last executing test programs: 5.189725104s ago: executing program 3 (id=3718): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x3, 0x1df, &(0x7f0000000640)="$eJzslb2K1FAUx//3JmYSER/AxsIF18JMklGxWXARrCwEPxYLwcGNy2rWld0UzoA48wT2dhbT+QqCtj6EjDZaqJXaXrkfSW4gOIMkTrHnB3PyT865J2fODeeCIIgjy+dPv+bi58YXH8AJrKFnnn91qhhuxX/0fzx/f/3a1st7sw+9eRg05RRi+fe7AN5tOsjLtfXVa+Z6C7zUt8FxzugtMIRG3wfHHaNTMNw1+pGl92V8GD7czdLwwX62LUUkTSxNIs2gVh8Dw5Rh26qPWf7D0fjxMMvSgw7Fov593+TYsOqz9yuErjay+heDIzZ6AIabRl9Gr+iNbkmRf8pwyq3yO/X///uYlqZcD913pC3hAVgUc3XW5ALYf9n7RiHQVkIHShQ72mHNk9ZqNoJlWQq/5gpQxHyDEXBX/Y2VIuikvZ4Ub6/o/Stc4oW+b+kVS+c5aT2p5pN4zXDWmk+uOlFeqaOmn+897R+Oxud394Y76U76JEkGl6ILUXQx6atBpO1f5l+g5tPxKn/jmSTxmIdnwzw/iLUt7xNtmyYuxwSYcqyfAfDGaczrW5qZH1dXqdabFxEEQayY02BqJqu5XAhzmpQOIZIbK66TIAiCIAiCIAiCIIh/508AAAD//4w2Wac=") lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 4.856945423s ago: executing program 3 (id=3722): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xaac, 0x0, 0x7, 0x42, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x3f}) 2.857752471s ago: executing program 3 (id=3747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x4f, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x120, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x8, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0xfffffffd, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x39}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm-aes-ce\x00'}, 0x0, 0x40}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 2.657262839s ago: executing program 0 (id=3750): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x180}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.465162407s ago: executing program 0 (id=3752): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) 2.177256729s ago: executing program 3 (id=3756): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x6}}], 0x1, 0x8094) 1.946850617s ago: executing program 3 (id=3761): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e108ea768f2db304683775a7f2cdf7ffa698c7167ab83db04d28f0e5632c605f4734f06bebd0d199085a560180c17772accc042d8424f4c6855c70c0a7724b76ed37cddc52391b1256f2e7a5c8defcca76dd0a006fb04e0770ac1f3e07f527beaaba2fe205384f0ec0d0a00", 0x6c}], 0x1) 1.925571693s ago: executing program 0 (id=3762): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000000c0)={0x2e, 0x4, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @remote}]}, 0x30) 1.741414659s ago: executing program 2 (id=3765): r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) 1.662342894s ago: executing program 0 (id=3766): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x29, 0xb, "10be"}], 0x18}, 0x0) 1.618176996s ago: executing program 3 (id=3767): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x69, 0xac, 0xb, 0x40, 0x5ac, 0x1402, 0x4565, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x2, 0x11, 0xdc, 0x8a, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x20}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.553604198s ago: executing program 2 (id=3768): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.479508079s ago: executing program 0 (id=3770): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c1242, 0x15c) 1.289390923s ago: executing program 4 (id=3772): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) 1.281927551s ago: executing program 2 (id=3773): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 1.075259903s ago: executing program 2 (id=3775): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 1.056571268s ago: executing program 1 (id=3776): setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) 1.013329633s ago: executing program 4 (id=3777): syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0x804cd8, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESHEX, @ANYBLOB="db7cdacdc93ee84dde64a5615008ffb65641bfe832ec4d4e2cd18e4338f57e062540629e5dc19de76dca76886a74ba62738989d45bf468950720dc1c90741f92c57b11440bb9963a5f39926a28228ba12513c03eaa2a8300b81d5ad60637908e2d5e642d202ad7882e8721cf9c57ed963ab3661031e9e48bb326a5cfe477f718a327bc927db4b3daadb2a7c625694065dd56d3d787bc47a6240e40fc0c3fef0850c56182c4af4f6b4f39f3e11ad5ff13dc89bb5064cc1f04ede92f5f4b106a93feb21a5d751996158eb9f8585d4ab2530c12b4fd406df2c81f693ace", @ANYRES32, @ANYRES64, @ANYBLOB="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", @ANYRES64, @ANYRES32], 0x3, 0x222, &(0x7f0000001d40)="$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") umount2(&(0x7f0000000340)='./file1\x00', 0x8) 888.495966ms ago: executing program 1 (id=3778): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x110004}, 0x0, 0x0, 0x0, 0x800000, 0x0}}) 777.893908ms ago: executing program 2 (id=3779): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000800007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfeb, &(0x7f0000001e00)=""/4075, 0x41000}, 0x94) 709.869435ms ago: executing program 4 (id=3780): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) 656.767409ms ago: executing program 1 (id=3781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x10000004) 609.145473ms ago: executing program 2 (id=3782): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@dmode={'dmode', 0x3d, 0x6}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x3}}, {@fileset={'fileset', 0x3d, 0x3ff}}, {@uid}, {@gid}, {@anchor={'anchor', 0x3d, 0x2}}]}, 0x10, 0xc34, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 485.508264ms ago: executing program 4 (id=3783): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 436.757297ms ago: executing program 1 (id=3784): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 278.667616ms ago: executing program 1 (id=3785): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325258, 0x0, [0x2], [0x80ffff], [0x40000002, 0x0, 0x0, 0xfffffffc], [0x0, 0xffffffffffffffff]}) 277.805388ms ago: executing program 4 (id=3786): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 127.031101ms ago: executing program 1 (id=3787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x20000000) 1.397445ms ago: executing program 4 (id=3788): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 0s ago: executing program 0 (id=3789): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\a$'], 0x38}, 0xc804) kernel console output (not intermixed with test programs): 502.686875][T13249] done [ 502.736343][T13249] bcachefs (loop2): going read-write [ 502.788466][T13249] bcachefs (loop2): done starting filesystem [ 502.795615][ T5903] usb 1-1: USB disconnect, device number 93 [ 502.992735][ T5836] bcachefs (loop2): shutting down [ 502.997822][ T5836] bcachefs (loop2): going read-only [ 503.036698][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 503.049139][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 503.064149][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 503.081796][ T5836] bcachefs (loop2): unclean shutdown complete, journal seq 12 [ 503.092944][ T5836] bcachefs (loop2): done going read-only, filesystem not clean [ 503.181211][ T5836] bcachefs (loop2): shutdown complete [ 503.234595][ T928] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 503.288396][ T5903] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 503.340755][T13314] loop3: detected capacity change from 0 to 40427 [ 503.350342][T13314] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 503.360248][T13314] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 503.380202][T13314] F2FS-fs (loop3): heap/no_heap options were deprecated [ 503.407716][T13314] F2FS-fs (loop3): Encrypt feature is off [ 503.416290][ T928] usb 2-1: Using ep0 maxpacket: 32 [ 503.423885][ T928] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 503.444086][ T928] usb 2-1: config 0 has no interface number 0 [ 503.457427][ T928] usb 2-1: config 0 interface 12 has no altsetting 0 [ 503.478286][ T928] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 503.517331][ T5903] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 503.532523][ T928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.544102][ T5903] usb 5-1: config 0 has no interface number 0 [ 503.552518][ T5903] usb 5-1: config 0 interface 236 has no altsetting 0 [ 503.562484][ T928] usb 2-1: Product: syz [ 503.578855][ T928] usb 2-1: Manufacturer: syz [ 503.606701][ T5903] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=a2.52 [ 503.616202][ T928] usb 2-1: SerialNumber: syz [ 503.626985][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.640380][ T928] usb 2-1: config 0 descriptor?? [ 503.649749][ T5903] usb 5-1: Product: syz [ 503.654480][ T5903] usb 5-1: Manufacturer: syz [ 503.662967][ T5903] usb 5-1: SerialNumber: syz [ 503.672661][ T5903] usb 5-1: config 0 descriptor?? [ 503.732469][ T5903] usb 5-1: active config #0 != 1 ?? [ 503.889856][ T928] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 503.913284][ T928] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 503.940389][ T928] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 503.982813][ T928] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 503.986164][ T5933] usb 5-1: USB disconnect, device number 94 [ 504.028488][ T928] usb 2-1: USB disconnect, device number 101 [ 504.251336][T13342] loop3: detected capacity change from 0 to 256 [ 504.370852][T13346] loop3: detected capacity change from 0 to 64 [ 504.383426][T13346] hfs: unable to load iocharset "iso8859-3000]bo-00002ask=00000002000000000002001" [ 504.510860][ T5903] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 504.578504][T13350] loop1: detected capacity change from 0 to 128 [ 504.593440][T13350] ufs: You didn't specify the type of your ufs filesystem [ 504.593440][T13350] [ 504.593440][T13350] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 504.593440][T13350] [ 504.593440][T13350] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 504.641917][T13350] ufs: ufstype=old is supported read-only [ 504.724428][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 504.742612][ T5903] usb 1-1: not running at top speed; connect to a high speed hub [ 504.750891][T13350] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 504.782538][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.817663][ T928] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 504.828491][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.868509][ T5903] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.881897][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.889955][ T5903] usb 1-1: Product: syz [ 504.942798][ T5903] usb 1-1: Manufacturer: syz [ 504.955716][ T5903] usb 1-1: SerialNumber: syz [ 505.039426][ T928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 505.072828][ T928] usb 4-1: config 6 has an invalid interface number: 32 but max is 0 [ 505.081289][ T928] usb 4-1: config 6 has no interface number 0 [ 505.094655][ T928] usb 4-1: config 6 interface 32 has no altsetting 0 [ 505.115548][ T928] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=9f.66 [ 505.137389][ T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.145538][ T928] usb 4-1: Product: syz [ 505.158446][ T928] usb 4-1: Manufacturer: syz [ 505.167156][ T928] usb 4-1: SerialNumber: syz [ 505.213472][ T5903] usb 1-1: 0:2 : does not exist [ 505.251422][ T5903] usb 1-1: unit 4 not found! [ 505.275944][ T5903] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 505.327330][ T5903] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 505.377017][ T5903] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 505.421672][ T5903] usb 1-1: USB disconnect, device number 94 [ 505.473959][ T928] snd_usb_toneport 4-1:6.32: Line 6 GuitarPort found [ 505.512290][ T928] usb 4-1: selecting invalid altsetting 2 [ 505.518082][ T928] snd_usb_toneport 4-1:6.32: set_interface failed [ 505.534604][T13364] nfs4: Bad value for 'source' [ 505.551986][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.588224][ T928] snd_usb_toneport 4-1:6.32: Line 6 GuitarPort now disconnected [ 505.596335][ T928] snd_usb_toneport 4-1:6.32: probe with driver snd_usb_toneport failed with error -22 [ 505.624159][T13366] loop4: detected capacity change from 0 to 512 [ 505.632293][ T928] usb 4-1: USB disconnect, device number 100 [ 505.682088][T13366] EXT4-fs: Ignoring removed nobh option [ 505.722405][T13366] EXT4-fs: journaled quota format not specified [ 506.097220][T13356] loop1: detected capacity change from 0 to 32768 [ 506.118271][T13356] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 506.118271][T13356] clean (size 2912): [ 506.118271][T13356] flags: 0 [ 506.118271][T13356] journal_seq: 10 [ 506.118271][T13356] usage: type=inodes v=8 [ 506.118271][T13356] usage: type=key_version v=0 [ 506.118271][T13356] usage: type=reserved v=0 [ 506.118271][T13356] usage: type=reserved v=0 [ 506.118271][T13356] usage: type=reserved v=0 [ 506.118271][T13356] usage: type=reserved v=0 [ 506.118271][T13356] data_usage: btree: 1/1 [0]=2816 [ 506.118271][T13356] data_usage: journal: 1/1 [0]=0 [ 506.118271][T13356] data_usage: user: 1/1 [0]=16 [ 506.118271][T13356] dev_usage: dev=0 [ 506.118271][T13356] free: buckets=83 sectors=34359738368 fragmented=0 [ 506.118271][T13356] sb: buckets=25 sectors=6152 fragmented=248 [ 506.118271][T13356] journal: buckets=8 sectors=2048 fragmented=0 [ 506.118271][T13356] btree: buckets=11 sectors=2816 fragmented=150994944 [ 506.118271][T13356] user: buckets=1 sectors=16 fragmented=240 [ 506.118271][T13356] cached: buckets=0 sectors=0 fragmented=0 [ 506.118271][T13356] parity: buckets=0 sectors=0 fragmented=0 [ 506.118271][T13356] stripe: buckets=0 sectors=0 fragmented=0 [ 506.118271][T13356] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 506.118271][T13356] need_discard: buckets=0 sectors=0 fragmented=0 [ 506.118271][T13356] clock: read=0 [ 506.118271][T13356] btree_keys: btree=extents level=0 u64s 1 type deleted 0:1179915:1 len [ 506.118491][T13356] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 506.392670][ T928] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 506.537366][ T849] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 506.580127][ T928] usb 3-1: Using ep0 maxpacket: 32 [ 506.594393][ T928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.610208][ T928] usb 3-1: config 56 has an invalid interface number: 222 but max is 0 [ 506.634094][ T928] usb 3-1: config 56 has no interface number 0 [ 506.640368][ T928] usb 3-1: config 56 interface 222 has no altsetting 0 [ 506.677019][ T928] usb 3-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23 [ 506.686125][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.719262][ T849] usb 1-1: Using ep0 maxpacket: 8 [ 506.731835][ T928] usb 3-1: Product: syz [ 506.736043][ T928] usb 3-1: Manufacturer: syz [ 506.737682][ T849] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 506.751097][ T928] usb 3-1: SerialNumber: syz [ 506.773353][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 506.784297][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.790637][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.828087][ T849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 506.847402][ T5903] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 506.847468][ T849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 23 [ 506.886743][ T849] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 506.900785][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.917529][ T849] usb 1-1: Product: syz [ 506.927782][ T849] usb 1-1: Manufacturer: syz [ 506.938269][ T849] usb 1-1: SerialNumber: syz [ 506.957210][ T849] usb 1-1: config 0 descriptor?? [ 506.967415][T13394] loop3: detected capacity change from 0 to 4096 [ 506.986934][T13378] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 507.000188][ T849] kvaser_usb 1-1:0.0: error -EPROTO: Cannot get software info [ 507.021187][ T849] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -71 [ 507.038242][ T928] option 3-1:56.222: GSM modem (1-port) converter detected [ 507.046820][T13394] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 507.056008][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.087349][ T5903] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 507.125389][ T928] usb 3-1: USB disconnect, device number 98 [ 507.142257][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.164162][ T5903] usb 5-1: Product: syz [ 507.178523][ T5903] usb 5-1: Manufacturer: syz [ 507.181464][ T928] option 3-1:56.222: device disconnected [ 507.195402][ T5903] usb 5-1: SerialNumber: syz [ 507.228275][T13394] ntfs3(loop3): Failed to load root (-22). [ 507.234678][ T5903] usb 5-1: config 0 descriptor?? [ 507.250848][ T5903] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 507.283562][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 507.327452][ T849] usb 1-1: USB disconnect, device number 95 [ 507.329516][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 507.349805][ T5903] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 507.367212][ T5903] usb 5-1: media controller created [ 507.401491][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.450981][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 507.470391][ T5903] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 507.581505][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47 [ 507.596276][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 507.603580][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 507.627626][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 507.676700][ T5903] usb 5-1: USB disconnect, device number 95 [ 507.745292][ T5933] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 507.807656][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 507.838890][T13398] loop2: detected capacity change from 0 to 128 [ 507.857240][T13398] vxfs: unable to set final block size [ 507.921821][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.953266][ T5933] usb 4-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 507.978768][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.019370][ T5933] usb 4-1: Product: syz [ 508.024897][ T5933] usb 4-1: Manufacturer: syz [ 508.029570][ T5933] usb 4-1: SerialNumber: syz [ 508.299754][ T5933] qmi_wwan 4-1:1.0: skipping garbage [ 508.320187][ T5933] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -22 [ 508.343324][ T5933] usb 4-1: USB disconnect, device number 101 [ 508.366408][ T849] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 508.504168][ T5903] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 508.529690][T13412] loop1: detected capacity change from 0 to 256 [ 508.546813][ T849] usb 1-1: Using ep0 maxpacket: 8 [ 508.570797][ T849] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 508.578488][ T849] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 508.601905][ T849] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.654500][ T849] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 508.661975][ T849] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 508.681058][ T849] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.694942][ T849] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 508.703726][ T849] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 508.707199][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 508.715427][ T849] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.741790][ T849] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 508.766203][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.772790][ T5903] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 508.785036][ T849] usb 1-1: Product: syz [ 508.797704][ T849] usb 1-1: Manufacturer: syz [ 508.814021][ T5903] usb 3-1: config 0 has no interface number 0 [ 508.828009][ T849] usb 1-1: SerialNumber: syz [ 508.831178][ T5903] usb 3-1: config 0 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.869003][ T5903] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad4, bcdDevice=d0.a3 [ 508.884804][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.903882][ T5903] usb 3-1: Product: syz [ 508.914690][ T5903] usb 3-1: Manufacturer: syz [ 508.921758][ T5903] usb 3-1: SerialNumber: syz [ 508.971714][ T5903] usb 3-1: config 0 descriptor?? [ 509.021542][T13421] loop1: detected capacity change from 0 to 164 [ 509.069623][T13421] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 509.099085][ T849] adutux 1-1:168.0: interrupt endpoints not found [ 509.146220][ T849] usb 1-1: USB disconnect, device number 96 [ 509.281893][ T5903] usb 3-1: Found UVC 0.00 device syz (8086:0ad4) [ 509.325302][ T5903] usb 3-1: No valid video chain found. [ 509.370857][ T5903] usb 3-1: USB disconnect, device number 99 [ 509.594499][ T5916] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 509.757071][ T5916] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 509.766421][ T5916] usb 2-1: config 0 has no interface number 0 [ 509.778714][ T5916] usb 2-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice=25.f6 [ 509.797556][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.805600][ T5916] usb 2-1: Product: syz [ 509.811160][ T5916] usb 2-1: Manufacturer: syz [ 509.816279][ T5916] usb 2-1: SerialNumber: syz [ 509.825113][ T5916] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 509.834866][ T5895] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 509.842886][ T928] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 509.856701][ T5916] usb-storage 2-1:0.27: USB Mass Storage device detected [ 509.875576][ T5916] usb-storage 2-1:0.27: Quirks match for vid 05ac pid 1204: 90 [ 510.011527][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 510.030031][ T928] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 510.046318][ T5895] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 510.059223][ T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.068807][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.080175][ T928] usb 4-1: Product: syz [ 510.084388][ T928] usb 4-1: Manufacturer: syz [ 510.089343][ T5895] usb 5-1: Product: syz [ 510.093627][ T5895] usb 5-1: Manufacturer: syz [ 510.098565][ T928] usb 4-1: SerialNumber: syz [ 510.103284][ T5895] usb 5-1: SerialNumber: syz [ 510.111933][ T928] usb 4-1: config 0 descriptor?? [ 510.121839][T13443] loop0: detected capacity change from 0 to 8192 [ 510.128446][ T5895] usb 5-1: config 0 descriptor?? [ 510.137660][ T5933] apple-mfi-fastcharge 2-1: USB disconnect, device number 102 [ 510.174241][ T5895] usb 5-1: selecting invalid altsetting 3 [ 510.187651][ T5895] comedi comedi0: could not set alternate setting 3 in high speed [ 510.201107][ T5895] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 510.278187][ T5895] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 510.357926][ T928] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 510.401010][ T928] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 510.412350][ T5933] usb 5-1: USB disconnect, device number 96 [ 510.429399][ T928] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 510.483875][ T928] usb 4-1: USB disconnect, device number 102 [ 510.571014][T13453] loop0: detected capacity change from 0 to 64 [ 510.868709][T13462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 510.878427][ T5895] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 511.014654][T13464] loop3: detected capacity change from 0 to 1764 [ 511.051259][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 511.083886][ T5895] usb 3-1: descriptor type invalid, skip [ 511.089602][ T5895] usb 3-1: descriptor type invalid, skip [ 511.101595][ T5895] usb 3-1: descriptor type invalid, skip [ 511.107863][ T5895] usb 3-1: descriptor type invalid, skip [ 511.121915][ T5895] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 511.151435][ T5895] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 511.218572][ T5895] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.232310][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.261990][ T5895] usb 3-1: Product: syz [ 511.266189][ T5895] usb 3-1: Manufacturer: syz [ 511.282359][ T5895] usb 3-1: SerialNumber: syz [ 511.296853][T13455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.318938][T13455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.486694][T13459] loop1: detected capacity change from 0 to 32768 [ 511.510572][T13459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3274 (13459) [ 511.576224][T13459] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 511.604752][T13459] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 511.629851][ T5895] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 511.689407][ T5895] usb 3-1: USB disconnect, device number 100 [ 511.823416][T13492] loop3: detected capacity change from 0 to 8 [ 511.834277][T13459] BTRFS info (device loop1): rebuilding free space tree [ 511.901451][T13459] BTRFS info (device loop1): disabling free space tree [ 511.927729][T13492] SQUASHFS error: zlib decompression failed, data probably corrupt [ 511.951808][T13459] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 511.973624][T13459] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 511.982372][T13492] SQUASHFS error: Failed to read block 0x9b: -5 [ 512.018454][T13492] SQUASHFS error: Unable to read metadata cache entry [99] [ 512.046401][T13492] SQUASHFS error: Unable to read inode 0x127 [ 512.210835][T13496] loop0: detected capacity change from 0 to 164 [ 512.294825][ T5827] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 512.598207][ T5941] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 512.753343][T13466] loop4: detected capacity change from 0 to 32768 [ 512.841551][ T30] audit: type=1326 audit(1750934699.593:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.3290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab3838e929 code=0x0 [ 512.871413][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.909082][T13466] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 512.921252][ T5941] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 512.931673][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.939905][ T5941] usb 4-1: Product: syz [ 512.944186][ T5941] usb 4-1: Manufacturer: syz [ 512.948805][ T5941] usb 4-1: SerialNumber: syz [ 512.962276][ T5941] usb 4-1: config 0 descriptor?? [ 512.979311][T13466] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 512.985947][ T5941] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 512.992519][ T5941] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 513.135927][T13466] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms [ 513.181232][ T5895] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 513.196558][ T5895] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 513.243619][ T5933] usb 4-1: USB disconnect, device number 103 [ 513.249852][ T928] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 513.423722][ T5895] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 212ms [ 513.440488][ T5895] gfs2: fsid=syz:syz.0: jid=0: Done [ 513.464561][ T928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.465789][ T849] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 513.475593][ T928] usb 2-1: not running at top speed; connect to a high speed hub [ 513.491592][T13466] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 513.509368][ T928] usb 2-1: config 7 has an invalid interface number: 106 but max is 0 [ 513.529389][ T928] usb 2-1: config 7 has no interface number 0 [ 513.548417][ T928] usb 2-1: config 7 interface 106 has no altsetting 0 [ 513.574175][ T928] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 513.591837][ T928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.600030][ T928] usb 2-1: Product: syz [ 513.606097][ T928] usb 2-1: Manufacturer: syz [ 513.610849][ T928] usb 2-1: SerialNumber: syz [ 513.717197][ T849] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 513.736345][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.774663][ T849] usb 3-1: Product: syz [ 513.788008][ T849] usb 3-1: Manufacturer: syz [ 513.825221][ T849] usb 3-1: SerialNumber: syz [ 513.845722][ T849] usb 3-1: config 0 descriptor?? [ 513.883733][ T928] go7007 2-1:7.106: probe with driver go7007 failed with error -12 [ 513.906143][ T928] usb 2-1: USB disconnect, device number 103 [ 513.912842][ T849] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 513.932403][ T849] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 514.114041][T13520] loop0: detected capacity change from 0 to 32768 [ 514.131588][ T5916] usb 3-1: USB disconnect, device number 101 [ 514.229209][T13520] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,degraded=yes,norecovery,noexcl,reconstruct_alloc,version_upgrade=none,nocow [ 514.229241][T13520] allowing incompatible features above 0.0: (unknown version) [ 514.229253][T13520] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 514.267379][ T849] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 514.274039][T13520] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 514.289801][T13520] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 514.298711][T13520] bcachefs (loop0): dropping and reconstructing all alloc info [ 514.324197][T13520] bcachefs (loop0): accounting_read... done [ 514.330655][T13520] bcachefs (loop0): alloc_read... done [ 514.336521][T13520] bcachefs (loop0): snapshots_read... done [ 514.343185][T13520] bcachefs (loop0): done starting filesystem [ 514.350781][ T5895] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 514.440410][ T849] usb 4-1: Using ep0 maxpacket: 16 [ 514.455173][ T5843] bcachefs (loop0): shutting down [ 514.460780][ T849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.482324][ T849] usb 4-1: config 218 has an invalid interface number: 135 but max is 0 [ 514.495928][ T849] usb 4-1: config 218 has no interface number 0 [ 514.504022][ T849] usb 4-1: config 218 interface 135 has no altsetting 0 [ 514.507024][ T5843] bcachefs (loop0): shutdown complete [ 514.513289][ T849] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9 [ 514.547919][ T849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.549255][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 514.566791][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.575276][ T849] usb 4-1: Product: syz [ 514.579479][ T849] usb 4-1: Manufacturer: syz [ 514.599874][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.600150][ T849] usb 4-1: SerialNumber: syz [ 514.610611][ T5895] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 514.656624][ T5895] usb 5-1: config 1 has no interface number 1 [ 514.664442][ T5895] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 514.685318][ T5895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.703470][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.722586][ T5895] usb 5-1: Product: syz [ 514.727395][ T5895] usb 5-1: Manufacturer: syz [ 514.732076][ T5895] usb 5-1: SerialNumber: syz [ 514.924505][ T849] usb 4-1: USB disconnect, device number 104 [ 515.025526][ T5895] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 515.083470][ T5895] usb 5-1: USB disconnect, device number 97 [ 515.141832][ T5903] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 515.199350][ T6530] udevd[6530]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.342106][ T5903] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 515.361260][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.375743][ T5903] usb 3-1: config 0 has no interface number 0 [ 515.387810][ T5903] usb 3-1: config 0 interface 25 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.400452][T13541] loop1: detected capacity change from 0 to 32768 [ 515.403539][ T5903] usb 3-1: config 0 interface 25 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 515.424474][ T5903] usb 3-1: config 0 interface 25 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 515.433568][T13541] (syz.1.3302,13541,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is too small for name_len - offset=132, inode=71, rec_len=16, name_len=13 [ 515.435777][ T5903] usb 3-1: config 0 interface 25 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 515.465068][T13541] (syz.1.3302,13541,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 515.482721][ T5903] usb 3-1: config 0 interface 25 has no altsetting 0 [ 515.491997][T13541] (syz.1.3302,13541,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 515.492340][T13541] (syz.1.3302,13541,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 515.517093][T13541] (syz.1.3302,13541,0):ocfs2_initialize_super:2196 ERROR: status = -22 [ 515.528859][ T5903] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 515.555655][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 515.564200][ T5903] usb 3-1: Product: syz [ 515.568398][ T5903] usb 3-1: SerialNumber: syz [ 515.573436][T13541] (syz.1.3302,13541,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 515.596040][ T5903] usb 3-1: config 0 descriptor?? [ 515.908307][ T5895] usb 3-1: USB disconnect, device number 102 [ 516.243364][ T5903] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 516.297706][T13564] loop4: detected capacity change from 0 to 512 [ 516.339720][T13564] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 516.351468][T13564] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 516.362726][T13564] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3312: Corrupt directory, running e2fsck is recommended [ 516.393559][T13564] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -12 [ 516.404926][T13564] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.3312: corrupted in-inode xattr: invalid ea_ino [ 516.424401][T13564] EXT4-fs (loop4): Remounting filesystem read-only [ 516.433446][T13564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.446501][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 516.492633][ T5903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 516.520808][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.528861][ T5903] usb 2-1: Product: syz [ 516.548822][ T5903] usb 2-1: Manufacturer: syz [ 516.563624][ T5903] usb 2-1: SerialNumber: syz [ 516.632101][ T5903] usb 2-1: config 0 descriptor?? [ 516.700469][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.871790][ T5903] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 516.895847][ T5903] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 516.934048][ T5903] usb 2-1: USB disconnect, device number 104 [ 516.969795][ T928] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 517.034119][T13562] loop3: detected capacity change from 0 to 40427 [ 517.065301][T13562] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 517.073405][T13562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 517.082312][T13562] F2FS-fs (loop3): build fault injection rate: 6 [ 517.094288][T13562] F2FS-fs (loop3): invalid crc value [ 517.098277][ T849] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 517.122333][T13562] F2FS-fs (loop3): invalid journal entries nats 0 sits 1286 [ 517.140524][T13562] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-22) [ 517.142294][ T928] usb 3-1: config 252 has an invalid interface number: 251 but max is 0 [ 517.183380][ T928] usb 3-1: config 252 has no interface number 0 [ 517.189725][ T928] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 517.215164][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.261266][ T928] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 517.305519][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 517.338554][ T849] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 517.359009][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.388930][ T849] usb 5-1: Product: syz [ 517.404039][ T849] usb 5-1: Manufacturer: syz [ 517.419107][ T849] usb 5-1: SerialNumber: syz [ 517.446458][ T849] usb 5-1: config 0 descriptor?? [ 517.502793][ T928] gspca_sn9c20x: Write register 1000 failed -71 [ 517.514678][ T928] gspca_sn9c20x: Device initialization failed [ 517.520889][ T928] gspca_sn9c20x 3-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 517.599402][ T928] usb 3-1: USB disconnect, device number 103 [ 517.688623][ T849] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 517.718882][ T849] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 517.792538][ T849] usb 5-1: USB disconnect, device number 98 [ 517.908996][T13572] loop0: detected capacity change from 0 to 32768 [ 518.247520][T13572] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 518.247552][T13572] allowing incompatible features above 0.0: (unknown version) [ 518.247575][T13572] features: [ 518.357238][T13572] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 518.426424][T13572] bcachefs (loop0): initializing new filesystem [ 518.429841][T13594] loop2: detected capacity change from 0 to 16 [ 518.470821][T13594] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 518.472668][T13572] bcachefs (loop0): going read-write [ 518.511134][T13594] cramfs: bad root offset 5242956 [ 518.541449][T13572] bcachefs (loop0): marking superblocks [ 518.553190][T13575] loop3: detected capacity change from 0 to 32768 [ 518.593267][T13575] btrfs: Bad value for 'max_inline' [ 518.629510][T13572] bcachefs (loop0): initializing freespace [ 518.695137][T13572] bcachefs (loop0): done initializing freespace [ 518.740799][T13572] bcachefs (loop0): reading snapshots table [ 518.758932][T13572] bcachefs (loop0): reading snapshots done [ 518.873826][T13572] bcachefs (loop0): done starting filesystem [ 519.171402][ T5843] bcachefs (loop0): shutting down [ 519.196785][ T5843] bcachefs (loop0): going read-only [ 519.219340][ T5843] bcachefs (loop0): finished waiting for writes to stop [ 519.292563][ T5843] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 519.375349][ T5843] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 519.422439][ T5843] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 519.431882][T13592] loop1: detected capacity change from 0 to 40427 [ 519.440023][ T5843] bcachefs (loop0): marking filesystem clean [ 519.460427][T13592] F2FS-fs (loop1): build fault injection rate: 18 [ 519.483544][T13592] F2FS-fs (loop1): build fault injection type: 0x1a [ 519.591041][ T5843] bcachefs (loop0): shutdown complete [ 519.591821][T13592] F2FS-fs (loop1): invalid crc value [ 519.649267][T13592] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4656/0x6ed0 [ 519.695079][T13592] F2FS-fs (loop1): Failed to initialize F2FS node manager (-12) [ 520.529026][T13610] loop2: detected capacity change from 0 to 32768 [ 520.546149][T13610] XFS: ikeep mount option is deprecated. [ 520.598910][T13610] XFS (loop2): stripe width (2867) must be a multiple of the stripe unit (5) [ 520.811584][T13638] loop1: detected capacity change from 0 to 2048 [ 520.869673][T13638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.895010][T13616] loop4: detected capacity change from 0 to 32768 [ 521.255651][ T5933] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 521.437600][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 521.464051][ T5933] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 521.490771][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.523446][ T5933] usb 4-1: Product: syz [ 521.527681][ T5933] usb 4-1: Manufacturer: syz [ 521.544041][ T5933] usb 4-1: SerialNumber: syz [ 521.585269][ T5933] usb 4-1: config 0 descriptor?? [ 521.607726][ T5933] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 521.640191][T13659] loop1: detected capacity change from 0 to 512 [ 521.667579][T13616] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,degraded=yes,norecovery,noexcl,reconstruct_alloc,version_upgrade=none,nocow [ 521.667611][T13616] allowing incompatible features above 0.0: (unknown version) [ 521.667625][T13616] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 521.756309][T13659] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 521.780632][T13647] loop2: detected capacity change from 0 to 32768 [ 521.782475][T13659] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 521.834436][T13659] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.3348: inode #15: comm syz.1.3348: iget: illegal inode # [ 521.846215][T13616] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 521.887434][ T928] usb 4-1: USB disconnect, device number 105 [ 521.893394][T13616] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 521.899871][T13647] (syz.2.3345,13647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 521.907132][T13616] bcachefs (loop4): dropping and reconstructing all alloc info [ 521.949143][T13659] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3348: couldn't read orphan inode 15 (err -117) [ 521.960733][T13647] (syz.2.3345,13647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 522.033650][T13647] JBD2: Ignoring recovery information on journal [ 522.065250][T13659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.104082][T13616] bcachefs (loop4): accounting_read... done [ 522.112725][T13616] bcachefs (loop4): alloc_read... done [ 522.118687][T13616] bcachefs (loop4): snapshots_read... done [ 522.126574][T13616] bcachefs (loop4): done starting filesystem [ 522.189550][T13647] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 522.272180][T13647] (syz.2.3345,13647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x78b62c9b, computed 0x9e9236ca. Applying ECC. [ 522.296663][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.316109][ T5829] bcachefs (loop4): shutting down [ 522.457980][ T5829] bcachefs (loop4): shutdown complete [ 522.611175][T13671] loop3: detected capacity change from 0 to 512 [ 522.640567][T13671] EXT4-fs: Ignoring removed oldalloc option [ 522.681916][ T5836] ocfs2: Unmounting device (7,2) on (node local) [ 522.693365][T13671] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.3351: Parent and EA inode have the same ino 15 [ 522.868718][T13671] EXT4-fs (loop3): 1 orphan inode deleted [ 522.882738][T13671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.971054][T13674] loop1: detected capacity change from 0 to 4096 [ 522.996288][T13674] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 523.090906][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.133814][T13674] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 523.393673][ T5933] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 523.524501][ T5895] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 523.570177][ T928] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 523.587010][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 523.594788][ T5933] usb 3-1: config 6 has an invalid interface number: 51 but max is 1 [ 523.604975][ T5933] usb 3-1: config 6 has no interface number 1 [ 523.613899][ T5933] usb 3-1: config 6 interface 0 has no altsetting 0 [ 523.631519][ T5933] usb 3-1: config 6 interface 51 has no altsetting 0 [ 523.651960][ T5933] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 523.675518][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.686712][ T5933] usb 3-1: Product: syz [ 523.690915][ T5933] usb 3-1: Manufacturer: syz [ 523.710685][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 523.714127][ T5933] usb 3-1: SerialNumber: syz [ 523.728160][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 523.737592][ T928] usb 4-1: Using ep0 maxpacket: 32 [ 523.760646][ T928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 523.781278][ T5895] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 523.791608][ T928] usb 4-1: config 9 has an invalid interface number: 255 but max is 0 [ 523.800115][ T5895] usb 1-1: config 0 has no interface number 0 [ 523.810401][ T928] usb 4-1: config 9 has no interface number 0 [ 523.816620][ T5895] usb 1-1: config 0 interface 213 altsetting 251 bulk endpoint 0x5 has invalid maxpacket 24 [ 523.843174][ T928] usb 4-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 523.863840][ T5895] usb 1-1: config 0 interface 213 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 8 [ 523.884837][ T928] usb 4-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x3B, changing to 0xB [ 523.906558][ T5895] usb 1-1: config 0 interface 213 has no altsetting 0 [ 523.924480][ T928] usb 4-1: config 9 interface 255 altsetting 6 endpoint 0xB has invalid maxpacket 43096, setting to 1024 [ 523.954326][ T5895] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=de.91 [ 523.981400][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.990436][ T928] usb 4-1: config 9 interface 255 altsetting 6 bulk endpoint 0xB has invalid maxpacket 1024 [ 523.996403][ T5933] xr_serial 3-1:6.51: xr_serial converter detected [ 524.022398][ T5895] usb 1-1: Product: syz [ 524.033173][ T928] usb 4-1: config 9 interface 255 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.040087][ T5933] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 524.046678][ T5895] usb 1-1: Manufacturer: syz [ 524.059944][T13686] loop1: detected capacity change from 0 to 32768 [ 524.083452][ T928] usb 4-1: config 9 interface 255 has no altsetting 0 [ 524.083960][ T5933] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 524.091337][ T5895] usb 1-1: SerialNumber: syz [ 524.115816][ T5895] usb 1-1: config 0 descriptor?? [ 524.130761][ T928] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 524.143246][ T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.151915][T13682] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 524.165307][ T5933] usb 3-1: USB disconnect, device number 104 [ 524.171354][T13682] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 524.173058][ T928] usb 4-1: Product: syz [ 524.185308][T13686] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 66 has invalid tree depth 65533 in extent list [ 524.238019][ T928] usb 4-1: Manufacturer: syz [ 524.238845][ T5933] xr_serial 3-1:6.0: device disconnected [ 524.249457][T13686] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 524.260699][ T928] usb 4-1: SerialNumber: syz [ 524.308564][T13684] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 524.316610][T13686] OCFS2: File system is now read-only. [ 524.334382][T13686] (syz.1.3359,13686,1):ocfs2_find_leaf:1948 ERROR: status = -30 [ 524.359353][T13686] (syz.1.3359,13686,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 524.382908][T13686] (syz.1.3359,13686,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 524.418184][T13686] (syz.1.3359,13686,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 524.428513][ T5895] usb 1-1: probing VID:PID(0424:012C) [ 524.452148][T13686] (syz.1.3359,13686,1):ocfs2_read_virt_blocks:997 ERROR: status = -30 [ 524.472591][T13686] (syz.1.3359,13686,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 524.473867][ T5895] usb 1-1: vub300 testing BULK OUT EndPoint(0) 05 [ 524.494362][T13686] (syz.1.3359,13686,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 524.514987][ T5895] usb 1-1: vub300 testing BULK OUT EndPoint(1) 0D [ 524.521688][ T5895] usb 1-1: vub300 testing BULK OUT EndPoint(2) 09 [ 524.528464][T13686] (syz.1.3359,13686,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 524.528499][T13686] (syz.1.3359,13686,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 524.528526][T13686] (syz.1.3359,13686,1):ocfs2_initialize_super:2196 ERROR: status = -30 [ 524.528668][T13686] (syz.1.3359,13686,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 524.600780][ T928] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 524.615260][ T5895] usb 1-1: ignoring unexpected bulk_out endpoint [ 524.621883][ T928] sonixb 4-1:9.255: Error reading register 00: -71 [ 524.638218][ T928] usb 4-1: USB disconnect, device number 106 [ 524.671300][ T5895] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 524.695605][ T5895] vub300 1-1:0.213: probe with driver vub300 failed with error -22 [ 524.784177][ T5895] usb 1-1: USB disconnect, device number 97 [ 525.135859][ T928] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 525.144264][T13697] loop1: detected capacity change from 0 to 1024 [ 525.242601][T13697] hfsplus: failed to load catalog file [ 525.317865][ T928] usb 3-1: Using ep0 maxpacket: 16 [ 525.332853][ T928] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 525.349649][ T928] usb 3-1: config 0 has no interface number 0 [ 525.358453][ T928] usb 3-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 525.403047][ T928] usb 3-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 525.465619][ T928] usb 3-1: config 0 interface 11 has no altsetting 0 [ 525.467752][T13706] loop1: detected capacity change from 0 to 64 [ 525.479467][ T928] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 525.516343][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.527365][ T928] usb 3-1: Product: syz [ 525.535432][ T928] usb 3-1: Manufacturer: syz [ 525.540197][ T928] usb 3-1: SerialNumber: syz [ 525.558362][ T928] usb 3-1: config 0 descriptor?? [ 525.568015][T13706] hfs: keylen 9474 too large [ 525.580669][T13706] hfs: get root inode failed [ 525.595732][ T5933] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 525.611368][T13710] loop4: detected capacity change from 0 to 512 [ 525.636936][T13710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 525.735990][T13710] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.3370: corrupted xattr entries [ 525.766586][ T24] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 525.778011][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 525.785023][T13710] EXT4-fs (loop4): 1 truncate cleaned up [ 525.795746][T13710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.798297][ T928] usb 3-1: Expected 3 endpoints, found: 0 [ 525.829569][ T5933] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 525.840546][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.857995][ T928] usb 3-1: USB disconnect, device number 105 [ 525.872778][ T5933] usb 1-1: Product: syz [ 525.882223][ T5933] usb 1-1: Manufacturer: syz [ 525.894762][ T5933] usb 1-1: SerialNumber: syz [ 525.922753][ T5933] usb 1-1: config 0 descriptor?? [ 525.956593][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 525.968045][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.971035][ T5933] ttusb_dec_send_command: command bulk message failed: error -22 [ 525.996688][ T24] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 526.020070][ T24] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 526.030860][ T5933] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 526.050607][ T24] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 526.068118][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 526.082599][ T24] usb 4-1: string descriptor 0 read error: -22 [ 526.089272][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.106843][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.159697][T13708] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 526.172919][T13708] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 526.181259][T13708] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 526.203133][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 526.210985][ T5895] usb 1-1: USB disconnect, device number 98 [ 526.407887][ T849] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 526.454764][ T24] usb 4-1: USB disconnect, device number 107 [ 526.612013][T13722] loop1: detected capacity change from 0 to 32768 [ 526.621929][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 526.636673][ T849] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 526.636921][T13722] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v1: device 0: too many buckets (got 18374686479671623808, max 2147483583) [ 526.636921][T13722] members_v1 (size 64): [ 526.636921][T13722] nr_devices mismatch: have 0 entries, should be 1 [ 526.660929][ T849] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 526.694072][T13722] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 526.738331][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.779263][ T849] usb 5-1: Product: syz [ 526.788458][ T849] usb 5-1: Manufacturer: syz [ 526.801029][ T849] usb 5-1: SerialNumber: syz [ 526.818899][ T849] usb 5-1: config 0 descriptor?? [ 526.828763][T13719] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 526.891301][ T849] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.141561][ T24] usb 5-1: USB disconnect, device number 99 [ 527.682282][T13730] loop1: detected capacity change from 0 to 32768 [ 527.713744][T13730] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: wrong size (got 8 should be 24) [ 527.713744][T13730] clean (size 8): [ 527.713744][T13730] flags: 0 [ 527.713744][T13730] journal_seq: 0 [ 527.713744][T13730] [ 527.755094][ T5941] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 527.761621][T13730] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 527.947341][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 527.959151][ T5941] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 527.968100][ T5941] usb 1-1: config 0 interface 0 has no altsetting 1 [ 528.016888][ T5941] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 528.027929][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.036048][ T5941] usb 1-1: SerialNumber: syz [ 528.044208][ T5941] usb 1-1: config 0 descriptor?? [ 528.052678][ T5941] usb-storage 1-1:0.0: USB Mass Storage device detected [ 528.063668][ T5941] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 528.309297][ T928] usb 1-1: USB disconnect, device number 99 [ 528.562823][T13741] loop2: detected capacity change from 0 to 32768 [ 528.581826][T13741] BTRFS warning: excessive commit interval 2147483647, use with care [ 528.608346][T13742] loop3: detected capacity change from 0 to 40427 [ 528.615099][T13741] btrfs: Unknown parameter 'check_int_print_mask' [ 528.752228][ T6134] udevd[6134]: incorrect btrfs checksum on /dev/loop2 [ 529.454386][ T5941] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 529.614431][T13756] loop1: detected capacity change from 0 to 32768 [ 529.632058][T13756] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3392 (13756) [ 529.679094][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 529.691860][ T5941] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 529.727016][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.760551][ T5941] usb 3-1: config 0 descriptor?? [ 529.765653][T13756] BTRFS info (device loop1): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 529.783007][T13760] loop4: detected capacity change from 0 to 32768 [ 529.791326][T13756] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 529.803590][ T5941] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 529.849526][T13756] BTRFS info (device loop1): using free-space-tree [ 529.870287][ T5941] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 530.123077][ T5941] usb 3-1: USB disconnect, device number 106 [ 530.291296][T13760] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 530.291323][T13760] allowing incompatible features above 0.0: (unknown version) [ 530.291337][T13760] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 530.315981][ T5827] BTRFS info (device loop1): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 530.387528][T13774] loop0: detected capacity change from 0 to 32768 [ 530.437732][T13774] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3400 (13774) [ 530.486105][T13766] loop3: detected capacity change from 0 to 32768 [ 530.489683][T13774] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 530.494805][T13766] jfs_mount: Mount Failure: superblock is corrupt! [ 530.539979][T13760] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 530.547916][T13774] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 530.580610][T13760] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 530.585658][T13774] BTRFS info (device loop0): using free-space-tree [ 530.624531][T13760] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 530.624531][T13760] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 530.657327][T13766] Mount JFS Failure: -22 [ 530.661641][T13766] jfs_mount failed w/return code = -22 [ 530.854354][T13760] bcachefs (loop4): accounting_read... done [ 530.887290][T13760] bcachefs (loop4): alloc_read... done [ 530.932692][T13760] bcachefs (loop4): snapshots_read... done [ 530.964584][T13760] bcachefs (loop4): check_allocations... [ 530.986384][T13760] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 530.986432][T13760] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 531.058185][ T5941] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 531.111634][ T5843] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 531.145516][T13760] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 531.145540][T13760] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 531.156093][ T928] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 531.289919][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 531.302470][T13760] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 531.302493][T13760] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 531.313758][ T5941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 112 [ 531.331301][ T928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.331362][ T928] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 531.331388][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.332378][ T5941] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 531.332406][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.332429][ T5941] usb 2-1: Product: syz [ 531.332446][ T5941] usb 2-1: Manufacturer: syz [ 531.332463][ T5941] usb 2-1: SerialNumber: syz [ 531.336107][ T5941] usb 2-1: config 0 descriptor?? [ 531.337161][T13814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.344440][ T928] usb 3-1: config 0 descriptor?? [ 531.348762][ T928] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 531.351376][ T5941] hub 2-1:0.0: bad descriptor, ignoring hub [ 531.351406][ T5941] hub 2-1:0.0: probe with driver hub failed with error -5 [ 531.409672][ T5941] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 531.578273][ T928] pwc: send_video_command error -71 [ 531.578297][ T928] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 531.578403][ T928] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 531.580806][ T928] usb 3-1: USB disconnect, device number 107 [ 531.716057][ T849] usb 2-1: USB disconnect, device number 105 [ 531.854039][T13760] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 531.854066][T13760] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 531.951338][T13760] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 531.951363][T13760] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 532.002863][T13760] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 532.002888][T13760] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 532.073167][T13760] done [ 532.083014][T13760] bcachefs (loop4): going read-write [ 532.117397][T13760] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 532.158031][T13760] bcachefs (loop4): flushing journal and stopping allocators, journal seq 7 [ 532.184302][T13760] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 7 [ 532.210541][T13823] loop3: detected capacity change from 0 to 32768 [ 532.224380][T13760] bcachefs (loop4): unclean shutdown complete, journal seq 8 [ 532.236209][T13760] bcachefs (loop4): error in recovery: EINTR [ 532.236229][T13760] emergency read only at seq 8 [ 532.244245][T13823] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3405 (13823) [ 532.270146][T13823] BTRFS info (device loop3): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 532.270230][T13823] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 532.270270][T13823] BTRFS info (device loop3): using free-space-tree [ 532.363822][T13760] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 532.377550][T13760] bcachefs (loop4): shutting down [ 532.492485][T13760] bcachefs (loop4): shutdown complete [ 532.554203][ T928] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 532.604174][ T5831] BTRFS info (device loop3): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 532.617747][T13845] loop1: detected capacity change from 0 to 128 [ 532.761725][ T928] usb 3-1: string descriptor 0 read error: -22 [ 532.772619][ T928] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 532.823059][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.863593][ T928] usb 3-1: config 0 descriptor?? [ 532.897274][ T928] usbtest 3-1:0.0: FX2 device [ 532.938998][ T928] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 532.961756][T13825] loop0: detected capacity change from 0 to 32768 [ 533.029951][T13850] loop1: detected capacity change from 0 to 128 [ 533.061884][T13825] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 533.137226][T13825] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 533.169836][ T5941] usb 3-1: USB disconnect, device number 108 [ 533.207379][T13825] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 0 19, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 403 [ 533.323192][T13825] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqobnN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 533.370625][T13825] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 533.397019][T13825] gfs2: fsid=syz:syz.0: I: n:0/19 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 533.432701][T13825] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 533.459460][T13825] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 533.469287][T13825] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 533.482871][T13825] gfs2: fsid=syz:syz.0: File system withdrawn [ 533.516137][T13825] CPU: 1 UID: 0 PID: 13825 Comm: syz.0.3404 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 533.516171][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.516184][T13825] Call Trace: [ 533.516194][T13825] [ 533.516203][T13825] dump_stack_lvl+0x189/0x250 [ 533.516245][T13825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.516274][T13825] ? __pfx__printk+0x10/0x10 [ 533.516298][T13825] ? kobject_uevent_env+0x36b/0x8c0 [ 533.516331][T13825] gfs2_withdraw+0x111e/0x14f0 [ 533.516376][T13825] ? __pfx_gfs2_withdraw+0x10/0x10 [ 533.516400][T13825] ? queue_delayed_work_on+0x1f7/0x280 [ 533.516443][T13825] ? gfs2_consist_inode_i+0xf5/0x110 [ 533.516482][T13825] inode_go_instantiate+0xd42/0x1150 [ 533.516519][T13825] ? __pfx_inode_go_instantiate+0x10/0x10 [ 533.516546][T13825] ? gfs2_glock_nq+0x10bb/0x1900 [ 533.516580][T13825] gfs2_instantiate+0x168/0x220 [ 533.516609][T13825] gfs2_glock_wait+0x1d4/0x2a0 [ 533.516640][T13825] init_journal+0xc71/0x2260 [ 533.516681][T13825] ? init_inodes+0xdb/0x320 [ 533.516709][T13825] ? __pfx_init_journal+0x10/0x10 [ 533.516733][T13825] ? vsnprintf+0xe11/0xf00 [ 533.516768][T13825] ? snprintf+0xda/0x120 [ 533.516792][T13825] ? init_inodes+0xdb/0x320 [ 533.516816][T13825] ? __pfx_snprintf+0x10/0x10 [ 533.516839][T13825] ? gfs2_glock_nq_num+0x13d/0x170 [ 533.516869][T13825] init_inodes+0xdb/0x320 [ 533.516897][T13825] gfs2_fill_super+0x1923/0x20d0 [ 533.516940][T13825] ? __pfx_gfs2_fill_super+0x10/0x10 [ 533.516968][T13825] ? init_locking+0xb8/0x210 [ 533.516989][T13825] ? sb_set_blocksize+0x104/0x180 [ 533.517015][T13825] ? setup_bdev_super+0x4c1/0x5b0 [ 533.517045][T13825] get_tree_bdev_flags+0x40e/0x4d0 [ 533.517071][T13825] ? __pfx_gfs2_fill_super+0x10/0x10 [ 533.517098][T13825] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 533.517127][T13825] ? rcu_is_watching+0x15/0xb0 [ 533.517164][T13825] gfs2_get_tree+0x51/0x1e0 [ 533.517193][T13825] vfs_get_tree+0x92/0x2b0 [ 533.517225][T13825] do_new_mount+0x24a/0xa40 [ 533.517264][T13825] __se_sys_mount+0x317/0x410 [ 533.517300][T13825] ? __pfx___se_sys_mount+0x10/0x10 [ 533.517338][T13825] ? do_syscall_64+0xbe/0x3b0 [ 533.517366][T13825] ? __x64_sys_mount+0x20/0xc0 [ 533.517400][T13825] do_syscall_64+0xfa/0x3b0 [ 533.517428][T13825] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.517464][T13825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.517485][T13825] ? clear_bhb_loop+0x60/0xb0 [ 533.517510][T13825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.517530][T13825] RIP: 0033:0x7fe99a7900ca [ 533.517549][T13825] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.517567][T13825] RSP: 002b:00007fe9985f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 533.517591][T13825] RAX: ffffffffffffffda RBX: 00007fe9985f5ef0 RCX: 00007fe99a7900ca [ 533.517606][T13825] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007fe9985f5eb0 [ 533.517621][T13825] RBP: 0000200000000180 R08: 00007fe9985f5ef0 R09: 0000000000000000 [ 533.517635][T13825] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 533.517649][T13825] R13: 00007fe9985f5eb0 R14: 00000000000125b0 R15: 0000200000000080 [ 533.517682][T13825] [ 533.518783][T13825] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 534.070730][T13862] loop2: detected capacity change from 0 to 1024 [ 534.192082][T13862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.233065][T13858] loop1: detected capacity change from 0 to 32768 [ 534.248341][T13858] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3412 (13858) [ 534.276958][T13858] BTRFS info (device loop1): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 534.287346][T13858] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 534.298156][T13858] BTRFS info (device loop1): using free-space-tree [ 534.406091][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.669489][ T5827] BTRFS info (device loop1): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 534.681003][T13882] loop2: detected capacity change from 0 to 512 [ 534.805511][T13884] loop0: detected capacity change from 0 to 1024 [ 534.873159][T13882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.916621][T13882] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.982790][T13884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.077589][T13884] ext4 filesystem being mounted at /666/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.132186][T13860] loop3: detected capacity change from 0 to 32768 [ 535.134290][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.166622][T13860] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3413 (13860) [ 535.253564][T13860] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 535.260404][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.277201][T13860] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 535.288011][T13860] BTRFS info (device loop3): using free-space-tree [ 535.387215][T13897] loop2: detected capacity change from 0 to 16 [ 535.407098][T13897] erofs (device loop2): mounted with root inode @ nid 36. [ 535.525451][T13760] bcachefs: bch2_fs_get_tree() error: EINTR [ 535.583670][T13908] loop0: detected capacity change from 0 to 512 [ 535.699778][T13908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.891188][ T5831] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 535.949437][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.164361][T13916] loop0: detected capacity change from 0 to 512 [ 536.265822][T13916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.510037][T13890] loop1: detected capacity change from 0 to 32768 [ 536.556669][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.566573][T13890] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: duplicate replicas entry journal: 1/1 [0] [ 536.566573][T13890] replicas_v0 (size 24): [ 536.566573][T13890] journal: 1 [0] journal: 1 [0] user: 1 [0] [ 536.566573][T13890] [ 536.685641][T13890] bcachefs: bch2_fs_get_tree() error: invalid_sb_replicas [ 536.922398][T13924] loop0: detected capacity change from 0 to 2048 [ 537.073252][T13924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.118323][T13924] ext4 filesystem being mounted at /669/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.271673][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.309622][T13913] loop2: detected capacity change from 0 to 32768 [ 537.402896][T13917] loop4: detected capacity change from 0 to 32768 [ 537.492227][T13917] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3420 (13917) [ 537.597418][T13917] BTRFS info (device loop4): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 537.642435][T13917] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 537.685841][T13917] BTRFS info (device loop4): using free-space-tree [ 537.711731][T13913] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc64,noinodes_32bit,nocow [ 537.711758][T13913] allowing incompatible features above 0.0: (unknown version) [ 537.711772][T13913] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 538.004777][T13913] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 538.042228][T13913] bcachefs (loop2): initializing new filesystem [ 538.122180][T13913] bcachefs (loop2): going read-write [ 538.158414][ T5829] BTRFS info (device loop4): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 538.195688][T13913] bcachefs (loop2): marking superblocks [ 538.245293][T13913] bcachefs (loop2): initializing freespace [ 538.295296][T13913] bcachefs (loop2): done initializing freespace [ 538.350686][T13913] bcachefs (loop2): reading snapshots table [ 538.379794][T13913] bcachefs (loop2): reading snapshots done [ 538.447460][T13961] loop4: detected capacity change from 0 to 1024 [ 538.531631][T13913] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 538.640304][T13913] bcachefs (loop2): done starting filesystem [ 538.883519][ T5836] bcachefs (loop2): shutting down [ 538.888709][ T5836] bcachefs (loop2): going read-only [ 538.903555][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 538.937051][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 538.982234][T13963] loop4: detected capacity change from 0 to 732 [ 538.984126][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 539.025625][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 539.053925][ T5836] bcachefs (loop2): marking filesystem clean [ 539.242649][ T5836] bcachefs (loop2): shutdown complete [ 539.465944][T13938] loop0: detected capacity change from 0 to 32768 [ 539.539594][T13938] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 539.564533][T13938] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 539.657819][T13938] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 539.695855][ T5933] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 539.726854][ T5933] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 539.777275][T13959] loop1: detected capacity change from 0 to 32768 [ 539.838431][T13959] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 539.876658][T13959] CPU: 1 UID: 0 PID: 13959 Comm: syz.1.3428 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 539.876691][T13959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.876706][T13959] Call Trace: [ 539.876716][T13959] [ 539.876726][T13959] dump_stack_lvl+0x189/0x250 [ 539.876764][T13959] ? kernfs_path_from_node+0x2c/0x260 [ 539.876788][T13959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.876821][T13959] ? __pfx__printk+0x10/0x10 [ 539.876849][T13959] ? kernfs_path_from_node+0x2c/0x260 [ 539.876868][T13959] ? kernfs_path_from_node+0x2c/0x260 [ 539.876891][T13959] ? kernfs_path_from_node+0x22c/0x260 [ 539.876910][T13959] ? kernfs_path_from_node+0x2c/0x260 [ 539.876935][T13959] sysfs_create_dir_ns+0x259/0x280 [ 539.876972][T13959] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 539.877008][T13959] ? do_raw_spin_unlock+0x122/0x240 [ 539.877035][T13959] kobject_add_internal+0x59f/0xb40 [ 539.877067][T13959] kobject_init_and_add+0x125/0x190 [ 539.877109][T13959] ? __pfx_kobject_init_and_add+0x10/0x10 [ 539.877151][T13959] ? __raw_spin_lock_init+0x45/0x100 [ 539.877175][T13959] ? __init_swait_queue_head+0xa9/0x150 [ 539.877215][T13959] gfs2_sys_fs_add+0x234/0x450 [ 539.877249][T13959] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 539.877289][T13959] ? is_dynamic_key+0xd6/0x1c0 [ 539.877312][T13959] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 539.877352][T13959] gfs2_fill_super+0x13c0/0x20d0 [ 539.877398][T13959] ? __pfx_gfs2_fill_super+0x10/0x10 [ 539.877431][T13959] ? sb_set_blocksize+0x104/0x180 [ 539.877459][T13959] ? setup_bdev_super+0x4c1/0x5b0 [ 539.877493][T13959] get_tree_bdev_flags+0x40e/0x4d0 [ 539.877522][T13959] ? __pfx_gfs2_fill_super+0x10/0x10 [ 539.877549][T13959] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 539.877579][T13959] ? rcu_is_watching+0x15/0xb0 [ 539.877616][T13959] gfs2_get_tree+0x51/0x1e0 [ 539.877655][T13959] vfs_get_tree+0x92/0x2b0 [ 539.877688][T13959] do_new_mount+0x24a/0xa40 [ 539.877730][T13959] __se_sys_mount+0x317/0x410 [ 539.877770][T13959] ? __pfx___se_sys_mount+0x10/0x10 [ 539.877810][T13959] ? do_syscall_64+0xbe/0x3b0 [ 539.877839][T13959] ? __x64_sys_mount+0x20/0xc0 [ 539.877874][T13959] do_syscall_64+0xfa/0x3b0 [ 539.877902][T13959] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.877931][T13959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.877951][T13959] ? clear_bhb_loop+0x60/0xb0 [ 539.877979][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.878000][T13959] RIP: 0033:0x7f03213900ca [ 539.878021][T13959] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.878040][T13959] RSP: 002b:00007f032220fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 539.878065][T13959] RAX: ffffffffffffffda RBX: 00007f032220fef0 RCX: 00007f03213900ca [ 539.878082][T13959] RDX: 000020000003b280 RSI: 000020000003b2c0 RDI: 00007f032220feb0 [ 539.878097][T13959] RBP: 000020000003b280 R08: 00007f032220fef0 R09: 0000000000000000 [ 539.878110][T13959] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000003b2c0 [ 539.878124][T13959] R13: 00007f032220feb0 R14: 000000000003b273 R15: 000020000003b300 [ 539.878160][T13959] [ 539.878280][T13959] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 540.242735][T13959] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 540.426052][ T5933] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 654ms [ 540.440563][ T5933] gfs2: fsid=syz:syz.0: jid=0: Done [ 540.458522][T13938] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 540.471314][T13973] loop1: detected capacity change from 0 to 2 [ 540.486313][T13973] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 540.628288][T13965] loop4: detected capacity change from 0 to 32768 [ 540.676936][T13965] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal_v2: journal bucket 18446744073642442774 past end of device (nbuckets 128) [ 540.676936][T13965] journal_v2 (size 40): [ 540.676936][T13965] Buckets: 9-16 18446744073625665560-18446744073642442775 [ 540.676936][T13965] [ 540.783617][T13965] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 540.790902][T13977] loop1: detected capacity change from 0 to 1164 [ 541.141787][T13981] loop4: detected capacity change from 0 to 128 [ 541.485910][T13971] loop3: detected capacity change from 0 to 32768 [ 541.508834][T13985] loop4: detected capacity change from 0 to 128 [ 541.520851][T13971] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3433 (13971) [ 541.570411][ T5933] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 541.626577][T13971] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 541.749708][T13971] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 541.775918][ T5933] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 541.789693][T13971] BTRFS info (device loop3): using free-space-tree [ 541.810080][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.881470][ T5933] ums-cypress 2-1:1.0: USB Mass Storage device detected [ 542.074336][T14005] loop4: detected capacity change from 0 to 512 [ 542.114045][ T5933] usb 2-1: USB disconnect, device number 106 [ 542.335169][ T5831] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 542.550959][T14009] loop4: detected capacity change from 0 to 1024 [ 542.599289][T14009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.711552][T14013] loop2: detected capacity change from 0 to 164 [ 542.781995][T13992] loop0: detected capacity change from 0 to 32768 [ 542.921515][T13992] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3440 (13992) [ 542.973222][T14017] loop1: detected capacity change from 0 to 128 [ 543.023245][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.037444][T13992] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 543.112875][T13992] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 543.178883][T13992] BTRFS info (device loop0): using free-space-tree [ 543.469033][T14023] loop4: detected capacity change from 0 to 2048 [ 543.599110][T14041] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 543.917394][T14045] loop4: detected capacity change from 0 to 512 [ 543.917537][ T5843] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 544.012190][T14045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.313724][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.468993][T14048] loop0: detected capacity change from 0 to 2048 [ 544.565876][T14048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.657583][T14028] loop2: detected capacity change from 0 to 32768 [ 544.740646][T14028] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3446 (14028) [ 544.834776][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.863576][T14028] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 544.915497][T14028] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 544.960049][T14028] BTRFS info (device loop2): using free-space-tree [ 545.048345][T14038] loop3: detected capacity change from 0 to 32768 [ 545.127885][T14063] loop0: detected capacity change from 0 to 512 [ 545.305610][T14063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.490366][ T5836] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 545.561401][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.356193][T14076] loop2: detected capacity change from 0 to 21 [ 546.429878][T14076] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 546.492404][T14072] loop3: detected capacity change from 0 to 32768 [ 546.611426][T14072] (syz.3.3453,14072,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 546.647503][T14072] (syz.3.3453,14072,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 546.852644][T14079] loop2: detected capacity change from 0 to 4096 [ 546.972236][T14079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.201247][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.236507][T14074] loop0: detected capacity change from 0 to 32768 [ 547.315125][T14074] (syz.0.3455,14074,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 547.401798][T14074] (syz.0.3455,14074,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 548.539118][T14089] loop2: detected capacity change from 0 to 32768 [ 548.864083][T14089] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 548.864114][T14089] allowing incompatible features above 0.0: (unknown version) [ 548.864128][T14089] features: atomic_nlink [ 548.949971][T14089] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 549.020507][T14089] bcachefs (loop2): initializing new filesystem [ 549.080792][T14089] bcachefs (loop2): going read-write [ 549.131689][T14089] bcachefs (loop2): marking superblocks [ 549.192326][T14089] bcachefs (loop2): initializing freespace [ 549.208442][T14091] loop0: detected capacity change from 0 to 32768 [ 549.230061][T14089] bcachefs (loop2): done initializing freespace [ 549.294084][T14089] bcachefs (loop2): reading snapshots table [ 549.316776][T14091] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 549.325002][T14091] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 549.359368][T14089] bcachefs (loop2): reading snapshots done [ 549.419123][T14089] bcachefs (loop2): done starting filesystem [ 549.576477][T14091] gfs2: fsid=syz:syz.s: journal 0 mapped with 1 extents in 0ms [ 549.609372][ T5836] bcachefs (loop2): shutting down [ 549.629784][ T5836] bcachefs (loop2): going read-only [ 549.635077][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 549.682965][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 549.811051][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 549.875504][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 549.884270][ T5836] bcachefs (loop2): marking filesystem clean [ 549.945585][T14091] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 550.022033][T14093] loop4: detected capacity change from 0 to 65536 [ 550.042975][ T5836] bcachefs (loop2): shutdown complete [ 550.049019][T14093] (syz.4.3461,14093,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 550.085289][T14093] (syz.4.3461,14093,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 551.091901][T14114] loop1: detected capacity change from 0 to 3 [ 551.150289][T14114] bio_check_eod: 59 callbacks suppressed [ 551.150310][T14114] syz.1.3466: attempt to access beyond end of device [ 551.150310][T14114] loop1: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 551.250581][T14114] SQUASHFS error: Failed to read block 0x0: -5 [ 551.256841][T14114] unable to read squashfs_super_block [ 551.488192][T14116] loop1: detected capacity change from 0 to 128 [ 551.549658][T14116] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 551.615835][T14116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.669965][T14110] loop0: detected capacity change from 0 to 32768 [ 552.143915][T14110] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=nojournal_transaction_names [ 552.143939][T14110] allowing incompatible features above 0.0: (unknown version) [ 552.143953][T14110] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 552.257961][T14110] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 552.274886][T14110] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 552.286113][T14110] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 552.286113][T14110] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 552.368371][T14110] bcachefs (loop0): accounting_read... done [ 552.400682][T14110] bcachefs (loop0): alloc_read... done [ 552.426049][T14110] bcachefs (loop0): snapshots_read... done [ 552.445924][T14110] bcachefs (loop0): check_allocations... [ 552.448191][T14110] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 552.448213][T14110] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq cddfaeeca0a7d1e5 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 552.512976][T14110] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 552.513001][T14110] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6f77d90a6678a8d9 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 552.616459][T14110] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 552.616484][T14110] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1be24db0106cff76 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 552.658980][T14127] loop2: detected capacity change from 0 to 128 [ 552.763365][T14110] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 552.763388][T14110] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 592c28c0a83be2c9 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 552.836723][T14110] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 552.836748][T14110] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1a83a7e47ef9f6aa written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 552.956579][T14110] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 552.956602][T14110] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 11da0ed3864cee54 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 553.063409][T14110] done [ 553.093966][T14110] bcachefs (loop0): going read-write [ 553.143917][T14110] bcachefs (loop0): journal_replay... done [ 553.308652][T14110] bcachefs (loop0): check_extents_to_backpointers... [ 553.310585][T14110] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 553.344821][T14110] done [ 553.369595][T14110] bcachefs (loop0): check_inodes... done [ 553.387163][T14110] bcachefs (loop0): resume_logged_ops... done [ 553.407220][T14110] bcachefs (loop0): delete_dead_inodes... done [ 553.474673][T14110] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 553.495621][T14110] bcachefs (loop0): check_extents_to_backpointers... done [ 553.519033][T14110] bcachefs (loop0): check_inodes... done [ 553.530160][T14110] bcachefs (loop0): resume_logged_ops... done [ 553.551403][T14110] bcachefs (loop0): delete_dead_inodes... done [ 553.577386][T14110] bcachefs (loop0): done starting filesystem [ 553.786051][T14110] syz.0.3464 (14110) used greatest stack depth: 15464 bytes left [ 553.900874][ T5843] bcachefs (loop0): shutting down [ 553.911534][ T5843] bcachefs (loop0): going read-only [ 553.926668][ T5843] bcachefs (loop0): finished waiting for writes to stop [ 553.965138][ T5843] bcachefs (loop0): flushing journal and stopping allocators, journal seq 18 [ 553.995800][ T5843] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 554.026113][ T5843] bcachefs (loop0): clean shutdown complete, journal seq 19 [ 554.040425][ T5843] bcachefs (loop0): marking filesystem clean [ 554.158669][T14135] loop4: detected capacity change from 0 to 256 [ 554.183042][T14135] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 554.216738][ T5843] bcachefs (loop0): shutdown complete [ 554.224365][T14135] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 554.254569][T14135] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 554.262267][T14135] UDF-fs: Scanning with blocksize 512 failed [ 554.282599][T14135] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 554.302309][T14135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.544863][T14137] loop4: detected capacity change from 0 to 512 [ 554.578799][T14137] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 554.591182][T14137] UDF-fs: Scanning with blocksize 512 failed [ 554.609266][T14137] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 554.627487][T14137] UDF-fs: Scanning with blocksize 1024 failed [ 554.662701][T14137] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 554.686447][T14137] UDF-fs: Scanning with blocksize 2048 failed [ 554.748975][T14137] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 554.800342][T14137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.903737][T14139] loop3: detected capacity change from 0 to 128 [ 555.120903][T14141] loop4: detected capacity change from 0 to 128 [ 555.468323][T14145] loop4: detected capacity change from 0 to 128 [ 555.750619][T14147] loop4: detected capacity change from 0 to 128 [ 556.005858][T14149] loop4: detected capacity change from 0 to 128 [ 556.263945][T14143] loop3: detected capacity change from 0 to 32768 [ 556.408146][T14143] (syz.3.3475,14143,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 556.445099][T14143] (syz.3.3475,14143,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 558.198272][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'. [ 558.384463][T14153] loop4: detected capacity change from 0 to 65536 [ 558.487077][T14153] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 558.951823][T14189] loop4: detected capacity change from 0 to 1 [ 558.983365][T14189] syz.4.3494: attempt to access beyond end of device [ 558.983365][T14189] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 559.027207][T14189] SQUASHFS error: Failed to read block 0x0: -5 [ 559.044591][T14189] unable to read squashfs_super_block [ 559.780770][T14195] loop1: detected capacity change from 0 to 1 [ 559.821280][T14195] syz.1.3497: attempt to access beyond end of device [ 559.821280][T14195] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 559.912517][T14195] SQUASHFS error: Failed to read block 0x0: -5 [ 559.950990][T14195] unable to read squashfs_super_block [ 560.012248][T14187] loop3: detected capacity change from 0 to 32768 [ 560.463095][T14187] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,allocator_stuck_timeout=64256,version_upgrade=incompatible [ 560.463130][T14187] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 560.658218][T14187] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 560.688321][T14187] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 560.710566][T14187] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 560.710566][T14187] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 560.788612][T14187] bcachefs (loop3): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 560.788612][T14187] [ 560.907889][T14187] bcachefs (loop3): btree node read error at btree lru level 0/0 [ 560.907914][T14187] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 560.907931][T14187] loop3 node offset 8/16: btree node data missing: expected 16 sectors, found 8 [ 560.907944][T14187] repair success (rewriting node) [ 561.075359][T14187] bcachefs (loop3): accounting_read... done [ 561.092916][T14187] bcachefs (loop3): alloc_read... done [ 561.108015][T14187] bcachefs (loop3): snapshots_read... done [ 561.126998][T14187] bcachefs (loop3): done starting filesystem [ 561.214973][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 561.245922][T14231] netlink: 'syz.4.3511': attribute type 10 has an invalid length. [ 561.323862][T14231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.341538][ T5831] bcachefs (loop3): shutting down [ 561.409184][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.433855][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 561.460068][T14231] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 561.475419][ T24] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 561.517366][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.518677][ T5831] bcachefs (loop3): shutdown complete [ 561.551130][ T24] usb 1-1: config 0 descriptor?? [ 561.914354][T14244] loop1: detected capacity change from 0 to 1024 [ 561.946505][T14244] EXT4-fs: Ignoring removed nobh option [ 561.974216][T14244] EXT4-fs: Ignoring removed oldalloc option [ 562.021161][T14244] EXT4-fs: Ignoring removed bh option [ 562.038399][ T24] Bluetooth: Can't get version to change to load ram patch err [ 562.080873][ T24] Bluetooth: Loading patch file failed [ 562.084085][T14244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 562.086401][ T24] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 562.116742][ T24] usb 1-1: USB disconnect, device number 100 [ 562.302617][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 562.402186][T14259] loop4: detected capacity change from 0 to 256 [ 562.501677][T14259] FAT-fs (loop4): Directory bread(block 64) failed [ 562.518922][T14259] FAT-fs (loop4): Directory bread(block 65) failed [ 562.525627][T14259] FAT-fs (loop4): Directory bread(block 66) failed [ 562.557765][T14259] FAT-fs (loop4): Directory bread(block 67) failed [ 562.567464][T14259] FAT-fs (loop4): Directory bread(block 68) failed [ 562.578814][T14259] FAT-fs (loop4): Directory bread(block 69) failed [ 562.594353][T14259] FAT-fs (loop4): Directory bread(block 70) failed [ 562.601066][T14259] FAT-fs (loop4): Directory bread(block 71) failed [ 562.610812][T14259] FAT-fs (loop4): Directory bread(block 72) failed [ 562.621527][T14259] FAT-fs (loop4): Directory bread(block 73) failed [ 563.172738][T14257] loop2: detected capacity change from 0 to 32768 [ 563.191172][T14271] loop4: detected capacity change from 0 to 8192 [ 563.250562][ T6030] loop2: p1 p3 < p5 p6 > [ 564.221697][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 564.221971][ T6134] udevd[6134]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 564.239211][ T6530] udevd[6530]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 564.262600][ T6030] udevd[6030]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 564.304691][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 564.624010][T14303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3543'. [ 565.416314][T14325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3555'. [ 566.127348][T14341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3563'. [ 566.242438][T14285] loop2: detected capacity change from 0 to 65536 [ 566.311150][T14350] x_tables: unsorted underflow at hook 3 [ 566.311171][T14285] XFS (loop2): Mounting V5 Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 566.514618][T14285] XFS (loop2): Ending clean mount [ 566.747907][ T5836] XFS (loop2): Unmounting Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 566.768628][T14365] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3570'. [ 566.780464][T14331] loop1: detected capacity change from 0 to 32768 [ 567.172943][T14331] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,allocator_stuck_timeout=64256,version_upgrade=incompatible [ 567.172977][T14331] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 567.211794][T14331] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 567.220179][T14331] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 567.228357][T14331] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 567.228357][T14331] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 567.258592][T14331] bcachefs (loop1): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 567.258592][T14331] [ 567.406179][T14331] bcachefs (loop1): btree node read error at btree lru level 0/0 [ 567.406214][T14331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 567.406231][T14331] loop1 node offset 8/16: btree node data missing: expected 16 sectors, found 8 [ 567.406245][T14331] repair success (rewriting node) [ 567.449655][T14387] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 567.647329][T14392] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 567.691283][T14331] bcachefs (loop1): accounting_read... done [ 567.721666][T14331] bcachefs (loop1): alloc_read... done [ 567.727665][T14331] bcachefs (loop1): snapshots_read... done [ 567.765104][T14331] bcachefs (loop1): done starting filesystem [ 568.051945][ T5827] bcachefs (loop1): shutting down [ 568.209411][ T5827] bcachefs (loop1): shutdown complete [ 568.594432][T14417] new mount options do not match the existing superblock, will be ignored [ 568.802835][T14426] netlink: 'syz.4.3598': attribute type 2 has an invalid length. [ 568.816540][T14426] netlink: 'syz.4.3598': attribute type 1 has an invalid length. [ 568.826693][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 569.107096][T14435] xt_CONNSECMARK: invalid mode: 0 [ 569.415173][T14449] xt_connbytes: Forcing CT accounting to be enabled [ 570.409794][T14468] loop4: detected capacity change from 0 to 256 [ 570.630348][T14468] FAT-fs (loop4): Directory bread(block 64) failed [ 570.637041][T14468] FAT-fs (loop4): Directory bread(block 65) failed [ 570.682661][T14468] FAT-fs (loop4): Directory bread(block 66) failed [ 570.714854][T14468] FAT-fs (loop4): Directory bread(block 67) failed [ 570.721533][T14468] FAT-fs (loop4): Directory bread(block 68) failed [ 570.758518][T14468] FAT-fs (loop4): Directory bread(block 69) failed [ 570.765196][T14468] FAT-fs (loop4): Directory bread(block 70) failed [ 570.800350][T14468] FAT-fs (loop4): Directory bread(block 71) failed [ 570.813972][T14468] FAT-fs (loop4): Directory bread(block 72) failed [ 570.831526][T14468] FAT-fs (loop4): Directory bread(block 73) failed [ 571.507752][T14492] libceph: resolve '400' (ret=-3): failed [ 571.664883][T14454] loop0: detected capacity change from 0 to 32768 [ 572.293557][T14510] loop3: detected capacity change from 0 to 256 [ 572.455352][T14510] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 572.489738][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.496100][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.508535][T14510] FAT-fs (loop3): Filesystem has been set read-only [ 572.766236][T14454] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=4,compression=lz4,degraded=no,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 572.766269][T14454] allowing incompatible features above 0.0: (unknown version) [ 572.766284][T14454] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 573.093784][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'. [ 573.147062][T14528] loop2: detected capacity change from 0 to 512 [ 573.167199][T14528] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.3642: inode #1792: comm syz.2.3642: iget: illegal inode # [ 573.182273][T14528] EXT4-fs (loop2): Remounting filesystem read-only [ 573.182299][T14528] EXT4-fs (loop2): no journal found [ 573.182313][T14528] EXT4-fs (loop2): can't get journal size [ 573.189793][T14528] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 573.190428][T14528] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 573.218098][T14528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.324827][T14528] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 573.473914][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.525944][ T928] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 573.699420][ T30] audit: type=1326 audit(1750935012.555:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14546 comm="syz.1.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032138e929 code=0x7ffc0000 [ 573.701295][ T30] audit: type=1326 audit(1750935012.555:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14546 comm="syz.1.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032138e929 code=0x7ffc0000 [ 573.701351][ T30] audit: type=1326 audit(1750935012.555:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14546 comm="syz.1.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f032138e929 code=0x7ffc0000 [ 573.701398][ T30] audit: type=1326 audit(1750935012.555:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14546 comm="syz.1.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032138e929 code=0x7ffc0000 [ 573.701446][ T30] audit: type=1326 audit(1750935012.555:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14546 comm="syz.1.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032138e929 code=0x7ffc0000 [ 573.754958][ T928] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 573.754994][ T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.787980][ T928] usb 4-1: config 0 descriptor?? [ 573.970199][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.003895][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.181492][ T5895] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 574.254803][ T928] ath6kl: Failed to submit usb control message: -71 [ 574.254860][ T928] ath6kl: unable to send the bmi data to the device: -71 [ 574.254875][ T928] ath6kl: Unable to send get target info: -71 [ 574.258578][ T928] ath6kl: Failed to init ath6kl core: -71 [ 574.260142][ T928] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 574.268827][ T928] usb 4-1: USB disconnect, device number 108 [ 574.347478][ T5895] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 574.347518][ T5895] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.351077][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 574.351110][ T5895] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 574.351135][ T5895] usb 3-1: Product: syz [ 574.351151][ T5895] usb 3-1: Manufacturer: syz [ 574.376789][ T5895] hub 3-1:4.0: USB hub found [ 574.580333][ T5895] hub 3-1:4.0: 8 ports detected [ 574.580976][ T5895] hub 3-1:4.0: insufficient power available to use all downstream ports [ 574.742536][T14570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'. [ 574.795973][ T5895] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 574.840181][T14454] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 574.869991][T14454] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 574.897579][ T5895] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 574.916978][T14454] bcachefs (loop0): Version upgrade required: [ 574.916978][T14454] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 574.916978][T14454] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 574.916978][T14454] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 575.076900][ T5895] usb 3-1: USB disconnect, device number 109 [ 575.257138][T14454] bcachefs (loop0): dropping and reconstructing all alloc info [ 575.321713][T14454] syz.0.3609: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 575.387998][T14454] CPU: 0 UID: 0 PID: 14454 Comm: syz.0.3609 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 575.388039][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.388053][T14454] Call Trace: [ 575.388062][T14454] [ 575.388072][T14454] dump_stack_lvl+0x189/0x250 [ 575.388121][T14454] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 575.388148][T14454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.388179][T14454] ? __pfx__printk+0x10/0x10 [ 575.388203][T14454] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 575.388235][T14454] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 575.388276][T14454] warn_alloc+0x214/0x310 [ 575.388315][T14454] ? __pfx_warn_alloc+0x10/0x10 [ 575.388358][T14454] ? __get_vm_area_node+0x28f/0x300 [ 575.388389][T14454] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 575.388424][T14454] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 575.388484][T14454] ? alloc_pages_mpol+0x3cd/0x4a0 [ 575.388517][T14454] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 575.388553][T14454] ? rcu_is_watching+0x15/0xb0 [ 575.388582][T14454] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 575.388610][T14454] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 575.388638][T14454] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 575.388669][T14454] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 575.388707][T14454] bch2_fs_journal_start+0x2b4/0x12b0 [ 575.388754][T14454] ? bch2_journal_log_msg+0xd9/0x120 [ 575.388790][T14454] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 575.388821][T14454] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 575.388855][T14454] ? bch2_reconstruct_alloc+0x32b/0x360 [ 575.388888][T14454] bch2_fs_recovery+0x2298/0x3a50 [ 575.388931][T14454] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 575.388968][T14454] ? __lock_acquire+0xab9/0xd20 [ 575.389009][T14454] ? __lock_acquire+0xab9/0xd20 [ 575.389047][T14454] ? __lock_acquire+0xab9/0xd20 [ 575.389108][T14454] ? bch2_fs_start+0x9fe/0xd90 [ 575.389138][T14454] ? up_write+0x1c4/0x420 [ 575.389167][T14454] ? bch2_fs_start+0x5c4/0xd90 [ 575.389194][T14454] bch2_fs_start+0xa99/0xd90 [ 575.389220][T14454] ? bch2_fs_start+0x5c4/0xd90 [ 575.389249][T14454] ? __pfx_bch2_fs_start+0x10/0x10 [ 575.389299][T14454] ? sget+0x267/0x620 [ 575.389330][T14454] bch2_fs_get_tree+0xafc/0x14f0 [ 575.389386][T14454] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 575.389433][T14454] ? aa_get_newest_label+0xf7/0x5d0 [ 575.389464][T14454] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 575.389511][T14454] ? apparmor_capable+0x137/0x1b0 [ 575.389541][T14454] vfs_get_tree+0x92/0x2b0 [ 575.389573][T14454] do_new_mount+0x24a/0xa40 [ 575.389613][T14454] __se_sys_mount+0x317/0x410 [ 575.389652][T14454] ? __pfx___se_sys_mount+0x10/0x10 [ 575.389691][T14454] ? do_syscall_64+0xbe/0x3b0 [ 575.389721][T14454] ? __x64_sys_mount+0x20/0xc0 [ 575.389755][T14454] do_syscall_64+0xfa/0x3b0 [ 575.389784][T14454] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.389813][T14454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.389834][T14454] ? clear_bhb_loop+0x60/0xb0 [ 575.389861][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.389881][T14454] RIP: 0033:0x7fe99a7900ca [ 575.389901][T14454] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.389921][T14454] RSP: 002b:00007fe9985f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 575.389944][T14454] RAX: ffffffffffffffda RBX: 00007fe9985f5ef0 RCX: 00007fe99a7900ca [ 575.389960][T14454] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007fe9985f5eb0 [ 575.389975][T14454] RBP: 00002000000000c0 R08: 00007fe9985f5ef0 R09: 0000000000010400 [ 575.389990][T14454] R10: 0000000000010400 R11: 0000000000000246 R12: 0000200000000000 [ 575.390004][T14454] R13: 00007fe9985f5eb0 R14: 0000000000005930 R15: 00002000000002c0 [ 575.390038][T14454] [ 575.761851][T14454] Mem-Info: [ 575.765029][T14454] active_anon:20699 inactive_anon:0 isolated_anon:0 [ 575.765029][T14454] active_file:10168 inactive_file:40358 isolated_file:0 [ 575.765029][T14454] unevictable:768 dirty:457 writeback:0 [ 575.765029][T14454] slab_reclaimable:11077 slab_unreclaimable:100330 [ 575.765029][T14454] mapped:39223 shmem:14497 pagetables:1407 [ 575.765029][T14454] sec_pagetables:0 bounce:0 [ 575.765029][T14454] kernel_misc_reclaimable:0 [ 575.765029][T14454] free:1297352 free_pcp:10424 free_cma:0 [ 575.810586][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.839949][T14585] loop1: detected capacity change from 0 to 4096 [ 575.879142][T14454] Node 0 active_anon:84016kB inactive_anon:0kB active_file:40836kB inactive_file:161212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156800kB dirty:1880kB writeback:0kB shmem:58592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12168kB pagetables:5628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 575.913192][T14454] Node 1 active_anon:152kB inactive_anon:0kB active_file:36kB inactive_file:220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 575.949316][T14454] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 575.978978][T14454] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 575.992737][T14454] Node 0 DMA32 free:1273184kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84568kB inactive_anon:0kB active_file:41236kB inactive_file:159648kB unevictable:1536kB writepending:1880kB present:3129332kB managed:2558480kB mlocked:0kB bounce:0kB free_pcp:28708kB local_pcp:5692kB free_cma:0kB [ 576.017340][T14585] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 576.025665][T14454] lowmem_reserve[]: 0 0 1 1 1 [ 576.025725][T14454] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 576.025788][T14454] lowmem_reserve[]: 0 0 0 0 0 [ 576.025836][T14454] Node 1 Normal free:3898104kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152kB inactive_anon:0kB active_file:36kB inactive_file:220kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13648kB local_pcp:6124kB free_cma:0kB [ 576.025900][T14454] lowmem_reserve[]: 0 0 0 0 0 [ 576.025951][T14454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 576.124510][T14454] Node 0 DMA32: 2447*4kB (UME) 1801*8kB (UE) 1178*16kB (UM) 1390*32kB (UE) 614*64kB (UE) 162*128kB (UM) 218*256kB (UME) 194*512kB (UME) 109*1024kB (UME) 3*2048kB (UME) 208*4096kB (M) = 1272420kB [ 576.144936][T14454] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 576.146730][T14585] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 576.157480][T14454] Node 1 Normal: 170*4kB (UME) 52*8kB (UME) 31*16kB (UE) 104*32kB (UME) 41*64kB (UME) 9*128kB (UE) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3898104kB [ 576.157707][T14454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.157725][T14454] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.157741][T14454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.247838][T14585] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 576.377872][T14454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.409379][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3671'. [ 576.527290][T14454] 66262 total pagecache pages [ 576.561645][T14454] 0 pages in swap cache [ 576.572694][T14454] Free swap = 124996kB [ 576.587803][T14454] Total swap = 124996kB [ 576.592056][T14454] 2097051 pages RAM [ 576.689948][T14454] 0 pages HighMem/MovableOnly [ 576.727345][T14454] 425389 pages reserved [ 576.741106][T14454] 0 pages cma reserved [ 576.844540][T14608] netlink: 'syz.1.3677': attribute type 10 has an invalid length. [ 576.874305][T14454] bcachefs (loop0): error reallocating journal fifo (32768 open entries) [ 576.887049][T14608] bridge0: port 3(team0) entered blocking state [ 576.898675][T14608] bridge0: port 3(team0) entered disabled state [ 576.907575][T14608] team0: entered allmulticast mode [ 576.912833][T14608] team_slave_0: entered allmulticast mode [ 576.923688][T14454] bcachefs (loop0): error in recovery: ENOMEM_journal_pin_fifo [ 576.923709][T14454] emergency read only at seq 0 [ 576.936160][ T5941] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 576.941816][T14608] team_slave_1: entered allmulticast mode [ 576.944871][T14608] team0: entered promiscuous mode [ 576.944895][T14608] team_slave_0: entered promiscuous mode [ 576.945141][T14608] team_slave_1: entered promiscuous mode [ 576.947026][T14608] bridge0: port 3(team0) entered blocking state [ 576.948326][T14608] bridge0: port 3(team0) entered forwarding state [ 577.120821][ T5941] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 577.120858][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.124718][ T5941] usb 3-1: config 0 descriptor?? [ 577.372859][ T5941] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 577.423692][T14624] loop4: detected capacity change from 0 to 256 [ 577.554900][T14454] bcachefs (loop0): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 577.576945][ T5941] [drm:udl_init] *ERROR* Selecting channel failed [ 577.636713][ T5941] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 577.663004][T14624] FAT-fs (loop4): Directory bread(block 64) failed [ 577.669597][T14624] FAT-fs (loop4): Directory bread(block 65) failed [ 577.687554][ T5941] [drm] Initialized udl on minor 2 [ 577.700376][T14624] FAT-fs (loop4): Directory bread(block 66) failed [ 577.716522][T14454] bcachefs (loop0): shutting down [ 577.725569][ T5941] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 577.739044][T14624] FAT-fs (loop4): Directory bread(block 67) failed [ 577.754701][T14624] FAT-fs (loop4): Directory bread(block 68) failed [ 577.763191][ T5941] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 577.771165][T14624] FAT-fs (loop4): Directory bread(block 69) failed [ 577.784804][ T5933] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 577.795196][T14624] FAT-fs (loop4): Directory bread(block 70) failed [ 577.803004][ T5933] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 577.812692][T14624] FAT-fs (loop4): Directory bread(block 71) failed [ 577.828120][T14624] FAT-fs (loop4): Directory bread(block 72) failed [ 577.835788][T14624] FAT-fs (loop4): Directory bread(block 73) failed [ 577.855321][ T5941] usb 3-1: USB disconnect, device number 110 [ 577.910199][T14454] bcachefs (loop0): shutdown complete [ 578.068936][ T24] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 578.272014][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 578.279565][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.291387][T14640] netlink: 'syz.2.3693': attribute type 3 has an invalid length. [ 578.302492][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.320634][T14640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3693'. [ 578.373763][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.394034][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.441722][ T24] usb 4-1: Product: syz [ 578.446372][ T24] usb 4-1: Manufacturer: syz [ 578.457194][ T24] usb 4-1: SerialNumber: syz [ 578.642550][T14648] loop2: detected capacity change from 0 to 512 [ 578.726845][ T24] usb 4-1: 0:2 : does not exist [ 578.732940][ T24] usb 4-1: unit 9 not found! [ 578.755387][ T24] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 578.756388][T14648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.781600][ T24] usb 4-1: USB disconnect, device number 109 [ 578.804389][T14648] ext4 filesystem being mounted at /698/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.896180][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.136476][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.378171][T14671] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3705'. [ 579.391392][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3705'. [ 579.402184][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'. [ 579.503721][T14672] netlink: zone id is out of range [ 579.813525][T14678] loop4: detected capacity change from 0 to 4096 [ 579.893412][T14683] loop1: detected capacity change from 0 to 1024 [ 580.033947][T14683] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 580.069720][T14683] hfsplus: xattr searching failed [ 580.521606][T14693] loop3: detected capacity change from 0 to 16 [ 580.602579][T14693] erofs (device loop3): mounted with root inode @ nid 36. [ 581.318634][T14454] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 581.629880][T14727] program syz.4.3734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.874213][ T849] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 582.001623][T14709] loop3: detected capacity change from 0 to 32768 [ 582.013885][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'. [ 582.039021][T14709] (syz.3.3722,14709,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.055352][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3738'. [ 582.082230][ T849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 582.104782][ T849] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 582.113613][T14709] (syz.3.3722,14709,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.152213][ T849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 582.190000][ T849] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 582.199896][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.216208][ T849] usb 2-1: Product: syz [ 582.229257][ T849] usb 2-1: Manufacturer: syz [ 582.234477][ T849] usb 2-1: SerialNumber: syz [ 582.249464][ T849] usb 2-1: config 0 descriptor?? [ 582.255292][T14726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 582.263465][T14726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 582.275072][ T849] usb 2-1: ucan: probing device on interface #0 [ 582.276629][T14709] JBD2: Ignoring recovery information on journal [ 582.447483][T14709] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 582.494831][ T849] usb 2-1: ucan: device protocol version 0 is not supported [ 582.528193][ T849] usb 2-1: ucan: probe failed; try to update the device firmware [ 582.726435][T14753] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3746'. [ 582.752547][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 582.763994][ T849] usb 2-1: USB disconnect, device number 107 [ 583.039914][T14759] netlink: 'syz.2.3749': attribute type 29 has an invalid length. [ 583.079257][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3749'. [ 583.345177][T14767] mkiss: ax0: crc mode is auto. [ 583.741886][T14784] [U] .h0FwZ,iqgҏV2sO [ 583.771226][T14784] [U] ` w*BBOLhU [ 583.775796][T14784] [U] w$n|#%o.z\̧mРw [ 583.840847][T14784] [U] R{ꫢ S [ 583.850483][T14782] [U] [ 583.879609][T14788] netlink: 'syz.1.3763': attribute type 5 has an invalid length. [ 583.922566][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 584.388290][ T5941] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 584.622054][ T5941] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 584.647257][ T5941] usb 4-1: config 0 has no interface number 0 [ 584.659155][T14818] loop4: detected capacity change from 0 to 8 [ 584.659632][ T5941] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 584.696392][ T5941] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 584.720408][ T5941] usb 4-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65 [ 584.749601][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.779410][ T5941] usb 4-1: Product: syz [ 584.783706][ T5941] usb 4-1: Manufacturer: syz [ 584.813770][ T5941] usb 4-1: SerialNumber: syz [ 584.849592][ T5941] usb 4-1: config 0 descriptor?? [ 584.862456][T14797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 584.882865][T14797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 585.156241][T14797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 585.163585][T14797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 585.234883][T14828] loop2: detected capacity change from 0 to 2048 [ 585.272071][T14801] loop0: detected capacity change from 0 to 32768 [ 585.319990][T14828] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 585.365582][T14828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.478033][ T5941] asix 4-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 585.508833][ T5941] asix 4-1:0.135: probe with driver asix failed with error -71 [ 585.586444][ T112] ------------[ cut here ]------------ [ 585.592272][ T112] WARNING: fs/jfs/jfs_dmap.c:2867 at dbAdjTree+0x454/0x4e0, CPU#0: jfsCommit/112 [ 585.601579][ T112] Modules linked in: [ 585.605919][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 585.619473][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 585.630134][ T112] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 585.635798][ T112] Code: 5a ff ff ff e8 ad 36 82 fe eb 05 e8 a6 36 82 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 8d 36 82 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 585.656048][ T112] RSP: 0000:ffffc90002d57988 EFLAGS: 00010293 [ 585.662879][ T112] RAX: ffffffff833d85f3 RBX: ffff888039201010 RCX: ffff88801e36bc00 [ 585.671343][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 585.680383][ T112] RBP: 0000000000020056 R08: ffffea0000e48047 R09: 1ffffd40001c9008 [ 585.689072][ T112] R10: dffffc0000000000 R11: fffff940001c9009 R12: ffff888039201018 [ 585.699396][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 585.709580][ T112] FS: 0000000000000000(0000) GS:ffff888125c1f000(0000) knlGS:0000000000000000 [ 585.719226][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.726459][ T112] CR2: 00007f03215a48d8 CR3: 000000005ff58000 CR4: 00000000003526f0 [ 585.734620][ T112] Call Trace: [ 585.737929][ T112] [ 585.740934][ T112] ? __pfx_lock_metapage+0x10/0x10 [ 585.746161][ T112] dbJoin+0x238/0x300 [ 585.750188][ T112] ? do_read_cache_folio+0x4c6/0x590 [ 585.755591][ T112] dbFreeBits+0x4e1/0xdb0 [ 585.759997][ T112] dbFree+0x336/0x650 [ 585.764036][ T112] txFreeMap+0x7ff/0xde0 [ 585.768398][ T112] txUpdateMap+0x308/0x9c0 [ 585.772869][ T112] jfs_lazycommit+0x43f/0xa90 [ 585.776790][ T5941] usb 4-1: USB disconnect, device number 110 [ 585.777682][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 585.789020][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 585.797147][ T112] ? __kthread_parkme+0x7b/0x200 [ 585.802144][ T112] ? __kthread_parkme+0x1a1/0x200 [ 585.808830][ T112] kthread+0x711/0x8a0 [ 585.813012][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 585.818257][ T112] ? __pfx_kthread+0x10/0x10 [ 585.823078][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.828346][ T112] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.833675][ T112] ? __pfx_kthread+0x10/0x10 [ 585.838304][ T112] ret_from_fork+0x3fc/0x770 [ 585.842979][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 585.848265][ T112] ? __switch_to_asm+0x39/0x70 [ 585.853121][ T112] ? __switch_to_asm+0x33/0x70 [ 585.857918][ T112] ? __pfx_kthread+0x10/0x10 [ 585.862628][ T112] ret_from_fork_asm+0x1a/0x30 [ 585.867480][ T112] [ 585.870531][ T112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 585.877839][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 585.889152][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 585.899244][ T112] Call Trace: [ 585.902557][ T112] [ 585.905502][ T112] dump_stack_lvl+0x99/0x250 [ 585.910109][ T112] ? __asan_memcpy+0x40/0x70 [ 585.914718][ T112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.919951][ T112] ? __pfx__printk+0x10/0x10 [ 585.924574][ T112] panic+0x2db/0x790 [ 585.928495][ T112] ? __pfx_panic+0x10/0x10 [ 585.932936][ T112] ? ret_from_fork_asm+0x1a/0x30 [ 585.937879][ T112] __warn+0x334/0x4c0 [ 585.941870][ T112] ? dbAdjTree+0x454/0x4e0 [ 585.946292][ T112] ? dbAdjTree+0x454/0x4e0 [ 585.950711][ T112] report_bug+0x2be/0x4f0 [ 585.955051][ T112] ? dbAdjTree+0x454/0x4e0 [ 585.959467][ T112] ? dbAdjTree+0x454/0x4e0 [ 585.963883][ T112] ? dbAdjTree+0x456/0x4e0 [ 585.968298][ T112] handle_bug+0x84/0x160 [ 585.972563][ T112] exc_invalid_op+0x1a/0x50 [ 585.977089][ T112] asm_exc_invalid_op+0x1a/0x20 [ 585.981947][ T112] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 585.986990][ T112] Code: 5a ff ff ff e8 ad 36 82 fe eb 05 e8 a6 36 82 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 8d 36 82 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 586.006606][ T112] RSP: 0000:ffffc90002d57988 EFLAGS: 00010293 [ 586.012682][ T112] RAX: ffffffff833d85f3 RBX: ffff888039201010 RCX: ffff88801e36bc00 [ 586.020660][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 586.028631][ T112] RBP: 0000000000020056 R08: ffffea0000e48047 R09: 1ffffd40001c9008 [ 586.036607][ T112] R10: dffffc0000000000 R11: fffff940001c9009 R12: ffff888039201018 [ 586.044592][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 586.052571][ T112] ? dbAdjTree+0x453/0x4e0 [ 586.057000][ T112] ? dbAdjTree+0x453/0x4e0 [ 586.061415][ T112] ? __pfx_lock_metapage+0x10/0x10 [ 586.066535][ T112] dbJoin+0x238/0x300 [ 586.070526][ T112] ? do_read_cache_folio+0x4c6/0x590 [ 586.075816][ T112] dbFreeBits+0x4e1/0xdb0 [ 586.080159][ T112] dbFree+0x336/0x650 [ 586.084164][ T112] txFreeMap+0x7ff/0xde0 [ 586.088427][ T112] txUpdateMap+0x308/0x9c0 [ 586.092866][ T112] jfs_lazycommit+0x43f/0xa90 [ 586.097712][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 586.102951][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 586.108788][ T112] ? __kthread_parkme+0x7b/0x200 [ 586.113739][ T112] ? __kthread_parkme+0x1a1/0x200 [ 586.118784][ T112] kthread+0x711/0x8a0 [ 586.122887][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 586.128283][ T112] ? __pfx_kthread+0x10/0x10 [ 586.132878][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 586.138084][ T112] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.143289][ T112] ? __pfx_kthread+0x10/0x10 [ 586.147883][ T112] ret_from_fork+0x3fc/0x770 [ 586.152479][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 586.157605][ T112] ? __switch_to_asm+0x39/0x70 [ 586.162369][ T112] ? __switch_to_asm+0x33/0x70 [ 586.167130][ T112] ? __pfx_kthread+0x10/0x10 [ 586.171720][ T112] ret_from_fork_asm+0x1a/0x30 [ 586.176502][ T112] [ 586.179668][ T112] Kernel Offset: disabled [ 586.183985][ T112] Rebooting in 86400 seconds..