last executing test programs: 4.73966614s ago: executing program 4 (id=2319): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)={[{@acl}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@grpquota}, {@heartbeat_global}]}, 0x41, 0x442a, &(0x7f0000008940)="$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") 4.514112741s ago: executing program 2 (id=2322): poll(&(0x7f0000004200)=[{}], 0x1, 0x0) 4.365299226s ago: executing program 2 (id=2323): syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) 3.442510065s ago: executing program 4 (id=2325): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.287232729s ago: executing program 4 (id=2327): syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009ec0)='./file0\x00', 0x403, &(0x7f0000009f40)=ANY=[], 0xfd, 0x9dee, &(0x7f0000000000)="$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") 2.864654861s ago: executing program 2 (id=2334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.849517896s ago: executing program 4 (id=2335): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@noacl}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@data_ordered}]}, 0x1, 0x445d, &(0x7f0000004480)="$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") 2.752071733s ago: executing program 3 (id=2337): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x0, @link_local, @empty, @multicast}}}}, 0x0) 2.637602168s ago: executing program 2 (id=2339): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010080, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0xa1, 0x308, &(0x7f00000001c0)="$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") 2.566254712s ago: executing program 3 (id=2341): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x41, 0x1a1, &(0x7f0000000440)="$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") 2.48518463s ago: executing program 0 (id=2342): syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003215124099043e10184e01020301090223000100000000090400000800000000082403010000000009050f", @ANYRES16], 0x0) 2.298349878s ago: executing program 2 (id=2343): syz_read_part_table(0x1055, &(0x7f0000000000)="$eJzsz7EJAjEUBuB3p2hECwvXcBNbZ3AE23MFsXUBe6ewcqInwcNzAZGD7ytC/vwJ4QV/1Q7baV1m0TYRXS0eNWfmZLh7uJbYHcu2Hi3XEXE530/fz3ubWLxj1zwzI8qnyf7D+aq2+9tvpwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcXgFAAD//4mHDu0=") 2.156586504s ago: executing program 3 (id=2345): mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=K']) 2.083975325s ago: executing program 1 (id=2346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000000000000085000000bb00000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.010888449s ago: executing program 3 (id=2347): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0x0, 0x4}]}]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1.898423437s ago: executing program 3 (id=2348): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000140b9000000000000010000850200000000000000020000000000004300000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.883965145s ago: executing program 1 (id=2349): syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608709000000000000000000000000000001fc0200000000000000000000000000000001000000000000c20476"], 0x0) 1.751575382s ago: executing program 2 (id=2350): syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[], 0x1, 0x5b30, &(0x7f0000005b80)="$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") 1.646215955s ago: executing program 3 (id=2351): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") 1.523357992s ago: executing program 1 (id=2352): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000200)={[{@utf8}, {@session={'session', 0x3d, 0x5c}}, {@sbsector={'sbsector', 0x3d, 0xffffffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@cruft}, {@block={'block', 0x3d, 0x400}}]}, 0x41, 0x537, &(0x7f0000000ac0)="$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") 1.221172433s ago: executing program 1 (id=2353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x65}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.059898467s ago: executing program 1 (id=2354): syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7c, 0x3c, 0x0, @remote, @mcast2, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast1]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "f279da0a8521ee0bcda101cc54ad242cd5a9c9fe4425db818cb03f87faa08642", "0815f3fd27b60b8c69746126e0d966f0", {"c3e56fc14dae18465161ec18b9e3b958", "9a839e315132418126f939bc3692b642"}}}}}}}}, 0x0) 881.115176ms ago: executing program 1 (id=2355): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000005a80)=ANY=[@ANYRES8, @ANYBLOB="562a748634185cd696f8c452d3bfe19bfe902c62acf46e2c8296ca7e41422e92ce", @ANYRES64, @ANYBLOB="37d6472577aaea900353ec9207a2235c91013353b6ac24738497f619cf1e64dede6191fb4f7618cd13a142c682857b856e79dfee248b1b4a8efac26a3e8af9c977605e285513ea2f5f73d256883039c098d6b16d827639959e297965ada546b1050bed664705b5a21cadd3393edf4a4fc5bcb07898efef7c86898fb610a44efa90c78666d4b01502ccdd81d43d5cefeff5a20b04e3a1f834ba0486e0df365fa196b6de6ae2b594c2ef29ef1e5dc3d223ee9dcdaed4c05d14b6bf469f10e6d7c26dbdbffa8abb9f8478baa90591901ba594c0035d6d4d2f2591ac76884b9f76b3807905ea82", @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRESDEC], 0x3, 0x596d, &(0x7f0000000100)="$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") 790.359944ms ago: executing program 4 (id=2356): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 748.57675ms ago: executing program 0 (id=2357): syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0) 608.953263ms ago: executing program 4 (id=2358): syz_usb_connect(0x0, 0x24, &(0x7f00000052c0)={{0x12, 0x1, 0x0, 0xf7, 0x6f, 0xf7, 0x10, 0x7ab, 0xfc01, 0x28e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x70, 0xdf}}]}}]}}, 0x0) 450.440538ms ago: executing program 0 (id=2359): syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x64, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x3d, [@multicast1]}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) 318.406922ms ago: executing program 0 (id=2360): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000711125000000000040000000000000009500000000000000fdeb485eb832b37dea7117b5bb98655a832aa7ab93148b8ffc8a7a0f3a46bb070c16d8fd050713dde055f1ea"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 198.780143ms ago: executing program 0 (id=2361): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=2362): mremap(&(0x7f0000c6a000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000a1c000/0x4000)=nil) kernel console output (not intermixed with test programs): 336.556533][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.577917][ T978] usb 2-1: Product: syz [ 336.582359][ T978] usb 2-1: Manufacturer: syz [ 336.587097][ T978] usb 2-1: SerialNumber: syz [ 336.595219][ T978] usb 2-1: config 0 descriptor?? [ 336.607092][ T978] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 336.615216][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 336.646055][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 336.675663][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 336.702291][ T30] audit: type=1326 audit(1744353937.871:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0b938d169 code=0x0 [ 336.730708][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 336.738578][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 336.783122][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 336.859271][ T978] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 336.884976][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 336.905789][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 336.948070][T10318] loop0: detected capacity change from 0 to 512 [ 336.950082][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 336.966235][T10318] EXT4-fs: Ignoring removed orlov option [ 336.982313][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 337.001764][ T978] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 337.009622][T10318] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.1899: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 337.012493][T10318] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1899: couldn't read orphan inode 15 (err -117) [ 337.034119][ T978] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 337.073828][ T978] usb 2-1: USB disconnect, device number 59 [ 337.081837][T10318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.094807][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 337.126316][ T978] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 337.151415][ T978] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 337.168688][ T978] keyspan 2-1:0.0: device disconnected [ 337.190840][ T5909] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 337.239342][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.274871][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 337.298377][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 337.311795][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.335129][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.365545][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 337.378211][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 337.389274][ T5909] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 337.393435][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 337.409884][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.414110][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.435916][ T24] usb 4-1: config 0 descriptor?? [ 337.447782][T10314] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.457957][ T5909] usb 3-1: config 0 descriptor?? [ 337.466788][ T5909] rndis_host 3-1:0.0: skipping garbage [ 337.468351][ T5883] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 337.482945][ T5909] usb 3-1: bad CDC descriptors [ 337.633915][T10332] loop1: detected capacity change from 0 to 4096 [ 337.642314][T10332] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 337.656826][T10332] ntfs3(loop1): Failed to load $MFT (-22). [ 337.659674][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 337.682747][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.697986][ T5884] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 337.704243][ T5883] usb 5-1: config 1 has an invalid interface descriptor of length 2, skipping [ 337.706004][ T9] usb 3-1: USB disconnect, device number 71 [ 337.716272][ T5883] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 189, changing to 7 [ 337.733354][ T5883] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.765291][ T5883] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.793995][ T24] usb 4-1: USB disconnect, device number 61 [ 337.800841][ T5841] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 337.815876][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.858130][ T5883] usb 5-1: Product: syz [ 337.862386][ T5883] usb 5-1: Manufacturer: syz [ 337.886932][ T5883] usb 5-1: SerialNumber: syz [ 337.894522][T10334] loop1: detected capacity change from 0 to 1024 [ 337.913567][T10334] EXT4-fs (loop1): #clusters per group too big: 4294967295 [ 337.934772][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 337.967160][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 338.001072][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12592, setting to 64 [ 338.026353][ T5884] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 338.040053][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.060716][ T5884] usb 1-1: Product: syz [ 338.065047][ T5884] usb 1-1: Manufacturer: syz [ 338.069933][ T5884] usb 1-1: SerialNumber: syz [ 338.081497][ T5884] usb 1-1: config 0 descriptor?? [ 338.087496][T10330] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 338.095410][T10330] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 338.110296][ T5884] option 1-1:0.0: GSM modem (1-port) converter detected [ 338.141532][ T5883] usb 5-1: 2:1: invalid format type 0x6b70 is detected, processed as PCM [ 338.162911][ T5883] usb 5-1: 2:1 : sample bitwidth 222 in over sample bytes 4 [ 338.170288][ T5883] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 338.223754][ T5883] usb 5-1: USB disconnect, device number 58 [ 338.368383][ T5884] usb 1-1: USB disconnect, device number 67 [ 338.390142][ T5884] option 1-1:0.0: device disconnected [ 338.474533][ T6928] udevd[6928]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.624339][T10336] loop1: detected capacity change from 0 to 32768 [ 338.649834][T10336] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal: journal bucket 18446744073709551615 past end of device (nbuckets 128) [ 338.649834][T10336] journal (size 40): [ 338.649834][T10336] Buckets: 18446744073709551615 7 24 1 [ 338.649834][T10336] [ 338.686235][T10336] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 338.824966][ T5883] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 338.884889][T10346] loop1: detected capacity change from 0 to 2048 [ 338.919550][T10346] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 338.987266][ T5883] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 339.027409][ T5883] usb 4-1: config 0 has no interface number 0 [ 339.042434][ T5883] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 339.070874][ T5884] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 339.079761][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.113048][ T5883] usb 4-1: config 0 descriptor?? [ 339.132322][ T5883] usb 4-1: can't set first interface for hiFace device. [ 339.164805][ T5883] snd-usb-hiface 4-1:0.4: probe with driver snd-usb-hiface failed with error -5 [ 339.283322][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 339.304426][ T5884] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 339.371325][ T5884] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 339.383564][ T5883] usb 4-1: USB disconnect, device number 62 [ 339.398181][ T5884] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 339.423782][ T5884] usb 3-1: Product: syz [ 339.428033][ T5884] usb 3-1: Manufacturer: syz [ 339.503360][ T5884] r8152-cfgselector 3-1: Unknown version 0x0000 [ 339.509871][ T5884] r8152-cfgselector 3-1: config 0 descriptor?? [ 339.543864][ T5884] cdc_acm 3-1:0.0: Zero length descriptor references [ 339.550657][ T5884] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 339.719155][T10370] loop0: detected capacity change from 0 to 2048 [ 339.742095][ T5884] r8152-cfgselector 3-1: USB disconnect, device number 72 [ 339.745660][T10370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.851909][ T5909] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 339.974326][T10364] loop1: detected capacity change from 0 to 32768 [ 340.010405][T10364] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 340.010405][T10364] clean (size 2912): [ 340.010405][T10364] flags: 0 [ 340.010405][T10364] journal_seq: 10 [ 340.010405][T10364] usage: type=inodes v=8 [ 340.010405][T10364] usage: type=key_version v=0 [ 340.010405][T10364] usage: type=reserved v=0 [ 340.010405][T10364] usage: type=reserved v=0 [ 340.010405][T10364] usage: type=reserved v=0 [ 340.010405][T10364] usage: type=reserved v=0 [ 340.010405][T10364] data_usage: btree: 1/1 [0]=2816 [ 340.010405][T10364] data_usage: journal: 1/1 [0]=0 [ 340.010405][T10364] data_usage: user: 1/1 [0]=16 [ 340.010405][T10364] dev_usage: dev=0 [ 340.010405][T10364] free: buckets=83 sectors=0 fragmented=0 [ 340.010405][T10364] sb: buckets=25 sectors=6152 fragmented=248 [ 340.010405][T10364] journal: buckets=8 sectors=2048 fragmented=0 [ 340.010405][T10364] btree: buckets=11 sectors=2816 fragmented=0 [ 340.010405][T10364] user: buckets=1 sectors=16 fragmented=240 [ 340.010405][T10364] cached: buckets=0 sectors=0 fragmented=13565952 [ 340.010405][T10364] parity: buckets=0 sectors=0 fragmented=0 [ 340.010405][T10364] stripe: buckets=0 sectors=0 fragmented=0 [ 340.010405][T10364] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 340.010405][T10364] need_discard: buckets=0 sectors=0 fragmented=0 [ 340.010405][T10364] clock: read=0 [ 340.010405][T10364] clock: write=1280 [ 340.010405][T10364] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: [ 340.010717][T10364] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 340.197389][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 340.206976][ T5909] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 340.217629][ T5909] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 340.247015][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.284775][ T5909] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 340.337241][ T5909] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 340.347979][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.364459][ T5909] usb 5-1: Product: syz [ 340.368701][ T5909] usb 5-1: Manufacturer: syz [ 340.384292][ T5909] usb 5-1: SerialNumber: syz [ 340.407059][ T5909] usb 5-1: config 0 descriptor?? [ 340.451171][ T5909] hub 5-1:0.0: bad descriptor, ignoring hub [ 340.451567][T10380] loop1: detected capacity change from 0 to 512 [ 340.478932][ T5909] hub 5-1:0.0: probe with driver hub failed with error -5 [ 340.557429][T10380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.578599][T10380] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 340.643524][T10380] EXT4-fs (loop1): group descriptors corrupted! [ 340.654939][ T9] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 340.662644][T10384] loop2: detected capacity change from 0 to 1764 [ 340.771226][ T978] usb 5-1: USB disconnect, device number 59 [ 340.852020][ T9] usb 4-1: config 2 has an invalid interface number: 211 but max is 0 [ 340.862441][ T9] usb 4-1: config 2 has no interface number 0 [ 340.898957][ T9] usb 4-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 340.929691][ T9] usb 4-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 340.950569][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 340.960160][ T5909] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 340.973003][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.984027][ T9] usb 4-1: Product: syz [ 341.004168][T10393] loop1: detected capacity change from 0 to 1024 [ 341.010986][ T9] usb 4-1: Manufacturer: syz [ 341.015637][ T9] usb 4-1: SerialNumber: syz [ 341.053832][T10378] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.067874][T10393] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 341.081294][T10393] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 341.097372][T10396] loop2: detected capacity change from 0 to 512 [ 341.110569][ T9] em28xx 4-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 341.114296][T10396] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 341.121088][ T9] em28xx 4-1:2.211: Device initialization failed. [ 341.135705][ T9] em28xx 4-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 341.160236][T10393] EXT4-fs (loop1): mount failed [ 341.165949][T10396] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 341.179234][ T5909] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 341.187881][ T5909] usb 1-1: config 0 has no interface number 0 [ 341.194042][ T5909] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.227980][T10396] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 341.245827][ T5909] usb 1-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 341.262346][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.272357][T10396] EXT4-fs (loop2): orphan cleanup on readonly fs [ 341.278830][ T5909] usb 1-1: Product: syz [ 341.278856][ T5909] usb 1-1: Manufacturer: syz [ 341.278872][ T5909] usb 1-1: SerialNumber: syz [ 341.282237][ T5909] usb 1-1: config 0 descriptor?? [ 341.303235][ T5909] cdc_ncm 1-1:0.47: CDC Union missing and no IAD found [ 341.312208][ T5909] cdc_ncm 1-1:0.47: bind() failure [ 341.349148][T10396] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #2: block 4: comm syz.2.1938: lblock 0 mapped to illegal pblock 4 (length 1) [ 341.381114][ T5909] usb 4-1: USB disconnect, device number 63 [ 341.387652][T10396] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 341.446721][T10396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.550805][ T5881] usb 1-1: USB disconnect, device number 68 [ 341.590705][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.935866][ T978] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 341.999763][T10405] loop4: detected capacity change from 0 to 32768 [ 342.096419][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 342.099392][T10405] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 342.106507][ T978] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 342.126285][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 342.138977][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.147044][ T978] usb 2-1: Product: syz [ 342.160469][ T978] usb 2-1: Manufacturer: syz [ 342.165133][ T978] usb 2-1: SerialNumber: syz [ 342.172583][T10405] bcachefs (loop4): initializing new filesystem [ 342.191790][T10405] bcachefs (loop4): going read-write [ 342.197307][ T978] usb 2-1: config 0 descriptor?? [ 342.283543][T10405] bcachefs (loop4): marking superblocks [ 342.342190][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 342.356269][ T9] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 342.365742][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.373799][ T9] usb 3-1: Product: syz [ 342.380628][ T9] usb 3-1: Manufacturer: syz [ 342.385323][ T9] usb 3-1: SerialNumber: syz [ 342.393366][ T9] usb 3-1: config 0 descriptor?? [ 342.403046][ T9] usb 3-1: bad CDC descriptors [ 342.423203][T10405] bcachefs (loop4): initializing freespace [ 342.439527][ T978] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 342.448427][ T978] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 342.464332][T10405] bcachefs (loop4): done initializing freespace [ 342.501749][T10405] bcachefs (loop4): reading snapshots table [ 342.516924][ T978] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 342.519186][T10405] bcachefs (loop4): reading snapshots done [ 342.523426][ T978] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 342.598192][T10405] bcachefs (loop4): done starting filesystem [ 342.672703][ T5909] usb 3-1: USB disconnect, device number 73 [ 342.673745][ T978] usb 2-1: USB disconnect, device number 60 [ 342.698741][T10416] loop3: detected capacity change from 0 to 32768 [ 342.737370][T10416] bcachefs (loop3): filesystem UUID already open [ 342.766300][T10416] bcachefs (loop3): shutdown complete [ 342.815971][T10416] bcachefs: bch2_fs_get_tree() error: EINVAL [ 342.828874][ T5831] bcachefs (loop4): shutting down [ 342.839547][ T5831] bcachefs (loop4): going read-only [ 342.861575][ T5831] bcachefs (loop4): finished waiting for writes to stop [ 342.882225][ T5831] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 342.891417][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 342.930886][ T5831] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 342.949313][ T5831] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 342.995831][ T5831] bcachefs (loop4): marking filesystem clean [ 343.069048][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 343.081734][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 343.107609][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 343.133065][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 343.150802][ T5831] bcachefs (loop4): shutdown complete [ 343.153660][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.171653][ T9] usb 1-1: Product: syz [ 343.181017][ T9] usb 1-1: Manufacturer: syz [ 343.185746][ T9] usb 1-1: SerialNumber: syz [ 343.208766][ T9] usb 1-1: config 0 descriptor?? [ 343.237090][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 343.245268][T10434] loop1: detected capacity change from 0 to 4096 [ 343.279795][T10434] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 343.368172][T10434] ntfs3(loop1): $Secure::$SDH is corrupted. [ 343.387041][T10434] ntfs3(loop1): Failed to initialize $Secure (-22). [ 343.451727][ T5928] usb 1-1: Failed to submit usb control message: -71 [ 343.455052][ T9] usb 1-1: USB disconnect, device number 69 [ 343.471002][ T5928] usb 1-1: unable to send the bmi data to the device: -71 [ 343.500154][ T5928] usb 1-1: unable to get target info from device [ 343.525023][ T5928] usb 1-1: could not get target info (-71) [ 343.547792][ T5928] usb 1-1: could not probe fw (-71) [ 343.575777][T10443] loop2: detected capacity change from 0 to 4096 [ 343.605276][ T5883] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 343.634459][T10443] ntfs3(loop2): Primary boot: start of MFT 0x1ff (0x1ff) is out of volume 0x206. [ 343.662199][T10443] ntfs3(loop2): try to read out of volume at offset 0x1ffe00 [ 343.726127][T10447] loop1: detected capacity change from 0 to 64 [ 343.767414][T10447] hfs: get root inode failed [ 343.786563][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 343.795074][ T5883] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 343.820368][ T5883] usb 4-1: config 1 has no interface number 1 [ 343.844708][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 343.899094][ T5883] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.947970][ T5883] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.967136][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.975388][ T5883] usb 4-1: Product: syz [ 343.980515][ T5883] usb 4-1: Manufacturer: syz [ 343.985251][ T5883] usb 4-1: SerialNumber: syz [ 344.128530][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 344.225713][ T5883] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 344.235095][ T5883] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 344.243597][ T5883] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 344.256427][ T5883] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 344.279223][ T5883] usb 4-1: failed to enable PITCH for EP 0x82 [ 344.310159][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 344.324308][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.334953][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 344.345131][ T9] usb 3-1: config 1 has no interface number 1 [ 344.345747][ T5883] usb 4-1: USB disconnect, device number 64 [ 344.351446][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 344.421832][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.447405][ T9] usb 3-1: config 1 interface 2 has no altsetting 0 [ 344.455015][ T5881] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 344.470815][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.482998][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.497696][ T9] usb 3-1: Product: syz [ 344.507919][ T9] usb 3-1: Manufacturer: syz [ 344.516874][ T9] usb 3-1: SerialNumber: syz [ 344.566050][ T5884] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 344.630089][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 344.637813][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 344.652880][ T5881] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 344.663272][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.671793][ T5881] usb 2-1: Product: syz [ 344.676242][ T5881] usb 2-1: Manufacturer: syz [ 344.682186][ T5881] usb 2-1: SerialNumber: syz [ 344.690450][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.713779][ T5881] usb 2-1: config 0 descriptor?? [ 344.733710][ T5881] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 344.754667][ T9] usb 3-1: 2:1 : invalid UAC_AS_GENERAL desc [ 344.763200][ T5884] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 344.778318][ T9] usb 3-1: selecting invalid altsetting 0 [ 344.787975][ T5881] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 344.796860][ T5884] usb 1-1: config 0 has no interface number 0 [ 344.809660][ T5884] usb 1-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 344.839106][ T5884] usb 1-1: config 0 interface 216 has no altsetting 0 [ 344.846814][ T5884] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 344.858075][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.908168][ T9] usb 3-1: USB disconnect, device number 74 [ 344.941081][ T5884] usb 1-1: config 0 descriptor?? [ 344.962003][T10461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 345.006163][ T5884] usb 1-1: NFC: intf ffff88807de66000 id ffffffff8f743c80 [ 345.061762][ T5881] usb 2-1: USB disconnect, device number 61 [ 345.085041][ T5881] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 345.117549][ T5881] kobil_sct 2-1:0.0: device disconnected [ 345.226597][ T5883] usb 1-1: USB disconnect, device number 70 [ 345.255414][ T6928] udevd[6928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.373751][T10471] loop4: detected capacity change from 0 to 128 [ 345.382298][T10471] affs: No valid root block on device loop4 [ 345.442460][ T5884] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 345.616487][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 345.624587][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.635992][ T5884] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 345.668087][ T5884] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.679204][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.690405][ T5884] usb 4-1: SerialNumber: syz [ 345.723916][ T5884] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 345.742111][ T5884] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 345.753697][ T5883] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 345.759913][ T5884] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 345.934933][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 345.962864][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.964116][ T5884] usb 4-1: USB disconnect, device number 65 [ 345.983005][ T5883] usb 3-1: config 7 has an invalid interface number: 221 but max is 0 [ 345.996906][ T5883] usb 3-1: config 7 has no interface number 0 [ 346.003814][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 346.052879][ T5883] usb 3-1: config 7 interface 221 has no altsetting 0 [ 346.063508][ T5883] usb 3-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=f2.6a [ 346.083513][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.094646][ T5883] usb 3-1: Product: syz [ 346.098887][ T5883] usb 3-1: Manufacturer: syz [ 346.114395][ T5883] usb 3-1: SerialNumber: syz [ 346.214718][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 346.233511][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.265733][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.274833][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.310740][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 346.329816][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.338547][T10483] loop4: detected capacity change from 0 to 32768 [ 346.362311][ T24] usb 2-1: Product: syz [ 346.362450][T10483] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value [ 346.368865][ T24] usb 2-1: Manufacturer: syz [ 346.401205][ T5883] safe_serial 3-1:7.221: safe_serial converter detected [ 346.414286][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 346.434027][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 346.441410][ T5883] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 346.458358][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 346.477545][ T5883] usb 3-1: USB disconnect, device number 75 [ 346.550962][ T5883] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 346.583879][ T5883] safe_serial 3-1:7.221: device disconnected [ 346.672444][ T24] usb 2-1: USB disconnect, device number 62 [ 347.002000][T10491] loop4: detected capacity change from 0 to 512 [ 347.012611][T10489] loop3: detected capacity change from 0 to 4096 [ 347.044011][T10489] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 347.055288][T10491] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 347.124512][T10489] ntfs3(loop3): $Secure::$SDH is corrupted. [ 347.130679][T10489] ntfs3(loop3): Failed to initialize $Secure (-22). [ 347.620965][T10504] loop4: detected capacity change from 0 to 512 [ 347.655508][T10504] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 347.683427][T10504] EXT4-fs (loop4): invalid journal inode [ 347.689908][T10504] EXT4-fs (loop4): can't get journal size [ 347.696688][T10501] loop1: detected capacity change from 0 to 2048 [ 347.720497][T10501] nilfs2: Unknown parameter 'no' [ 347.727507][T10504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 347.741326][T10504] System zones: 1-12, 13-13 [ 347.752646][T10504] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.1985: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 347.848712][T10504] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1985: couldn't read orphan inode 15 (err -117) [ 347.897481][T10504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.954826][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 348.071672][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.125855][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 348.133320][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 348.145852][ T9] usb 4-1: config 0 has no interface number 0 [ 348.168671][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 348.179252][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.179782][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 348.189285][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 348.236256][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 348.257788][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.276531][ T9] usb 4-1: Product: syz [ 348.288657][ T9] usb 4-1: Manufacturer: syz [ 348.298595][ T9] usb 4-1: SerialNumber: syz [ 348.327263][ T9] usb 4-1: config 0 descriptor?? [ 348.349133][T10506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.356540][ T5884] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 348.364561][T10506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.442403][ T24] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 348.465276][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.493677][ T24] usb 3-1: Product: syz [ 348.509425][ T24] usb 3-1: Manufacturer: syz [ 348.524582][ T24] usb 3-1: SerialNumber: syz [ 348.548976][ T24] usb 3-1: config 0 descriptor?? [ 348.577081][ T5884] usb 1-1: config 0 has an invalid interface number: 46 but max is 8 [ 348.581087][ T24] f81232 3-1:0.0: f81232 converter detected [ 348.596201][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.615857][ T24] usb 3-1: f81232 converter now attached to ttyUSB0 [ 348.632122][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 348.643991][ T5884] usb 1-1: config 0 has no interface number 0 [ 348.676380][ T5884] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 348.704356][ T9] usb 4-1: USB disconnect, device number 66 [ 348.718034][ T5884] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.739188][ T5884] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 348.765303][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.819345][ T5982] usb 3-1: USB disconnect, device number 76 [ 348.827824][ T5884] usb 1-1: Product: syz [ 348.840269][ T5982] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 348.849555][ T5884] usb 1-1: Manufacturer: syz [ 348.856615][ T5884] usb 1-1: SerialNumber: syz [ 348.865006][ T5982] f81232 3-1:0.0: device disconnected [ 348.881055][ T5884] usb 1-1: config 0 descriptor?? [ 348.887216][T10517] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 348.897679][ T5884] ums-karma 1-1:0.46: USB Mass Storage device detected [ 348.954934][ T5884] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 348.985055][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 349.092976][T10541] loop4: detected capacity change from 0 to 764 [ 349.134708][ T5982] usb 1-1: USB disconnect, device number 71 [ 349.173801][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 349.193962][ T24] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 349.207452][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.216503][ T24] usb 2-1: Product: syz [ 349.229266][ T24] usb 2-1: Manufacturer: syz [ 349.236367][ T24] usb 2-1: SerialNumber: syz [ 349.256523][ T24] usb 2-1: config 0 descriptor?? [ 349.278756][ T24] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 349.292944][ T24] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 349.330447][T10545] loop3: detected capacity change from 0 to 4096 [ 349.372561][T10545] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 349.494139][ T5828] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 349.531796][ T5884] usb 2-1: USB disconnect, device number 63 [ 349.557982][T10547] loop2: detected capacity change from 0 to 1024 [ 349.577052][T10549] loop3: detected capacity change from 0 to 2048 [ 349.584873][T10547] hfsplus: unable to find HFS+ superblock [ 349.588432][T10549] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 349.609714][T10549] NILFS (loop3): mounting unchecked fs [ 349.627642][T10549] NILFS (loop3): invalid segment: Checksum error in super root [ 349.639955][ T5833] udevd[5833]: incorrect nilfs2 checksum on /dev/loop3 [ 349.649913][T10549] NILFS (loop3): error -22 while loading super root [ 349.675888][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 349.692825][ T5828] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 349.714307][ T5828] usb 5-1: config 0 has no interface number 0 [ 349.735968][ T5828] usb 5-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 349.756535][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.790801][ T5828] usb 5-1: Product: syz [ 349.812427][ T5828] usb 5-1: Manufacturer: syz [ 349.834089][ T5828] usb 5-1: SerialNumber: syz [ 349.853359][ T5828] usb 5-1: config 0 descriptor?? [ 350.137528][ T5828] mos7840 5-1:0.186: missing endpoints [ 350.178664][ T5828] usb 5-1: USB disconnect, device number 60 [ 350.229594][T10561] loop3: detected capacity change from 0 to 2048 [ 350.242224][T10564] NILFS (loop2): device size too small [ 350.296122][T10561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.542397][T10567] loop2: detected capacity change from 0 to 256 [ 350.590189][T10555] loop0: detected capacity change from 0 to 32768 [ 350.611390][T10567] exFAT-fs (loop2): failed to load alloc-bitmap [ 350.620144][T10555] bcachefs (/dev/loop0): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 12) [ 350.648183][T10567] exFAT-fs (loop2): failed to recognize exfat type [ 350.658668][T10555] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 350.882555][T10572] syz.4.2016 (10572): attempted to duplicate a private mapping with mremap. This is not supported. [ 350.974977][T10577] erofs (device nbd2): cannot find valid erofs superblock [ 351.225290][T10583] loop0: detected capacity change from 0 to 2048 [ 351.284326][T10583] loop0: p1 p3 < > p4 < p5 > [ 351.298095][T10583] loop0: partition table partially beyond EOD, truncated [ 351.316478][T10583] loop0: p1 size 33024 extends beyond EOD, truncated [ 351.323899][T10580] loop1: detected capacity change from 0 to 8192 [ 351.330982][T10589] loop2: detected capacity change from 0 to 8 [ 351.345020][T10583] loop0: p3 start 4284289 is beyond EOD, truncated [ 351.355859][T10589] squashfs image failed sanity check [ 351.365393][T10583] loop0: p5 size 33024 extends beyond EOD, truncated [ 351.376086][ T5884] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 351.387906][T10580] Dev loop1: RDB in block 1 has bad checksum [ 351.460125][ T5202] Dev loop1: RDB in block 1 has bad checksum [ 351.571586][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 351.598820][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.646671][ T5884] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 351.694111][ T5884] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 351.737967][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 351.755464][ T5839] udevd[5839]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 351.776365][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 351.784159][ T6928] udevd[6928]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 351.786647][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.857666][ T5884] usb 5-1: Product: syz [ 351.861997][ T5884] usb 5-1: Manufacturer: syz [ 351.890096][ T5884] usb 5-1: SerialNumber: syz [ 351.931662][ T978] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 352.139544][ T978] usb 1-1: config 0 has an invalid interface number: 236 but max is 0 [ 352.150071][ T978] usb 1-1: config 0 has no interface number 0 [ 352.166881][ T978] usb 1-1: config 0 interface 236 has no altsetting 0 [ 352.176446][ T978] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=a2.52 [ 352.186090][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.194649][ T5884] cdc_ncm 5-1:1.0: bind() failure [ 352.196911][ T978] usb 1-1: Product: syz [ 352.211343][ T5884] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 352.218141][ T978] usb 1-1: Manufacturer: syz [ 352.223278][ T5884] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 352.225490][ T978] usb 1-1: SerialNumber: syz [ 352.261514][ T5884] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 352.263025][ T5883] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 352.271560][ T5884] cdc_ncm 5-1:1.1: bind() failure [ 352.279744][ T978] usb 1-1: config 0 descriptor?? [ 352.293969][T10611] loop1: detected capacity change from 0 to 4096 [ 352.314582][ T5884] usbtest 5-1:1.1: couldn't get endpoints, -71 [ 352.315212][ T978] usb 1-1: active config #0 != 1 ?? [ 352.338498][ T5884] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 352.358252][T10611] ntfs3(loop1): Failed to load $UpCase (-22). [ 352.397644][ T5884] usb 5-1: USB disconnect, device number 61 [ 352.487540][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 352.500665][ T5883] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.546633][ T5883] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 352.573102][ T5883] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 352.599034][ T978] usb 1-1: USB disconnect, device number 72 [ 352.611424][ T5883] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 352.623615][T10621] loop3: detected capacity change from 0 to 2 [ 352.635684][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 352.648652][T10621] jffs2: rp_size unrepresentable [ 352.654744][ T5883] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.673711][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 352.704910][ T5883] usb 3-1: SerialNumber: syz [ 352.728259][ T5883] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 352.852557][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 352.869219][T10627] loop4: detected capacity change from 0 to 1024 [ 352.882570][T10627] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 352.895452][T10627] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 352.913136][T10627] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.2043: iget: special inode unallocated [ 352.940629][T10627] EXT4-fs (loop4): no journal found [ 352.951792][T10627] EXT4-fs (loop4): can't get journal size [ 352.964958][ T978] usb 3-1: USB disconnect, device number 77 [ 352.972734][T10627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a854e11d, mo2=0002] [ 353.000948][T10627] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.2043: iget: special inode unallocated [ 353.032051][T10627] EXT4-fs (loop4): failed to initialize system zone (-117) [ 353.059029][T10627] EXT4-fs (loop4): mount failed [ 353.066262][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.103856][ T9] usb 2-1: config 1 interface 0 has no altsetting 1 [ 353.126142][ T9] usb 2-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 353.147071][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.156920][ T9] usb 2-1: Product: syz [ 353.167895][ T9] usb 2-1: Manufacturer: syz [ 353.192757][ T9] usb 2-1: SerialNumber: syz [ 353.390450][T10640] loop4: detected capacity change from 0 to 4096 [ 353.403810][T10640] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 353.428331][ T5884] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 353.442019][ T5883] usb 2-1: USB disconnect, device number 64 [ 353.477427][T10640] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 353.535216][ T978] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 353.615806][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.642109][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 353.674226][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 353.693955][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 353.706901][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 353.726279][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.731118][ T978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.747603][ T5884] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 353.757696][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.760307][ T978] usb 1-1: not running at top speed; connect to a high speed hub [ 353.770097][ T5884] usb 4-1: Product: syz [ 353.777961][ T5884] usb 4-1: Manufacturer: syz [ 353.792144][ T978] usb 1-1: config 8 has an invalid interface number: 145 but max is 0 [ 353.800818][ T978] usb 1-1: config 8 has no interface number 0 [ 353.810077][ T978] usb 1-1: config 8 interface 145 has no altsetting 0 [ 353.817084][ T5884] usb 4-1: SerialNumber: syz [ 353.822409][ T978] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 353.836783][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.838696][ T5884] usb 4-1: config 0 descriptor?? [ 353.845035][ T978] usb 1-1: Product: syz [ 353.858105][ T978] usb 1-1: Manufacturer: syz [ 353.862828][ T978] usb 1-1: SerialNumber: syz [ 353.868451][T10634] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 353.883745][ T5884] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 353.914033][T10648] loop4: detected capacity change from 0 to 512 [ 353.934787][T10648] EXT4-fs: Ignoring removed bh option [ 353.942634][T10648] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.951006][T10648] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 353.965045][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 353.986851][T10648] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 353.995470][T10648] EXT4-fs (loop4): orphan cleanup on readonly fs [ 354.001964][T10648] EXT4-fs error (device loop4): ext4_quota_enable:7126: inode #4: comm syz.4.2053: iget: bogus i_mode (0) [ 354.015425][T10648] EXT4-fs (loop4): Remounting filesystem read-only [ 354.025958][T10648] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 354.042678][T10648] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 354.051789][T10648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.142774][ T5883] usb 4-1: USB disconnect, device number 67 [ 354.149928][ T978] ums-usbat 1-1:8.145: USB Mass Storage device detected [ 354.179129][ T24] usb 3-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7 [ 354.192383][ T978] ums-usbat 1-1:8.145: Quirks match for vid 0781 pid 0005: 1 [ 354.224892][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.253924][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.257693][ T24] usb 3-1: Product: syz [ 354.289238][ T24] usb 3-1: Manufacturer: syz [ 354.312393][ T24] usb 3-1: SerialNumber: syz [ 354.351140][ T24] usb 3-1: config 0 descriptor?? [ 354.376886][ T978] usb 1-1: USB disconnect, device number 73 [ 354.399073][ T24] zaurus 3-1:0.0: probe with driver zaurus failed with error -22 [ 354.618567][ T978] usb 3-1: USB disconnect, device number 78 [ 354.644423][T10667] loop1: detected capacity change from 0 to 128 [ 354.669844][T10667] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 354.687661][T10667] qnx6: wrong signature (magic) in superblock #1. [ 354.694463][T10667] qnx6: unable to read the first superblock [ 355.042921][ T30] audit: type=1326 audit(1744353955.035:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.3.2069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c0638d169 code=0x0 [ 355.470587][ T5884] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 355.651962][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 355.659135][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 355.669002][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 355.690612][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.726756][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.739629][ T5884] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 355.749310][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.758504][ T5884] usb 5-1: Product: syz [ 355.769496][ T5884] usb 5-1: Manufacturer: syz [ 355.769620][ T5990] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 355.780214][ T5884] usb 5-1: SerialNumber: syz [ 355.806297][ T5884] usb 5-1: config 0 descriptor?? [ 355.829613][T10684] loop1: detected capacity change from 0 to 32768 [ 355.830519][ T5884] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 355.961942][ T5990] usb 3-1: Using ep0 maxpacket: 32 [ 355.969446][ T5990] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 355.990568][ T5990] usb 3-1: config 0 has no interface number 0 [ 356.001399][ T5990] usb 3-1: config 0 interface 230 has no altsetting 0 [ 356.015129][T10699] loop3: detected capacity change from 0 to 32768 [ 356.020356][T10684] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 356.024515][ T5990] usb 3-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice=49.90 [ 356.055575][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.064438][ T5990] usb 3-1: Product: syz [ 356.068680][ T5990] usb 3-1: Manufacturer: syz [ 356.074284][ T5990] usb 3-1: SerialNumber: syz [ 356.079782][T10684] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 356.089982][T10684] bcachefs (loop1): Version upgrade required: [ 356.089982][T10684] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 356.089982][T10684] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 356.089982][T10684] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 356.092045][T10699] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 356.092045][T10699] clean (size 2912): [ 356.092045][T10699] flags: 0 [ 356.092045][T10699] journal_seq: 8 [ 356.092045][T10699] usage: type=inodes v=8 [ 356.092045][T10699] usage: type=key_version v=0 [ 356.092045][T10699] usage: type=reserved v=0 [ 356.092045][T10699] usage: type=reserved v=0 [ 356.092045][T10699] usage: type=reserved v=0 [ 356.092045][T10699] usage: type=reserved v=0 [ 356.092045][T10699] data_usage: btree: 1/1 [0]=2816 [ 356.092045][T10699] data_usage: journal: 1/1 [0]=0 [ 356.092045][T10699] data_usage: user: 1/1 [0]=32 [ 356.092045][T10699] dev_usage: dev=0 [ 356.092045][T10699] free: buckets=83 sectors=0 fragmented=0 [ 356.092045][T10699] sb: buckets=25 sectors=6152 fragmented=248 [ 356.092045][T10699] journal: buckets=8 sectors=2048 fragmented=0 [ 356.092045][T10699] btree: buckets=11 sectors=2816 fragmented=0 [ 356.092045][T10699] user: buckets=1 sectors=32 fragmented=224 [ 356.092045][T10699] cached: buckets=0 sectors=0 fragmented=0 [ 356.092045][T10699] parity: buckets=0 sectors=0 fragmented=0 [ 356.092045][T10699] stripe: buckets=0 sectors=0 fragmented=0 [ 356.092045][T10699] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 356.092045][T10699] need_discard: buckets=0 sectors=0 fragmented=0 [ 356.092045][T10699] clock: read=0 [ 356.092045][T10699] clock: write=1288 [ 356.092045][T10699] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX l [ 356.154983][ T5982] usb 5-1: USB disconnect, device number 62 [ 356.322575][T10699] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 356.339029][T10684] bcachefs (loop1): dropping and reconstructing all alloc info [ 356.352504][ T5990] usb 3-1: config 0 descriptor?? [ 356.364616][T10684] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 356.364648][T10684] mode=100755 [ 356.364660][T10684] flags=(15300000) [ 356.364671][T10684] journal_seq=4 [ 356.364682][T10684] hash_seed=d483206f1ed95abf [ 356.364694][T10684] hash_type=siphash [ 356.364706][T10684] bi_size=100 [ 356.364718][T10684] bi_sectors=8 [ 356.364729][T10684] bi_version=1126999418470400 [ 356.364740][T10684] bi_atime=0 [ 356.364778][T10684] bi_ctime=0 [ 356.364790][T10684] bi_mtime=0 [ 356.364801][T10684] bi_otime=2780562352 [ 356.364812][T10684] bi_uid=2780562352 [ 356.364823][T10684] bi_gid=0 [ 356.364834][T10684] bi_nlink=2780562352 [ 356.364845][T10684] bi_generation=0 [ 356.364856][T10684] bi_dev=0 [ 356.364866][T10684] bi_data_checksum=0 [ 356.364877][T10684] bi_compression=56 [ 356.364889][T10684] bi_project=0 [ 356.364899][T10684] bi_background_compression=0 [ 356.364911][T10684] bi_data_replicas=0 [ 356.364923][T10684] bi_promote_target=0 [ 356.364934][T10684] bi_foreground_target=0 [ 356.364946][T10684] bi_background_target=0 [ 356.364957][T10684] bi_erasure_code=0 [ 356.364969][T10684] bi_fields_set=0 [ 356.364980][T10684] bi_dir=0 [ 356.364990][T10684] bi_dir_offset=0 [ 356.365001][T10684] bi_subvol=0 [ 356.365012][T10684] bi_parent_subvol=0 [ 356.365023][T10684] bi_nocow=0 [ 356.365033][T10684] bi_depth=0 [ 356.365044][T10684] bi_inodes_32bit=0 [ 356.365055][T10684] invalid compression opt 55, deleting [ 356.381563][T10691] loop0: detected capacity change from 0 to 32768 [ 356.644512][ T5990] sisusb 3-1:0.230: Invalid USB2VGA device [ 356.644547][ T5990] sisusb 3-1:0.230: probe with driver sisusb failed with error -22 [ 356.663435][ T5990] usb 3-1: USB disconnect, device number 79 [ 356.860216][T10684] bcachefs (loop1): accounting_read... done [ 356.877778][T10684] bcachefs (loop1): alloc_read... done [ 356.888616][T10684] bcachefs (loop1): snapshots_read... done [ 356.903808][T10684] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 356.934227][T10684] bcachefs (loop1): done starting filesystem [ 357.043341][ T5836] bcachefs (loop1): shutting down [ 357.078853][T10708] loop4: detected capacity change from 0 to 512 [ 357.141069][ T5836] bcachefs (loop1): shutdown complete [ 357.160397][T10708] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2081: bg 0: block 5: invalid block bitmap [ 357.185707][ T5990] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 357.207038][T10708] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 357.219743][T10708] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2081: attempt to clear invalid blocks 9508352 len 1 [ 357.311577][T10708] EXT4-fs (loop4): 1 orphan inode deleted [ 357.366134][T10708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.378935][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 357.401745][ T5990] usb 1-1: config 0 has an invalid interface number: 221 but max is 0 [ 357.412442][ T5990] usb 1-1: config 0 has no interface number 0 [ 357.442582][T10710] loop3: detected capacity change from 0 to 32768 [ 357.450268][ T5990] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 357.460316][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.464858][T10710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2082 (10710) [ 357.470874][ T5990] usb 1-1: Product: syz [ 357.496879][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.517114][ T5990] usb 1-1: Manufacturer: syz [ 357.517604][T10710] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.521764][ T5990] usb 1-1: SerialNumber: syz [ 357.565663][T10710] BTRFS info (device loop3 state S): using crc32c (crc32c-x86_64) checksum algorithm [ 357.599172][T10710] BTRFS error (device loop3 state S): ignoremetacsums must be used with ro mount option [ 357.624020][ T5990] usb 1-1: config 0 descriptor?? [ 357.657757][T10710] BTRFS info (device loop3 state S): using free-space-tree [ 357.707165][T10717] loop4: detected capacity change from 0 to 64 [ 357.729533][T10710] BTRFS error (device loop3 state S): open_ctree failed: -22 [ 357.926321][ T5990] usb 1-1: USB disconnect, device number 74 [ 358.295349][T10727] loop3: detected capacity change from 0 to 8 [ 358.362599][T10727] SQUASHFS error: Unable to read inode 0x11f [ 358.722984][T10714] loop2: detected capacity change from 0 to 32768 [ 358.762347][T10714] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 358.829741][T10714] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 358.990485][T10714] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 359.025715][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 359.046972][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 359.190998][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 359.210282][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 359.223980][T10714] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 359.247567][T10754] futex_wake_op: syz.3.2102 tries to shift op by -33; fix this program [ 359.276073][ T978] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 359.333759][T10759] loop1: detected capacity change from 0 to 8 [ 359.382211][T10759] SQUASHFS error: xz decompression failed, data probably corrupt [ 359.412214][T10759] SQUASHFS error: Failed to read block 0x108: -5 [ 359.423463][T10759] SQUASHFS error: Unable to read metadata cache entry [106] [ 359.450927][T10759] SQUASHFS error: Unable to read inode 0x11f [ 359.461710][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 359.490829][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.521732][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 359.544080][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 359.616245][ T978] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 359.628834][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.666962][ T978] usb 5-1: Product: syz [ 359.675960][ T978] usb 5-1: Manufacturer: syz [ 359.690559][ T978] usb 5-1: SerialNumber: syz [ 359.723460][ T978] usb 5-1: config 0 descriptor?? [ 359.864418][ T978] rc_core: IR keymap rc-streamzap not found [ 359.874723][ T978] Registered IR keymap rc-empty [ 359.892641][ T978] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 359.922661][ T978] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 359.988449][T10773] random: crng reseeded on system resumption [ 360.000769][ T978] usb 5-1: USB disconnect, device number 63 [ 360.401747][T10751] loop0: detected capacity change from 0 to 32768 [ 360.500227][T10751] XFS (loop0): device supports 512 byte sectors (not 0) [ 360.920581][T10791] loop0: detected capacity change from 0 to 4096 [ 360.955113][ T978] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 361.024944][T10791] ntfs3(loop0): ino=5, mi_enum_attr [ 361.025763][T10796] loop1: detected capacity change from 0 to 4096 [ 361.050757][T10791] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 361.071052][T10791] ntfs3(loop0): Failed to load root (-22). [ 361.078023][T10796] NILFS (loop1): mounting unchecked fs [ 361.106868][T10796] NILFS (loop1): recovery required for readonly filesystem [ 361.125673][T10796] NILFS (loop1): write access will be enabled during recovery [ 361.146923][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 361.157699][ T978] usb 4-1: config 1 interface 0 has no altsetting 0 [ 361.189139][T10796] NILFS (loop1): invalid segment: Checksum error in segment payload [ 361.202062][ T978] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 361.221693][T10796] NILFS (loop1): trying rollback from an earlier position [ 361.233137][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.259558][ T978] usb 4-1: Product: syz [ 361.267753][ T978] usb 4-1: Manufacturer: syz [ 361.272511][ T978] usb 4-1: SerialNumber: syz [ 361.301597][T10796] NILFS (loop1): recovery complete [ 361.572011][ T978] usbhid 4-1:1.0: can't add hid device: -71 [ 361.579160][ T978] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 361.583966][T10808] loop0: detected capacity change from 0 to 8192 [ 361.617582][ T978] usb 4-1: USB disconnect, device number 68 [ 361.659387][T10808] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 361.713777][T10808] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 361.737969][T10808] loop0: unable to read partition table [ 361.782196][T10808] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 361.818275][ T5202] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 361.839341][ T5202] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 361.852207][ T5202] loop0: unable to read partition table [ 362.258968][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 362.402732][T10843] tmpfs: Bad value for 'mpol' [ 362.444155][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 362.461504][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.502164][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 362.519451][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.551865][ T9] usb 3-1: Product: syz [ 362.556119][ T9] usb 3-1: Manufacturer: syz [ 362.579452][ T9] usb 3-1: SerialNumber: syz [ 362.588403][T10846] loop4: detected capacity change from 0 to 1024 [ 362.588819][ T9] usb 3-1: config 0 descriptor?? [ 362.612237][T10846] EXT4-fs: Ignoring removed bh option [ 362.621799][ T9] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 362.631465][T10846] EXT4-fs: inline encryption not supported [ 362.643878][ T5982] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 362.671436][T10846] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.720905][T10846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 362.768788][T10846] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.2143: lblock 2 mapped to illegal pblock 2 (length 1) [ 362.808149][T10846] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 362.817079][T10846] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.2143: lblock 0 mapped to illegal pblock 48 (length 1) [ 362.847179][ T5982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 362.857617][T10846] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 362.866562][T10846] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2143: Failed to acquire dquot type 0 [ 362.878059][ T978] usb 3-1: USB disconnect, device number 80 [ 362.887360][ T5982] usb 4-1: config 1 has an invalid interface number: 43 but max is 1 [ 362.895682][ T5982] usb 4-1: config 1 has no interface number 1 [ 362.902461][T10846] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 362.912117][ T5982] usb 4-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 362.923638][ T5982] usb 4-1: config 1 interface 0 has no altsetting 0 [ 362.934042][T10846] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.2143: mark_inode_dirty error [ 362.947098][ T5982] usb 4-1: config 1 interface 43 has no altsetting 0 [ 362.960010][T10846] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 362.974399][T10846] EXT4-fs (loop4): 1 orphan inode deleted [ 362.982441][ T5982] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 363.010079][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.022640][T10846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.039344][ T5928] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 363.058941][ T5982] usb 4-1: Product: syz [ 363.063662][ T5982] usb 4-1: Manufacturer: syz [ 363.068674][ T5982] usb 4-1: SerialNumber: syz [ 363.080879][T10844] loop1: detected capacity change from 0 to 32768 [ 363.082710][ T5928] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 363.107412][ T5928] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 0 [ 363.107925][T10844] XFS: noikeep mount option is deprecated. [ 363.151410][T10844] XFS (loop1): no-recovery mounts must be read-only. [ 363.153763][T10838] loop0: detected capacity change from 0 to 32768 [ 363.228715][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.284854][ T5831] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 363.344170][ T5982] smsusb:smsusb_probe: board id=8, interface number 0 [ 363.344553][T10838] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 363.377434][T10838] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type reservation SPOS_MAX len 0 ver 0: generation 0 replicas 0 [ 363.377463][T10838] invalid key type for btree internal btree node (reservation), deleting [ 363.395515][ T5831] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 363.397394][ T5982] smsusb:smsusb_probe: board id=8, interface number 43 [ 363.398296][ T5831] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 363.417422][ T5982] usb 4-1: USB disconnect, device number 69 [ 363.608348][T10838] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 363.623501][T10838] bcachefs (loop0): Version upgrade required: [ 363.623501][T10838] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 363.623501][T10838] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 363.623501][T10838] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 363.742278][T10838] bcachefs (loop0): dropping and reconstructing all alloc info [ 363.797998][T10838] bcachefs (loop0): accounting_read... done [ 363.817558][T10838] bcachefs (loop0): alloc_read... done [ 363.828395][T10838] bcachefs (loop0): snapshots_read... done [ 363.841023][ T978] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 363.849593][T10838] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 363.872331][T10838] bcachefs (loop0): done starting filesystem [ 364.012055][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 364.020912][ T978] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 364.044136][ T978] usb 3-1: config 8 has no interface number 0 [ 364.050453][ T978] usb 3-1: config 8 interface 206 altsetting 1 has an invalid endpoint descriptor of length 2, skipping [ 364.092996][ T5834] bcachefs (loop0): shutting down [ 364.119579][ T978] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.150964][ T978] usb 3-1: config 8 interface 206 has no altsetting 0 [ 364.180636][ T978] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 364.201798][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.234791][ T978] usb 3-1: Product: syz [ 364.244655][ T978] usb 3-1: Manufacturer: syz [ 364.264827][ T978] usb 3-1: SerialNumber: syz [ 364.280696][ T5834] bcachefs (loop0): shutdown complete [ 364.363510][T10855] loop1: detected capacity change from 0 to 40427 [ 364.396981][T10855] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 364.453723][T10855] F2FS-fs (loop1): invalid crc value [ 364.471961][T10855] F2FS-fs (loop1): invalid crc value [ 364.477359][T10855] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 364.530843][ T978] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 364.547975][ T978] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 364.555611][ T978] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 364.590156][ T978] usb 3-1: USB disconnect, device number 81 [ 364.598522][ T978] garmin_gps 3-1:8.206: device disconnected [ 364.999698][T10869] loop4: detected capacity change from 0 to 32768 [ 365.093390][T10869] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 365.101735][T10869] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 365.157643][T10887] loop2: detected capacity change from 0 to 512 [ 365.172435][T10887] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 365.182580][T10887] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 365.196682][T10887] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 365.217897][T10887] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 365.365338][T10869] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 365.394697][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 365.412147][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 365.434037][ T5881] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 365.531897][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 112ms [ 365.542180][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 365.547679][T10869] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 365.641170][ T5881] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 365.647771][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 365.651258][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.670186][ T5881] usb 2-1: Product: syz [ 365.679234][ T5881] usb 2-1: Manufacturer: syz [ 365.689346][ T5881] usb 2-1: SerialNumber: syz [ 365.748651][T10901] loop2: detected capacity change from 0 to 256 [ 365.758090][ T5881] usb 2-1: config 0 descriptor?? [ 365.799937][T10901] exFAT-fs (loop2): bogus number of FAT structure [ 365.806433][T10901] exFAT-fs (loop2): failed to read boot sector [ 365.840979][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 365.857990][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 365.868201][T10901] exFAT-fs (loop2): failed to recognize exfat type [ 365.879020][ T24] usb 4-1: config 0 has no interface number 0 [ 365.895618][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.943436][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 365.971714][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.986427][ T9] usb 2-1: USB disconnect, device number 65 [ 365.990021][ T24] usb 4-1: Product: syz [ 366.039901][ T24] usb 4-1: Manufacturer: syz [ 366.061300][ T24] usb 4-1: SerialNumber: syz [ 366.074793][ T24] usb 4-1: config 0 descriptor?? [ 366.083930][T10903] loop0: detected capacity change from 0 to 256 [ 366.116264][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 366.142497][ T24] em28xx 4-1:0.132: Video interface 132 found: isoc [ 366.169932][T10903] FAT-fs (loop0): Directory bread(block 64) failed [ 366.179852][T10903] FAT-fs (loop0): Directory bread(block 65) failed [ 366.199661][T10903] FAT-fs (loop0): Directory bread(block 66) failed [ 366.227755][T10903] FAT-fs (loop0): Directory bread(block 67) failed [ 366.234504][T10903] FAT-fs (loop0): Directory bread(block 68) failed [ 366.272712][T10903] FAT-fs (loop0): Directory bread(block 69) failed [ 366.284676][T10903] FAT-fs (loop0): Directory bread(block 70) failed [ 366.294120][T10903] FAT-fs (loop0): Directory bread(block 71) failed [ 366.313589][T10903] FAT-fs (loop0): Directory bread(block 72) failed [ 366.336596][T10903] FAT-fs (loop0): Directory bread(block 73) failed [ 366.372685][ T30] audit: type=1326 audit(1744353965.633:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.2.2171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95ad78d169 code=0x0 [ 366.387203][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 366.477478][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 366.519311][ T24] em28xx 4-1:0.132: board has no eeprom [ 366.599368][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 366.618611][ T24] em28xx 4-1:0.132: analog set to isoc mode. [ 366.644105][ T5883] em28xx 4-1:0.132: Registering V4L2 extension [ 366.666065][ T24] usb 4-1: USB disconnect, device number 70 [ 366.714279][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 366.829233][T10920] loop1: detected capacity change from 0 to 64 [ 366.839613][T10920] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 366.855878][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 366.860733][ T5990] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 366.909280][ T5883] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 366.919447][ T5883] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 366.975255][ T5883] em28xx 4-1:0.132: No AC97 audio processor [ 367.037991][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 367.042706][ T5883] usb 4-1: Decoder not found [ 367.047903][ T5883] em28xx 4-1:0.132: failed to create media graph [ 367.061707][ T9] usb 1-1: config 7 has an invalid interface number: 247 but max is 0 [ 367.080260][ T5990] usb 3-1: Using ep0 maxpacket: 16 [ 367.086577][ T9] usb 1-1: config 7 has no interface number 0 [ 367.093683][ T5990] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.107213][ T5883] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 367.112507][ T9] usb 1-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 367.133670][ T5990] usb 3-1: config 0 has no interface number 0 [ 367.149910][ T9] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 367.153141][ T5883] em28xx 4-1:0.132: Remote control support is not available for this card. [ 367.165669][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.170511][T10922] loop3: detected capacity change from 0 to 1024 [ 367.194495][ T9] usb 1-1: Product: syz [ 367.198914][ T5990] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 367.198950][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.198972][ T5990] usb 3-1: Product: syz [ 367.198990][ T5990] usb 3-1: Manufacturer: syz [ 367.199006][ T5990] usb 3-1: SerialNumber: syz [ 367.211485][ T24] em28xx 4-1:0.132: Closing input extension [ 367.238627][ T5990] usb 3-1: config 0 descriptor?? [ 367.242365][ T9] usb 1-1: Manufacturer: syz [ 367.244613][T10922] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 367.248825][ T9] usb 1-1: SerialNumber: syz [ 367.283866][T10922] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.307874][ T5990] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 367.334717][T10922] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 367.343362][T10922] EXT4-fs (loop3): orphan cleanup on readonly fs [ 367.354714][ T24] em28xx 4-1:0.132: Freeing device [ 367.376506][T10922] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.2177: Inode bitmap for bg 0 marked uninitialized [ 367.403065][ T9] ni6501 1-1:7.247: driver 'ni6501' failed to auto-configure device. [ 367.403073][T10927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 367.418078][T10927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.450250][T10922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.476100][T10927] vhci_hcd vhci_hcd.0: Device attached [ 367.526053][ T5990] gspca_spca1528: reg_w err -71 [ 367.535382][T10930] vhci_hcd: connection closed [ 367.540855][ T13] vhci_hcd: stop threads [ 367.561763][ T5990] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 367.571085][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.586608][ T5881] usb 1-1: USB disconnect, device number 75 [ 367.607113][ T13] vhci_hcd: release socket [ 367.614883][ T5990] usb 3-1: USB disconnect, device number 82 [ 367.650323][T10933] loop4: detected capacity change from 0 to 256 [ 367.664682][ T13] vhci_hcd: disconnect device [ 367.673850][T10933] vfat: Bad value for 'utf8' [ 367.692897][ T9] vhci_hcd: vhci_device speed not set [ 368.147712][ T5881] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 368.363917][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 368.382415][ T5881] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 368.409755][ T5881] usb 4-1: config 0 has no interface number 0 [ 368.444891][ T5881] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 368.472607][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.491326][ T5881] usb 4-1: Product: syz [ 368.495577][ T5881] usb 4-1: Manufacturer: syz [ 368.500208][ T5881] usb 4-1: SerialNumber: syz [ 368.539101][ T5881] usb 4-1: config 0 descriptor?? [ 368.592878][ T5881] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 368.626796][ T5881] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 368.776520][ T5881] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 368.801752][ T5881] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 368.823076][ T5881] usb 4-1: USB disconnect, device number 71 [ 369.157677][T10953] loop0: detected capacity change from 0 to 32768 [ 369.171264][T10953] (syz.0.2189,10953,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.214946][T10953] (syz.0.2189,10953,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.317847][T10953] JBD2: Ignoring recovery information on journal [ 369.400163][T10953] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 369.422131][T10983] loop3: detected capacity change from 0 to 256 [ 369.429791][T10983] exfat: Deprecated parameter 'namecase' [ 369.498166][T10983] exfat: Deprecated parameter 'namecase' [ 369.518474][T10953] (syz.0.2189,10953,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x78b62c9b, computed 0x9e9236ca. Applying ECC. [ 369.542420][T10983] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 369.616945][T10948] loop1: detected capacity change from 0 to 32768 [ 369.661783][T10948] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 369.705240][T10948] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 369.793188][ T5834] ocfs2: Unmounting device (7,0) on (node local) [ 369.850679][T10948] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 369.902562][ T5883] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 369.909408][ T5883] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 370.070873][ T5883] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms [ 370.102681][ T5883] gfs2: fsid=syz:syz.0: jid=0: Done [ 370.113374][T10948] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 370.137731][ T5982] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 370.180282][T10985] loop2: detected capacity change from 0 to 32768 [ 370.209716][T10985] bcachefs: bch2_fs_parse_param() Error parsing option journal_reclaim_delay: option_value [ 370.318872][T10977] loop4: detected capacity change from 0 to 32768 [ 370.324353][ T5982] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 370.337909][ T5982] usb 4-1: config 0 has no interface number 0 [ 370.351914][ T5982] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 370.365184][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.375000][T10977] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 370.377109][ T5982] usb 4-1: Product: syz [ 370.389890][ T5982] usb 4-1: Manufacturer: syz [ 370.398805][ T5982] usb 4-1: SerialNumber: syz [ 370.439658][ T5982] usb 4-1: config 0 descriptor?? [ 370.473790][ T5982] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 370.511094][ T5831] ocfs2: Unmounting device (7,4) on (node local) [ 370.518792][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 370.522593][ T5883] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 370.576855][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 370.585098][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 370.633854][ T5982] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 370.705349][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 370.713006][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 370.734783][ T5883] usb 1-1: config 247 has an invalid interface number: 166 but max is 1 [ 370.746088][ T5883] usb 1-1: config 247 has an invalid interface number: 237 but max is 1 [ 370.772455][ T5982] usb 4-1: USB disconnect, device number 72 [ 370.795509][ T5883] usb 1-1: config 247 has no interface number 0 [ 370.811351][ T5883] usb 1-1: config 247 has no interface number 1 [ 370.819741][ T5883] usb 1-1: config 247 interface 166 has no altsetting 0 [ 370.823824][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 370.847070][ T5883] usb 1-1: config 247 interface 237 has no altsetting 0 [ 370.868476][ T5982] keyspan 4-1:0.133: device disconnected [ 370.879767][ T5883] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=4f.04 [ 370.894539][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.933705][ T5883] usb 1-1: Product: syz [ 370.946848][ T5883] usb 1-1: Manufacturer: syz [ 370.973061][ T5883] usb 1-1: SerialNumber: syz [ 371.273359][ T5883] qmi_wwan 1-1:247.166: probe with driver qmi_wwan failed with error -22 [ 371.315117][ T5883] usb 1-1: USB disconnect, device number 76 [ 371.345961][T11006] loop4: detected capacity change from 0 to 1024 [ 371.417418][T11006] hfsplus: invalid btree flag [ 371.425505][T11006] hfsplus: failed to load extents file [ 371.623140][T11014] loop2: detected capacity change from 0 to 8 [ 371.680129][T11014] SQUASHFS error: xz decompression failed, data probably corrupt [ 371.712463][T11014] SQUASHFS error: Failed to read block 0x108: -5 [ 371.718955][T11020] loop1: detected capacity change from 0 to 8 [ 371.742317][T11014] SQUASHFS error: Unable to read metadata cache entry [106] [ 371.749838][T11014] SQUASHFS error: Unable to read inode 0x11f [ 371.762447][T11020] SQUASHFS error: zlib decompression failed, data probably corrupt [ 371.782123][T11020] SQUASHFS error: Failed to read block 0x9b: -5 [ 371.790721][T11020] SQUASHFS error: Unable to read metadata cache entry [99] [ 371.811895][T11020] SQUASHFS error: Unable to read inode 0x127 [ 371.927442][ T5883] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 371.934215][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 372.128476][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.150939][ T9] usb 5-1: config 4 has no interfaces? [ 372.156900][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 372.173967][ T9] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 372.188786][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.204884][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 372.211949][ T9] usb 5-1: Product: syz [ 372.232062][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 372.243020][ T9] usb 5-1: Manufacturer: syz [ 372.253402][ T9] usb 5-1: SerialNumber: syz [ 372.254102][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.309379][ T5883] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 372.322639][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.332032][ T5883] usb 4-1: Product: syz [ 372.351513][ T5883] usb 4-1: Manufacturer: syz [ 372.356814][ T5883] usb 4-1: SerialNumber: syz [ 372.372309][ T5982] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 372.373490][ T5883] usb 4-1: config 0 descriptor?? [ 372.399401][ T5883] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 372.419303][ T5883] imon 4-1:0.0: unable to initialize intf0, err -90 [ 372.441593][ T5883] imon:imon_probe: failed to initialize context! [ 372.452706][ T5883] imon 4-1:0.0: unable to register, err -19 [ 372.518931][ T5884] usb 5-1: USB disconnect, device number 64 [ 372.549883][ T5982] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 372.568346][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.602017][ T5982] usb 2-1: Product: syz [ 372.606267][ T5982] usb 2-1: Manufacturer: syz [ 372.615535][ T5982] usb 2-1: SerialNumber: syz [ 372.634526][ T5982] usb 2-1: config 0 descriptor?? [ 372.652414][ T5982] usb 2-1: selecting invalid altsetting 3 [ 372.661510][ T24] usb 4-1: USB disconnect, device number 73 [ 372.667858][ T5982] comedi comedi0: could not set alternate setting 3 in high speed [ 372.683731][ T5982] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 372.703906][ T5982] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 372.754776][T11022] loop2: detected capacity change from 0 to 32768 [ 372.801443][T11022] JBD2: Ignoring recovery information on journal [ 372.833826][ T5883] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 372.845997][T11022] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 372.879492][ T5884] usb 2-1: USB disconnect, device number 66 [ 372.923365][ T5832] ocfs2: Unmounting device (7,2) on (node local) [ 373.014630][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 373.030058][ T5883] usb 1-1: config 150 has an invalid interface number: 204 but max is 0 [ 373.045582][ T5883] usb 1-1: config 150 has no interface number 0 [ 373.053672][ T5883] usb 1-1: config 150 interface 204 has no altsetting 0 [ 373.063631][ T5883] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 373.073181][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.098953][ T5883] usb 1-1: Product: syz [ 373.103239][ T5883] usb 1-1: Manufacturer: syz [ 373.107905][ T5883] usb 1-1: SerialNumber: syz [ 373.353638][T11047] loop3: detected capacity change from 0 to 8 [ 373.403350][T11047] SQUASHFS error: zlib decompression failed, data probably corrupt [ 373.430434][T11047] SQUASHFS error: Failed to read block 0x9b: -5 [ 373.444875][ T5883] usb 1-1: USB disconnect, device number 77 [ 373.460138][T11047] SQUASHFS error: Unable to read metadata cache entry [99] [ 373.514752][T11047] SQUASHFS error: Unable to read inode 0x127 [ 373.857375][T11044] loop4: detected capacity change from 0 to 32768 [ 373.867684][T11044] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2229 (11044) [ 373.903353][T11044] BTRFS info (device loop4): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 373.919473][T11044] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 373.920520][T11045] loop2: detected capacity change from 0 to 32768 [ 373.934600][T11044] BTRFS info (device loop4): using free-space-tree [ 373.987558][T11045] bcachefs: bch2_fs_parse_param() Error parsing option errors: option_value [ 374.136030][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 374.191782][ T978] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 374.213196][ T5831] BTRFS info (device loop4): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 374.318504][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 374.353615][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 374.363600][ T24] usb 4-1: config 0 has no interface number 0 [ 374.381999][ T24] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.405791][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.416271][ T978] usb 2-1: not running at top speed; connect to a high speed hub [ 374.435712][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 374.456330][ T978] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 374.501452][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.514528][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.543091][ T978] usb 2-1: config 1 has no interface number 1 [ 374.550951][ T978] usb 2-1: too many endpoints for config 1 interface 3 altsetting 8: 142, using maximum allowed: 30 [ 374.585841][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 374.605124][ T978] usb 2-1: config 1 interface 3 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 142 [ 374.618491][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 374.626632][ T24] usb 4-1: Product: syz [ 374.653165][ T978] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 374.675536][ T24] usb 4-1: SerialNumber: syz [ 374.700974][ T978] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 114, setting to 64 [ 374.746713][ T978] usb 2-1: config 1 interface 3 has no altsetting 0 [ 374.754683][ T24] usb 4-1: config 0 descriptor?? [ 374.787482][T11055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 374.808346][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.819617][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.827980][ T978] usb 2-1: Product: syz [ 374.833737][ T978] usb 2-1: Manufacturer: syz [ 374.838470][ T978] usb 2-1: SerialNumber: syz [ 374.980719][ T5982] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 375.029181][ T24] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 375.050134][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input34 [ 375.080605][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.097377][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.104687][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.111912][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.119136][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.126536][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.141305][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.150444][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.157721][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.165082][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.172356][ T5982] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.202125][ T5982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.205396][ T24] usb 4-1: USB disconnect, device number 74 [ 375.211099][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 375.226503][ T5982] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.253748][ T24] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 375.273692][ T978] usb 2-1: USB disconnect, device number 67 [ 375.293461][ T5982] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.322743][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.330956][ T5982] usb 3-1: Product: syz [ 375.341538][ T5982] usb 3-1: Manufacturer: syz [ 375.354960][ T5982] usb 3-1: SerialNumber: syz [ 375.372379][ T5982] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 375.397769][ T5982] cdc_ncm 3-1:1.0: bind() failure [ 375.508910][T11085] loop4: detected capacity change from 0 to 40427 [ 375.529907][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.532454][T11085] F2FS-fs (loop4): Wrong segment_count / block_count (33 > 16384) [ 375.561548][T11085] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 375.573784][T11085] F2FS-fs (loop4): build fault injection rate: 24 [ 375.605444][ T5881] usb 3-1: USB disconnect, device number 83 [ 375.619873][T11085] F2FS-fs (loop4): invalid crc value [ 375.706230][T11085] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 375.716682][T11085] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 376.177897][ T5881] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 376.330179][T11107] loop2: detected capacity change from 0 to 512 [ 376.345174][ T5881] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 376.370488][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.399594][T11107] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 376.404147][ T5881] usb 2-1: Product: syz [ 376.415894][ T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 376.423917][T11107] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it [ 376.434054][T11107] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.2250: Corrupt directory, running e2fsck is recommended [ 376.491549][ T5881] usb 2-1: Manufacturer: syz [ 376.501012][ T5881] usb 2-1: SerialNumber: syz [ 376.514816][T11107] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 376.535611][ T5881] usb 2-1: config 0 descriptor?? [ 376.558239][ T5881] ch341 2-1:0.0: ch341-uart converter detected [ 376.575681][T11107] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.2250: corrupted in-inode xattr: invalid ea_ino [ 376.602020][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 376.611013][ T24] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 376.613660][T11107] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.2250: couldn't read orphan inode 15 (err -117) [ 376.628842][ T24] usb 1-1: config 220 has no interface number 2 [ 376.642075][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 376.656644][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 376.667199][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 376.674798][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 376.686229][T11107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.700522][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 376.716543][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.726680][ T24] usb 1-1: Product: syz [ 376.730911][ T24] usb 1-1: Manufacturer: syz [ 376.744546][ T24] usb 1-1: SerialNumber: syz [ 376.783281][ T5881] usb 2-1: failed to receive control message: -71 [ 376.798911][ T5881] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 376.820053][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.842446][ T5881] usb 2-1: USB disconnect, device number 68 [ 376.852831][ T5881] ch341 2-1:0.0: device disconnected [ 376.878492][ T978] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 377.005247][ T24] usb 1-1: selecting invalid altsetting 0 [ 377.012579][ T24] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 377.019010][ T24] usb 1-1: No valid video chain found. [ 377.047381][ T24] usb 1-1: selecting invalid altsetting 0 [ 377.053664][ T24] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 377.070076][ T978] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 377.086893][ T24] usb 1-1: USB disconnect, device number 78 [ 377.109666][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.131709][ T978] usb 5-1: Product: syz [ 377.136039][ T978] usb 5-1: Manufacturer: syz [ 377.152446][ T978] usb 5-1: SerialNumber: syz [ 377.162802][ T978] usb 5-1: config 0 descriptor?? [ 377.193530][ T5883] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 377.377279][ T5883] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 377.410958][ T978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 377.419383][ T5883] usb 3-1: config 0 has no interface number 0 [ 377.425553][ T5883] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 377.445769][ T978] usb 5-1: setting power ON [ 377.459817][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 377.466858][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.506355][ T5883] usb 3-1: config 0 descriptor?? [ 377.512571][ T978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 377.544187][ T5883] hub 3-1:0.3: bad descriptor, ignoring hub [ 377.554855][ T5883] hub 3-1:0.3: probe with driver hub failed with error -5 [ 377.577316][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 377.588029][ T5883] sierra 3-1:0.3: Sierra USB modem converter detected [ 377.596140][ T978] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 377.621426][ T978] usb 5-1: USB disconnect, device number 65 [ 377.778390][ T5883] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 377.858138][ T5883] usb 3-1: USB disconnect, device number 84 [ 377.889216][T11133] loop1: detected capacity change from 0 to 512 [ 377.916018][T11133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 377.918479][ T5883] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 377.934327][T11133] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 377.959627][ T5883] sierra 3-1:0.3: device disconnected [ 377.960013][T11133] EXT4-fs (loop1): group descriptors corrupted! [ 378.081172][ T5828] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 378.278310][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 378.293290][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.303504][ T5828] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.325353][ T5828] usb 1-1: New USB device found, idVendor=1385, idProduct=4251, bcdDevice=2c.d4 [ 378.335102][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.337457][ T5881] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 378.348686][ T5828] usb 1-1: Product: syz [ 378.362155][ T5828] usb 1-1: Manufacturer: syz [ 378.366840][ T5828] usb 1-1: SerialNumber: syz [ 378.380372][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 378.457630][ T5828] usb 1-1: config 0 descriptor?? [ 378.472769][ T5828] usb 1-1: Could not find all expected endpoints [ 378.537131][ T5881] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 378.554076][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.565621][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.575394][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 378.614860][ T5881] usb 4-1: config 0 has no interface number 0 [ 378.615494][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 378.640553][ T5881] usb 4-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 378.654946][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.675252][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 378.675412][ T5881] usb 4-1: config 0 descriptor?? [ 378.696429][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.706519][ T24] usb 5-1: Product: syz [ 378.710843][ T24] usb 5-1: Manufacturer: syz [ 378.716243][ T24] usb 5-1: SerialNumber: syz [ 378.737579][ T5881] qmi_wwan 4-1:0.154: probe with driver qmi_wwan failed with error -22 [ 378.748988][ T5990] usb 1-1: USB disconnect, device number 79 [ 378.762883][ T24] usb 5-1: config 0 descriptor?? [ 378.785652][ T24] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 378.814145][ T24] usb 5-1: No valid video chain found. [ 378.946795][ T5883] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 378.969103][ T24] usb 4-1: USB disconnect, device number 75 [ 379.003085][ T9] usb 5-1: USB disconnect, device number 66 [ 379.055638][ T5881] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 379.107360][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 379.114497][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.127108][ T5883] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 379.136471][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.144652][ T5883] usb 3-1: Product: syz [ 379.149175][ T5883] usb 3-1: Manufacturer: syz [ 379.154541][ T5883] usb 3-1: SerialNumber: syz [ 379.164438][ T5883] usb 3-1: config 0 descriptor?? [ 379.172622][ T5883] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 379.178787][ T5883] usb 3-1: selecting invalid altsetting 1 [ 379.242530][ T5881] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 379.251918][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.260793][ T5881] usb 2-1: Product: syz [ 379.265140][ T5881] usb 2-1: Manufacturer: syz [ 379.270173][ T5881] usb 2-1: SerialNumber: syz [ 379.290072][ T5881] usb 2-1: config 0 descriptor?? [ 379.305435][ T5881] go7007 2-1:0.0: Sensoray 2250 found [ 379.313222][ T5881] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 379.406471][ T5883] gspca_stk014: reg_r err -71 [ 379.417176][ T5883] stk014 3-1:0.0: probe with driver stk014 failed with error -71 [ 379.438504][ T5883] usb 3-1: USB disconnect, device number 85 [ 379.529969][ T5881] usb 2-1: USB disconnect, device number 69 [ 379.827614][T11158] loop0: detected capacity change from 0 to 32768 [ 379.847934][T11158] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type write_buffer_keys overruns end of section [ 379.847934][T11158] clean (size 2912): [ 379.847934][T11158] flags: 0 [ 379.847934][T11158] journal_seq: 10 [ 379.847934][T11158] usage: type=inodes v=8 [ 379.847934][T11158] usage: type=key_version v=2 [ 379.847934][T11158] usage: type=reserved v=0 [ 379.847934][T11158] usage: type=reserved v=0 [ 379.847934][T11158] usage: type=(unknown fs_usage_type 4) v=0 [ 379.847934][T11158] usage: type=reserved v=0 [ 379.847934][T11158] data_usage: btree: 1/1 [0]=2816 [ 379.847934][T11158] data_usage: journal: 1/1 [0]=0 [ 379.847934][T11158] data_usage: user: 1/1 [0]=32 [ 379.847934][T11158] datetime: 0 [ 379.847934][T11158] clock: read=0 [ 379.847934][T11158] clock: write=1336 [ 379.847934][T11158] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 83426fcb67886cbe written 16 min_key POS_MIN ptr: 0:6912 gen 0 [ 379.847934][T11158] btree_root: btree=inodes level=0 u64s 7 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a22d880bb51b703b written 24 min_key POS_MIN [ 379.847934][T11158] [ 379.891070][T11168] loop4: detected capacity change from 0 to 512 [ 379.969935][T11158] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 380.026877][ T5883] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 380.068238][T11168] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 380.105226][T11168] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 380.164970][T11168] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2279: Failed to acquire dquot type 1 [ 380.216047][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 380.248792][T11168] EXT4-fs (loop4): 1 truncate cleaned up [ 380.274074][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.298929][T11168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.314555][ T5883] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 380.346353][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 380.361926][T11168] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.379656][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 380.412861][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.422237][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 380.430285][ T5883] usb 4-1: SerialNumber: syz [ 380.471651][T11162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.508262][T11179] loop1: detected capacity change from 0 to 1024 [ 380.570646][T11179] hfsplus: catalog name length corrupted [ 380.576796][T11179] hfsplus: failed to load root directory [ 380.651090][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.737055][ T5883] usb 4-1: USB disconnect, device number 76 [ 380.879776][T11173] loop0: detected capacity change from 0 to 32768 [ 380.890355][T11185] loop1: detected capacity change from 0 to 8 [ 380.920034][T11173] (syz.0.2280,11173,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 380.926077][T11185] SQUASHFS error: lzo decompression failed, data probably corrupt [ 380.954879][T11188] dccp_v6_rcv: dropped packet with invalid checksum [ 380.963028][T11173] (syz.0.2280,11173,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 380.971847][T11185] SQUASHFS error: Failed to read block 0x144: -5 [ 380.983103][T11185] SQUASHFS error: Unable to read metadata cache entry [142] [ 381.010078][T11185] SQUASHFS error: Unable to read inode 0x11f [ 381.559317][T11181] loop2: detected capacity change from 0 to 32768 [ 381.588420][T11181] bcachefs (/dev/loop2): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-45ca-8204-000000000000) [ 381.622712][T11200] loop0: detected capacity change from 0 to 512 [ 381.632333][T11181] bcachefs (/dev/loop2): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096) [ 381.658658][T11200] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 381.667675][T11181] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset [ 381.683820][ T5883] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 381.710880][T11200] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.2292: iget: bad i_size value: -67835469387268086 [ 381.799371][T11200] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.2292: couldn't read orphan inode 15 (err -117) [ 381.847672][T11190] loop4: detected capacity change from 0 to 32768 [ 381.847778][T11200] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.867804][T11190] BTRFS: device label ÿÿÿ devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2288 (11190) [ 381.887419][T11200] ext2 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.909213][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.918000][ T5883] usb 2-1: not running at top speed; connect to a high speed hub [ 381.930389][ T5883] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 381.946213][ T5883] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.970167][T11190] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 381.980771][ T5883] usb 2-1: config 1 interface 0 has no altsetting 0 [ 381.988041][T11190] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 382.005050][T11190] BTRFS error (device loop4): superblock checksum mismatch [ 382.015371][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 382.025271][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 382.033647][ T5883] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 382.050698][T11190] BTRFS error (device loop4): open_ctree failed: -22 [ 382.068639][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.075601][ T5834] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 382.091852][T11196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 382.122263][ T5883] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input35 [ 382.204260][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 382.232402][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 382.253707][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 382.285806][ T9] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=8a.1e [ 382.298418][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.327462][ T5187] bcm5974 2-1:1.0: could not read from device [ 382.341462][ T9] usb 4-1: Product: syz [ 382.356070][ T9] usb 4-1: Manufacturer: syz [ 382.372846][ T9] usb 4-1: SerialNumber: syz [ 382.378593][ T5883] usb 2-1: USB disconnect, device number 70 [ 382.387317][ T5187] bcm5974 2-1:1.0: could not read from device [ 382.462639][ T9] usb 4-1: config 0 descriptor?? [ 382.557299][ T9] cyberjack 4-1:0.0: Reiner SCT Cyberjack USB card reader converter detected [ 382.585817][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 382.632388][ T9] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 382.746980][ T9] usb 4-1: USB disconnect, device number 77 [ 382.834809][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 382.882524][ T9] cyberjack 4-1:0.0: device disconnected [ 383.288290][T11212] loop4: detected capacity change from 0 to 32768 [ 383.295910][T11212] bcachefs: bch2_fs_parse_param() Error parsing option acl: option_value [ 383.326442][ T5883] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 383.335006][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 383.511873][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 383.525167][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 383.546155][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 383.573003][ T5883] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0105, bcdDevice=43.55 [ 383.593246][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.603385][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.619090][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 383.629231][ T5883] usb 2-1: Product: syz [ 383.633448][ T5883] usb 2-1: Manufacturer: syz [ 383.638095][ T5883] usb 2-1: SerialNumber: syz [ 383.653000][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 383.673217][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.682401][ T5883] usb 2-1: config 0 descriptor?? [ 383.687690][ T24] usb 1-1: Product: syz [ 383.691984][ T24] usb 1-1: Manufacturer: syz [ 383.693416][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 383.698245][ T5883] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 383.713798][ T24] usb 1-1: SerialNumber: syz [ 383.723307][ T24] usb 1-1: config 0 descriptor?? [ 383.738578][ T24] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 383.882225][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.904342][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 383.921843][T11239] loop4: detected capacity change from 0 to 4096 [ 383.941515][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.954988][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 383.964521][ T9] usb 3-1: SerialNumber: syz [ 383.973127][ T5881] usb 2-1: USB disconnect, device number 71 [ 384.017530][ T5982] usb 1-1: USB disconnect, device number 80 [ 384.044228][T11239] ntfs3(loop4): Failed to initialize $Secure (-22). [ 384.157815][ T24] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 384.205410][ T5841] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 384.225835][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 384.278103][ T9] usb 3-1: USB disconnect, device number 86 [ 384.352767][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 384.369165][T11247] loop4: detected capacity change from 0 to 256 [ 384.378438][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 384.391360][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.424970][ T24] usb 4-1: string descriptor 0 read error: -22 [ 384.439114][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.451569][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.477602][T11241] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 384.500884][T11241] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 384.516854][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 384.621071][T11249] loop4: detected capacity change from 0 to 4096 [ 384.642925][T11249] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 384.681358][T11249] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 384.691008][T11249] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 384.712383][T11253] loop0: detected capacity change from 0 to 1764 [ 384.789746][ T5883] usb 4-1: USB disconnect, device number 78 [ 384.890802][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 385.108354][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 385.117729][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.125804][ T24] usb 2-1: Product: syz [ 385.144989][ T24] usb 2-1: Manufacturer: syz [ 385.150472][ T24] usb 2-1: SerialNumber: syz [ 385.167752][ T24] usb 2-1: config 0 descriptor?? [ 385.211908][ T978] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 385.357814][T11260] loop4: detected capacity change from 0 to 32768 [ 385.384987][T11260] (syz.4.2319,11260,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 385.412440][T11260] (syz.4.2319,11260,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 385.424100][ T24] usb 2-1: Firmware version (0.0) predates our first public release. [ 385.439817][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 385.454230][ T5881] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 385.456366][ T24] usb 2-1: Please update to version 0.2 or newer [ 385.475475][ T978] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 385.489696][ T978] usb 1-1: config 0 has no interface number 0 [ 385.507033][ T978] usb 1-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 385.518916][ T978] usb 1-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 385.543409][ T978] usb 1-1: config 0 interface 11 has no altsetting 0 [ 385.558132][ T978] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 385.573127][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.585722][ T978] usb 1-1: Product: syz [ 385.592403][ T24] usb 2-1: USB disconnect, device number 72 [ 385.606974][ T978] usb 1-1: Manufacturer: syz [ 385.615936][ T978] usb 1-1: SerialNumber: syz [ 385.634616][ T978] usb 1-1: config 0 descriptor?? [ 385.700402][ T5881] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 385.710996][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.724284][ T5881] usb 3-1: Product: syz [ 385.730517][ T5881] usb 3-1: Manufacturer: syz [ 385.746179][ T5881] usb 3-1: SerialNumber: syz [ 385.761422][ T5881] usb 3-1: config 0 descriptor?? [ 385.783974][ T5881] hub 3-1:0.0: bad descriptor, ignoring hub [ 385.800585][ T5881] hub 3-1:0.0: probe with driver hub failed with error -5 [ 385.814598][ T5881] f81232 3-1:0.0: f81534a converter detected [ 385.874499][ T978] usb 1-1: Expected 3 endpoints, found: 0 [ 385.918754][ T978] usb 1-1: USB disconnect, device number 81 [ 385.995428][ T5881] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 386.027651][ T5881] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 386.071315][ T5881] usb 3-1: USB disconnect, device number 87 [ 386.100654][ T5881] f81232 3-1:0.0: device disconnected [ 386.295026][T11269] loop3: detected capacity change from 0 to 32768 [ 386.350425][T11269] lmLogInit: exit(-22) [ 386.354596][T11269] lmLogOpen: exit(-22) [ 386.373062][T11269] jfs_mount_rw failed, return code = -22 [ 386.423372][T11277] loop4: detected capacity change from 0 to 128 [ 386.442977][T11277] ufs: You didn't specify the type of your ufs filesystem [ 386.442977][T11277] [ 386.442977][T11277] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 386.442977][T11277] [ 386.442977][T11277] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 386.527915][T11277] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 387.030736][T11299] loop2: detected capacity change from 0 to 64 [ 387.097192][T11303] loop3: detected capacity change from 0 to 8 [ 387.109966][T11299] hfs: unable to open extent tree [ 387.138410][T11299] hfs: can't find a HFS filesystem on dev loop2 [ 387.208602][T11303] SQUASHFS error: lzo decompression failed, data probably corrupt [ 387.232845][T11303] SQUASHFS error: Failed to read block 0x91: -5 [ 387.270273][T11303] SQUASHFS error: Unable to read metadata cache entry [8f] [ 387.302859][T11303] SQUASHFS error: Unable to read inode 0x11f [ 387.467563][ T978] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 387.548341][T11308] loop2: detected capacity change from 0 to 8192 [ 387.600907][T11308] loop2: p1 p4 [ 387.600907][T11308] p1: [ 387.627552][T11308] loop2: p4 start 201785344 is beyond EOD, truncated [ 387.672291][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 387.703926][ T978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 387.781034][ T978] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 387.809876][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.818041][ T978] usb 1-1: Product: syz [ 387.842329][T11290] loop4: detected capacity change from 0 to 32768 [ 387.852003][ T978] usb 1-1: Manufacturer: syz [ 387.859741][ T978] usb 1-1: SerialNumber: syz [ 387.883840][ T978] usb 1-1: config 0 descriptor?? [ 387.901148][T11290] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #73: i_blkno is 17817647500761235529 [ 387.921667][T11290] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 387.934295][T11290] OCFS2: Returning error to the calling process. [ 387.943561][T11290] (syz.4.2335,11290,1):ocfs2_read_locked_inode:535 ERROR: status = -5 [ 387.955039][T11290] (syz.4.2335,11290,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 387.964619][T11290] (syz.4.2335,11290,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0 [ 387.975727][T11290] (syz.4.2335,11290,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 387.985084][T11290] (syz.4.2335,11290,1):ocfs2_mount_volume:1758 ERROR: status = -22 [ 388.010241][T11290] (syz.4.2335,11290,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 388.096853][T11326] loop1: detected capacity change from 0 to 164 [ 388.144095][T11326] ISOFS: Unable to identify CD-ROM format. [ 388.190544][ T978] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.302778][ T978] usb 1-1: USB disconnect, device number 82 [ 388.623145][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.909098][T11322] loop2: detected capacity change from 0 to 32768 [ 388.973462][T11322] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 224): 1/245 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 5 5 6 10 11 11 11 26 33 34 45 45 56 80] [ 388.973462][T11322] replicas_v0 (size 40): [ 388.973462][T11322] (unknown data_type 224): 15 [0 0 0 0 0 0 255 255 255 255 255 255 255 255 255] (unknown data_type 224): 245 [5 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 388.984613][T11322] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 389.151035][T11324] loop3: detected capacity change from 0 to 32768 [ 389.163607][T11324] (syz.3.2351,11324,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 389.231199][T11324] (syz.3.2351,11324,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 389.348128][T11324] JBD2: Ignoring recovery information on journal [ 389.455728][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 389.482009][T11324] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 389.519137][ T5928] ocfs2: Finishing quota recovery on device (7,3) for slot 0 [ 389.533250][T11332] loop1: detected capacity change from 0 to 32768 [ 389.592279][T11332] bcachefs (/dev/loop1): error validating superblock: Filesystem has incompatible version 1.7: mi_btree_bitmap, current version 1.25: extent_flags [ 389.623472][ T5830] [ 389.625867][ T5830] ====================================================== [ 389.633016][ T5830] WARNING: possible circular locking dependency detected [ 389.637429][T11332] bcachefs: bch2_fs_get_tree() error: invalid_sb_features [ 389.640042][ T5830] 6.15.0-rc1-next-20250411-syzkaller #0 Not tainted [ 389.640058][ T5830] ------------------------------------------------------ [ 389.640068][ T5830] syz-executor/5830 is trying to acquire lock: [ 389.640082][ T5830] ffff8880265e8948 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb1/0x170 [ 389.677722][ T5830] [ 389.677722][ T5830] but task is already holding lock: [ 389.685124][ T5830] ffff888053bb40e0 (&type->s_umount_key#65){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 389.695135][ T5830] [ 389.695135][ T5830] which lock already depends on the new lock. [ 389.695135][ T5830] [ 389.705664][ T5830] [ 389.705664][ T5830] the existing dependency chain (in reverse order) is: [ 389.714693][ T5830] [ 389.714693][ T5830] -> #2 (&type->s_umount_key#65){++++}-{4:4}: [ 389.722982][ T5830] lock_acquire+0x116/0x2f0 [ 389.728038][ T5830] down_read+0xb3/0xa50 [ 389.732739][ T5830] ocfs2_finish_quota_recovery+0x15e/0x2310 [ 389.739177][ T5830] ocfs2_complete_recovery+0x1977/0x2580 [ 389.745356][ T5830] process_scheduled_works+0xac3/0x18e0 [ 389.751439][ T5830] worker_thread+0x870/0xd50 [ 389.756566][ T5830] kthread+0x7b7/0x940 [ 389.761179][ T5830] ret_from_fork+0x4b/0x80 [ 389.766225][ T5830] ret_from_fork_asm+0x1a/0x30 [ 389.771558][ T5830] [ 389.771558][ T5830] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}: [ 389.781756][ T5830] lock_acquire+0x116/0x2f0 [ 389.786920][ T5830] process_scheduled_works+0x9e9/0x18e0 [ 389.793033][ T5830] worker_thread+0x870/0xd50 [ 389.798161][ T5830] kthread+0x7b7/0x940 [ 389.802860][ T5830] ret_from_fork+0x4b/0x80 [ 389.807961][ T5830] ret_from_fork_asm+0x1a/0x30 [ 389.813281][ T5830] [ 389.813281][ T5830] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}: [ 389.821656][ T5830] validate_chain+0xa69/0x24e0 [ 389.826959][ T5830] __lock_acquire+0xad5/0xd80 [ 389.832168][ T5830] lock_acquire+0x116/0x2f0 [ 389.837229][ T5830] touch_wq_lockdep_map+0xc7/0x170 [ 389.842916][ T5830] __flush_workqueue+0x14c/0x1280 [ 389.848480][ T5830] ocfs2_shutdown_local_alloc+0x10b/0xab0 [ 389.854740][ T5830] ocfs2_dismount_volume+0x204/0x910 [ 389.860563][ T5830] generic_shutdown_super+0x139/0x2d0 [ 389.866467][ T5830] kill_block_super+0x44/0x90 [ 389.872096][ T5830] deactivate_locked_super+0xc4/0x130 [ 389.878010][ T5830] cleanup_mnt+0x422/0x4c0 [ 389.883006][ T5830] task_work_run+0x251/0x310 [ 389.888312][ T5830] syscall_exit_to_user_mode+0x13f/0x340 [ 389.894568][ T5830] do_syscall_64+0x100/0x230 [ 389.899715][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.906154][ T5830] [ 389.906154][ T5830] other info that might help us debug this: [ 389.906154][ T5830] [ 389.916397][ T5830] Chain exists of: [ 389.916397][ T5830] (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#65 [ 389.916397][ T5830] [ 389.933388][ T5830] Possible unsafe locking scenario: [ 389.933388][ T5830] [ 389.940850][ T5830] CPU0 CPU1 [ 389.946231][ T5830] ---- ---- [ 389.951613][ T5830] lock(&type->s_umount_key#65); [ 389.956747][ T5830] lock((work_completion)(&journal->j_recovery_work)); [ 389.966306][ T5830] lock(&type->s_umount_key#65); [ 389.973882][ T5830] lock((wq_completion)ocfs2_wq); [ 389.979012][ T5830] [ 389.979012][ T5830] *** DEADLOCK *** [ 389.979012][ T5830] [ 389.987166][ T5830] 1 lock held by syz-executor/5830: [ 389.992394][ T5830] #0: ffff888053bb40e0 (&type->s_umount_key#65){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 390.002720][ T5830] [ 390.002720][ T5830] stack backtrace: [ 390.008641][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 390.008664][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.008676][ T5830] Call Trace: [ 390.008684][ T5830] [ 390.008693][ T5830] dump_stack_lvl+0x241/0x360 [ 390.008722][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.008747][ T5830] ? __pfx__printk+0x10/0x10 [ 390.008770][ T5830] ? print_lock+0x171/0x1a0 [ 390.008790][ T5830] print_circular_bug+0x2e1/0x300 [ 390.008812][ T5830] check_noncircular+0x142/0x160 [ 390.008835][ T5830] validate_chain+0xa69/0x24e0 [ 390.008854][ T5830] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 390.008872][ T5830] ? dquot_disable+0x1158/0x1cf0 [ 390.008890][ T5830] ? ocfs2_disable_quotas+0x1bc/0x210 [ 390.008916][ T5830] ? kill_block_super+0x44/0x90 [ 390.008938][ T5830] ? debug_object_assert_init+0x30e/0x4d0 [ 390.008965][ T5830] __lock_acquire+0xad5/0xd80 [ 390.008989][ T5830] lock_acquire+0x116/0x2f0 [ 390.009014][ T5830] ? touch_wq_lockdep_map+0xb1/0x170 [ 390.009037][ T5830] ? touch_wq_lockdep_map+0xb1/0x170 [ 390.009055][ T5830] touch_wq_lockdep_map+0xc7/0x170 [ 390.009074][ T5830] ? touch_wq_lockdep_map+0xb1/0x170 [ 390.009093][ T5830] __flush_workqueue+0x14c/0x1280 [ 390.009112][ T5830] ? kfree+0x198/0x430 [ 390.009131][ T5830] ? ocfs2_local_free_info+0x8ba/0xa60 [ 390.009154][ T5830] ? __pfx___flush_workqueue+0x10/0x10 [ 390.009178][ T5830] ? work_grab_pending+0x4d6/0xb00 [ 390.009203][ T5830] ocfs2_shutdown_local_alloc+0x10b/0xab0 [ 390.009228][ T5830] ? __pfx_work_grab_pending+0x10/0x10 [ 390.009249][ T5830] ? __pfx_ocfs2_shutdown_local_alloc+0x10/0x10 [ 390.009274][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 390.009293][ T5830] ? enable_work+0x2e4/0x360 [ 390.009313][ T5830] ? __pfx_enable_work+0x10/0x10 [ 390.009333][ T5830] ? _atomic_dec_and_lock+0x9a/0x130 [ 390.009352][ T5830] ? iput+0x3be/0xa50 [ 390.009379][ T5830] ocfs2_dismount_volume+0x204/0x910 [ 390.009405][ T5830] ? __pfx_ocfs2_dismount_volume+0x10/0x10 [ 390.009429][ T5830] ? __pfx_evict_inodes+0x10/0x10 [ 390.009456][ T5830] ? __pfx_ocfs2_put_super+0x10/0x10 [ 390.009480][ T5830] generic_shutdown_super+0x139/0x2d0 [ 390.009498][ T5830] kill_block_super+0x44/0x90 [ 390.009518][ T5830] deactivate_locked_super+0xc4/0x130 [ 390.009536][ T5830] cleanup_mnt+0x422/0x4c0 [ 390.009553][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 390.009572][ T5830] task_work_run+0x251/0x310 [ 390.009597][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 390.009621][ T5830] ? syscall_exit_to_user_mode+0xa3/0x340 [ 390.009641][ T5830] syscall_exit_to_user_mode+0x13f/0x340 [ 390.009661][ T5830] do_syscall_64+0x100/0x230 [ 390.009680][ T5830] ? clear_bhb_loop+0x45/0xa0 [ 390.009699][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.009722][ T5830] RIP: 0033:0x7f6c0638e497 [ 390.009739][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 390.009754][ T5830] RSP: 002b:00007ffe9859e1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 390.009772][ T5830] RAX: 0000000000000000 RBX: 00007f6c0640e77c RCX: 00007f6c0638e497 [ 390.009784][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9859e290 [ 390.009795][ T5830] RBP: 00007ffe9859e290 R08: 0000000000000000 R09: 0000000000000000 [ 390.009806][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9859f320 [ 390.009818][ T5830] R13: 00007f6c0640e77c R14: 000000000005ae75 R15: 00007ffe9859f360 [ 390.009836][ T5830] [ 390.359579][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 390.374839][ T9] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 390.384025][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.392124][ T9] usb 5-1: Product: syz [ 390.396500][ T9] usb 5-1: Manufacturer: syz [ 390.401076][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 390.401127][ T9] usb 5-1: SerialNumber: syz [ 390.414051][ T9] usb 5-1: config 0 descriptor?? [ 390.421062][ T9] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 390.645921][ T5883] usb 5-1: USB disconnect, device number 67