from 0 to 131072 [ 629.487586][T18772] Cannot find del_set index 0 as target [ 629.587818][T18163] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 629.646987][T18780] netlink: 'syz.2.6370': attribute type 5 has an invalid length. [ 629.688936][T18688] XFS (loop1): Mounting V5 Filesystem [ 629.824517][ T8643] usb 1-1: USB disconnect, device number 33 [ 629.855498][ T8643] appletouch 1-1:1.0: input: appletouch disconnected [ 629.864173][T18688] XFS (loop1): Ending clean mount [ 629.962122][T18800] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 629.993065][ T4191] XFS (loop1): Unmounting Filesystem [ 630.047409][T18805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 630.100189][T18153] usb 4-1: USB disconnect, device number 24 [ 630.275274][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.281648][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.678212][T18163] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 630.685695][T18163] ath9k_htc: Failed to initialize the device [ 630.734128][T18153] usb 4-1: ath9k_htc: USB layer deinitialized [ 630.947495][T18846] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6400'. [ 631.086122][T18857] loop2: detected capacity change from 0 to 128 [ 631.356882][T18870] loop2: detected capacity change from 0 to 1764 [ 631.400966][T18870] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 631.586779][T18890] netlink: 748 bytes leftover after parsing attributes in process `syz.4.6420'. [ 631.985592][T18916] openvswitch: netlink: Actions may not be safe on all matching packets [ 632.053686][T18920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6435'. [ 632.077543][T18924] loop0: detected capacity change from 0 to 8 [ 632.101376][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 632.111802][T18920] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 632.147176][T18923] IPv6: Can't replace route, no match found [ 632.325961][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6444'. [ 632.395953][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6444'. [ 632.434886][T18943] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1008285695) [ 632.478854][T18943] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 632.570650][T18951] 9pnet: p9_fd_create_tcp (18951): problem connecting socket to 127.0.0.1 [ 632.877769][T18976] loop3: detected capacity change from 0 to 256 [ 633.013733][T18976] FAT-fs (loop3): Directory bread(block 64) failed [ 633.045784][T18976] FAT-fs (loop3): Directory bread(block 65) failed [ 633.070682][T18976] FAT-fs (loop3): Directory bread(block 66) failed [ 633.098897][T18976] FAT-fs (loop3): Directory bread(block 67) failed [ 633.122723][T18976] FAT-fs (loop3): Directory bread(block 68) failed [ 633.144565][T19002] loop4: detected capacity change from 0 to 512 [ 633.147538][T18976] FAT-fs (loop3): Directory bread(block 69) failed [ 633.172477][T18976] FAT-fs (loop3): Directory bread(block 70) failed [ 633.179125][T18976] FAT-fs (loop3): Directory bread(block 71) failed [ 633.182796][T19007] netlink: 'syz.1.6478': attribute type 21 has an invalid length. [ 633.195944][T19007] netlink: 'syz.1.6478': attribute type 4 has an invalid length. [ 633.201303][T18976] FAT-fs (loop3): Directory bread(block 72) failed [ 633.210524][T18976] FAT-fs (loop3): Directory bread(block 73) failed [ 633.222449][T19002] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 633.254792][T19007] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6478'. [ 633.270028][T19013] loop0: detected capacity change from 0 to 64 [ 633.314889][T19002] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.6476: bad orphan inode 13 [ 633.357625][T19002] ext4_test_bit(bit=12, block=18) = 1 [ 633.367623][T19013] hfs: unable to locate alternate MDB [ 633.371945][T19002] is_bad_inode(inode)=0 [ 633.377372][T19002] NEXT_ORPHAN(inode)=0 [ 633.381444][T19002] max_ino=32 [ 633.385551][T19002] i_nlink=1 [ 633.389241][T19002] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.401979][T19013] hfs: continuing without an alternate MDB [ 633.470597][T19002] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.6476: deleted inode referenced: 12 [ 633.540518][ T26] audit: type=1800 audit(2000033365.755:31): pid=19013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6481" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 633.627596][ T5547] [ 633.629771][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6490'. [ 633.629953][ T5547] ====================================================== [ 633.629961][ T5547] WARNING: possible circular locking dependency detected [ 633.652908][ T5547] syzkaller #0 Not tainted [ 633.657319][ T5547] ------------------------------------------------------ [ 633.664332][ T5547] kworker/u4:7/5547 is trying to acquire lock: [ 633.670486][ T5547] ffff888075f93b78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 633.681389][ T5547] [ 633.681389][ T5547] but task is already holding lock: [ 633.688754][ T5547] ffff88807d5a00b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 633.698083][ T5547] [ 633.698083][ T5547] which lock already depends on the new lock. [ 633.698083][ T5547] [ 633.708500][ T5547] [ 633.708500][ T5547] the existing dependency chain (in reverse order) is: [ 633.717646][ T5547] [ 633.717646][ T5547] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 633.725572][ T5547] __mutex_lock_common+0x1e3/0x2400 [ 633.731306][ T5547] mutex_lock_nested+0x17/0x20 [ 633.736602][ T5547] hfs_find_init+0x15b/0x1d0 [ 633.741726][ T5547] hfs_get_block+0x553/0xc50 [ 633.746846][ T5547] block_read_full_page+0x306/0xd40 [ 633.752573][ T5547] do_read_cache_page+0x8a1/0x1030 [ 633.758218][ T5547] __hfs_bnode_create+0x4f0/0xbd0 [ 633.763772][ T5547] hfs_bnode_find+0x220/0xd30 [ 633.768984][ T5547] hfs_brec_find+0x178/0x500 [ 633.774118][ T5547] hfs_brec_read+0x20/0x100 [ 633.779155][ T5547] hfs_cat_find_brec+0x174/0x3f0 [ 633.784621][ T5547] hfs_fill_super+0xfda/0x1590 [ 633.789921][ T5547] mount_bdev+0x287/0x3c0 [ 633.794782][ T5547] legacy_get_tree+0xe6/0x180 [ 633.799992][ T5547] vfs_get_tree+0x88/0x270 [ 633.804946][ T5547] do_new_mount+0x24a/0xa40 [ 633.809977][ T5547] __se_sys_mount+0x2e3/0x3d0 [ 633.815183][ T5547] do_syscall_64+0x4c/0xa0 [ 633.820132][ T5547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 633.826559][ T5547] [ 633.826559][ T5547] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 633.835777][ T5547] __lock_acquire+0x2c42/0x7d10 [ 633.841174][ T5547] lock_acquire+0x19e/0x400 [ 633.846300][ T5547] __mutex_lock_common+0x1e3/0x2400 [ 633.852033][ T5547] mutex_lock_nested+0x17/0x20 [ 633.857330][ T5547] hfs_extend_file+0xfb/0x13f0 [ 633.862633][ T5547] hfs_bmap_reserve+0x103/0x420 [ 633.868011][ T5547] __hfs_ext_write_extent+0x1fa/0x470 [ 633.873915][ T5547] hfs_ext_write_extent+0x17b/0x200 [ 633.879646][ T5547] hfs_write_inode+0xd8/0xa20 [ 633.884852][ T5547] __writeback_single_inode+0x6c3/0xda0 [ 633.891107][ T5547] writeback_sb_inodes+0xa4e/0x1680 [ 633.896838][ T5547] wb_writeback+0x45d/0xbe0 [ 633.901877][ T5547] wb_workfn+0x43a/0xf20 [ 633.906650][ T5547] process_one_work+0x85f/0x1010 [ 633.912124][ T5547] worker_thread+0xaa6/0x1290 [ 633.917334][ T5547] kthread+0x436/0x520 [ 633.921930][ T5547] ret_from_fork+0x1f/0x30 [ 633.926887][ T5547] [ 633.926887][ T5547] other info that might help us debug this: [ 633.926887][ T5547] [ 633.937168][ T5547] Possible unsafe locking scenario: [ 633.937168][ T5547] [ 633.944611][ T5547] CPU0 CPU1 [ 633.949964][ T5547] ---- ---- [ 633.955304][ T5547] lock(&tree->tree_lock/1); [ 633.959970][ T5547] lock(&HFS_I(tree->inode)->extents_lock); [ 633.968451][ T5547] lock(&tree->tree_lock/1); [ 633.975629][ T5547] lock(&HFS_I(tree->inode)->extents_lock); [ 633.981589][ T5547] [ 633.981589][ T5547] *** DEADLOCK *** [ 633.981589][ T5547] [ 633.989710][ T5547] 3 locks held by kworker/u4:7/5547: [ 633.994972][ T5547] #0: ffff8881427e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 634.005569][ T5547] #1: ffffc900031bfd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 634.017561][ T5547] #2: ffff88807d5a00b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 634.027289][ T5547] [ 634.027289][ T5547] stack backtrace: [ 634.033167][ T5547] CPU: 0 PID: 5547 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 634.040784][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.050822][ T5547] Workqueue: writeback wb_workfn (flush-7:0) [ 634.056792][ T5547] Call Trace: [ 634.060059][ T5547] [ 634.062978][ T5547] dump_stack_lvl+0x188/0x250 [ 634.067641][ T5547] ? load_image+0x400/0x400 [ 634.072127][ T5547] ? show_regs_print_info+0x20/0x20 [ 634.077310][ T5547] ? print_circular_bug+0x12b/0x1a0 [ 634.082496][ T5547] check_noncircular+0x296/0x330 [ 634.087423][ T5547] ? look_up_lock_class+0x71/0x110 [ 634.092519][ T5547] ? add_chain_block+0x940/0x940 [ 634.097436][ T5547] ? lockdep_lock+0xf1/0x1f0 [ 634.102010][ T5547] ? deref_stack_reg+0xd0/0x120 [ 634.106844][ T5547] ? mark_lock+0x94/0x320 [ 634.111154][ T5547] __lock_acquire+0x2c42/0x7d10 [ 634.116011][ T5547] ? verify_lock_unused+0x140/0x140 [ 634.121191][ T5547] ? stack_trace_save+0xa6/0xf0 [ 634.126025][ T5547] ? stack_trace_snprint+0xf0/0xf0 [ 634.131121][ T5547] ? check_noncircular+0x189/0x330 [ 634.136220][ T5547] ? add_chain_block+0x940/0x940 [ 634.141138][ T5547] lock_acquire+0x19e/0x400 [ 634.145626][ T5547] ? hfs_extend_file+0xfb/0x13f0 [ 634.150546][ T5547] ? __lock_acquire+0x28ac/0x7d10 [ 634.155559][ T5547] ? __might_sleep+0xf0/0xf0 [ 634.160133][ T5547] ? read_lock_is_recursive+0x10/0x10 [ 634.165490][ T5547] ? hfs_extend_file+0xfb/0x13f0 [ 634.170408][ T5547] __mutex_lock_common+0x1e3/0x2400 [ 634.175589][ T5547] ? hfs_extend_file+0xfb/0x13f0 [ 634.180507][ T5547] ? mark_lock+0x94/0x320 [ 634.184819][ T5547] ? verify_lock_unused+0x140/0x140 [ 634.190002][ T5547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.195967][ T5547] ? __rwlock_init+0x140/0x140 [ 634.200720][ T5547] ? mutex_lock_io_nested+0x60/0x60 [ 634.205902][ T5547] ? lockdep_hardirqs_on+0x94/0x140 [ 634.211088][ T5547] mutex_lock_nested+0x17/0x20 [ 634.215838][ T5547] hfs_extend_file+0xfb/0x13f0 [ 634.220592][ T5547] ? __mutex_trylock_common+0x155/0x260 [ 634.226127][ T5547] ? hfs_get_block+0xc50/0xc50 [ 634.230879][ T5547] ? writeback_sb_inodes+0xa4e/0x1680 [ 634.236239][ T5547] ? wb_workfn+0x43a/0xf20 [ 634.240814][ T5547] ? hfs_find_init+0x15b/0x1d0 [ 634.245560][ T5547] ? __mutex_lock_common+0x465/0x2400 [ 634.250919][ T5547] ? memset+0x1e/0x40 [ 634.254895][ T5547] ? hfs_brec_find+0x197/0x500 [ 634.259645][ T5547] hfs_bmap_reserve+0x103/0x420 [ 634.264482][ T5547] __hfs_ext_write_extent+0x1fa/0x470 [ 634.269947][ T5547] hfs_ext_write_extent+0x17b/0x200 [ 634.275147][ T5547] ? verify_lock_unused+0x140/0x140 [ 634.280347][ T5547] ? hfs_ext_keycmp+0x310/0x310 [ 634.285188][ T5547] ? writeback_sb_inodes+0x418/0x1680 [ 634.290548][ T5547] hfs_write_inode+0xd8/0xa20 [ 634.295209][ T5547] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 634.300563][ T5547] ? __writeback_single_inode+0x471/0xda0 [ 634.306270][ T5547] ? __lock_acquire+0x7d10/0x7d10 [ 634.311276][ T5547] ? do_raw_spin_lock+0x128/0x2f0 [ 634.316370][ T5547] ? __rwlock_init+0x140/0x140 [ 634.321118][ T5547] __writeback_single_inode+0x6c3/0xda0 [ 634.326650][ T5547] writeback_sb_inodes+0xa4e/0x1680 [ 634.331836][ T5547] ? queue_io+0x550/0x550 [ 634.336152][ T5547] ? rcu_is_watching+0x11/0xa0 [ 634.340946][ T5547] wb_writeback+0x45d/0xbe0 [ 634.345432][ T5547] ? rcu_lock_release+0x20/0x20 [ 634.350265][ T5547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.356237][ T5547] ? mark_lock+0x94/0x320 [ 634.360547][ T5547] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.365726][ T5547] wb_workfn+0x43a/0xf20 [ 634.369957][ T5547] ? inode_wait_for_writeback+0x220/0x220 [ 634.375660][ T5547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.381625][ T5547] ? read_lock_is_recursive+0x10/0x10 [ 634.387414][ T5547] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.393286][ T5547] ? _raw_spin_unlock+0x40/0x40 [ 634.398122][ T5547] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.403301][ T5547] process_one_work+0x85f/0x1010 [ 634.408228][ T5547] ? worker_detach_from_pool+0x240/0x240 [ 634.413842][ T5547] ? lockdep_hardirqs_off+0x70/0x100 [ 634.419122][ T5547] ? _raw_spin_lock_irq+0xb7/0xf0 [ 634.424140][ T5547] ? _raw_spin_lock_irqsave+0x100/0x100 [ 634.429668][ T5547] ? wq_worker_running+0x97/0x170 [ 634.434684][ T5547] worker_thread+0xaa6/0x1290 [ 634.439437][ T5547] ? lockdep_hardirqs_on+0x94/0x140 [ 634.444616][ T5547] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.450491][ T5547] kthread+0x436/0x520 [ 634.454539][ T5547] ? rcu_lock_release+0x20/0x20 [ 634.459371][ T5547] ? kthread_blkcg+0xd0/0xd0 [ 634.463939][ T5547] ret_from_fork+0x1f/0x30 [ 634.468352][ T5547] [ 634.478071][ T5547] hfs: new node 0 already hashed? [ 634.483908][ T5547] ------------[ cut here ]------------ [ 634.489495][ T5547] WARNING: CPU: 0 PID: 5547 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 [ 634.506006][ T5547] Modules linked in: [ 634.513989][ T5547] CPU: 0 PID: 5547 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 634.558570][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.566001][T19037] netlink: 'syz.4.6491': attribute type 1 has an invalid length. [ 634.572236][ T5547] Workqueue: writeback wb_workfn (flush-7:0) [ 634.582660][ T5547] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 634.589221][ T5547] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 634.616542][ T5547] RSP: 0018:ffffc900031bee90 EFLAGS: 00010246 [ 634.623618][ T5547] RAX: 000000000000001f RBX: ffff88807d5a0000 RCX: e21aa427a96f0800 [ 634.631630][ T5547] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 634.640419][ T5547] RBP: 0000000000000000 R08: ffffc900031be9a7 R09: 1ffff92000637d34 [ 634.648903][ T5547] R10: dffffc0000000000 R11: fffff52000637d35 R12: 0000000000000000 [ 634.656971][ T5547] R13: ffff88807d5a00e0 R14: ffff88805c0fdd00 R15: dffffc0000000000 [ 634.664955][ T5547] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 634.674178][ T5547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.680804][ T5547] CR2: 00007ff61f0e4a08 CR3: 000000002a61a000 CR4: 00000000003506f0 [ 634.688939][ T5547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 634.696976][ T5547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 634.705080][ T5547] Call Trace: [ 634.708392][ T5547] [ 634.711405][ T5547] ? do_raw_spin_unlock+0x11d/0x230 [ 634.716598][ T5547] hfs_bmap_alloc+0x5b8/0x670 [ 634.721660][ T5547] ? hfs_bmap_reserve+0x420/0x420 [ 634.726737][ T5547] ? rcu_is_watching+0x11/0xa0 [ 634.731762][ T5547] hfs_btree_inc_height+0xfd/0xac0 [ 634.736904][ T5547] ? hfs_brec_insert+0x6f6/0xbd0 [ 634.741900][ T5547] ? hfs_brec_insert+0xbd0/0xbd0 [ 634.747208][ T5547] ? do_raw_spin_unlock+0x11d/0x230 [ 634.752468][ T5547] hfs_brec_insert+0x744/0xbd0 [ 634.757254][ T5547] ? hfs_brec_keylen+0x350/0x350 [ 634.762246][ T5547] __hfs_ext_write_extent+0x2a1/0x470 [ 634.767615][ T5547] hfs_ext_write_extent+0x17b/0x200 [ 634.772847][ T5547] ? verify_lock_unused+0x140/0x140 [ 634.778060][ T5547] ? hfs_ext_keycmp+0x310/0x310 [ 634.782950][ T5547] ? writeback_sb_inodes+0x418/0x1680 [ 634.788538][ T5547] hfs_write_inode+0xd8/0xa20 [ 634.793224][ T5547] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 634.798633][ T5547] ? __writeback_single_inode+0x471/0xda0 [ 634.804374][ T5547] ? __lock_acquire+0x7d10/0x7d10 [ 634.809460][ T5547] ? do_raw_spin_lock+0x128/0x2f0 [ 634.814483][ T5547] ? __rwlock_init+0x140/0x140 [ 634.819314][ T5547] __writeback_single_inode+0x6c3/0xda0 [ 634.824902][ T5547] writeback_sb_inodes+0xa4e/0x1680 [ 634.830148][ T5547] ? queue_io+0x550/0x550 [ 634.834477][ T5547] ? rcu_is_watching+0x11/0xa0 [ 634.839526][ T5547] wb_writeback+0x45d/0xbe0 [ 634.844075][ T5547] ? rcu_lock_release+0x20/0x20 [ 634.849187][ T5547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.855757][ T5547] ? mark_lock+0x94/0x320 [ 634.860194][ T5547] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.865398][ T5547] wb_workfn+0x43a/0xf20 [ 634.869671][ T5547] ? inode_wait_for_writeback+0x220/0x220 [ 634.875512][ T5547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.881612][ T5547] ? read_lock_is_recursive+0x10/0x10 [ 634.887004][ T5547] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.893123][ T5547] ? _raw_spin_unlock+0x40/0x40 [ 634.897974][ T5547] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.903220][ T5547] process_one_work+0x85f/0x1010 [ 634.908264][ T5547] ? worker_detach_from_pool+0x240/0x240 [ 634.913933][ T5547] ? lockdep_hardirqs_off+0x70/0x100 [ 634.919230][ T5547] ? _raw_spin_lock_irq+0xb7/0xf0 [ 634.924352][ T5547] ? _raw_spin_lock_irqsave+0x100/0x100 [ 634.929901][ T5547] ? wq_worker_running+0x97/0x170 [ 634.934966][ T5547] worker_thread+0xaa6/0x1290 [ 634.939754][ T5547] ? lockdep_hardirqs_on+0x94/0x140 [ 634.945052][ T5547] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.950981][ T5547] kthread+0x436/0x520 [ 634.955921][ T5547] ? rcu_lock_release+0x20/0x20 [ 634.960767][ T5547] ? kthread_blkcg+0xd0/0xd0 [ 634.966010][ T5547] ret_from_fork+0x1f/0x30 [ 634.970457][ T5547] [ 634.973472][ T5547] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 634.980732][ T5547] CPU: 0 PID: 5547 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 634.988260][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.998303][ T5547] Workqueue: writeback wb_workfn (flush-7:0) [ 635.004360][ T5547] Call Trace: [ 635.007620][ T5547] [ 635.010530][ T5547] dump_stack_lvl+0x188/0x250 [ 635.015186][ T5547] ? show_regs_print_info+0x20/0x20 [ 635.020390][ T5547] ? load_image+0x400/0x400 [ 635.024889][ T5547] panic+0x2e5/0x810 [ 635.028769][ T5547] ? bpf_jit_dump+0xd0/0xd0 [ 635.033256][ T5547] ? ret_from_fork+0x1f/0x30 [ 635.037833][ T5547] ? hfs_bnode_create+0x3d1/0x450 [ 635.042840][ T5547] __warn+0x248/0x2b0 [ 635.046817][ T5547] ? hfs_bnode_create+0x3d1/0x450 [ 635.051827][ T5547] report_bug+0x1b7/0x2e0 [ 635.056165][ T5547] handle_bug+0x3a/0x70 [ 635.060321][ T5547] exc_invalid_op+0x16/0x40 [ 635.064852][ T5547] asm_exc_invalid_op+0x16/0x20 [ 635.069686][ T5547] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 635.075405][ T5547] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 635.095013][ T5547] RSP: 0018:ffffc900031bee90 EFLAGS: 00010246 [ 635.101065][ T5547] RAX: 000000000000001f RBX: ffff88807d5a0000 RCX: e21aa427a96f0800 [ 635.109022][ T5547] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 635.116975][ T5547] RBP: 0000000000000000 R08: ffffc900031be9a7 R09: 1ffff92000637d34 [ 635.124927][ T5547] R10: dffffc0000000000 R11: fffff52000637d35 R12: 0000000000000000 [ 635.132885][ T5547] R13: ffff88807d5a00e0 R14: ffff88805c0fdd00 R15: dffffc0000000000 [ 635.140860][ T5547] ? do_raw_spin_unlock+0x11d/0x230 [ 635.146201][ T5547] hfs_bmap_alloc+0x5b8/0x670 [ 635.150880][ T5547] ? hfs_bmap_reserve+0x420/0x420 [ 635.155995][ T5547] ? rcu_is_watching+0x11/0xa0 [ 635.160927][ T5547] hfs_btree_inc_height+0xfd/0xac0 [ 635.166068][ T5547] ? hfs_brec_insert+0x6f6/0xbd0 [ 635.170990][ T5547] ? hfs_brec_insert+0xbd0/0xbd0 [ 635.175922][ T5547] ? do_raw_spin_unlock+0x11d/0x230 [ 635.181115][ T5547] hfs_brec_insert+0x744/0xbd0 [ 635.185878][ T5547] ? hfs_brec_keylen+0x350/0x350 [ 635.190819][ T5547] __hfs_ext_write_extent+0x2a1/0x470 [ 635.196196][ T5547] hfs_ext_write_extent+0x17b/0x200 [ 635.201383][ T5547] ? verify_lock_unused+0x140/0x140 [ 635.206585][ T5547] ? hfs_ext_keycmp+0x310/0x310 [ 635.211419][ T5547] ? writeback_sb_inodes+0x418/0x1680 [ 635.216771][ T5547] hfs_write_inode+0xd8/0xa20 [ 635.221431][ T5547] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 635.226783][ T5547] ? __writeback_single_inode+0x471/0xda0 [ 635.232496][ T5547] ? __lock_acquire+0x7d10/0x7d10 [ 635.237528][ T5547] ? do_raw_spin_lock+0x128/0x2f0 [ 635.242539][ T5547] ? __rwlock_init+0x140/0x140 [ 635.247292][ T5547] __writeback_single_inode+0x6c3/0xda0 [ 635.252830][ T5547] writeback_sb_inodes+0xa4e/0x1680 [ 635.258013][ T5547] ? queue_io+0x550/0x550 [ 635.262434][ T5547] ? rcu_is_watching+0x11/0xa0 [ 635.267183][ T5547] wb_writeback+0x45d/0xbe0 [ 635.271671][ T5547] ? rcu_lock_release+0x20/0x20 [ 635.276501][ T5547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 635.282461][ T5547] ? mark_lock+0x94/0x320 [ 635.286768][ T5547] ? _raw_spin_unlock_irq+0x1f/0x40 [ 635.292040][ T5547] wb_workfn+0x43a/0xf20 [ 635.296286][ T5547] ? inode_wait_for_writeback+0x220/0x220 [ 635.302014][ T5547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 635.307983][ T5547] ? read_lock_is_recursive+0x10/0x10 [ 635.313337][ T5547] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 635.319227][ T5547] ? _raw_spin_unlock+0x40/0x40 [ 635.324070][ T5547] ? _raw_spin_unlock_irq+0x1f/0x40 [ 635.329265][ T5547] process_one_work+0x85f/0x1010 [ 635.334199][ T5547] ? worker_detach_from_pool+0x240/0x240 [ 635.339816][ T5547] ? lockdep_hardirqs_off+0x70/0x100 [ 635.345191][ T5547] ? _raw_spin_lock_irq+0xb7/0xf0 [ 635.350248][ T5547] ? _raw_spin_lock_irqsave+0x100/0x100 [ 635.355823][ T5547] ? wq_worker_running+0x97/0x170 [ 635.361040][ T5547] worker_thread+0xaa6/0x1290 [ 635.365711][ T5547] ? lockdep_hardirqs_on+0x94/0x140 [ 635.370937][ T5547] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 635.376825][ T5547] kthread+0x436/0x520 [ 635.380880][ T5547] ? rcu_lock_release+0x20/0x20 [ 635.385715][ T5547] ? kthread_blkcg+0xd0/0xd0 [ 635.390291][ T5547] ret_from_fork+0x1f/0x30 [ 635.394693][ T5547] [ 635.398070][ T5547] Kernel Offset: disabled [ 635.402390][ T5547] Rebooting in 86400 seconds..