last executing test programs: 3.385014366s ago: executing program 5 (id=5047): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='f', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) 2.610276253s ago: executing program 0 (id=5054): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f00000004c0)=@ethtool_coalesce={0x1, 0x3e, 0xbe, 0x0, 0x3, 0x10000, 0x9df, 0x8000, 0x8, 0x10001, 0x104, 0x8, 0xff, 0x80, 0x4, 0xffff, 0x6, 0x10, 0x70d, 0x0, 0x2, 0x7, 0x5}}) 2.560112573s ago: executing program 1 (id=5056): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x1}}) 2.504600848s ago: executing program 2 (id=5057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 2.501512735s ago: executing program 5 (id=5058): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x81, 0x8, 0x8, 0xd0, 0x0, 0x0, 0x0, 0x9b, &(0x7f0000000100)=""/155}) 2.139301404s ago: executing program 1 (id=5061): r0 = socket(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x362, @mcast2, 0x5, 0xffffffff}, 0x80, 0x0}}, {{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x20004014) 2.138989289s ago: executing program 5 (id=5062): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r0, &(0x7f0000005500)=[{&(0x7f00000008c0)="0600000000000000009d040002007a6d6136e18b71de93a120d8a50bdf66cf6039f1f64c7b9f823dfc0d48324392314a3c965f00660b25fd7ea27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c198ad0855a0a64df", 0x68}], 0x1) 2.122648363s ago: executing program 0 (id=5063): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0xfffffffd) 1.900585222s ago: executing program 4 (id=5064): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x1, 0x0, 0x20}) 1.754428414s ago: executing program 3 (id=5065): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x178, 0x20000810, 0x0, 0x0) 1.753777005s ago: executing program 1 (id=5066): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffff7fc00000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0xffffbfff, 0x0, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x32314d48}) 1.753062421s ago: executing program 2 (id=5067): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x83e, 0x0, 0x3}, 0x1c) 1.647968534s ago: executing program 5 (id=5068): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 1.647560823s ago: executing program 0 (id=5069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x5, 0xfffffffe, 0x2, 0x8000, 0xffff, 0x36, 0x15d, 0x2268f2c5, 0x81, 0x2003, 0x9, 0x3, 0x1, 0xfff, 0xbcb7, 0xff, 0x400, 0x8, 0x1ff, 0x4000, 0x7c6a10dd, 0xbc}}) 1.528024188s ago: executing program 4 (id=5070): r0 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, {0x6efd, 0x10000, 0x1b, 0x800}}) 1.436709676s ago: executing program 3 (id=5071): r0 = gettid() getpriority(0x2, r0) 1.384139366s ago: executing program 1 (id=5072): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8b000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 1.339718096s ago: executing program 2 (id=5073): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x2, 0x4) 1.296755386s ago: executing program 0 (id=5074): r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.207978743s ago: executing program 5 (id=5075): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, &(0x7f0000000540)={'wlan1\x00'}) 1.184792099s ago: executing program 4 (id=5076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000900020073797a310000000005000400000000000c0007800800124000010000050001000600000005000500feff00000d000300686173683a6d6163"], 0x54}}, 0x4004804) 1.078983059s ago: executing program 3 (id=5077): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f0000000940)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 924.071942ms ago: executing program 1 (id=5078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 923.731736ms ago: executing program 2 (id=5079): r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$F_GET_RW_HINT(r0, 0x11, &(0x7f0000000140)) 912.171448ms ago: executing program 0 (id=5080): r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x42042, 0x12e) fallocate(r0, 0x2, 0xa0000805, 0x80000001) 900.724466ms ago: executing program 5 (id=5081): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000280)={[{@noquota}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@errors_continue}, {@errors_continue}, {}, {@uid}, {@usrquota}, {@errors_continue}, {@usrquota}]}, 0x11, 0x614f, &(0x7f0000001800)="$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") chdir(&(0x7f0000000080)='./file0\x00') 740.025782ms ago: executing program 4 (id=5082): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000004c0)={{0x6, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 712.730551ms ago: executing program 3 (id=5083): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 614.654906ms ago: executing program 2 (id=5084): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000080)=0x140) 447.698891ms ago: executing program 0 (id=5085): fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000200)=@v2={0x3, 0x0, 0x17, 0x4, 0x4, "44dd0632"}, 0xd, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 447.20371ms ago: executing program 4 (id=5086): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$eJzs3U9rE08cx/HPbNIm/bX0F21F8CBSDehFtF7ES0TyIDyJ2qRQXCpqxT+nKp5E7N27T8HHIF4Un4CePInnepCVmZ0ku0k2SaWbbfX9Astmd2fnO52dnfkG7ArAP+ta88vbS9/sPyOVVJJeXpECSVWpLOmYjlcfbm5tbIXt1qgLlXSyEpcyikuagXPWNtvDilblS3g1+6msheQ+5COKoqtfiw4ChXOjPyqld55yT4KKH53uYLWg+LI823uRH3OStvMI5hAxu9rVYy0WHQcAoFgmnt8DP88v+PV7EEj15LR/0Ob/P7VbdAC5i0YeTcz/LsuKjO33/92hXr7nUjh7POhkiZPUPNP3eVbxnZVaXZpxWaWLJZhb3wjb59fuhq1Az9XwEqctu5+t+NbtGBPtypDcdITu1eYyTzHDV5Tzrg0ztg2rcfyPJKXiXxpZYw7MB/PJ3DA1vVGru/4rR8Z2k+upWl9PxfFfyL6ia2XNniX/2Gg0GkHqlCOukhO+Bm9MK6sqZdU466+Z+oKgNi5OV+poX6m4dRfHlFoaWmq18ymj1HKqlG3N+kb4PruqqTCvzXWzou96p2Zi/R/Y+OoaOTJ7o8bU46nA/cbt6Ez3bEK57o/0zRyDw6X7W6xkhf5z9DMNe/BKt3VZiw+ePL1TCsP2fbtxK7S3q9vo7rm34DfC9swLKXnooGxou7enosgZOLkzKU0zsHP7ekH7/Bh7sh1lubfLPgcOQL8Xt9H8mOON9CuKoik2Z8cPjP5DBT6bMDW9Ti86EhTErrtMnP/18pVyvNizP2pD1+kTfhHgrxjZNXY3g+uVjeIVuaT/9pTBzWdncIM510DO6HKu02elM5PXWPNx/iVMU591k+//AQAAAAAAAAAAAAAAAAAADptp/H+JotsIAAAAAAAAAAAAAAAAAAAAAMBh133/rzrv/9Vk7//tfxVLKf6T4Pvy/t+dTfH+XyB/vwMAAP//NnN5cw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 404.770059ms ago: executing program 3 (id=5087): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)={0x2}) 223.706119ms ago: executing program 2 (id=5088): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 47.90428ms ago: executing program 1 (id=5089): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x4e, 0x3a, 0x33, 0x2f]}}}, 0x4e}]}) 47.407275ms ago: executing program 3 (id=5090): syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}, {0x0, 0x19}], 0x1f4) 0s ago: executing program 4 (id=5091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 5 interface 0 has no altsetting 1 [ 621.883144][T11789] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 621.899449][T11789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.917911][T11789] usb 2-1: Product: syz [ 621.929680][T11789] usb 2-1: Manufacturer: syz [ 621.947083][ T5910] usb 6-1: USB disconnect, device number 108 [ 621.948511][T11789] usb 2-1: SerialNumber: syz [ 622.119797][T13321] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 622.303653][T13321] usb 1-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 622.330142][T11789] usb 2-1: USB disconnect, device number 108 [ 622.336282][T13321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.369022][T13321] usb 1-1: Product: syz [ 622.397432][T13321] usb 1-1: Manufacturer: syz [ 622.407823][T13321] usb 1-1: SerialNumber: syz [ 622.426336][T13321] usb 1-1: config 0 descriptor?? [ 622.428951][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.454687][T13321] f81232 1-1:0.0: f81232 converter detected [ 622.482938][T13321] usb 1-1: f81232 converter now attached to ttyUSB0 [ 622.648570][T15383] loop4: detected capacity change from 0 to 512 [ 622.718112][T15383] EXT4-fs (loop4): Test dummy encryption mode enabled [ 622.737243][T15362] loop3: detected capacity change from 0 to 32768 [ 622.756346][T11789] usb 1-1: USB disconnect, device number 114 [ 622.771440][T15362] jfs_mount: dbMount failed w/rc = -22 [ 622.777993][T11789] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 622.786463][T15383] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.806334][T15362] Mount JFS Failure: -22 [ 622.810986][T15362] jfs_mount failed w/return code = -22 [ 622.827675][T11789] f81232 1-1:0.0: device disconnected [ 622.980015][ T5828] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 623.461229][ T976] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 623.539521][T11789] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 623.643763][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 623.660887][ T976] usb 2-1: config 2 has an invalid interface number: 169 but max is 0 [ 623.674811][ T976] usb 2-1: config 2 has no interface number 0 [ 623.689907][ T976] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 623.709554][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.729877][T11789] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.742020][T11789] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.772205][T11789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 623.783594][ T976] cypress_m8 2-1:2.169: DeLorme Earthmate USB converter detected [ 623.801141][T11789] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 623.820604][ T976] earthmate ttyUSB0: required endpoint is missing [ 623.848619][T11789] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 623.873921][T11789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.894529][T11789] usb 5-1: Product: syz [ 623.898759][T11789] usb 5-1: Manufacturer: syz [ 623.922888][T11789] usb 5-1: SerialNumber: syz [ 623.950776][T11789] usb 5-1: config 0 descriptor?? [ 623.983110][T11789] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 624.017237][ T5910] usb 2-1: USB disconnect, device number 109 [ 624.056941][ T5910] cypress_m8 2-1:2.169: device disconnected [ 624.065348][T11789] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 624.106631][T11789] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -8 [ 624.129582][T15405] loop5: detected capacity change from 0 to 8 [ 624.160420][T15407] IPv6: addrconf: prefix option has invalid lifetime [ 624.211457][T15389] loop2: detected capacity change from 0 to 32768 [ 624.212133][T11789] usb 5-1: USB disconnect, device number 110 [ 624.230440][T15405] SQUASHFS error: xz decompression failed, data probably corrupt [ 624.238230][T15405] SQUASHFS error: Failed to read block 0x108: -5 [ 624.272757][T15405] SQUASHFS error: Unable to read metadata cache entry [106] [ 624.284236][T11789] garmin_gps 5-1:0.0: device disconnected [ 624.304221][T15389] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 624.354396][T15405] SQUASHFS error: Unable to read inode 0x11f [ 624.481603][T15389] XFS (loop2): Starting recovery (logdev: internal) [ 624.564825][T15389] XFS (loop2): Ending recovery (logdev: internal) [ 624.687096][T15399] loop0: detected capacity change from 0 to 32768 [ 624.726685][T15399] (syz.0.4019,15399,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x26a7570f, computed 0xca6c8eb6. Applying ECC. [ 624.786480][T15399] (syz.0.4019,15399,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0x26a7570f, computed 0x57a4e1d [ 624.828979][ T5831] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 624.874070][T15399] (syz.0.4019,15399,1):ocfs2_validate_dir_block:451 ERROR: Checksum failed for dinode 288 [ 624.909184][T15399] (syz.0.4019,15399,0):ocfs2_read_virt_blocks:1037 ERROR: status = -5 [ 624.947273][T15399] (syz.0.4019,15399,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 624.967290][T15399] (syz.0.4019,15399,0):ocfs2_find_entry_el:725 ERROR: reading directory 18, offset 0 [ 625.018761][T15399] (syz.0.4019,15399,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 625.050625][T15423] random: crng reseeded on system resumption [ 625.087218][T15399] (syz.0.4019,15399,0):ocfs2_init_global_system_inodes:466 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 625.087312][T15399] (syz.0.4019,15399,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 625.208160][T15399] (syz.0.4019,15399,0):ocfs2_initialize_super:2198 ERROR: status = -22 [ 625.213453][T11789] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 625.258076][T15420] loop1: detected capacity change from 0 to 4096 [ 625.265516][T15399] (syz.0.4019,15399,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 625.346841][T15420] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 625.389625][T15420] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 625.411976][T11789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.435323][T15420] ntfs3(loop1): Failed to load $LogFile (-22). [ 625.446848][T11789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.519637][T11789] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 625.589875][T11789] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 625.614457][T11789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.646043][T11789] usb 6-1: Product: syz [ 625.684604][T11789] usb 6-1: Manufacturer: syz [ 625.699438][T11789] usb 6-1: SerialNumber: syz [ 625.971259][T11789] cdc_ncm 6-1:1.0: bind() failure [ 626.003223][T11789] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 626.030154][T11789] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 626.090907][T11789] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 626.124904][T11789] cdc_ncm 6-1:1.1: bind() failure [ 626.157678][T11789] usbtest 6-1:1.1: couldn't get endpoints, -22 [ 626.217392][T11789] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 626.251876][T11789] usb 6-1: USB disconnect, device number 109 [ 626.339564][ T5910] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 626.351527][ T30] audit: type=1326 audit(1760511093.940:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.1.4033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16fbf8eec9 code=0x0 [ 626.377396][T15417] loop3: detected capacity change from 0 to 40427 [ 626.485177][T15417] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 626.494341][T15440] loop0: detected capacity change from 0 to 2048 [ 626.519544][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 626.529460][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 626.562354][ T5910] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 626.573624][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.591988][ T5910] usb 3-1: Product: syz [ 626.598417][ T5910] usb 3-1: Manufacturer: syz [ 626.603755][ T5910] usb 3-1: SerialNumber: syz [ 626.615759][ T5910] usb 3-1: config 0 descriptor?? [ 626.620893][T15440] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 626.704476][ T5910] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 626.759816][ T5910] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 626.968755][ T5910] usb 3-1: USB disconnect, device number 93 [ 627.019689][ T5910] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 627.053901][T15417] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 627.069106][ T5910] kobil_sct 3-1:0.0: device disconnected [ 627.132728][T15417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 627.794284][T15463] loop4: detected capacity change from 0 to 8 [ 627.839726][T15463] squashfs image failed sanity check [ 628.139362][ T5910] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 628.292903][T15454] loop0: detected capacity change from 0 to 32768 [ 628.296571][T15452] loop5: detected capacity change from 0 to 32768 [ 628.345575][T15454] lmLogInit: exit(-22) [ 628.347009][T15452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4040 (15452) [ 628.362490][T15454] lmLogOpen: exit(-22) [ 628.390878][ T5910] usb 3-1: string descriptor 0 read error: -22 [ 628.397248][ T5910] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 628.435835][T15452] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 628.450929][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.492082][T15452] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 628.502793][ T5910] usb 3-1: config 0 descriptor?? [ 628.524921][ T5910] usbtest 3-1:0.0: FX2 device [ 628.554158][ T5910] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 628.710613][ T60] BTRFS warning (device loop5): checksum verify failed on logical 5287936 mirror 1 wanted 0xba2f3320fe4f0dfed931d5a5c7a64dbbccc1fca522c14bbe02198145e0728966 found 0xfb514ef062fa9da480d9ce8dc64c8609f73477139cf8d04acb76ff95b99bde47 level 0 [ 628.805288][T15469] loop4: detected capacity change from 0 to 4096 [ 628.829115][ T5837] usb 3-1: USB disconnect, device number 94 [ 628.857029][T15452] BTRFS warning (device loop5): failed to read root (objectid=4): -5 [ 628.879566][T15469] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 628.936739][T15452] BTRFS error (device loop5): open_ctree failed: -5 [ 628.944786][T15457] loop1: detected capacity change from 0 to 40427 [ 628.992389][T15457] F2FS-fs (loop1): build fault injection rate: 16 [ 629.022346][T15457] F2FS-fs (loop1): build fault injection type: 0x3bfe8e [ 629.055391][T15457] F2FS-fs (loop1): invalid crc value [ 629.066446][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 629.083888][T15457] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-5) [ 629.106057][T15469] ntfs3(loop4): Failed to initialize $Secure::$SII (-22). [ 629.116882][T11789] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 629.138754][T15469] ntfs3(loop4): Failed to initialize $Secure (-22). [ 629.159485][T13321] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 629.319422][T11789] usb 1-1: Using ep0 maxpacket: 8 [ 629.349438][T11789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.364182][T13321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 629.391443][T11789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 629.429477][T13321] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 629.454034][T11789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 629.467196][T13321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.522672][T13321] usb 4-1: Product: syz [ 629.548484][T11789] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 629.566389][T13321] usb 4-1: Manufacturer: syz [ 629.585552][T13321] usb 4-1: SerialNumber: syz [ 629.617096][T11789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.646716][T13321] usb 4-1: config 0 descriptor?? [ 629.750974][T11789] usb 1-1: config 0 descriptor?? [ 630.000358][T13321] usb 4-1: USB disconnect, device number 125 [ 630.080493][T11789] usb 1-1: USB disconnect, device number 115 [ 630.081110][T15502] qnx6: unable to read the first superblock [ 630.150286][T15502] qnx6: unable to read the first superblock [ 630.157978][T15502] qnx6: unable to read the first superblock [ 630.187573][ T6150] udevd[6150]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.319464][T15504] loop2: detected capacity change from 0 to 2048 [ 630.329333][ T48] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 630.370748][T15504] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504 [ 630.435149][T15504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.512399][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 630.560967][ T48] usb 6-1: config 19 has an invalid descriptor of length 0, skipping remainder of the config [ 630.606145][T15508] loop4: detected capacity change from 0 to 1024 [ 630.644729][ T48] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=de.8d [ 630.681779][T15508] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 630.699667][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.708263][ T48] usb 6-1: Product: syz [ 630.729532][ T48] usb 6-1: Manufacturer: syz [ 630.734216][ T48] usb 6-1: SerialNumber: syz [ 630.775849][T15508] EXT4-fs (loop4): group descriptors corrupted! [ 631.041012][ T48] usb 6-1: USB disconnect, device number 110 [ 631.289315][ T5837] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 631.502930][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 631.535382][ T5837] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 631.570271][ T5837] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 631.578514][ T5837] usb 1-1: Product: syz [ 631.629295][ T5837] usb 1-1: Manufacturer: syz [ 631.648750][ T5837] usb 1-1: SerialNumber: syz [ 631.668207][ T5837] usb 1-1: config 0 descriptor?? [ 631.726283][ T5837] usb 1-1: selecting invalid altsetting 1 [ 631.883524][ T5837] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 631.950200][ T5837] usb 1-1: USB disconnect, device number 116 [ 632.064141][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.246461][T15548] loop4: detected capacity change from 0 to 8 [ 632.285252][T15548] SQUASHFS error: zlib decompression failed, data probably corrupt [ 632.318026][T15548] SQUASHFS error: Failed to read block 0x9b: -5 [ 632.336471][T15548] SQUASHFS error: Unable to read metadata cache entry [99] [ 632.367011][T15548] SQUASHFS error: Unable to read inode 0x127 [ 633.089372][ T5837] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 633.146839][T15568] loop2: detected capacity change from 0 to 2048 [ 633.259539][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 633.282039][ T5837] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=23.b2 [ 633.320429][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.360906][ T5837] usb 1-1: config 0 descriptor?? [ 633.385595][ T5837] gspca_main: 17a1:0128 too many config [ 633.640712][ T5910] usb 1-1: USB disconnect, device number 117 [ 633.640713][T15568] hpfs: filesystem error: improperly stopped [ 633.660521][T15554] loop3: detected capacity change from 0 to 32768 [ 633.670723][T15568] ; already mounted read-only [ 633.714536][T15574] loop4: detected capacity change from 0 to 1024 [ 633.715728][T15554] XFS (loop3): stripe width (9) must be a multiple of the stripe unit (38034) [ 633.721927][T15568] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 633.782056][T15568] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000 [ 633.795359][T15574] hfsplus: failed to load extents file [ 633.897701][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.904184][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.168120][T15560] loop1: detected capacity change from 0 to 32768 [ 634.191017][T15560] XFS (loop1): no-recovery mounts must be read-only. [ 634.494796][T15566] loop5: detected capacity change from 0 to 32768 [ 634.563867][T15566] (syz.5.4090,15566,1):ocfs2_verify_volume:2318 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255 [ 634.643134][T15566] (syz.5.4090,15566,1):ocfs2_verify_volume:2331 ERROR: status = -22 [ 634.694603][T15566] (syz.5.4090,15566,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 634.761809][T15566] (syz.5.4090,15566,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 635.289378][ T5910] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 635.331525][T15597] loop1: detected capacity change from 0 to 4096 [ 635.363023][T15597] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 635.389419][T11789] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 635.397867][T15597] ntfs3(loop1): ino=3, mi_enum_attr [ 635.412797][T15597] ntfs3(loop1): ino=1, mi_enum_attr [ 635.428366][T15597] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 635.439445][T15597] ntfs3(loop1): Failed to load $MFTMirr (-22). [ 635.489407][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 635.508013][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.564025][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.579074][T11789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.593942][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.613768][ T48] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 635.629532][ T5910] usb 4-1: Product: syz [ 635.633770][ T5910] usb 4-1: Manufacturer: syz [ 635.639528][T11789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 635.648470][T11789] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.675640][ T5910] usb 4-1: SerialNumber: syz [ 635.725159][ T5910] usb 4-1: config 0 descriptor?? [ 635.732325][T11789] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.799715][T11789] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 635.807968][T11789] usb 5-1: Product: syz [ 635.833745][ T48] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 635.855093][T11789] usb 5-1: Manufacturer: syz [ 635.859939][ T48] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.878441][T11789] usb 5-1: SerialNumber: syz [ 635.894478][ T48] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 635.921145][T11789] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 635.928143][T11789] cdc_mbim 5-1:1.0: bind() failure [ 635.946385][ T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.966697][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.982354][ T48] usb 6-1: Product: syz [ 635.986700][ T48] usb 6-1: Manufacturer: syz [ 636.005377][ T48] usb 6-1: SerialNumber: syz [ 636.054419][ T976] usb 4-1: USB disconnect, device number 126 [ 636.184877][ T5910] usb 5-1: USB disconnect, device number 111 [ 636.334550][ T48] usb 6-1: USB disconnect, device number 111 [ 636.398690][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.635550][T15609] orangefs_mount: mount request failed with -4 [ 636.836805][T15610] loop0: detected capacity change from 0 to 32768 [ 636.893027][T15610] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4111 (15610) [ 637.031828][T15622] loop4: detected capacity change from 0 to 8 [ 637.042473][T15610] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 637.095238][T15610] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 637.115714][T15622] SQUASHFS error: xz decompression failed, data probably corrupt [ 637.164272][T15622] SQUASHFS error: Failed to read block 0x108: -5 [ 637.244801][T15622] SQUASHFS error: Unable to read metadata cache entry [106] [ 637.254451][T15622] SQUASHFS error: Unable to read inode 0x11f [ 637.371171][T15610] BTRFS info (device loop0): enabling ssd optimizations [ 637.409737][T15610] BTRFS info (device loop0): enabling free space tree [ 637.696586][ T5830] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 637.949437][ T5837] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 638.151643][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 638.183996][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 638.239679][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 638.289313][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 638.298451][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.365580][T15619] loop1: detected capacity change from 0 to 32768 [ 638.374042][ T5837] usb 5-1: config 0 descriptor?? [ 638.396358][T15626] loop3: detected capacity change from 0 to 32768 [ 638.413086][ T5837] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 638.452895][T15626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4118 (15626) [ 638.527432][T15619] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4115 (15619) [ 638.563761][T15626] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 638.581251][T15620] loop2: detected capacity change from 0 to 32768 [ 638.601040][T15626] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 638.619982][T15619] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 638.664172][T15620] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4116 (15620) [ 638.698753][T15619] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 638.713963][ T48] usb 5-1: USB disconnect, device number 112 [ 638.747927][T15620] BTRFS info (device loop2): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 638.788507][T15633] loop5: detected capacity change from 0 to 32768 [ 638.832478][T15633] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4119 (15633) [ 638.832906][T15620] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 639.015369][T15633] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 639.039393][T15633] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 639.062484][T15626] BTRFS info (device loop3): enabling ssd optimizations [ 639.079783][T15626] BTRFS info (device loop3): enabling free space tree [ 639.089417][T15619] BTRFS info (device loop1): enabling ssd optimizations [ 639.109885][T15619] BTRFS info (device loop1): enabling free space tree [ 639.333127][T15620] BTRFS info (device loop2): enabling ssd optimizations [ 639.363630][T15620] BTRFS info (device loop2): enabling free space tree [ 639.430134][T15633] BTRFS info (device loop5): enabling ssd optimizations [ 639.438423][T15633] BTRFS info (device loop5): enabling free space tree [ 639.477619][ T5832] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 639.498465][ T5827] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 639.660445][ T5831] BTRFS info (device loop2): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 639.765737][ T5829] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 639.823685][T15720] loop4: detected capacity change from 0 to 4096 [ 639.856607][T15720] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 639.952129][T15720] ntfs3(loop4): ino=4, mi_enum_attr [ 639.957399][T15720] ntfs3(loop4): ino=4, Correct links count -> 2. [ 640.014523][T15720] ntfs3(loop4): Failed to load $AttrDef (-22) [ 640.869323][ T5837] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 641.011249][ T976] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 641.079503][ T5837] usb 5-1: config 2 interface 0 has no altsetting 0 [ 641.120127][ T5837] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 641.169286][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.199551][ T5837] usb 5-1: Product: syz [ 641.203799][ T5837] usb 5-1: Manufacturer: syz [ 641.209895][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 641.260157][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 641.267618][ T5837] usb 5-1: SerialNumber: syz [ 641.279404][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.339880][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 641.387641][ T976] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 641.441285][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.487129][ T976] usb 4-1: Product: syz [ 641.513706][ T976] usb 4-1: Manufacturer: syz [ 641.544462][ T976] usb 4-1: SerialNumber: syz [ 641.579317][ T5837] usb 5-1: USB disconnect, device number 113 [ 641.590270][ T976] usb 4-1: config 0 descriptor?? [ 641.941689][T11789] usb 4-1: USB disconnect, device number 127 [ 642.015835][T15722] loop0: detected capacity change from 0 to 32768 [ 642.098809][T15728] loop5: detected capacity change from 0 to 32768 [ 642.162032][T15728] (syz.5.4130,15728,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 642.203155][T15730] loop2: detected capacity change from 0 to 32768 [ 642.235615][T15722] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 642.258380][T15728] (syz.5.4130,15728,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 642.274434][T15730] (syz.2.4129,15730,0):ocfs2_get_clusters:616 ERROR: status = -34 [ 642.287009][T15730] (syz.2.4129,15730,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -34 [ 642.330796][T15730] (syz.2.4129,15730,0):ocfs2_map_slot_buffers:378 ERROR: status = -34 [ 642.349014][T15730] (syz.2.4129,15730,0):ocfs2_init_slot_info:426 ERROR: status = -34 [ 642.364519][T15730] (syz.2.4129,15730,0):ocfs2_initialize_super:2222 ERROR: status = -34 [ 642.373706][T15730] (syz.2.4129,15730,0):ocfs2_fill_super:1177 ERROR: status = -34 [ 642.430505][T15728] JBD2: Ignoring recovery information on journal [ 642.516754][ T5830] (syz-executor,5830,0):ocfs2_inode_is_valid_to_delete:947 ERROR: Skipping delete of system file 76 [ 642.586773][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 642.653135][T15728] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 642.921745][T15748] loop0: detected capacity change from 0 to 128 [ 642.928436][T15747] loop4: detected capacity change from 0 to 512 [ 643.005922][T15738] loop1: detected capacity change from 0 to 32768 [ 643.089579][T15738] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4135 (15738) [ 643.111396][T15747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.184889][T15756] loop0: detected capacity change from 0 to 2048 [ 643.211613][T15756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.261851][T15738] BTRFS info (device loop1): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 643.327024][ T5829] ocfs2: Unmounting device (7,5) on (node local) [ 643.349359][T15738] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 643.430559][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.634452][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.660349][T15738] BTRFS info (device loop1): enabling ssd optimizations [ 643.667377][T15738] BTRFS info (device loop1): enabling free space tree [ 644.073299][T15774] loop0: detected capacity change from 0 to 2048 [ 644.099612][ T5832] BTRFS info (device loop1): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 644.158267][T15774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.249461][ T48] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 644.421028][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 644.460201][ T48] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 644.474804][T15781] loop5: detected capacity change from 0 to 512 [ 644.482581][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.503733][ T48] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 644.543597][ T48] usb 5-1: config 3 has no interface number 0 [ 644.606784][ T48] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.642082][T15781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.737640][ T48] usb 5-1: config 3 interface 45 has no altsetting 0 [ 644.746656][T15787] loop0: detected capacity change from 0 to 512 [ 644.791956][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 644.827169][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.866706][ T48] usb 5-1: Product: syz [ 644.866788][T15752] loop2: detected capacity change from 0 to 32768 [ 644.876838][ T48] usb 5-1: Manufacturer: syz [ 644.921855][T15752] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4140 (15752) [ 644.953170][ T48] usb 5-1: SerialNumber: syz [ 644.966798][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.013845][T15787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.069357][T15752] BTRFS info (device loop2): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 645.116510][T15752] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 645.282795][T15750] loop3: detected capacity change from 0 to 32768 [ 645.354439][T15750] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4139 (15750) [ 645.387116][T15804] loop1: detected capacity change from 0 to 512 [ 645.417809][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.428606][T15806] loop5: detected capacity change from 0 to 512 [ 645.478155][T15804] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 645.493069][T15750] BTRFS info (device loop3): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 645.522440][T15752] BTRFS info (device loop2): enabling ssd optimizations [ 645.552949][T15806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.559943][T15750] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 645.577458][T15752] BTRFS info (device loop2): enabling free space tree [ 645.591763][ T48] usb 5-1: USB disconnect, device number 114 [ 645.773192][ T5831] BTRFS info (device loop2): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 645.862630][T15804] EXT4-fs (loop1): failed to open journal device unknown-block(11,127) -6 [ 645.990943][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.104006][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.165319][T15750] BTRFS error (device loop3): open_ctree failed: -4 [ 646.552094][T15836] loop5: detected capacity change from 0 to 1024 [ 646.675284][T15841] loop1: detected capacity change from 0 to 2048 [ 646.709705][T15836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.793576][T15841] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 646.849267][ T976] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 646.867184][T15841] NILFS (loop1): mounting unchecked fs [ 646.903624][T15841] NILFS (loop1): recovery required for readonly filesystem [ 646.957223][T15841] NILFS (loop1): write access will be enabled during recovery [ 646.971965][ T6209] udevd[6209]: incorrect nilfs2 checksum on /dev/loop1 [ 647.053067][T15841] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 647.081608][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.105900][T15847] loop2: detected capacity change from 0 to 128 [ 647.113527][ T976] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 647.160016][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.160664][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.187886][ T6209] udevd[6209]: incorrect nilfs2 checksum on /dev/loop1 [ 647.211033][ T976] usb 5-1: config 0 descriptor?? [ 647.260310][T15847] affs: No valid root block on device loop2 [ 647.272712][ T976] gspca_main: spca561-2.14.0 probing abcd:cdee [ 647.432103][ T976] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 647.491905][ T976] usb 5-1: USB disconnect, device number 115 [ 647.831649][T13888] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 648.004672][T13321] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 648.059252][T13888] usb 6-1: Using ep0 maxpacket: 32 [ 648.101786][T13888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.133447][T13888] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 648.173352][T13888] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 648.200449][T13321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.203008][T13888] usb 6-1: Product: syz [ 648.231125][T13321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.250768][T13888] usb 6-1: Manufacturer: syz [ 648.255407][T13888] usb 6-1: SerialNumber: syz [ 648.288919][T13888] usb 6-1: config 0 descriptor?? [ 648.289070][T13321] usb 3-1: config 1 interface 1 has no altsetting 1 [ 648.311852][T13888] hub 6-1:0.0: bad descriptor, ignoring hub [ 648.338114][T13888] hub 6-1:0.0: probe with driver hub failed with error -5 [ 648.352255][T13321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 648.369486][T13321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.397991][T13321] usb 3-1: Product: syz [ 648.408367][T13321] usb 3-1: Manufacturer: syz [ 648.418480][T13321] usb 3-1: SerialNumber: syz [ 648.461709][T13321] usb 3-1: selecting invalid altsetting 1 [ 648.492796][T15815] loop0: detected capacity change from 0 to 32768 [ 648.564926][T15815] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 648.579366][T15815] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 648.669677][T13321] cdc_ncm 3-1:1.0: bind() failure [ 648.697366][T15815] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 648.711961][T13321] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 648.735543][T13321] cdc_ncm 3-1:1.1: bind() failure [ 648.745151][ T48] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 648.771372][ T48] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 648.779572][ T5837] usb 6-1: USB disconnect, device number 112 [ 648.793563][T13321] usb 3-1: USB disconnect, device number 95 [ 649.004550][T15849] loop3: detected capacity change from 0 to 32768 [ 649.024848][ T48] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 253ms [ 649.045431][T15849] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4157 (15849) [ 649.061726][ T48] gfs2: fsid=syz:syz.0: jid=0: Done [ 649.068537][T15815] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 649.084722][T15849] BTRFS info (device loop3): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 649.101184][T15849] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 649.232767][T15849] BTRFS info (device loop3): enabling ssd optimizations [ 649.292960][T15849] BTRFS info (device loop3): enabling free space tree [ 649.309041][T15858] loop4: detected capacity change from 0 to 32768 [ 649.329673][T15858] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4160 (15858) [ 649.515451][T15858] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 649.537668][T15854] loop1: detected capacity change from 0 to 40427 [ 649.588794][T15854] F2FS-fs (loop1): Invalid log sectors per block(3) log sectorsize(12) [ 649.599398][T15858] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 649.632852][ T5827] BTRFS info (device loop3): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 649.653492][T15854] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 649.756688][T15854] F2FS-fs (loop1): Image doesn't support compression [ 649.779408][T15854] F2FS-fs (loop1): LFS is not compatible with ATGC [ 650.116588][T15858] BTRFS info (device loop4): enabling ssd optimizations [ 650.176014][T15858] BTRFS info (device loop4): enabling free space tree [ 650.669683][ T5828] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 650.699307][ T5837] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 650.799625][T15903] loop0: detected capacity change from 0 to 256 [ 650.912078][ T5837] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 650.946173][ T5837] usb 4-1: config 0 has no interface number 0 [ 650.984671][ T5837] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.080071][ T5837] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 651.144064][ T5837] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 651.229113][ T5837] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 651.312586][ T5837] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 651.359674][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.419361][ T5837] usb 4-1: Product: syz [ 651.423603][ T5837] usb 4-1: Manufacturer: syz [ 651.466298][ T5837] usb 4-1: SerialNumber: syz [ 651.535635][ T5837] usb 4-1: config 0 descriptor?? [ 651.546433][T15907] loop0: detected capacity change from 0 to 512 [ 651.565497][T15901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.599340][T15901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.706886][T15907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.912232][ T5837] mct_u232 4-1:0.139: MCT U232 converter detected [ 652.006455][ T5837] usb 4-1: MCT U232 converter now attached to ttyUSB0 [ 652.071622][ T5837] usb 4-1: USB disconnect, device number 2 [ 652.102061][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.155301][ T6709] udevd[6709]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 652.169487][ T5837] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 652.201377][ T5837] mct_u232 4-1:0.139: device disconnected [ 652.460007][T15915] loop0: detected capacity change from 0 to 64 [ 652.866940][T15917] loop3: detected capacity change from 0 to 64 [ 653.388489][T15923] loop3: detected capacity change from 0 to 1024 [ 653.579512][T15925] loop2: detected capacity change from 0 to 732 [ 654.250580][ T10] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 654.399126][T15913] loop4: detected capacity change from 0 to 32768 [ 654.431783][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 654.460327][ T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 654.487339][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.491390][T15920] loop0: detected capacity change from 0 to 32768 [ 654.506328][ T10] usb 3-1: Product: syz [ 654.516973][ T10] usb 3-1: Manufacturer: syz [ 654.518401][T15913] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 654.533539][ T10] usb 3-1: SerialNumber: syz [ 654.551596][ T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 654.571847][T15920] XFS (loop0): Invalid device [./bus], error=-2 [ 654.580438][T15913] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 654.663254][T15913] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 654.679758][T13888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 654.688022][T13888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 654.798701][ T10] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 654.862566][ T10] usb 3-1: USB disconnect, device number 96 [ 655.300242][T13888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 612ms [ 655.339733][T13888] gfs2: fsid=syz:syz.0: jid=0: Done [ 655.349742][T15913] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 655.393290][T15913] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 657.035190][T15938] loop0: detected capacity change from 0 to 32768 [ 657.084197][T15938] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4179 (15938) [ 657.175490][T15938] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 657.195136][T15942] loop5: detected capacity change from 0 to 2364 [ 657.228693][T15938] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 657.509928][T15938] BTRFS info (device loop0): enabling ssd optimizations [ 657.516969][T15938] BTRFS info (device loop0): enabling free space tree [ 657.705892][T15940] loop4: detected capacity change from 0 to 32768 [ 657.779369][T15940] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4180 (15940) [ 657.825568][T15940] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 657.869534][T15940] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 657.999828][ T5830] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 658.123675][T15940] BTRFS info (device loop4): enabling ssd optimizations [ 658.155031][T15940] BTRFS info (device loop4): enabling free space tree [ 658.491968][ T5828] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 659.446326][T15987] loop2: detected capacity change from 0 to 1156 [ 660.375558][T15960] loop3: detected capacity change from 0 to 32768 [ 660.461457][T15960] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 660.484134][T15960] dlm: no local IP address has been set [ 660.509741][T15960] dlm: cannot start dlm midcomms -107 [ 660.515188][T15960] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 660.892266][T15982] loop1: detected capacity change from 0 to 32768 [ 660.954239][T15982] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 660.970195][T15993] loop3: detected capacity change from 0 to 1024 [ 660.999556][T15982] dlm: no local IP address has been set [ 661.035622][T15982] dlm: cannot start dlm midcomms -107 [ 661.055988][T15982] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 661.575505][T16000] loop1: detected capacity change from 0 to 2 [ 661.656331][T16000] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 662.027452][T16003] loop1: detected capacity change from 0 to 64 [ 662.210796][T16005] loop0: detected capacity change from 0 to 1024 [ 662.266721][T16005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.490970][T15989] loop2: detected capacity change from 0 to 32768 [ 662.524767][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.547926][T15989] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 662.571185][T15989] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 662.746666][T15989] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 662.806868][T11789] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 662.837229][T11789] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 662.974476][T16015] loop0: detected capacity change from 0 to 2048 [ 663.046525][T16015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.099539][T16015] ext4 filesystem being mounted at /700/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.257213][T15997] loop5: detected capacity change from 0 to 32768 [ 663.320259][T16001] loop3: detected capacity change from 0 to 32768 [ 663.347623][T15997] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4191 (15997) [ 663.382994][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.424383][T16001] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4190 (16001) [ 663.468905][T15997] BTRFS info (device loop5): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 663.505109][T11789] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 667ms [ 663.526071][T15997] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 663.549073][T16001] BTRFS info (device loop3): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 663.549495][T11789] gfs2: fsid=syz:syz.0: jid=0: Done [ 663.593336][T15989] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 663.602914][T16001] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 663.651139][T15989] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 663.994896][T15997] BTRFS info (device loop5): enabling ssd optimizations [ 664.011660][T16001] BTRFS info (device loop3): enabling ssd optimizations [ 664.051542][T15997] BTRFS info (device loop5): enabling free space tree [ 664.069316][T16001] BTRFS info (device loop3): enabling free space tree [ 664.269714][T16013] loop4: detected capacity change from 0 to 32768 [ 664.341049][T16013] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4196 (16013) [ 664.406937][T16013] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 664.436157][ T5829] BTRFS info (device loop5): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 664.439501][T16013] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 664.494899][ T5827] BTRFS info (device loop3): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 664.630355][T16009] loop1: detected capacity change from 0 to 32768 [ 664.784437][T16009] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 664.832337][T16009] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 664.852559][T16013] BTRFS info (device loop4): enabling ssd optimizations [ 664.909564][T16013] BTRFS info (device loop4): enabling free space tree [ 665.022220][T16074] loop2: detected capacity change from 0 to 128 [ 665.065529][T16009] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 665.127871][T13888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 665.169267][T13888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 665.482334][ T5828] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 665.887690][T16034] loop0: detected capacity change from 0 to 32768 [ 665.977518][T13888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 808ms [ 666.033602][T16034] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4198 (16034) [ 666.086182][T13888] gfs2: fsid=syz:syz.0: jid=0: Done [ 666.123121][T16009] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 666.165592][T16009] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 666.198114][T16034] BTRFS info (device loop0): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 666.266229][T16083] loop2: detected capacity change from 0 to 8192 [ 666.287926][T16034] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 666.530759][T16097] loop4: detected capacity change from 0 to 128 [ 666.708806][T16034] BTRFS info (device loop0): enabling ssd optimizations [ 666.765989][T16034] BTRFS info (device loop0): enabling free space tree [ 667.181660][ T5830] BTRFS info (device loop0): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 667.321220][T16111] loop4: detected capacity change from 0 to 128 [ 667.804620][T16116] loop1: detected capacity change from 0 to 256 [ 667.948232][T16084] loop3: detected capacity change from 0 to 32768 [ 667.998320][T16084] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4205 (16084) [ 668.098989][T16084] BTRFS info (device loop3): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 668.153889][T16084] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 668.536061][T16119] loop4: detected capacity change from 0 to 8192 [ 668.570326][T16084] BTRFS info (device loop3): enabling ssd optimizations [ 668.619373][T16084] BTRFS info (device loop3): enabling free space tree [ 669.010269][ T5827] BTRFS info (device loop3): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 669.422570][T16139] loop4: detected capacity change from 0 to 8192 [ 669.597013][T16113] loop2: detected capacity change from 0 to 32768 [ 669.699558][T16113] (syz.2.4212,16113,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 669.771909][T16113] (syz.2.4212,16113,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 669.875450][T16113] JBD2: Ignoring recovery information on journal [ 670.125408][T16113] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 670.159011][T16144] loop4: detected capacity change from 0 to 4096 [ 670.333307][T16146] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.735708][ T5831] ocfs2: Unmounting device (7,2) on (node local) [ 670.880377][T16135] loop1: detected capacity change from 0 to 32768 [ 670.970951][T16135] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 671.024552][T16148] loop5: detected capacity change from 0 to 4096 [ 671.061047][T16135] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 671.083965][T16150] loop4: detected capacity change from 0 to 4096 [ 671.153261][T16135] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 671.183833][T16141] loop3: detected capacity change from 0 to 32768 [ 671.279347][T13321] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 671.289981][T13321] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 671.599030][T13321] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 309ms [ 671.638559][T13321] gfs2: fsid=syz:syz.0: jid=0: Done [ 671.667722][T16135] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 672.135195][T16156] loop3: detected capacity change from 0 to 4096 [ 672.206612][T16161] loop2: detected capacity change from 0 to 2048 [ 672.213236][T16156] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 672.348379][T16155] loop4: detected capacity change from 0 to 8192 [ 672.371668][T16163] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 672.399537][T16155] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 673.029577][T16167] loop2: detected capacity change from 0 to 2048 [ 673.757103][T16160] loop0: detected capacity change from 0 to 32768 [ 673.875248][T16162] loop5: detected capacity change from 0 to 32768 [ 673.900480][T16160] (syz.0.4224,16160,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 673.924053][T16160] (syz.0.4224,16160,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 674.231997][T16175] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 674.427668][T16177] loop0: detected capacity change from 0 to 64 [ 674.481132][T16165] loop3: detected capacity change from 0 to 32768 [ 674.550486][T16165] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4226 (16165) [ 674.650973][T16165] BTRFS info (device loop3): first mount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 674.675873][T16171] loop1: detected capacity change from 0 to 32768 [ 674.703628][T16165] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 674.849606][T16171] (syz.1.4225,16171,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 674.913454][T16171] (syz.1.4225,16171,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 675.026605][T16165] BTRFS info (device loop3): enabling ssd optimizations [ 675.079405][T16165] BTRFS info (device loop3): enabling free space tree [ 675.490087][ T5827] BTRFS info (device loop3): last unmount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 675.748402][T16179] loop5: detected capacity change from 0 to 16384 [ 675.941812][T16202] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 676.163942][T16173] loop2: detected capacity change from 0 to 32768 [ 676.409904][T16173] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 676.418125][T16173] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 676.526979][T16173] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 676.588109][T13888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 676.609589][T13888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 676.640685][T16207] loop4: detected capacity change from 0 to 22 [ 676.670634][T16207] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 676.770617][T16207] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 676.985236][T16191] loop0: detected capacity change from 0 to 32768 [ 677.088711][T16191] (syz.0.4232,16191,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 677.123677][T13888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 514ms [ 677.135221][T13888] gfs2: fsid=syz:syz.0: jid=0: Done [ 677.140586][T16173] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 677.160633][T16191] (syz.0.4232,16191,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 677.203764][T16173] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 677.368115][T16213] SQUASHFS error: Failed to read block 0x0: -5 [ 677.375914][T16213] unable to read squashfs_super_block [ 677.741448][T16215] loop4: detected capacity change from 0 to 8 [ 677.759970][T16217] loop0: detected capacity change from 0 to 8 [ 678.277734][T16219] SQUASHFS error: Failed to read block 0x0: -5 [ 678.299372][T16219] unable to read squashfs_super_block [ 678.405170][T16221] loop4: detected capacity change from 0 to 2048 [ 678.456246][T16221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 678.808587][T16225] loop0: detected capacity change from 0 to 2048 [ 678.923391][T16227] loop4: detected capacity change from 0 to 1024 [ 678.967836][T16228] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 679.035680][T16227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.113923][T16230] loop1: detected capacity change from 0 to 256 [ 679.187298][T16230] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 679.276273][T16230] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 679.326574][T16230] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 679.369243][T16230] UDF-fs: Scanning with blocksize 512 failed [ 679.429962][T16230] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 679.464912][T16232] loop0: detected capacity change from 0 to 256 [ 679.485133][T16230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.553232][T16232] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 679.591538][T16234] loop4: detected capacity change from 0 to 256 [ 679.596344][T16232] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 679.646951][T16232] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 679.671722][T16232] UDF-fs: Scanning with blocksize 512 failed [ 679.690523][T16234] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 679.698248][T16236] loop3: detected capacity change from 0 to 128 [ 679.728814][T16232] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 679.759487][T16236] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 679.778723][T16232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.798665][T16234] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 679.826568][T16236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.849234][T16234] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 679.856946][T16234] UDF-fs: Scanning with blocksize 512 failed [ 679.990345][T16234] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 680.078853][T16234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.087855][T16238] loop1: detected capacity change from 0 to 256 [ 680.123245][T16238] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 680.150535][T16223] loop2: detected capacity change from 0 to 32768 [ 680.184961][T16223] (syz.2.4240,16223,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 680.247002][T16238] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 680.247120][T16223] (syz.2.4240,16223,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 680.307061][T16238] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 680.354675][T16241] loop0: detected capacity change from 0 to 512 [ 680.362322][T16238] UDF-fs: Scanning with blocksize 512 failed [ 680.386982][T16241] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 680.423941][T16241] UDF-fs: Scanning with blocksize 512 failed [ 680.460708][T16238] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 680.487621][T16241] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 680.531239][T16238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.549384][T16241] UDF-fs: Scanning with blocksize 1024 failed [ 680.576185][T16243] loop3: detected capacity change from 0 to 4096 [ 680.633363][T16241] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 680.699278][T16243] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 680.709421][T16241] UDF-fs: Scanning with blocksize 2048 failed [ 680.736443][T16243] UDF-fs: Scanning with blocksize 512 failed [ 680.746678][T16241] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 680.822415][T16243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.848192][T16241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.877956][T16245] loop4: detected capacity change from 0 to 2048 [ 680.884937][T16247] loop5: detected capacity change from 0 to 128 [ 680.932447][T16247] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 681.007709][T16245] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 681.018045][T16247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.051965][T16245] UDF-fs: Scanning with blocksize 512 failed [ 681.135203][T16245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.167212][T16251] loop1: detected capacity change from 0 to 512 [ 681.221792][T16251] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 681.282380][T16251] UDF-fs: Scanning with blocksize 512 failed [ 681.369831][T16251] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 681.389540][T16251] UDF-fs: Scanning with blocksize 1024 failed [ 681.408056][T16253] loop3: detected capacity change from 0 to 512 [ 681.440312][T16253] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 681.470160][T16253] UDF-fs: Scanning with blocksize 512 failed [ 681.476935][T16251] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 681.503100][T16251] UDF-fs: Scanning with blocksize 2048 failed [ 681.519745][T16253] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 681.582591][T16253] UDF-fs: Scanning with blocksize 1024 failed [ 681.622823][T16251] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 681.633982][T16253] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 681.661563][T16251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.684756][T16253] UDF-fs: Scanning with blocksize 2048 failed [ 681.733752][T16257] loop5: detected capacity change from 0 to 512 [ 681.744193][T16253] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 681.757717][T16257] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 681.784859][T16257] UDF-fs: Scanning with blocksize 512 failed [ 681.806324][T16259] loop4: detected capacity change from 0 to 128 [ 681.834730][T16253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.844475][T16259] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 681.885989][T16257] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 681.896911][T16259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.932258][T16257] UDF-fs: Scanning with blocksize 1024 failed [ 681.963399][T16257] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 681.999283][T16257] UDF-fs: Scanning with blocksize 2048 failed [ 682.027962][T16257] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 682.092648][T16257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 682.373480][T16263] loop3: detected capacity change from 0 to 128 [ 682.487835][T16265] loop4: detected capacity change from 0 to 128 [ 682.845499][T16261] loop1: detected capacity change from 0 to 8192 [ 682.880386][T16269] loop3: detected capacity change from 0 to 512 [ 682.909309][T16261] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 683.378334][T16273] loop3: detected capacity change from 0 to 128 [ 683.485379][T16275] loop1: detected capacity change from 0 to 128 [ 683.806220][T16277] loop3: detected capacity change from 0 to 128 [ 683.851504][T16277] Invalid source name [ 683.855563][T16277] UBIFS error (pid: 16277): cannot open "/dev/loop3", error -22 [ 683.913959][T16279] loop1: detected capacity change from 0 to 1 [ 683.983544][T16279] syz.1.4269: attempt to access beyond end of device [ 683.983544][T16279] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 684.063352][T16279] SQUASHFS error: Failed to read block 0x0: -5 [ 684.118302][T16279] unable to read squashfs_super_block [ 684.490617][T16284] loop2: detected capacity change from 0 to 128 [ 684.498342][T16285] loop1: detected capacity change from 0 to 128 [ 685.016661][T16290] loop0: detected capacity change from 0 to 512 [ 685.108432][T16291] loop2: detected capacity change from 0 to 2048 [ 685.210989][T16291] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 685.259325][T16291] UDF-fs: Scanning with blocksize 512 failed [ 685.323954][T16291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.574108][T16293] loop0: detected capacity change from 0 to 2048 [ 686.146381][T16297] loop0: detected capacity change from 0 to 128 [ 686.194477][T16297] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 686.279868][T16297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.559501][T16295] loop2: detected capacity change from 0 to 16384 [ 686.599416][T16295] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 686.629373][T16295] UDF-fs: Scanning with blocksize 512 failed [ 686.662215][T16295] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 686.698359][T16295] UDF-fs: Scanning with blocksize 1024 failed [ 686.745598][T16295] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 686.774096][T16295] UDF-fs: Scanning with blocksize 2048 failed [ 686.833146][T16295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.532366][T16299] loop5: detected capacity change from 0 to 32768 [ 688.109372][T13321] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 688.289755][T13321] usb 4-1: Using ep0 maxpacket: 8 [ 688.307842][T13321] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 688.316996][T13321] usb 4-1: config 0 has no interface number 0 [ 688.335742][T13321] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 688.369330][T13321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.411711][T13321] usb 4-1: config 0 descriptor?? [ 688.508693][T16305] loop2: detected capacity change from 0 to 32768 [ 688.528774][T16311] loop1: detected capacity change from 0 to 256 [ 688.552664][T13321] viperboard 4-1:0.143: version 0.00 found at bus 004 address 003 [ 688.601393][T13321] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 688.609058][T16311] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 688.636263][T16305] (syz.2.4282,16305,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 688.645357][T13321] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 688.672284][T16305] (syz.2.4282,16305,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 688.704574][T16311] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 688.710263][T13321] usb 4-1: USB disconnect, device number 3 [ 688.766145][T16303] loop0: detected capacity change from 0 to 32768 [ 688.819253][T16311] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 688.888128][T16311] UDF-fs: Scanning with blocksize 512 failed [ 688.904484][T16303] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 688.943928][T16311] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 689.001727][T16303] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 689.027537][T16311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.161328][T16303] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 689.205202][T13888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 689.222246][T13888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 689.495116][T16301] loop4: detected capacity change from 0 to 65536 [ 689.702061][T13888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 479ms [ 689.717547][T16309] loop5: detected capacity change from 0 to 32768 [ 689.753617][T13888] gfs2: fsid=syz:syz.0: jid=0: Done [ 689.766610][T16303] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 689.795565][T16303] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 689.809960][T16309] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 689.976047][T16309] XFS (loop5): Ending clean mount [ 690.217179][ T5829] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 691.591891][T16341] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.4294' sets config #0 [ 692.045284][T16316] loop2: detected capacity change from 0 to 65536 [ 692.132171][T16316] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 695.337867][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.348023][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.618444][ T30] audit: type=1326 audit(1760511164.205:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16408 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 695.723666][ T30] audit: type=1326 audit(1760511164.205:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16408 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 695.817632][ T30] audit: type=1326 audit(1760511164.245:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16408 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 695.841787][T16416] loop5: detected capacity change from 0 to 512 [ 695.886996][ T30] audit: type=1326 audit(1760511164.245:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16408 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 695.965867][T16416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.991958][ T30] audit: type=1326 audit(1760511164.245:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16408 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 696.018706][T16416] ext4 filesystem being mounted at /724/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.037314][T16422] netlink: 'syz.4.4330': attribute type 2 has an invalid length. [ 696.047243][T16422] netlink: 'syz.4.4330': attribute type 1 has an invalid length. [ 696.194688][T16384] loop1: detected capacity change from 0 to 32768 [ 696.246603][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.271622][T16384] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 696.447356][T16384] XFS (loop1): Ending clean mount [ 696.556139][T16444] loop3: detected capacity change from 0 to 8 [ 696.622245][T16444] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 696.698288][ T6709] udevd[6709]: incorrect cramfs checksum on /dev/loop3 [ 696.741332][T16444] process 'syz.3.4337' launched './file2' with NULL argv: empty string added [ 696.782414][T16444] cramfs: Error -3 while decompressing! [ 696.782476][ T5832] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 696.788358][T16444] cramfs: ffffffff9ac07768(26)->ffff88804bdc5000(4096) [ 696.874408][T16444] cramfs: Error -3 while decompressing! [ 696.888244][T16444] cramfs: ffffffff9ac07782(26)->ffff888043887000(4096) [ 696.905793][T16444] cramfs: Error -3 while decompressing! [ 696.915609][T16444] cramfs: ffffffff9ac0779c(16)->ffff8880438d6000(4096) [ 696.931211][T16444] cramfs: Error -3 while decompressing! [ 696.936917][T16444] cramfs: ffffffff9ac07768(26)->ffff88804bdc5000(4096) [ 697.144887][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4344'. [ 697.359663][T16462] loop3: detected capacity change from 0 to 64 [ 697.824499][T16474] loop4: detected capacity change from 0 to 64 [ 698.344482][T16488] loop3: detected capacity change from 0 to 64 [ 698.448767][T16440] Bluetooth: hci5: command 0x0406 tx timeout [ 698.588657][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4363'. [ 698.654429][T16500] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4364'. [ 698.796060][T16502] netlink: 'syz.4.4366': attribute type 2 has an invalid length. [ 698.819302][T16502] netlink: 'syz.4.4366': attribute type 11 has an invalid length. [ 698.849347][T16502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4366'. [ 699.699365][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4381'. [ 699.732806][T16534] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 699.806667][T16538] netlink: 'syz.1.4384': attribute type 1 has an invalid length. [ 699.868237][T16537] loop2: detected capacity change from 0 to 512 [ 699.932415][T16537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.954248][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4385'. [ 700.049366][T16543] netlink: 'syz.4.4385': attribute type 5 has an invalid length. [ 700.058744][T16537] ext4 filesystem being mounted at /678/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 700.089345][T16543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4385'. [ 700.337494][T16543] geneve2: entered promiscuous mode [ 700.354144][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.357946][T16543] geneve2: entered allmulticast mode [ 700.404647][ T50] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 700.459337][ T193] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 700.468033][ T193] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 700.533741][ T193] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 700.573397][T16557] loop1: detected capacity change from 0 to 64 [ 700.599096][T16559] loop3: detected capacity change from 0 to 256 [ 700.616550][T16559] FAT-fs (loop3): count of clusters too big (178174) [ 700.653956][T16559] FAT-fs (loop3): Can't find a valid FAT filesystem [ 700.949363][T13888] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 701.163694][T13888] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 701.189323][T13888] usb 4-1: config 0 has no interface number 1 [ 701.208887][T13888] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 701.249145][T13888] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 701.281332][T13888] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 701.301390][T13888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 701.339238][T13888] usb 4-1: SerialNumber: syz [ 701.365579][T13888] usb 4-1: config 0 descriptor?? [ 701.592491][T13888] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 701.639650][T13888] uvcvideo 4-1:0.199: No valid video chain found. [ 701.713151][T13888] usb 4-1: USB disconnect, device number 4 [ 701.713886][ T30] audit: type=1107 audit(1760511170.285:21): pid=16586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 701.948256][T16597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4412'. [ 702.179582][T16599] netlink: 'syz.4.4413': attribute type 10 has an invalid length. [ 702.409615][ T30] audit: type=1400 audit(1760511170.995:22): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16604 comm="syz.5.4417" [ 702.519488][T16599] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 702.703279][T16615] netlink: 'syz.0.4421': attribute type 21 has an invalid length. [ 702.979389][T16624] loop4: detected capacity change from 0 to 64 [ 703.261750][T16631] loop2: detected capacity change from 0 to 1764 [ 703.373640][T16631] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 703.609387][T16645] loop3: detected capacity change from 0 to 256 [ 704.162085][T16659] unsupported nlmsg_type 40 [ 704.257769][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4446'. [ 704.482799][T16670] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 704.942887][T16688] loop1: detected capacity change from 0 to 512 [ 705.089922][T16688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.150793][T16688] ext4 filesystem being mounted at /721/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.265245][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.743701][T16714] loop4: detected capacity change from 0 to 1764 [ 706.556952][T16742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.564884][T16742] IPv6: NLM_F_CREATE should be set when creating new route [ 706.989002][T16747] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.4485'. [ 707.019394][T16747] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 707.411788][T16768] netlink: 'syz.1.4493': attribute type 5 has an invalid length. [ 708.207472][T16794] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 708.237483][ T30] audit: type=1326 audit(1760511176.825:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.3.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 708.268149][T16794] bond0: (slave lo): Error: Device can not be enslaved while up [ 708.324652][ T30] audit: type=1326 audit(1760511176.825:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.3.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 708.420230][ T5910] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 708.437911][ T30] audit: type=1326 audit(1760511176.825:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.3.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 708.531992][ T30] audit: type=1326 audit(1760511176.825:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.3.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 708.629338][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 708.634870][ T30] audit: type=1326 audit(1760511176.825:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.3.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 708.657208][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.676077][ T5910] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 708.697464][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.749051][ T5910] usb 2-1: config 0 has no interface number 0 [ 708.782273][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 708.799747][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.841913][ T5910] usb 2-1: Product: syz [ 708.846151][ T5910] usb 2-1: Manufacturer: syz [ 708.879652][ T5910] usb 2-1: SerialNumber: syz [ 708.921981][ T5910] usb 2-1: config 0 descriptor?? [ 708.942933][ T5910] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 708.979353][ T5910] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 709.021879][ T5910] uvcvideo 2-1:0.105: No valid video chain found. [ 709.026364][T16816] netlink: 'syz.3.4518': attribute type 11 has an invalid length. [ 709.136172][ T48] usb 2-1: USB disconnect, device number 110 [ 709.526094][T16831] loop0: detected capacity change from 0 to 2048 [ 709.632974][T16831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.633145][T16831] ext4 filesystem being mounted at /758/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.808504][T16831] fscrypt (loop0, inode 13): Error -61 getting encryption context [ 709.999318][T16845] loop1: detected capacity change from 0 to 16 [ 710.114573][T16845] erofs (device loop1): mounted with root inode @ nid 36. [ 710.133032][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.193098][T16850] Cannot find del_set index 2 as target [ 711.369485][T16881] Cannot find del_set index 0 as target [ 712.591373][T16912] loop5: detected capacity change from 0 to 128 [ 712.650060][T16912] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 712.685501][T16916] loop1: detected capacity change from 0 to 512 [ 712.694391][T16912] ext4 filesystem being mounted at /767/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 712.790885][T16922] loop0: detected capacity change from 0 to 8 [ 712.838053][T16916] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.4562: bg 0: block 248: padding at end of block bitmap is not set [ 712.874935][T16916] Quota error (device loop1): write_blk: dquota write failed [ 712.899444][T16916] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 712.912396][T16922] SQUASHFS error: Unable to read directory block [629:0] [ 712.983811][T16916] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.4562: Failed to acquire dquot type 1 [ 713.040627][T16849] loop4: detected capacity change from 0 to 65536 [ 713.069980][ T5829] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.083893][T16916] EXT4-fs (loop1): 1 truncate cleaned up [ 713.135635][T16916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.150742][T16849] (syz.4.4531,16849,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 713.169527][T16916] ext4 filesystem being mounted at /735/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.203991][T16929] ubi0: attaching mtd0 [ 713.209041][T16929] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 713.209544][T16849] (syz.4.4531,16849,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 713.598964][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.784691][T16943] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4574'. [ 714.234087][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4581'. [ 714.494735][T16966] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4584'. [ 714.558270][T16966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4584'. [ 714.622665][T16970] loop5: detected capacity change from 0 to 128 [ 714.679605][T16968] warning: `syz.0.4585' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 714.730785][T16970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 714.797307][T16970] System zones: 1-3, 19-19, 35-36 [ 714.870220][T16970] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 714.941828][T16970] ext4 filesystem being mounted at /771/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 715.295293][ T5829] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 715.503837][T16995] loop5: detected capacity change from 0 to 16 [ 715.553597][T16995] erofs (device loop5): mounted with root inode @ nid 36. [ 715.603295][T16995] erofs (device loop5): ztailpacking inline data across blocks @ nid 36 [ 715.658555][T16995] erofs (device loop5): ztailpacking inline data across blocks @ nid 36 [ 715.726438][T16995] erofs (device loop5): read error -117 @ 32811 of nid 36 [ 715.839758][T17002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4599'. [ 715.954576][T17006] loop1: detected capacity change from 0 to 128 [ 716.033250][T17006] FAT-fs (loop1): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 716.083542][T17006] FAT-fs (loop1): Directory bread(block 162) failed [ 716.139313][T17006] FAT-fs (loop1): Directory bread(block 163) failed [ 716.183700][T17006] FAT-fs (loop1): Directory bread(block 164) failed [ 716.231038][T17006] FAT-fs (loop1): Directory bread(block 165) failed [ 716.237745][T17006] FAT-fs (loop1): Directory bread(block 166) failed [ 716.319509][T17006] FAT-fs (loop1): Directory bread(block 167) failed [ 716.326208][T17006] FAT-fs (loop1): Directory bread(block 168) failed [ 716.419275][T17006] FAT-fs (loop1): Directory bread(block 169) failed [ 716.481597][T17006] FAT-fs (loop1): Directory bread(block 162) failed [ 716.518851][T17006] FAT-fs (loop1): Directory bread(block 163) failed [ 716.555488][T17006] syz.1.4601: attempt to access beyond end of device [ 716.555488][T17006] loop1: rw=3, sector=210, nr_sectors = 6 limit=128 [ 716.607556][T17006] syz.1.4601: attempt to access beyond end of device [ 716.607556][T17006] loop1: rw=2051, sector=216, nr_sectors = 2 limit=128 [ 716.777890][T17024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 716.865007][T17028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4610'. [ 716.885427][ T50] FAT-fs (loop1): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 717.091659][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 717.271788][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 717.322077][ T10] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.361558][ T10] usb 4-1: config 2 interface 0 has no altsetting 0 [ 717.372972][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 717.409668][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 717.439232][ T10] usb 4-1: SerialNumber: syz [ 717.695475][ T10] ims_pcu 4-1:2.0: Union descriptor too short (2 vs 5) [ 717.716294][ T10] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 717.726444][T17046] xt_ecn: cannot match TCP bits for non-tcp packets [ 717.762209][ T10] usb 4-1: USB disconnect, device number 5 [ 717.858372][T17045] loop2: detected capacity change from 0 to 4096 [ 717.935593][T17052] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.327332][T17053] loop0: detected capacity change from 0 to 4096 [ 718.409551][T17053] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 718.539485][T17063] Zero length message leads to an empty skb [ 718.630282][ T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 718.824826][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 718.883463][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 718.923578][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.980556][ T10] usb 5-1: config 0 descriptor?? [ 719.003238][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 719.102842][T17073] loop1: detected capacity change from 0 to 2048 [ 719.162457][T17073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.474126][ T10] gspca_nw80x: reg_r err -71 [ 719.478886][ T10] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 719.523480][ T10] usb 5-1: USB disconnect, device number 116 [ 719.552734][T17085] netlink: 'syz.2.4640': attribute type 49 has an invalid length. [ 719.685403][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4643'. [ 720.385013][T17110] loop0: detected capacity change from 0 to 164 [ 720.400392][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 720.529633][T17110] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 720.579300][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 720.588561][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 720.643576][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 720.683190][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 720.711704][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.771524][ T10] usb 4-1: Product: syz [ 720.775763][ T10] usb 4-1: Manufacturer: syz [ 720.799775][ T10] usb 4-1: SerialNumber: syz [ 720.815141][ T10] usb 4-1: config 0 descriptor?? [ 721.113996][T17128] netlink: 'syz.4.4660': attribute type 1 has an invalid length. [ 721.293109][ T10] usb 4-1: USB disconnect, device number 6 [ 722.098420][T17158] Unknown options in mask b7f2 [ 722.792409][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4686'. [ 722.837380][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4686'. [ 723.499726][ T5910] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 723.669628][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 723.710399][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.734248][ T5910] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 723.774398][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.809270][ T5910] usb 3-1: Product: syz [ 723.813492][ T5910] usb 3-1: Manufacturer: syz [ 723.818109][ T5910] usb 3-1: SerialNumber: syz [ 723.857773][ T5910] usb 3-1: config 0 descriptor?? [ 723.884623][ T5910] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 723.920045][ T5910] usb 3-1: selecting invalid altsetting 1 [ 724.060331][ T5838] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 724.314303][ T5910] usb 3-1: USB disconnect, device number 97 [ 724.706558][T17235] : renamed from bridge_slave_0 (while UP) [ 724.858209][T17239] overlayfs: unescaped trailing colons in lowerdir mount option. [ 725.160520][T17247] loop1: detected capacity change from 0 to 1024 [ 725.266548][T17247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.309279][ T48] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 725.469259][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 725.493176][ T30] audit: type=1326 audit(1760511194.085:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6178eec9 code=0x7ffc0000 [ 725.538641][ T48] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 725.561650][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.569337][ T48] usb 3-1: config 0 has no interface number 0 [ 725.586549][ T30] audit: type=1326 audit(1760511194.085:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6178eec9 code=0x7ffc0000 [ 725.638841][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 725.656555][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.693433][ T48] usb 3-1: Product: syz [ 725.699889][ T30] audit: type=1326 audit(1760511194.085:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fce6178eec9 code=0x7ffc0000 [ 725.729755][ T48] usb 3-1: Manufacturer: syz [ 725.734410][ T48] usb 3-1: SerialNumber: syz [ 725.780999][ T48] usb 3-1: config 0 descriptor?? [ 725.795012][ T30] audit: type=1326 audit(1760511194.085:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6178eec9 code=0x7ffc0000 [ 725.993672][ T48] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 726.003854][ T48] uvcvideo 3-1:0.31: Failed to initialize entity for entity 6 [ 726.040476][ T48] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 726.071962][T17267] loop1: detected capacity change from 0 to 2048 [ 726.161788][T17267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.215349][ T5837] usb 3-1: USB disconnect, device number 98 [ 726.276624][ T30] audit: type=1800 audit(1760511194.865:32): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4727" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 726.549926][T17277] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4734'. [ 726.597789][T17280] loop5: detected capacity change from 0 to 64 [ 726.609630][T17256] loop3: detected capacity change from 0 to 32768 [ 726.650371][T17280] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 726.662875][T17256] (syz.3.4723,17256,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 726.739859][T17256] (syz.3.4723,17256,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 726.888011][T17256] JBD2: Ignoring recovery information on journal [ 727.034613][T17256] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 727.053892][T17289] loop2: detected capacity change from 0 to 1024 [ 727.328114][ T60] hfsplus: b-tree write err: -5, ino 4 [ 727.500507][ T5827] ocfs2: Unmounting device (7,3) on (node local) [ 728.051047][ T48] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 728.239347][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 728.268647][ T48] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 728.290619][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.333828][ T48] usb 1-1: Product: syz [ 728.338097][ T48] usb 1-1: Manufacturer: syz [ 728.375192][ T48] usb 1-1: SerialNumber: syz [ 728.465942][ T48] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 728.566443][ T30] audit: type=1326 audit(1760511197.155:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17329 comm="syz.5.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c18d8eec9 code=0x7ffc0000 [ 728.650494][ T30] audit: type=1326 audit(1760511197.155:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17329 comm="syz.5.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c18d8eec9 code=0x7ffc0000 [ 728.787801][ T30] audit: type=1326 audit(1760511197.155:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17329 comm="syz.5.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f4c18d8eec9 code=0x7ffc0000 [ 728.856504][ T48] gspca_m5602: Failed to find a sensor [ 728.862156][ T48] ALi m5602 1-1:8.0: ALi m5602 webcam failed [ 728.909334][ T30] audit: type=1326 audit(1760511197.155:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17329 comm="syz.5.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c18d8eec9 code=0x7ffc0000 [ 728.941559][ T48] usb 1-1: USB disconnect, device number 118 [ 728.979524][ T30] audit: type=1326 audit(1760511197.155:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17329 comm="syz.5.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c18d8eec9 code=0x7ffc0000 [ 729.017172][T17340] loop5: detected capacity change from 0 to 1024 [ 729.139577][T17343] loop3: detected capacity change from 0 to 4096 [ 729.251935][T17349] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.693237][T17360] loop0: detected capacity change from 0 to 128 [ 729.769115][T17360] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 729.800819][T17360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 729.959377][ T48] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 730.088807][T17373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4777'. [ 730.119577][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4777'. [ 730.189741][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 730.230105][ T48] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 730.237597][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 730.289853][ T48] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 730.322002][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 730.389257][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 730.440504][ T48] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 730.448000][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 730.486996][ T48] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 730.549223][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 730.599968][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 730.630860][ T48] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 730.638948][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 730.678786][ T48] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 730.729220][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 730.789639][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 730.803569][T17389] loop5: detected capacity change from 0 to 256 [ 730.833107][ T48] usb 3-1: string descriptor 0 read error: -22 [ 730.844265][ T48] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 730.889362][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.965104][T17394] loop4: detected capacity change from 0 to 1024 [ 731.003583][ T48] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 731.229631][T13321] usb 3-1: USB disconnect, device number 99 [ 731.368977][T17367] loop1: detected capacity change from 0 to 32768 [ 731.401814][T17367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4775 (17367) [ 731.506138][T17367] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 731.553144][T17367] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 731.590681][T17405] comedi comedi0: comedi_config --init_data is deprecated [ 731.709741][ T5837] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 731.830821][T17367] BTRFS info (device loop1): enabling ssd optimizations [ 731.849362][T17367] BTRFS info (device loop1): enabling free space tree [ 731.904712][ T5837] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 731.934871][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 731.965528][ T5837] usb 5-1: Product: syz [ 731.979739][ T5837] usb 5-1: Manufacturer: syz [ 731.999242][ T5837] usb 5-1: SerialNumber: syz [ 732.026948][ T5837] usb 5-1: config 0 descriptor?? [ 732.091618][ T5837] usb 5-1: selecting invalid altsetting 1 [ 732.110750][T17429] CIFS: iocharset name too long [ 732.116306][ T5837] comedi comedi4: could not switch to alternate setting 1 [ 732.133986][ T5837] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 732.166781][ T5832] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 732.321158][ T10] usb 5-1: USB disconnect, device number 117 [ 732.880189][ T30] audit: type=1400 audit(1760511201.465:38): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=73226865645F737769746368 pid=17443 comm="syz.2.4804" [ 733.154878][T17451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4808'. [ 733.275842][T17406] loop5: detected capacity change from 0 to 32768 [ 733.421912][T17406] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 733.653540][T17406] XFS (loop5): Ending clean mount [ 733.659454][T17475] netlink: 'syz.0.4816': attribute type 2 has an invalid length. [ 733.956793][ T5829] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 733.999402][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4820'. [ 734.029556][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4820'. [ 735.191982][T17513] netlink: 'syz.4.4834': attribute type 10 has an invalid length. [ 735.249415][T17513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.297176][T17513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.383463][T17513] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 735.476775][T17519] loop3: detected capacity change from 0 to 64 [ 736.243951][T13321] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 736.440776][T13321] usb 1-1: Using ep0 maxpacket: 16 [ 736.463051][T13321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 736.471201][T17552] bridge_slave_0: left allmulticast mode [ 736.492332][T13321] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 736.497806][T17549] loop2: detected capacity change from 0 to 2048 [ 736.510447][T13321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.522446][T17552] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.544535][T13321] usb 1-1: Product: syz [ 736.564629][T13321] usb 1-1: Manufacturer: syz [ 736.586742][ T6209] Alternate GPT is invalid, using primary GPT. [ 736.591274][T13321] usb 1-1: SerialNumber: syz [ 736.604952][ T6209] loop2: p1 p2 p3 [ 736.619047][T13321] usb 1-1: config 0 descriptor?? [ 736.654544][T13321] hub 1-1:0.0: bad descriptor, ignoring hub [ 736.681529][T13321] hub 1-1:0.0: probe with driver hub failed with error -5 [ 736.704571][T13321] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46 [ 736.716013][T17556] autofs: Bad value for 'fd' [ 736.747711][T17549] Alternate GPT is invalid, using primary GPT. [ 736.793587][T17549] loop2: p1 p2 p3 [ 737.128825][ T6264] udevd[6264]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 737.142657][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 737.171184][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 737.344212][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 737.364178][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 737.384479][ T6264] udevd[6264]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 738.224799][T17558] loop5: detected capacity change from 0 to 32768 [ 738.238794][T17592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4874'. [ 738.280560][T17558] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4857 (17558) [ 738.398000][T17558] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 738.447154][T17558] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 738.718730][T17558] BTRFS info (device loop5): turning off barriers [ 738.743226][T17558] BTRFS info (device loop5): enabling free space tree [ 738.819269][T13321] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 738.977160][ T5829] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 739.002054][T13321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.036667][T13321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.058535][T13321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.072733][T17569] loop2: detected capacity change from 0 to 32768 [ 739.102653][T13321] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.138384][T13321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.196035][T13321] usb 4-1: config 0 descriptor?? [ 739.260825][T13321] hub 4-1:0.0: USB hub found [ 739.466243][T13321] hub 4-1:0.0: 14 ports detected [ 739.505670][T13321] hub 4-1:0.0: insufficient power available to use all downstream ports [ 739.679350][T13321] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 739.686196][T13321] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 739.801971][T13321] usb 4-1: USB disconnect, device number 7 [ 740.215465][T17643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4891'. [ 740.280518][ T48] usb 1-1: USB disconnect, device number 119 [ 740.544027][T17649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4894'. [ 740.646343][T17649] geneve2: entered promiscuous mode [ 740.655592][T17649] geneve2: entered allmulticast mode [ 740.700073][T17655] program syz.2.4897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 741.016482][T17661] netlink: 'syz.3.4899': attribute type 1 has an invalid length. [ 741.039438][T17625] loop1: detected capacity change from 0 to 32768 [ 741.065895][T17661] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4899'. [ 741.113359][T17625] [ 741.113359][T17625] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 741.113359][T17625] [ 741.213416][T17625] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 741.213416][T17625] [ 741.451400][ T50] read_mapping_page failed! [ 741.483919][ T50] ERROR: (device loop1): txAbort: [ 741.483919][ T50] [ 741.493045][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4905'. [ 741.509274][ T50] jfs_write_inode: jfs_commit_inode failed! [ 741.515377][ T5832] [ 741.515377][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 741.515377][ T5832] [ 741.561829][ T5832] [ 741.561829][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 741.561829][ T5832] [ 741.853636][T17674] ALSA: mixer_oss: invalid OSS volume '' [ 741.890868][T17674] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 741.906506][T17674] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 741.933083][T17674] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 741.979436][T17674] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 742.009295][T17674] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 742.061818][T17674] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 742.099345][T17674] ALSA: mixer_oss: invalid OSS volume '|~\' [ 742.126335][T17674] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 742.161749][T17674] ALSA: mixer_oss: invalid OSS volume 'I :' [ 742.198910][T17674] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 742.199493][T17652] loop5: detected capacity change from 0 to 32768 [ 742.214361][T17674] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 742.253364][T17674] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 742.292415][T17652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4895 (17652) [ 742.312110][T17674] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 742.358179][T17652] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 742.409320][T17652] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 742.635811][T17652] BTRFS info (device loop5): enabling ssd optimizations [ 742.677809][T17652] BTRFS info (device loop5): enabling free space tree [ 743.080559][ T5910] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 743.190217][ T5829] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 743.267999][ T5910] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 743.287120][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.295934][ T5910] usb 4-1: Product: syz [ 743.305645][ T5910] usb 4-1: Manufacturer: syz [ 743.345650][ T5910] usb 4-1: SerialNumber: syz [ 743.361512][ T5910] usb 4-1: config 0 descriptor?? [ 743.589711][T17731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4929'. [ 743.743030][T17737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4924'. [ 743.773836][T17737] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4924'. [ 743.792151][ T5910] usb 4-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 743.843915][ T5910] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 743.869740][ T5910] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 743.919799][ T5910] usb 4-1: USB disconnect, device number 8 [ 744.242404][T17747] tmpfs: Bad value for 'mpol' [ 744.892962][T17763] loop5: detected capacity change from 0 to 256 [ 744.941320][T17763] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 744.963088][T17769] netlink: 'syz.4.4946': attribute type 3 has an invalid length. [ 744.990306][T17766] netlink: 'syz.0.4944': attribute type 3 has an invalid length. [ 744.998838][T17766] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4944'. [ 745.250014][T17733] loop2: detected capacity change from 0 to 32768 [ 745.381220][T17733] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 745.684314][T17791] loop1: detected capacity change from 0 to 8 [ 745.732698][T17791] SQUASHFS error: Unable to read inode 0xe3 [ 745.779300][T17733] XFS (loop2): Ending clean mount [ 745.830933][T17733] XFS (loop2): Quotacheck needed: Please wait. [ 745.852824][T17796] comedi comedi0: rti800: a I/O base address must be specified [ 745.949114][T17733] XFS (loop2): Quotacheck: Done. [ 746.112937][ T5831] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 746.330651][T17807] loop0: detected capacity change from 0 to 256 [ 746.348549][T17807] exfat: Deprecated parameter 'namecase' [ 746.399465][T17807] exfat: Deprecated parameter 'utf8' [ 746.406976][T17809] syz.4.4962 uses old SIOCAX25GETINFO [ 746.460903][T17807] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 747.174134][T17829] loop3: detected capacity change from 0 to 256 [ 747.221663][T17829] exfat: Deprecated parameter 'utf8' [ 747.263458][T17822] loop0: detected capacity change from 0 to 4096 [ 747.353460][T17829] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 747.520165][T17833] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 747.527242][T17833] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 748.251035][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4978'. [ 748.283840][T17849] loop3: detected capacity change from 0 to 256 [ 748.319039][T17849] exfat: Deprecated parameter 'namecase' [ 748.361671][T17849] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 748.402238][T17823] loop1: detected capacity change from 0 to 32768 [ 748.451984][T17823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4969 (17823) [ 748.454375][T17849] fuse: Bad value for 'fd' [ 748.560531][T17823] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 748.629302][T17823] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 748.971782][T17823] BTRFS info (device loop1): enabling ssd optimizations [ 748.990768][T17823] BTRFS info (device loop1): enabling free space tree [ 749.198336][T17825] loop5: detected capacity change from 0 to 32768 [ 749.291434][T17825] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 749.305288][ T5832] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 749.345702][T17825] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 749.443285][T17883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 749.487169][T17883] block device autoloading is deprecated and will be removed. [ 749.530801][ T48] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 749.634840][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 749.712577][T17825] XFS (loop5): Ending clean mount [ 749.777161][ T48] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 749.799275][ T48] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 749.829276][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 749.858870][ T48] usb 5-1: config 220 has no interface number 2 [ 749.865317][ T10] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 749.865362][ T10] usb 4-1: config 0 has no interface number 0 [ 749.865426][ T10] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 749.868892][ T10] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 749.926188][ T48] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 749.931822][T17903] netlink: 'syz.2.4993': attribute type 5 has an invalid length. [ 749.995521][ T48] usb 5-1: config 220 interface 0 has no altsetting 0 [ 750.021110][ T48] usb 5-1: config 220 interface 76 has no altsetting 0 [ 750.023402][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.038169][ T5829] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 750.084977][ T48] usb 5-1: config 220 interface 1 has no altsetting 0 [ 750.088010][ T10] usb 4-1: Product: syz [ 750.111489][ T48] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 750.133702][ T10] usb 4-1: Manufacturer: syz [ 750.155989][ T10] usb 4-1: SerialNumber: syz [ 750.161457][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.161503][ T48] usb 5-1: Product: syz [ 750.161533][ T48] usb 5-1: Manufacturer: syz [ 750.161564][ T48] usb 5-1: SerialNumber: syz [ 750.308845][ T10] usb 4-1: config 0 descriptor?? [ 750.344987][ T10] redrat3 4-1:0.83: Couldn't find all endpoints [ 750.408824][ T48] usb 5-1: selecting invalid altsetting 0 [ 750.431287][ T48] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 750.486776][ T48] uvcvideo 5-1:220.0: No valid video chain found. [ 750.522716][T17911] ip6erspan0: entered promiscuous mode [ 750.540899][ T48] usb 5-1: selecting invalid altsetting 0 [ 750.546751][ T48] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 750.573756][ T5837] usb 4-1: USB disconnect, device number 9 [ 750.653743][ T48] usb 5-1: USB disconnect, device number 118 [ 751.922411][T17944] binder: 17943:17944 ioctl c018620b 0 returned -14 [ 751.974661][T17950] loop1: detected capacity change from 0 to 1024 [ 751.981729][T17952] IPv6: NLM_F_CREATE should be specified when creating new route [ 752.058015][T17950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.256610][T17950] EXT4-fs error (device loop1): ext4_generic_delete_entry:2667: inode #2: block 16: comm syz.1.5015: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 752.289379][T17950] EXT4-fs error (device loop1) in ext4_delete_entry:2739: Corrupt filesystem [ 752.629078][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.032454][ T30] audit: type=1326 audit(1760511450.621:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17979 comm="syz.4.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cad8eec9 code=0x7ffc0000 [ 753.169313][ T30] audit: type=1326 audit(1760511450.681:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17979 comm="syz.4.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fa2cad8eec9 code=0x7ffc0000 [ 753.202062][T17984] loop0: detected capacity change from 0 to 512 [ 753.281072][ T30] audit: type=1326 audit(1760511450.681:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17979 comm="syz.4.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cad8eec9 code=0x7ffc0000 [ 753.359755][ T30] audit: type=1326 audit(1760511450.681:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17979 comm="syz.4.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cad8eec9 code=0x7ffc0000 [ 753.412238][T17942] loop5: detected capacity change from 0 to 32768 [ 753.412291][T17984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.438737][T17942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5012 (17942) [ 753.482293][T17984] ext4 filesystem being mounted at /853/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.488610][T17942] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 753.516141][T17984] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.5030: corrupted xattr block 19: overlapping e_value [ 753.541239][T17942] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 753.566684][T17984] EXT4-fs (loop0): Remounting filesystem read-only [ 753.613674][ T30] audit: type=1800 audit(1760511451.191:43): pid=17984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5030" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 753.699514][ T5910] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 753.803210][T17942] BTRFS info (device loop5): turning on flush-on-commit [ 753.850389][T17942] BTRFS info (device loop5): enabling free space tree [ 753.860677][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 753.868236][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.913662][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 753.947888][ T5910] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 753.986089][ T5910] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 754.031463][ T5910] usb 3-1: Product: syz [ 754.035710][ T5910] usb 3-1: Manufacturer: syz [ 754.099240][ T5910] usb 3-1: SerialNumber: syz [ 754.124671][ T30] audit: type=1326 audit(1760511451.691:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18017 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 754.229290][T17942] BTRFS info (device loop5): balance: start [ 754.249304][ T30] audit: type=1326 audit(1760511451.701:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18017 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 754.298633][T17942] BTRFS info (device loop5): balance: ended with status: 0 [ 754.353985][ T30] audit: type=1326 audit(1760511451.711:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18017 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 754.378709][ T5910] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 754.415346][ T5910] visor 3-1:1.0: probe with driver visor failed with error -71 [ 754.461220][ T5910] usb 3-1: USB disconnect, device number 100 [ 754.511117][ T30] audit: type=1326 audit(1760511451.711:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18017 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 754.600464][ T30] audit: type=1326 audit(1760511451.711:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18017 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa854d8eec9 code=0x7ffc0000 [ 754.664459][ T5829] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 754.721764][T18029] loop4: detected capacity change from 0 to 512 [ 754.750880][T18029] EXT4-fs: Ignoring removed mblk_io_submit option [ 754.791442][T18029] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 754.812718][T18029] EXT4-fs (loop4): orphan cleanup on readonly fs [ 754.851992][T18029] EXT4-fs warning (device loop4): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 754.976453][T18029] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 755.000299][T18029] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.5044: bg 0: block 40: padding at end of block bitmap is not set [ 755.124860][T18029] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 755.155096][T18029] EXT4-fs (loop4): 1 truncate cleaned up [ 755.207774][T18029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 755.267720][T18042] binder: 18040:18042 ioctl c0306201 200000000380 returned -14 [ 755.353591][T18029] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.5044: bad symlink. [ 755.564345][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.131647][T18068] dlm: no locking on control device [ 756.780865][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.787257][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.699452][T18101] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 757.776846][T18116] loop4: detected capacity change from 0 to 64 [ 757.999288][T11789] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 758.045908][ T50] [ 758.048305][ T50] ====================================================== [ 758.055344][ T50] WARNING: possible circular locking dependency detected [ 758.062372][ T50] syzkaller #0 Not tainted [ 758.066795][ T50] ------------------------------------------------------ [ 758.073814][ T50] kworker/u8:3/50 is trying to acquire lock: [ 758.079793][ T50] ffff888050196f78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa5/0xcd0 [ 758.090571][ T50] [ 758.090571][ T50] but task is already holding lock: [ 758.097932][ T50] ffff888033dcc0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x310 [ 758.107322][ T50] [ 758.107322][ T50] which lock already depends on the new lock. [ 758.107322][ T50] [ 758.117727][ T50] [ 758.117727][ T50] the existing dependency chain (in reverse order) is: [ 758.126744][ T50] [ 758.126744][ T50] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 758.134696][ T50] __mutex_lock+0x193/0x1060 [ 758.139839][ T50] hfs_find_init+0x19c/0x310 [ 758.144981][ T50] hfs_ext_read_extent+0x19b/0x9e0 [ 758.150627][ T50] hfs_get_block+0x568/0x830 [ 758.155754][ T50] block_read_full_folio+0x457/0x850 [ 758.161586][ T50] filemap_read_folio+0xc8/0x2a0 [ 758.167071][ T50] do_read_cache_folio+0x263/0x5c0 [ 758.172727][ T50] read_cache_page+0x5b/0x160 [ 758.177950][ T50] __hfs_bnode_create+0x70b/0x9b0 [ 758.183522][ T50] hfs_bnode_find+0x2cc/0xd40 [ 758.188748][ T50] hfs_brec_find+0x3a2/0x650 [ 758.193882][ T50] hfs_brec_read+0x26/0x120 [ 758.198931][ T50] hfs_cat_find_brec+0xd8/0x2c0 [ 758.204312][ T50] hfs_fill_super+0x524/0x800 [ 758.209539][ T50] get_tree_bdev_flags+0x38c/0x620 [ 758.215195][ T50] vfs_get_tree+0x8e/0x340 [ 758.220146][ T50] path_mount+0x7b9/0x23a0 [ 758.225088][ T50] __x64_sys_mount+0x293/0x310 [ 758.230374][ T50] do_syscall_64+0xcd/0xfa0 [ 758.235407][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.241834][ T50] [ 758.241834][ T50] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 758.251070][ T50] __lock_acquire+0x12a6/0x1ce0 [ 758.256488][ T50] lock_acquire+0x179/0x350 [ 758.261523][ T50] __mutex_lock+0x193/0x1060 [ 758.266671][ T50] hfs_extend_file+0xa5/0xcd0 [ 758.271885][ T50] hfs_bmap_reserve+0x2ab/0x3a0 [ 758.277298][ T50] __hfs_ext_write_extent+0x3cf/0x520 [ 758.283205][ T50] hfs_ext_write_extent+0x1b5/0x1f0 [ 758.288948][ T50] hfs_write_inode+0xcc/0xab0 [ 758.294167][ T50] __writeback_single_inode+0xb3e/0xfb0 [ 758.300349][ T50] writeback_sb_inodes+0x60d/0xfa0 [ 758.305999][ T50] wb_writeback+0x419/0xb70 [ 758.311034][ T50] wb_workfn+0x14d/0xbe0 [ 758.315814][ T50] process_one_work+0x9cf/0x1b70 [ 758.321286][ T50] worker_thread+0x6c8/0xf10 [ 758.326408][ T50] kthread+0x3c5/0x780 [ 758.331010][ T50] ret_from_fork+0x675/0x7d0 [ 758.336156][ T50] ret_from_fork_asm+0x1a/0x30 [ 758.341454][ T50] [ 758.341454][ T50] other info that might help us debug this: [ 758.341454][ T50] [ 758.351682][ T50] Possible unsafe locking scenario: [ 758.351682][ T50] [ 758.359127][ T50] CPU0 CPU1 [ 758.364492][ T50] ---- ---- [ 758.369854][ T50] lock(&tree->tree_lock/1); [ 758.374557][ T50] lock(&HFS_I(tree->inode)->extents_lock); [ 758.383070][ T50] lock(&tree->tree_lock/1); [ 758.390297][ T50] lock(&HFS_I(tree->inode)->extents_lock); [ 758.396286][ T50] [ 758.396286][ T50] *** DEADLOCK *** [ 758.396286][ T50] [ 758.404422][ T50] 3 locks held by kworker/u8:3/50: [ 758.409536][ T50] #0: ffff888021689948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 758.420303][ T50] #1: ffffc90000bb7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 758.432202][ T50] #2: ffff888033dcc0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x310 [ 758.442033][ T50] [ 758.442033][ T50] stack backtrace: [ 758.447923][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 758.447965][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 758.447990][ T50] Workqueue: writeback wb_workfn (flush-7:4) [ 758.448047][ T50] Call Trace: [ 758.448061][ T50] [ 758.448075][ T50] dump_stack_lvl+0x116/0x1f0 [ 758.448118][ T50] print_circular_bug+0x275/0x350 [ 758.448179][ T50] check_noncircular+0x14c/0x170 [ 758.448240][ T50] __lock_acquire+0x12a6/0x1ce0 [ 758.448306][ T50] lock_acquire+0x179/0x350 [ 758.448336][ T50] ? hfs_extend_file+0xa5/0xcd0 [ 758.448376][ T50] ? __pfx___might_resched+0x10/0x10 [ 758.448425][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.448476][ T50] ? hfs_extend_file+0xa5/0xcd0 [ 758.448510][ T50] __mutex_lock+0x193/0x1060 [ 758.448553][ T50] ? hfs_extend_file+0xa5/0xcd0 [ 758.448587][ T50] ? __lock_acquire+0x107f/0x1ce0 [ 758.448648][ T50] ? __pfx___mutex_lock+0x10/0x10 [ 758.448696][ T50] ? __pfx___might_resched+0x10/0x10 [ 758.448741][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.448783][ T50] ? rcu_is_watching+0x12/0xc0 [ 758.448831][ T50] ? hfs_extend_file+0xa5/0xcd0 [ 758.448865][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.448907][ T50] hfs_extend_file+0xa5/0xcd0 [ 758.448946][ T50] ? __pfx_hfs_extend_file+0x10/0x10 [ 758.448981][ T50] ? hfs_brec_find+0x4dc/0x650 [ 758.449039][ T50] hfs_bmap_reserve+0x2ab/0x3a0 [ 758.449095][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.449143][ T50] __hfs_ext_write_extent+0x3cf/0x520 [ 758.449182][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.449227][ T50] hfs_ext_write_extent+0x1b5/0x1f0 [ 758.449264][ T50] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 758.449305][ T50] ? blk_finish_plug+0x16/0xa0 [ 758.449360][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.449401][ T50] ? mpage_writepages+0x159/0x1c0 [ 758.449449][ T50] ? __pfx_mpage_writepages+0x10/0x10 [ 758.449503][ T50] hfs_write_inode+0xcc/0xab0 [ 758.449545][ T50] ? __pfx_hfs_write_inode+0x10/0x10 [ 758.449584][ T50] ? __lock_acquire+0xb97/0x1ce0 [ 758.449643][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.449685][ T50] ? __lock_acquire+0xb97/0x1ce0 [ 758.449748][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.449795][ T50] __writeback_single_inode+0xb3e/0xfb0 [ 758.449841][ T50] ? __pfx___writeback_single_inode+0x10/0x10 [ 758.449882][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.449924][ T50] ? do_raw_spin_unlock+0x172/0x230 [ 758.449963][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450008][ T50] writeback_sb_inodes+0x60d/0xfa0 [ 758.450060][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 758.450102][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450173][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450215][ T50] ? rcu_is_watching+0x12/0xc0 [ 758.450259][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450301][ T50] ? queue_io+0x3f6/0x520 [ 758.450337][ T50] wb_writeback+0x419/0xb70 [ 758.450382][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 758.450422][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450474][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450516][ T50] ? mark_held_locks+0x49/0x80 [ 758.450573][ T50] wb_workfn+0x14d/0xbe0 [ 758.450618][ T50] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 758.450657][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 758.450701][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450746][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450791][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.450831][ T50] ? rcu_is_watching+0x12/0xc0 [ 758.450879][ T50] process_one_work+0x9cf/0x1b70 [ 758.450926][ T50] ? __pfx_process_one_work+0x10/0x10 [ 758.450963][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.451010][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.451053][ T50] ? assign_work+0x1a0/0x250 [ 758.451087][ T50] worker_thread+0x6c8/0xf10 [ 758.451134][ T50] ? __pfx_worker_thread+0x10/0x10 [ 758.451171][ T50] kthread+0x3c5/0x780 [ 758.451205][ T50] ? __pfx_kthread+0x10/0x10 [ 758.451238][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.451279][ T50] ? rcu_is_watching+0x12/0xc0 [ 758.451323][ T50] ? __pfx_kthread+0x10/0x10 [ 758.451356][ T50] ret_from_fork+0x675/0x7d0 [ 758.451412][ T50] ? __pfx_kthread+0x10/0x10 [ 758.451445][ T50] ret_from_fork_asm+0x1a/0x30 [ 758.451500][ T50] [ 758.476652][T18122] loop3: detected capacity change from 0 to 2048 [ 758.476906][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.885923][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.902025][T18124] tmpfs: Bad value for 'mpol' [ 758.910332][T11789] usb 1-1: Using ep0 maxpacket: 8 [ 758.917625][T11789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 758.927127][T11789] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 758.971472][T11789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 758.998900][T11789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 759.001667][T18105] loop5: detected capacity change from 0 to 32768 [ 759.031919][ T50] hfs: new node 0 already hashed? [ 759.037580][ T50] ------------[ cut here ]------------ [ 759.043096][ T50] WARNING: CPU: 0 PID: 50 at fs/hfs/bnode.c:520 hfs_bnode_create+0x14c/0x5e0 [ 759.052009][ T50] Modules linked in: [ 759.055931][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 759.065301][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 759.075427][ T50] Workqueue: writeback wb_workfn (flush-7:4) [ 759.082323][ T50] RIP: 0010:hfs_bnode_create+0x14c/0x5e0 [ 759.088021][ T50] Code: e9 18 ff 45 39 fc 75 9e e8 91 ee 18 ff 4c 89 f7 e8 b9 73 c2 08 e8 84 ee 18 ff 44 89 e6 48 c7 c7 60 d9 aa 8b e8 c5 42 f7 fe 90 <0f> 0b 90 e8 6c ee 18 ff 48 89 d8 48 83 c4 28 5b 5d 41 5c 41 5d 41 [ 759.096905][T11789] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 759.108482][ T50] RSP: 0018:ffffc90000bb7070 EFLAGS: 00010286 [ 759.123701][ T50] RAX: 000000000000001f RBX: ffff888027708300 RCX: ffffffff819acb09 [ 759.131781][ T50] RDX: 0000000000000000 RSI: ffffffff819b4636 RDI: 0000000000000005 [ 759.139826][ T50] RBP: ffff888033dcc000 R08: 0000000000000005 R09: 0000000000000000 [ 759.147871][ T50] R10: 0000000080000000 R11: 77656e203a736668 R12: 0000000000000000 [ 759.155924][ T50] R13: dffffc0000000000 R14: ffff888033dcc0e0 R15: 0000000000000000 [ 759.163993][ T50] FS: 0000000000000000(0000) GS:ffff8881249e0000(0000) knlGS:0000000000000000 [ 759.173173][ T50] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.180512][ T50] CR2: 000000110c2e3f0c CR3: 0000000029493000 CR4: 0000000000350ef0 [ 759.189243][ T50] Call Trace: [ 759.192541][ T50] [ 759.195545][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.201279][ T50] ? hfs_bnode_put+0x20c/0x460 [ 759.206100][ T50] hfs_bmap_alloc+0x7d7/0x960 [ 759.210871][ T50] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 759.214062][T11789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 759.216115][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.231517][ T50] ? hfs_bnode_read.part.0+0x16b/0x5d0 [ 759.237027][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.241482][T11789] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 50 [ 759.242760][ T50] ? const_folio_flags+0x5b/0x100 [ 759.257509][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.263268][ T50] ? folio_mark_accessed+0xc1/0xc00 [ 759.267078][T11789] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 759.268520][ T50] hfs_btree_inc_height.isra.0+0xff/0x820 [ 759.284089][ T50] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 759.291220][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.291627][T11789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.296951][ T50] ? _raw_spin_unlock+0x28/0x50 [ 759.309847][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.315549][ T50] ? hfs_bnode_put+0x20c/0x460 [ 759.320438][ T50] hfs_brec_insert+0x8b1/0xc40 [ 759.325270][ T50] ? __pfx_hfs_brec_insert+0x10/0x10 [ 759.330680][ T50] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 759.335788][ T50] __hfs_ext_write_extent+0x3fa/0x520 [ 759.339249][T11789] usb 1-1: Product: syz [ 759.341240][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.347627][T11789] usb 1-1: Manufacturer: syz [ 759.351056][ T50] hfs_ext_write_extent+0x1b5/0x1f0 [ 759.360899][ T50] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 759.364705][T11789] usb 1-1: SerialNumber: syz [ 759.366679][ T50] ? blk_finish_plug+0x16/0xa0 [ 759.376037][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.382044][ T50] ? mpage_writepages+0x159/0x1c0 [ 759.387846][ T50] ? __pfx_mpage_writepages+0x10/0x10 [ 759.393910][ T50] hfs_write_inode+0xcc/0xab0 [ 759.396050][T11789] usb 1-1: config 0 descriptor?? [ 759.398643][ T50] ? __pfx_hfs_write_inode+0x10/0x10 [ 759.408885][ T50] ? __lock_acquire+0xb97/0x1ce0 [ 759.413950][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.419654][ T50] ? __lock_acquire+0xb97/0x1ce0 [ 759.424662][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.430358][T18114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 759.430394][ T50] __writeback_single_inode+0xb3e/0xfb0 [ 759.438415][T18114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 759.443043][ T50] ? __pfx___writeback_single_inode+0x10/0x10 [ 759.456209][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.461971][ T50] ? do_raw_spin_unlock+0x172/0x230 [ 759.467204][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.470180][T11789] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.472918][ T50] writeback_sb_inodes+0x60d/0xfa0 [ 759.484965][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 759.491338][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.497723][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.503446][ T50] ? rcu_is_watching+0x12/0xc0 [ 759.508257][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.514018][ T50] ? queue_io+0x3f6/0x520 [ 759.518391][ T50] wb_writeback+0x419/0xb70 [ 759.523260][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 759.528374][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.534106][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.539819][ T50] ? mark_held_locks+0x49/0x80 [ 759.544649][ T50] wb_workfn+0x14d/0xbe0 [ 759.548979][ T50] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 759.554862][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 759.559812][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.565560][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.571397][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.577095][ T50] ? rcu_is_watching+0x12/0xc0 [ 759.581981][ T50] process_one_work+0x9cf/0x1b70 [ 759.586967][ T50] ? __pfx_process_one_work+0x10/0x10 [ 759.593055][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.599384][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.605055][ T50] ? assign_work+0x1a0/0x250 [ 759.609733][ T50] worker_thread+0x6c8/0xf10 [ 759.614380][ T50] ? __pfx_worker_thread+0x10/0x10 [ 759.619545][ T50] kthread+0x3c5/0x780 [ 759.623644][ T50] ? __pfx_kthread+0x10/0x10 [ 759.628247][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.633967][ T50] ? rcu_is_watching+0x12/0xc0 [ 759.638772][ T50] ? __pfx_kthread+0x10/0x10 [ 759.643433][ T50] ret_from_fork+0x675/0x7d0 [ 759.648122][ T50] ? __pfx_kthread+0x10/0x10 [ 759.652796][ T50] ret_from_fork_asm+0x1a/0x30 [ 759.657616][ T50] [ 759.660704][ T50] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 759.668009][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 759.677320][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 759.687397][ T50] Workqueue: writeback wb_workfn (flush-7:4) [ 759.693441][ T50] Call Trace: [ 759.696727][ T50] [ 759.699657][ T50] dump_stack_lvl+0x3d/0x1f0 [ 759.704455][ T50] vpanic+0x640/0x6f0 [ 759.708496][ T50] ? hfs_bnode_create+0x14c/0x5e0 [ 759.713562][ T50] panic+0xca/0xd0 [ 759.717330][ T50] ? __pfx_panic+0x10/0x10 [ 759.721801][ T50] ? check_panic_on_warn+0x1f/0xb0 [ 759.726957][ T50] check_panic_on_warn+0xab/0xb0 [ 759.731940][ T50] __warn+0xf6/0x3c0 [ 759.735847][ T50] ? hfs_bnode_create+0x14c/0x5e0 [ 759.740917][ T50] report_bug+0x3c3/0x580 [ 759.745265][ T50] ? hfs_bnode_create+0x14c/0x5e0 [ 759.750420][ T50] handle_bug+0x184/0x210 [ 759.754777][ T50] exc_invalid_op+0x17/0x50 [ 759.759317][ T50] asm_exc_invalid_op+0x1a/0x20 [ 759.764186][ T50] RIP: 0010:hfs_bnode_create+0x14c/0x5e0 [ 759.769848][ T50] Code: e9 18 ff 45 39 fc 75 9e e8 91 ee 18 ff 4c 89 f7 e8 b9 73 c2 08 e8 84 ee 18 ff 44 89 e6 48 c7 c7 60 d9 aa 8b e8 c5 42 f7 fe 90 <0f> 0b 90 e8 6c ee 18 ff 48 89 d8 48 83 c4 28 5b 5d 41 5c 41 5d 41 [ 759.789488][ T50] RSP: 0018:ffffc90000bb7070 EFLAGS: 00010286 [ 759.795575][ T50] RAX: 000000000000001f RBX: ffff888027708300 RCX: ffffffff819acb09 [ 759.803551][ T50] RDX: 0000000000000000 RSI: ffffffff819b4636 RDI: 0000000000000005 [ 759.811534][ T50] RBP: ffff888033dcc000 R08: 0000000000000005 R09: 0000000000000000 [ 759.819514][ T50] R10: 0000000080000000 R11: 77656e203a736668 R12: 0000000000000000 [ 759.827494][ T50] R13: dffffc0000000000 R14: ffff888033dcc0e0 R15: 0000000000000000 [ 759.835488][ T50] ? __wake_up_klogd.part.0+0x99/0xf0 [ 759.840878][ T50] ? vprintk_emit+0x1e6/0x680 [ 759.845581][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.851231][ T50] ? hfs_bnode_put+0x20c/0x460 [ 759.856027][ T50] hfs_bmap_alloc+0x7d7/0x960 [ 759.860723][ T50] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 759.865928][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.871577][ T50] ? hfs_bnode_read.part.0+0x16b/0x5d0 [ 759.877061][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.882710][ T50] ? const_folio_flags+0x5b/0x100 [ 759.887759][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.893413][ T50] ? folio_mark_accessed+0xc1/0xc00 [ 759.898658][ T50] hfs_btree_inc_height.isra.0+0xff/0x820 [ 759.904417][ T50] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 759.910787][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.916451][ T50] ? _raw_spin_unlock+0x28/0x50 [ 759.921322][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.926972][ T50] ? hfs_bnode_put+0x20c/0x460 [ 759.931785][ T50] hfs_brec_insert+0x8b1/0xc40 [ 759.936604][ T50] ? __pfx_hfs_brec_insert+0x10/0x10 [ 759.941918][ T50] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 759.946979][ T50] __hfs_ext_write_extent+0x3fa/0x520 [ 759.952366][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.958033][ T50] hfs_ext_write_extent+0x1b5/0x1f0 [ 759.963244][ T50] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 759.968986][ T50] ? blk_finish_plug+0x16/0xa0 [ 759.973786][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 759.979464][ T50] ? mpage_writepages+0x159/0x1c0 [ 759.984533][ T50] ? __pfx_mpage_writepages+0x10/0x10 [ 759.989934][ T50] hfs_write_inode+0xcc/0xab0 [ 759.994633][ T50] ? __pfx_hfs_write_inode+0x10/0x10 [ 759.999932][ T50] ? __lock_acquire+0xb97/0x1ce0 [ 760.004912][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.010566][ T50] ? __lock_acquire+0xb97/0x1ce0 [ 760.015554][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.021217][ T50] __writeback_single_inode+0xb3e/0xfb0 [ 760.026800][ T50] ? __pfx___writeback_single_inode+0x10/0x10 [ 760.032898][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.038559][ T50] ? do_raw_spin_unlock+0x172/0x230 [ 760.044563][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.050224][ T50] writeback_sb_inodes+0x60d/0xfa0 [ 760.055379][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 760.061032][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.066713][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.072361][ T50] ? rcu_is_watching+0x12/0xc0 [ 760.077149][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.082800][ T50] ? queue_io+0x3f6/0x520 [ 760.087149][ T50] wb_writeback+0x419/0xb70 [ 760.091672][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 760.096711][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.102368][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.108020][ T50] ? mark_held_locks+0x49/0x80 [ 760.112819][ T50] wb_workfn+0x14d/0xbe0 [ 760.117084][ T50] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 760.122908][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 760.127694][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.133436][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.139702][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.145357][ T50] ? rcu_is_watching+0x12/0xc0 [ 760.150146][ T50] process_one_work+0x9cf/0x1b70 [ 760.155107][ T50] ? __pfx_process_one_work+0x10/0x10 [ 760.160491][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.166146][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.171815][ T50] ? assign_work+0x1a0/0x250 [ 760.176419][ T50] worker_thread+0x6c8/0xf10 [ 760.181076][ T50] ? __pfx_worker_thread+0x10/0x10 [ 760.186200][ T50] kthread+0x3c5/0x780 [ 760.190276][ T50] ? __pfx_kthread+0x10/0x10 [ 760.194874][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 760.200523][ T50] ? rcu_is_watching+0x12/0xc0 [ 760.205311][ T50] ? __pfx_kthread+0x10/0x10 [ 760.209921][ T50] ret_from_fork+0x675/0x7d0 [ 760.214554][ T50] ? __pfx_kthread+0x10/0x10 [ 760.219163][ T50] ret_from_fork_asm+0x1a/0x30 [ 760.223953][ T50] [ 760.227236][ T50] Kernel Offset: disabled [ 760.231558][ T50] Rebooting in 86400 seconds..