last executing test programs: 5.270849494s ago: executing program 2 (id=1206): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x1000016, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) lseek(r0, 0xffffffffcc5fced7, 0x0) 5.161011572s ago: executing program 2 (id=1207): r0 = syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902850001010000000904000012020600000b24060000b819b958fd1d05240000000d240f0104000000000000000007240a02a0050108241c000002feff0c241b010001000e060800081524127706a317a88b045e4f01a607c0ffcb7e392a0424020007240a02087f06090581030004020007090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0xb, @string={0xb, 0x3, "e50fa70fdb31161883"}}, 0x0, 0x0, 0x0}, 0x0) 3.303033595s ago: executing program 0 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x37, 0x4000}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'wg2\x00'}) 3.062467515s ago: executing program 0 (id=1219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x129080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000023, 0x0, 0x45}]}) 3.058984636s ago: executing program 2 (id=1220): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000a40)='NX.', 0x3}, {0x0}], 0x2) 2.769353655s ago: executing program 0 (id=1221): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xed]}, 0x8) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x2000}], 0x2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r0, &(0x7f0000000080)={[0x81]}, 0x8, 0x0) 1.889328083s ago: executing program 0 (id=1223): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@deltaction={0xe8, 0x31, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4034da45}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x21e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.805668266s ago: executing program 0 (id=1224): ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000380)={0x0, 0x3}) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x30, 0x4, 0x1) 1.796525698s ago: executing program 1 (id=1225): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2, 0x10}, 0xc) 1.769732013s ago: executing program 3 (id=1226): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x200c}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 1.714139212s ago: executing program 0 (id=1227): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xb, "f2"}]}}, 0x0}, 0x0) 1.659857101s ago: executing program 1 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x37, 0x4000}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'wg2\x00'}) 1.610429399s ago: executing program 3 (id=1229): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.491083349s ago: executing program 1 (id=1230): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x8, "3dac5cc77601"}]}}}}}}}}, 0x0) 1.380025218s ago: executing program 2 (id=1231): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x0, 0x0, 0x0, 0x15b76fa0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x0, 0x3}, 0x10}, 0x94) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x82) 1.305825841s ago: executing program 1 (id=1232): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT, @ANYRES64], 0x1, 0x1282, &(0x7f0000002880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 1.228100534s ago: executing program 2 (id=1233): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 856.309556ms ago: executing program 1 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0011022, 0x0, 0xffffffffffffc586}]}) 772.53833ms ago: executing program 3 (id=1235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0x6e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) 500.215326ms ago: executing program 3 (id=1236): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 401.840522ms ago: executing program 1 (id=1237): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x6, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0x0, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x2}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x3}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f00000005c0)={0x20, 0x82, 0x2, "0da0"}, &(0x7f0000000600)={0x20, 0x83, 0x1, '*'}, &(0x7f0000000640)={0x20, 0x84, 0x1, "f6"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "ec1c55"}}) 371.583148ms ago: executing program 3 (id=1238): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x3, 0xf00, 0x10000) 193.167907ms ago: executing program 3 (id=1239): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) link(&(0x7f0000000200)='./file3\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 2 (id=1240): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001cc0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000100)=""/84, 0x54, 0x7984e2f2) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): RFS info (device loop0): using free space tree [ 109.038812][ T6887] BTRFS info (device loop0): enabling ssd optimizations [ 109.064464][ T6887] BTRFS info (device loop0): auto enabling async discard [ 109.420617][ T5768] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 109.510827][ T6909] loop3: detected capacity change from 0 to 32768 [ 109.557978][ T6909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.423 (6909) [ 109.662987][ T6909] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.668940][ T6667] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop0 scanned by udevd (6667) [ 109.703397][ T6909] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 109.742223][ T6909] BTRFS info (device loop3): force clearing of disk cache [ 109.766841][ T6909] BTRFS info (device loop3): max_inline at 0 [ 109.796426][ T6909] BTRFS info (device loop3): enabling auto defrag [ 109.817928][ T6909] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.861510][ T6909] BTRFS info (device loop3): force zstd compression, level 3 [ 109.899816][ T6909] BTRFS info (device loop3): enabling disk space caching [ 109.934487][ T6909] BTRFS info (device loop3): disk space caching is enabled [ 110.169457][ T6909] BTRFS info (device loop3): enabling ssd optimizations [ 110.234091][ T6909] BTRFS info (device loop3): auto enabling async discard [ 110.267417][ T6909] BTRFS info (device loop3): rebuilding free space tree [ 110.432982][ T6909] BTRFS info (device loop3): disabling free space tree [ 110.460668][ T6909] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.494542][ T6909] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.619702][ T6953] loop1: detected capacity change from 0 to 32768 [ 110.812899][ T6953] JBD2: Ignoring recovery information on journal [ 110.823469][ T6962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.843408][ T11] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 110.902636][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.936543][ T6953] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.225806][ T6953] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 111.260131][ T6952] loop2: detected capacity change from 0 to 32768 [ 111.294833][ T6952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.434 (6952) [ 111.307235][ T6953] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 111.307273][ T6953] OCFS2: File system is now read-only. [ 111.307288][ T6953] (syz.1.433,6953,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 111.307409][ T6953] (syz.1.433,6953,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 111.307439][ T6953] (syz.1.433,6953,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 111.307489][ T6953] (syz.1.433,6953,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 111.307510][ T6953] (syz.1.433,6953,0):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 111.307530][ T6953] (syz.1.433,6953,0):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 111.307550][ T6953] (syz.1.433,6953,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30 [ 111.307571][ T6953] (syz.1.433,6953,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30 [ 111.308116][ T6953] (syz.1.433,6953,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 111.401731][ T6953] (syz.1.433,6953,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 111.413047][ T6953] (syz.1.433,6953,0):ocfs2_mknod:298 ERROR: status = -30 [ 111.424871][ T6953] (syz.1.433,6953,0):ocfs2_mknod:502 ERROR: status = -30 [ 111.433148][ T6953] (syz.1.433,6953,0):ocfs2_mkdir:659 ERROR: status = -30 [ 111.449028][ T6952] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.524199][ T6952] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 111.567448][ T6952] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 111.588369][ T6952] BTRFS info (device loop2): trying to use backup root at mount time [ 111.632256][ T6952] BTRFS info (device loop2): turning on flush-on-commit [ 111.681935][ T6952] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 111.716484][ T6953] syz.1.433 (6953) used greatest stack depth: 18768 bytes left [ 111.734952][ T6952] BTRFS info (device loop2): use lzo compression, level 0 [ 111.784435][ T6952] BTRFS info (device loop2): setting nodatasum [ 111.788399][ T5767] (syz-executor,5767,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 111.790614][ T6952] BTRFS info (device loop2): use no compression [ 111.845023][ T5767] (syz-executor,5767,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12 [ 111.874573][ T5767] (syz-executor,5767,1):_ocfs2_free_clusters:2583 ERROR: status = -12 [ 111.886495][ T6952] BTRFS info (device loop2): max_inline at 0 [ 111.888810][ T5767] (syz-executor,5767,1):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 111.892505][ T6952] BTRFS info (device loop2): using free space tree [ 111.902967][ T5767] (syz-executor,5767,1):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 111.926069][ T5767] (syz-executor,5767,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 112.033367][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 112.115266][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 112.154730][ T6952] BTRFS warning (device loop2): couldn't read tree root [ 112.161723][ T6952] BTRFS warning (device loop2): try to load backup roots slot 1 [ 112.170508][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 112.218865][ T6952] BTRFS warning (device loop2): couldn't read tree root [ 112.249865][ T6952] BTRFS warning (device loop2): try to load backup roots slot 2 [ 112.264733][ T3443] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 112.322487][ T6952] BTRFS warning (device loop2): couldn't read tree root [ 112.338332][ T6952] BTRFS warning (device loop2): try to load backup roots slot 3 [ 112.377085][ T6952] BTRFS info (device loop2): enabling ssd optimizations [ 112.397164][ T6952] BTRFS info (device loop2): auto enabling async discard [ 112.418568][ T6952] BTRFS info (device loop2): rebuilding free space tree [ 112.459480][ T6952] BTRFS info (device loop2): checking UUID tree [ 112.815539][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.849542][ T6980] loop3: detected capacity change from 0 to 40427 [ 112.872147][ T6980] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 112.897458][ T6980] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x724 [ 112.926006][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 112.945785][ T6980] F2FS-fs (loop3): invalid crc value [ 112.991782][ T6980] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.125264][ T6980] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 113.157504][ T6980] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.285758][ T6980] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 113.432823][ T5770] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 113.470461][ T7023] loop2: detected capacity change from 0 to 2048 [ 113.543754][ T7023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.623013][ T7025] loop0: detected capacity change from 0 to 4096 [ 113.752663][ T7025] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 113.773326][ T7029] loop1: detected capacity change from 0 to 4096 [ 113.856330][ T7025] ntfs3: loop0: Failed to load $Extend (-22). [ 113.862447][ T7025] ntfs3: loop0: Failed to initialize $Extend. [ 113.888749][ T7032] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.007301][ T7029] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 114.034660][ T27] audit: type=1800 audit(1776128161.026:26): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.456" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 114.085573][ T7029] Remounting filesystem read-only [ 114.090956][ T7025] ntfs3: loop0: ino=21, "bus" fallocate(0x11) is not supported [ 115.262618][ T7068] gretap0: entered promiscuous mode [ 115.301954][ T7068] macvlan1: entered promiscuous mode [ 115.331528][ T7068] hsr1: entered promiscuous mode [ 115.342924][ T7068] hsr1: entered allmulticast mode [ 115.370423][ T7068] gretap0: entered allmulticast mode [ 115.384281][ T7068] macvlan1: entered allmulticast mode [ 115.408956][ T7068] veth1_vlan: entered allmulticast mode [ 115.703739][ T7080] loop1: detected capacity change from 0 to 4096 [ 116.004580][ T7093] input: syz0 as /devices/virtual/input/input7 [ 116.246151][ T7072] loop0: detected capacity change from 0 to 40427 [ 116.257003][ T7072] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.296352][ T7072] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.322887][ T7072] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.495837][ T7072] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.502945][ T7072] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.174861][ T5773] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.375369][ T5773] usb 2-1: Using ep0 maxpacket: 8 [ 117.387746][ T5773] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.409209][ T5773] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.434950][ T5773] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.458340][ T5773] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.492353][ T5773] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.522687][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.754917][ T5773] usb 2-1: GET_CAPABILITIES returned 0 [ 117.772500][ T5773] usbtmc 2-1:16.0: can't read capabilities [ 118.019231][ T5773] usb 2-1: USB disconnect, device number 5 [ 118.208196][ T7159] netem: change failed [ 118.219170][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 118.241400][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 118.257055][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 118.355031][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 118.925064][ T7180] loop3: detected capacity change from 0 to 8192 [ 118.946465][ T7180] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.997313][ T7180] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 119.003414][ T7171] loop0: detected capacity change from 0 to 32768 [ 119.021882][ T7180] REISERFS (device loop3): using ordered data mode [ 119.033324][ T7180] reiserfs: using flush barriers [ 119.044201][ T7180] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.071118][ T7180] REISERFS (device loop3): checking transaction log (loop3) [ 119.092012][ T7171] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.113155][ T7180] REISERFS (device loop3): Using r5 hash to sort names [ 119.135534][ T7180] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 119.213147][ T7180] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 119.258758][ T7180] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 119.278207][ T7180] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 119.339825][ T7195] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 119.360157][ T7195] REISERFS (device loop3): Remounting filesystem read-only [ 119.381754][ T7195] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 119.403320][ T7171] XFS (loop0): Ending clean mount [ 119.454652][ T7171] XFS (loop0): Quotacheck needed: Please wait. [ 119.570048][ T7198] loop2: detected capacity change from 0 to 4096 [ 119.587121][ T7171] XFS (loop0): Quotacheck: Done. [ 119.595935][ T7198] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 119.711911][ T7198] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 119.829288][ T27] audit: type=1804 audit(1776128166.826:27): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.509" name="/newroot/120/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 119.969573][ T5769] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 119.998141][ T7209] loop1: detected capacity change from 0 to 22 [ 120.015133][ T5769] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.042376][ T7209] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 120.045209][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.086866][ T7209] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 120.110967][ T7211] netem: change failed [ 120.571926][ T27] audit: type=1326 audit(1776128167.566:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.0.525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca8c39c819 code=0x0 [ 120.631725][ T7227] loop1: detected capacity change from 0 to 256 [ 120.743811][ T7230] loop3: detected capacity change from 0 to 64 [ 121.216733][ T7239] loop3: detected capacity change from 0 to 512 [ 121.248083][ T7239] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.295512][ T7239] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 121.329556][ T7232] loop2: detected capacity change from 0 to 32768 [ 121.358848][ T7239] EXT4-fs (loop3): 1 truncate cleaned up [ 121.376990][ T7232] loop2: p9 p11 p16 [ 121.403242][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.427274][ T7234] loop1: detected capacity change from 0 to 40427 [ 121.441094][ T7234] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 121.450106][ T7234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 121.464268][ T7234] F2FS-fs (loop1): invalid crc value [ 121.503629][ T7234] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.680285][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.702058][ T7234] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 121.736674][ T7234] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.014620][ T7234] syz.1.534: attempt to access beyond end of device [ 122.014620][ T7234] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 122.060878][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 122.075270][ T7234] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 122.084766][ T6667] udevd[6667]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 122.096529][ T6071] udevd[6071]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 122.196286][ T27] audit: type=1326 audit(1776128169.186:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff2759c819 code=0x0 [ 123.330139][ T7293] loop2: detected capacity change from 0 to 512 [ 123.351656][ T7293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.411778][ T7293] EXT4-fs (loop2): 1 truncate cleaned up [ 123.429848][ T7293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.755239][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.249459][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 124.258479][ T7314] netlink: 'syz.2.565': attribute type 25 has an invalid length. [ 124.267259][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 124.313306][ T7311] loop1: detected capacity change from 0 to 8192 [ 124.328102][ T7311] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 124.344620][ T7311] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 124.380221][ T7311] REISERFS (device loop1): using ordered data mode [ 124.393086][ T7311] reiserfs: using flush barriers [ 124.409425][ T7311] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.469249][ T7311] REISERFS (device loop1): checking transaction log (loop1) [ 124.481994][ T7311] REISERFS (device loop1): Using r5 hash to sort names [ 124.484333][ T5757] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.505193][ T7311] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 124.549940][ T7311] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 124.565146][ T7311] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 124.579056][ T7311] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 124.601778][ T7311] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 124.616426][ T7311] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 124.655799][ T7322] REISERFS error (device loop1): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 124.674975][ T7322] REISERFS (device loop1): Remounting filesystem read-only [ 124.691759][ T7322] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 124.744291][ T5757] usb 1-1: Using ep0 maxpacket: 8 [ 124.755719][ T5757] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.774495][ T5757] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 124.797216][ T5757] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 124.806613][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.815047][ T5757] usb 1-1: Product: syz [ 124.819311][ T5757] usb 1-1: Manufacturer: syz [ 124.829417][ T5757] usb 1-1: SerialNumber: syz [ 124.840525][ T5757] usb 1-1: config 0 descriptor?? [ 125.077952][ T7334] loop1: detected capacity change from 0 to 1764 [ 125.144622][ T28] usb 1-1: USB disconnect, device number 3 [ 125.275592][ T7338] fuse: Unknown parameter 'acerPid: 0 [ 125.275592][ T7338] Uid: 0 0 0 0 [ 125.275592][ T7338] Gid: 0 0 0 0 [ 125.275592][ T7338] FDSize: 256 [ 125.275592][ T7338] Groups: 0 10 [ 125.275592][ T7338] NStgid: 307 [ 125.275592][ T7338] NSpid: 308 [ 125.275592][ T7338] NSpgid: 307 [ 125.275592][ T7338] NSsid: 0 [ 125.275592][ T7338] Kthread: 0 [ 125.275592][ T7338] VmPeak: 104268 kB [ 125.275592][ T7338] VmSize: 104268 kB [ 125.275592][ T7338] VmLck: 0 kB [ 125.275592][ T7338] VmPin: 0 kB [ 125.275592][ T7338] VmHWM: 24160 kB [ 125.275592][ T7338] VmRSS: 24160 kB [ 125.275592][ T7338] RssAnon: 1416 kB [ 125.275592][ T7338] RssFile: 22744 kB [ 125.275592][ T7338] RssShmem: 0 kB [ 125.275592][ T7338] VmData: 36584 kB [ 125.275592][ T7338] VmStk: 132 kB [ 125.275592][ T7338] VmExe: 1772 kB [ 125.275592][ T7338] VmLib: 8 kB [ 125.275592][ T7338] VmPTE: 132 kB [ 125.275592][ T7338] VmSwap: 0 kB [ 125.275592][ T7338] HugetlbPages: 0 kB [ 125.275592][ T7338] CoreDumping: 0 [ 125.275592][ T7338] THP_enabled: 1 [ 125.275592][ T7338] untag_mask: 0xffffffffffffffff [ 125.275592][ T7338] Threads: 2 [ 125.275592][ T7338] SigQ: 0/13116 [ 125.275592][ T7338] SigPnd: 0000000000000000 [ 125.275592][ T7338] ShdPnd: 0000000000000000 [ 125.275592][ T7338] SigBlk: 0000000000000000 [ 125.275592][ T7338] SigIgn: fffffffefffaba35 [ 125.275592][ T7338] SigCgt: 0000000100010440 [ 125.275592][ T7338] CapInh: 0000000000000000 [ 125.275592][ T7338] CapPrm: 000001ffff77ffff [ 125.275592][ T7338] CapEff: 000001ffff77ffff [ 125.275592][ T7338] CapBnd: 000001ffffffffff [ 125.275592][ T7338] CapAmb: 0000000000000000 [ 125.275592][ T7338] NoNewPrivs: 0 [ 125.275592][ T7338] Seccomp: 0 [ 125.275592][ T7338] Seccomp_filters: 0 [ 125.275592][ T7338] Speculation_Store_Bypass: thread vulnerable [ 125.275592][ T7338] SpeculationIndirectBranch: conditional enabled [ 125.275592][ T7338] Cpus_allowed: 3 [ 125.321272][ T7334] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 125.456388][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.512877][ T7340] vxcan1: tx address claim with dest, not broadcast [ 126.874857][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 127.457753][ T7376] loop2: detected capacity change from 0 to 40427 [ 127.482956][ T7376] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 127.524698][ T7376] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 127.562265][ T7376] F2FS-fs (loop2): invalid crc value [ 127.599383][ T7376] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.756808][ T7376] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 127.763890][ T7376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.861345][ T27] audit: type=1800 audit(1776128174.856:30): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.593" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 127.926133][ T5769] syz-executor: attempt to access beyond end of device [ 127.926133][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.958672][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 128.084124][ T28] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.289151][ T7418] loop1: detected capacity change from 0 to 40427 [ 128.294278][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 128.313172][ T28] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 128.322870][ T7418] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 128.329620][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.334362][ T7418] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.348447][ T28] usb 4-1: Product: syz [ 128.352643][ T28] usb 4-1: Manufacturer: syz [ 128.376292][ T28] usb 4-1: SerialNumber: syz [ 128.393444][ T7418] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.596848][ T7418] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.646723][ T28] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 128.664211][ T7418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.697906][ T28] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.724484][ T28] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 128.743508][ T28] usb 4-1: media controller created [ 128.763060][ T27] audit: type=1800 audit(1776128175.756:31): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.610" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 128.796142][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.828503][ T5767] syz-executor: attempt to access beyond end of device [ 128.828503][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.877155][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.886168][ T28] zl10353_read_register: readreg error (reg=127, ret==-71) [ 128.971261][ T28] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 129.005341][ T28] usb 4-1: USB disconnect, device number 7 [ 129.500347][ T7441] loop0: detected capacity change from 0 to 512 [ 129.560843][ T7441] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.616: bad orphan inode 11862016 [ 129.573071][ T7441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 129.586128][ T7441] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.693817][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 130.104429][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.307924][ T28] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 130.334121][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.342156][ T28] usb 1-1: Product: syz [ 130.383920][ T28] usb 1-1: Manufacturer: syz [ 130.394337][ T28] usb 1-1: SerialNumber: syz [ 130.413638][ T28] usb 1-1: config 0 descriptor?? [ 130.431345][ T28] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 131.255166][ T28] gspca_sunplus: reg_w_riv err -71 [ 131.260407][ T28] sunplus: probe of 1-1:0.0 failed with error -71 [ 131.311019][ T28] usb 1-1: USB disconnect, device number 4 [ 131.348111][ T7474] program syz.2.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.623193][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 132.061669][ T7477] loop2: detected capacity change from 0 to 32768 [ 132.110207][ T7477] (syz.2.630,7477,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.135983][ T7491] loop3: detected capacity change from 0 to 512 [ 132.154176][ T7477] (syz.2.630,7477,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.184252][ T7491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.202358][ T7491] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.215420][ T5757] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.243915][ T7477] JBD2: Ignoring recovery information on journal [ 132.307206][ T7491] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.638: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 132.351781][ T7477] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.365131][ T7491] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 132.424268][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.444961][ T5757] usb 1-1: Using ep0 maxpacket: 16 [ 132.455707][ T5757] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 132.475830][ T5757] usb 1-1: config 0 has no interface number 0 [ 132.481971][ T5757] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 132.502430][ T5757] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 132.545364][ T5757] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 132.564211][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.581286][ T5757] usb 1-1: Product: syz [ 132.586144][ T5757] usb 1-1: Manufacturer: syz [ 132.591968][ T5757] usb 1-1: SerialNumber: syz [ 132.603619][ T5757] usb 1-1: config 0 descriptor?? [ 132.623279][ T7487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.634008][ T7487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.663818][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 132.869490][ T7487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.880815][ T7487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.918562][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924920][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.241985][ T7512] Falling back ldisc for ttyS3. [ 133.292333][ T5757] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 133.332593][ T5757] asix: probe of 1-1:0.251 failed with error -524 [ 133.542105][ T787] usb 1-1: USB disconnect, device number 5 [ 133.713058][ T7522] loop3: detected capacity change from 0 to 32768 [ 133.743325][ T7522] JBD2: Ignoring recovery information on journal [ 133.778882][ T7522] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.912620][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 134.046864][ T7529] loop3: detected capacity change from 0 to 512 [ 134.090590][ T7529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.142622][ T7529] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.238649][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.483631][ T7542] loop3: detected capacity change from 0 to 2048 [ 134.497359][ T7542] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.519791][ T7542] NILFS (loop3): mounting unchecked fs [ 134.559929][ T7542] NILFS (loop3): recovery complete [ 134.579120][ T7549] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.811193][ T7557] loop1: detected capacity change from 0 to 24 [ 135.280968][ T7572] loop0: detected capacity change from 0 to 64 [ 135.300761][ T7576] netlink: 312 bytes leftover after parsing attributes in process `syz.1.671'. [ 135.448421][ T7578] loop3: detected capacity change from 0 to 4096 [ 135.519411][ T7578] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 135.541242][ T7578] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 135.589824][ T7578] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 135.622543][ T7578] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 135.654654][ T7578] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 135.703783][ T7578] ntfs: volume version 3.1. [ 135.767594][ T7578] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 135.782303][ T7578] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 135.803066][ T7578] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 135.820573][ T7578] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 135.833020][ T7578] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 135.863462][ T7588] loop1: detected capacity change from 0 to 4096 [ 135.900127][ T7588] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 136.234975][ T7596] loop3: detected capacity change from 0 to 512 [ 136.269128][ T7596] FAT-fs (loop3): Directory bread(block 199916) failed [ 136.300068][ T7596] FAT-fs (loop3): Directory bread(block 199917) failed [ 136.320793][ T7596] FAT-fs (loop3): Directory bread(block 199918) failed [ 136.347736][ T7596] FAT-fs (loop3): Directory bread(block 199919) failed [ 136.371349][ T7596] FAT-fs (loop3): Directory bread(block 199920) failed [ 136.395999][ T7596] FAT-fs (loop3): Directory bread(block 199921) failed [ 136.409405][ T7596] FAT-fs (loop3): Directory bread(block 199922) failed [ 136.425398][ T7596] FAT-fs (loop3): Directory bread(block 199923) failed [ 136.455932][ T7602] CUSE: unknown device info "" [ 136.465152][ T7602] CUSE: unknown device info "" [ 136.481275][ T7596] FAT-fs (loop3): Directory bread(block 199916) failed [ 136.490370][ T7602] CUSE: unknown device info "" [ 136.491048][ T7596] FAT-fs (loop3): Directory bread(block 199917) failed [ 136.505367][ T7602] CUSE: unknown device info "" [ 136.526343][ T7602] CUSE: unknown device info "ÿ" [ 136.547761][ T7602] CUSE: unknown device info "" [ 136.558333][ T7602] CUSE: unknown device info "" [ 136.568221][ T7602] CUSE: unknown device info "ÿ" [ 136.573284][ T7602] CUSE: DEVNAME unspecified [ 136.740855][ T7606] kvm: kvm [7605]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400003 [ 137.191388][ T7630] loop0: detected capacity change from 0 to 128 [ 137.203955][ T7630] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.223735][ T7630] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.309339][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.394820][ T7636] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 137.660677][ T7644] loop0: detected capacity change from 0 to 1764 [ 137.790271][ T7648] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 137.811415][ T7646] FAT-fs (loop1): Directory bread(block 64) failed [ 137.828405][ T7646] FAT-fs (loop1): Directory bread(block 65) failed [ 137.844385][ T7646] FAT-fs (loop1): Directory bread(block 66) failed [ 137.875316][ T7646] FAT-fs (loop1): Directory bread(block 67) failed [ 137.901466][ T7646] FAT-fs (loop1): Directory bread(block 68) failed [ 137.931846][ T7646] FAT-fs (loop1): Directory bread(block 69) failed [ 137.952034][ T7646] FAT-fs (loop1): Directory bread(block 70) failed [ 137.979418][ T7646] FAT-fs (loop1): Directory bread(block 71) failed [ 138.005032][ T7646] FAT-fs (loop1): Directory bread(block 72) failed [ 138.017970][ T7646] FAT-fs (loop1): Directory bread(block 73) failed [ 138.198260][ T7646] syz.1.703: attempt to access beyond end of device [ 138.198260][ T7646] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 138.253931][ T7646] syz.1.703: attempt to access beyond end of device [ 138.253931][ T7646] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 138.309169][ T7646] syz.1.703: attempt to access beyond end of device [ 138.309169][ T7646] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 138.453815][ T7641] UFO tlock:0xffffc9000283a168 [ 138.548114][ T7641] MetaData crosses page boundary!! [ 138.574152][ T7641] lblock = 6300000010, size = -820051968 [ 138.579950][ T7641] CPU: 0 PID: 7641 Comm: syz.2.702 Not tainted syzkaller #0 [ 138.587251][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 138.597337][ T7641] Call Trace: [ 138.597773][ T7658] capability: warning: `syz.1.710' uses 32-bit capabilities (legacy support in use) [ 138.600623][ T7641] [ 138.612992][ T7641] dump_stack_lvl+0x18c/0x250 [ 138.617703][ T7641] ? __wake_up_bit+0x210/0x210 [ 138.618239][ T7658] program syz.1.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.622472][ T7641] ? show_regs_print_info+0x20/0x20 [ 138.622506][ T7641] ? load_image+0x420/0x420 [ 138.622534][ T7641] ? folio_unlock+0x118/0x2e0 [ 138.645996][ T7641] __get_metapage+0xaac/0xfa0 [ 138.650705][ T7641] dtReadFirst+0xd5/0x920 [ 138.655064][ T7641] jfs_readdir+0x919/0x3bb0 [ 138.659613][ T7641] ? dtInitRoot+0x670/0x670 [ 138.664153][ T7641] ? __up_read+0x2b6/0x6b0 [ 138.668604][ T7641] ? down_write+0x16e/0x200 [ 138.673126][ T7641] ? down_read_killable+0x340/0x340 [ 138.678344][ T7641] ? end_current_label_crit_section+0x149/0x170 [ 138.684613][ T7641] ? dtInitRoot+0x670/0x670 [ 138.689138][ T7641] wrap_directory_iterator+0x92/0xd0 [ 138.694459][ T7641] iterate_dir+0x1c2/0x580 [ 138.698900][ T7641] __se_sys_getdents64+0xf6/0x270 [ 138.703948][ T7641] ? __x64_sys_getdents64+0x80/0x80 [ 138.709168][ T7641] ? filldir+0x660/0x660 [ 138.713453][ T7641] ? lockdep_hardirqs_on+0x98/0x150 [ 138.718680][ T7641] do_syscall_64+0x55/0xa0 [ 138.723148][ T7641] ? clear_bhb_loop+0x40/0x90 [ 138.727855][ T7641] ? clear_bhb_loop+0x40/0x90 [ 138.732564][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.738485][ T7641] RIP: 0033:0x7eff2759c819 [ 138.742931][ T7641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.762555][ T7641] RSP: 002b:00007eff284de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 138.770991][ T7641] RAX: ffffffffffffffda RBX: 00007eff27815fa0 RCX: 00007eff2759c819 [ 138.778977][ T7641] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 138.786963][ T7641] RBP: 00007eff27632c91 R08: 0000000000000000 R09: 0000000000000000 [ 138.794945][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.802929][ T7641] R13: 00007eff27816038 R14: 00007eff27815fa0 R15: 00007ffc9a46c118 [ 138.810930][ T7641] [ 138.827773][ T7641] bread failed! [ 138.831275][ T7641] jfs_readdir: unexpected rc = -5 from dtReadNext [ 138.892462][ T7650] set_capacity_and_notify: 2 callbacks suppressed [ 138.892475][ T7650] loop0: detected capacity change from 0 to 32768 [ 138.980042][ T7650] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.168562][ T7650] XFS (loop0): Ending clean mount [ 139.210826][ T7650] XFS (loop0): Quotacheck needed: Please wait. [ 139.394622][ T7650] XFS (loop0): Quotacheck: Done. [ 139.678071][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.731686][ T7681] loop1: detected capacity change from 0 to 128 [ 139.775380][ T7681] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.798465][ T7681] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.939840][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.172917][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 140.899003][ T7715] loop2: detected capacity change from 0 to 2048 [ 140.941126][ T7715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.625071][ T7738] bond0: (slave bond_slave_0): Releasing backup interface [ 141.665432][ T7738] team0: Port device bond_slave_0 added [ 141.671958][ T7738] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 141.908545][ T7728] loop1: detected capacity change from 0 to 32768 [ 141.956851][ T5757] kernel read not supported for file /dsp1 (pid: 5757 comm: kworker/1:3) [ 141.966310][ T7728] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 141.995942][ T7728] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.139149][ T7728] XFS (loop1): Ending clean mount [ 142.182434][ T7728] XFS (loop1): Quotacheck needed: Please wait. [ 142.257061][ T7728] XFS (loop1): Quotacheck: Done. [ 142.362300][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.444438][ T5808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.656268][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 142.698354][ T5808] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 142.756310][ T5808] usb 3-1: config 0 has no interface number 0 [ 142.788262][ T5808] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 142.798664][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.833349][ T5808] usb 3-1: Product: syz [ 142.850069][ T5808] usb 3-1: Manufacturer: syz [ 142.874927][ T5808] usb 3-1: SerialNumber: syz [ 142.900546][ T5808] usb 3-1: config 0 descriptor?? [ 142.905638][ T7760] loop3: detected capacity change from 0 to 32768 [ 142.920203][ T7760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.748 (7760) [ 142.933902][ T5808] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 142.982713][ T7760] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.001930][ T7760] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 143.011098][ T7760] BTRFS info (device loop3): setting nodatasum [ 143.018075][ T7760] BTRFS info (device loop3): force zlib compression, level 3 [ 143.042316][ T7760] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 143.084453][ T7760] BTRFS info (device loop3): use lzo compression, level 0 [ 143.091643][ T7760] BTRFS info (device loop3): turning on flush-on-commit [ 143.123491][ T7760] BTRFS info (device loop3): enabling auto defrag [ 143.145893][ T7760] BTRFS info (device loop3): max_inline at 4096 [ 143.152176][ T7760] BTRFS info (device loop3): using free space tree [ 143.212000][ T5808] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 143.253878][ T5808] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 143.334686][ T7760] BTRFS info (device loop3): enabling ssd optimizations [ 143.539735][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.668954][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 143.680529][ T5808] usb 3-1: USB disconnect, device number 4 [ 143.708538][ T5808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 143.733886][ T5808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 143.785466][ T5808] quatech2 3-1:0.51: device disconnected [ 144.238889][ T7810] loop1: detected capacity change from 0 to 4096 [ 144.283071][ T7810] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 144.507552][ T7810] ntfs3: loop1: failed to convert "c46c" to iso8859-15 [ 145.559911][ T7839] loop0: detected capacity change from 0 to 32768 [ 145.778443][ T7848] loop3: detected capacity change from 0 to 4096 [ 145.891428][ T7848] ntfs: volume version 3.1. [ 146.310681][ T7854] loop2: detected capacity change from 0 to 128 [ 146.457689][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 146.457703][ T27] audit: type=1800 audit(1776128193.456:47): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.783" name="file2" dev="loop2" ino=1048629 res=0 errno=0 [ 146.530835][ T7854] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 146.535620][ T7857] loop0: detected capacity change from 0 to 4096 [ 146.551730][ T7854] FAT-fs (loop2): Filesystem has been set read-only [ 146.597996][ T7854] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 146.627576][ T7854] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 146.913731][ T7867] loop3: detected capacity change from 0 to 4096 [ 146.947783][ T7872] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.041384][ T7874] loop2: detected capacity change from 0 to 256 [ 147.048617][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.080390][ T7867] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 147.103636][ T7874] FAT-fs (loop2): Directory bread(block 64) failed [ 147.120317][ T7874] FAT-fs (loop2): Directory bread(block 65) failed [ 147.142110][ T7867] Remounting filesystem read-only [ 147.148587][ T7874] FAT-fs (loop2): Directory bread(block 66) failed [ 147.172282][ T7874] FAT-fs (loop2): Directory bread(block 67) failed [ 147.201437][ T7874] FAT-fs (loop2): Directory bread(block 68) failed [ 147.225211][ T7874] FAT-fs (loop2): Directory bread(block 69) failed [ 147.236717][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 147.244107][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 147.249786][ T7874] FAT-fs (loop2): Directory bread(block 70) failed [ 147.249843][ T7874] FAT-fs (loop2): Directory bread(block 71) failed [ 147.249925][ T7874] FAT-fs (loop2): Directory bread(block 72) failed [ 147.264103][ T5770] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 147.280872][ T7874] FAT-fs (loop2): Directory bread(block 73) failed [ 147.287904][ T5770] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 147.297421][ T787] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.321320][ T5770] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 147.330302][ T787] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.341505][ T5770] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 147.348907][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.357384][ T5770] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 147.365030][ T787] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 147.375132][ T5770] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 147.386273][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.397639][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 147.407451][ T787] usb 2-1: config 0 descriptor?? [ 147.421398][ T5770] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 147.432313][ T5770] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 147.448223][ T5770] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 147.470612][ T5770] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 147.480437][ T5770] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 147.723026][ T7888] program syz.3.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.862572][ T7893] loop3: detected capacity change from 0 to 1024 [ 147.866330][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.882793][ T787] hid (null): usage index exceeded [ 148.081360][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.124217][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.134007][ T28] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 148.153662][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.160282][ T5808] usb 2-1: USB disconnect, device number 6 [ 148.181292][ T28] usb 3-1: config 0 descriptor?? [ 148.628283][ T28] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 148.642209][ T28] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 148.650403][ T28] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 148.728539][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 148.848514][ T28] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 148.888250][ T28] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 148.992821][ T7914] loop0: detected capacity change from 0 to 512 [ 149.063809][ T7914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.173099][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.181833][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.211096][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.218616][ T5773] usb 3-1: USB disconnect, device number 5 [ 149.480393][ T7928] netlink: 'syz.3.816': attribute type 21 has an invalid length. [ 149.488407][ T7928] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 149.497838][ T7928] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.816'. [ 149.753754][ T7932] loop3: detected capacity change from 0 to 4096 [ 149.765080][ T7932] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 149.843562][ T7932] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 149.894160][ T7932] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 149.923349][ T7932] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 149.954453][ T7932] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 149.994143][ T7932] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 150.033112][ T7932] ntfs: volume version 3.1. [ 150.056085][ T7932] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 150.090327][ T7932] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 150.167380][ T7932] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 150.513258][ T7946] loop3: detected capacity change from 0 to 512 [ 150.526269][ T7934] loop0: detected capacity change from 0 to 32768 [ 150.551564][ T7946] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.634579][ T7934] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.700934][ T7946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.921810][ T7934] XFS (loop0): Ending clean mount [ 150.980037][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.226463][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.582478][ T7971] loop1: detected capacity change from 0 to 8 [ 151.690594][ T7971] SQUASHFS error: Unable to read directory block [629:fe] [ 151.758200][ T7973] kvm: kvm [7972]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2000000 [ 151.821116][ T7961] loop2: detected capacity change from 0 to 32768 [ 151.856131][ T7961] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.827 (7961) [ 151.917041][ T7961] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 151.951941][ T7961] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 151.966273][ T7961] BTRFS info (device loop2): force zlib compression, level 3 [ 151.974341][ T7961] BTRFS info (device loop2): force clearing of disk cache [ 151.981897][ T7961] BTRFS info (device loop2): use zlib compression, level 3 [ 151.990144][ T7961] BTRFS info (device loop2): allowing degraded mounts [ 152.010218][ T7961] BTRFS info (device loop2): turning on sync discard [ 152.022818][ T7961] BTRFS info (device loop2): using free space tree [ 152.233334][ T7969] loop3: detected capacity change from 0 to 40427 [ 152.261027][ T7961] BTRFS info (device loop2): enabling ssd optimizations [ 152.288019][ T7969] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 152.328347][ T7961] BTRFS info (device loop2): rebuilding free space tree [ 152.348959][ T7969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 152.392225][ T7969] F2FS-fs (loop3): invalid crc value [ 152.454097][ T7969] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 152.613205][ T7969] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.626068][ T7961] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 152.632547][ T7969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.857012][ T5769] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 152.959942][ T7987] loop1: detected capacity change from 0 to 32768 [ 153.018360][ T7987] (syz.1.835,7987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.040980][ T7987] (syz.1.835,7987,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.178481][ T7987] JBD2: Ignoring recovery information on journal [ 153.377594][ T7987] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 153.527570][ T8018] loop2: detected capacity change from 0 to 1024 [ 153.645869][ T8018] hfsplus: walked past end of dir [ 153.826843][ T8012] loop0: detected capacity change from 0 to 32768 [ 153.847433][ T8012] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.840 (8012) [ 153.871775][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 153.908942][ T8012] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 153.951645][ T8012] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 153.999003][ T8012] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.037476][ T8012] BTRFS info (device loop0): use zstd compression, level 3 [ 154.051193][ T8012] BTRFS info (device loop0): using free space tree [ 154.089310][ T8024] netlink: 'syz.2.845': attribute type 11 has an invalid length. [ 154.097533][ T8024] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.845'. [ 154.244983][ T8012] BTRFS info (device loop0): enabling ssd optimizations [ 154.251986][ T8012] BTRFS info (device loop0): auto enabling async discard [ 154.256675][ T8029] loop3: detected capacity change from 0 to 4096 [ 154.471151][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 154.471163][ T27] audit: type=1800 audit(1776128201.466:48): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.846" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 154.569475][ T27] audit: type=1800 audit(1776128201.496:49): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.846" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 154.646073][ T5768] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.832700][ T5760] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (5760) [ 155.671251][ T8075] loop0: detected capacity change from 0 to 512 [ 155.717150][ T8075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.744325][ T8075] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.883391][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.964152][ T5773] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.053829][ T8070] loop2: detected capacity change from 0 to 32768 [ 156.073886][ T8070] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.857 (8070) [ 156.115781][ T8070] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 156.144392][ T8070] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 156.165782][ T8070] BTRFS info (device loop2): using free space tree [ 156.184758][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.218787][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.239393][ T5773] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 156.249189][ T8094] program syz.3.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.258840][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.283964][ T8070] BTRFS info (device loop2): enabling ssd optimizations [ 156.296723][ T5773] usb 2-1: config 0 descriptor?? [ 156.314212][ T8070] BTRFS info (device loop2): auto enabling async discard [ 156.420337][ T8105] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.627936][ T5769] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 156.712003][ T8109] autofs4:pid:8109:autofs_fill_super: called with bogus options [ 156.732520][ T5773] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 156.761627][ T5773] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 156.784359][ T5773] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 156.840279][ T6667] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (6667) [ 156.933241][ T5773] hid-led 0003:1D34:000A.0004: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 157.008757][ T5776] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.033334][ T5773] hid-led 0003:1D34:000A.0004: Dream Cheeky Webmail Notifier initialized [ 157.201786][ T787] usb 2-1: USB disconnect, device number 7 [ 157.224341][ T5776] usb 1-1: Using ep0 maxpacket: 32 [ 157.260960][ T5776] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 157.279412][ T5776] usb 1-1: config 0 has no interface number 0 [ 157.298090][ T5776] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 157.320020][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.329622][ T5776] usb 1-1: Product: syz [ 157.333884][ T5776] usb 1-1: Manufacturer: syz [ 157.342280][ T5776] usb 1-1: SerialNumber: syz [ 157.369823][ T5776] usb 1-1: config 0 descriptor?? [ 157.389892][ T5776] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 157.604644][ T5776] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 157.623647][ T5776] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 157.844536][ T8129] loop3: detected capacity change from 0 to 512 [ 157.982251][ T8129] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.874: corrupted inode contents [ 158.056505][ T8129] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #16: comm syz.3.874: mark_inode_dirty error [ 158.077693][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.079772][ T5773] usb 1-1: USB disconnect, device number 6 [ 158.092986][ T8129] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.874: corrupted inode contents [ 158.124354][ T8129] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.874: mark_inode_dirty error [ 158.126063][ T5773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 158.154541][ T8129] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.874: corrupted inode contents [ 158.180312][ T5773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 158.181219][ T8129] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 158.212701][ T5773] quatech2 1-1:0.51: device disconnected [ 158.232000][ T8129] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.874: corrupted inode contents [ 158.259166][ T8129] EXT4-fs error (device loop3): ext4_truncate:4301: inode #16: comm syz.3.874: mark_inode_dirty error [ 158.290285][ T8129] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 158.350225][ T8129] EXT4-fs (loop3): 1 truncate cleaned up [ 158.369034][ T8129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.378282][ T3494] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 158.404279][ T8129] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.428767][ T3494] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:12: Failed to release dquot type 1 [ 158.519865][ T27] audit: type=1800 audit(1776128205.516:50): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.874" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 158.601809][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.618137][ T42] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 158.644150][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 1 [ 158.661402][ T8138] loop2: detected capacity change from 0 to 4096 [ 158.707232][ T8131] loop1: detected capacity change from 0 to 32768 [ 158.742405][ T8131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.875 (8131) [ 158.803194][ T8131] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.829883][ T8140] program syz.3.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.869297][ T8131] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 158.920087][ T8131] BTRFS info (device loop1): setting nodatasum [ 158.956148][ T8131] BTRFS info (device loop1): force zlib compression, level 3 [ 158.984569][ T27] audit: type=1800 audit(1776128205.976:51): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.877" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 159.010537][ T8131] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 159.010829][ T27] audit: type=1800 audit(1776128205.976:52): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.877" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 159.040577][ T8131] BTRFS info (device loop1): use lzo compression, level 0 [ 159.040605][ T8131] BTRFS info (device loop1): turning on flush-on-commit [ 159.040622][ T8131] BTRFS info (device loop1): enabling auto defrag [ 159.040675][ T8131] BTRFS info (device loop1): max_inline at 4096 [ 159.040694][ T8131] BTRFS info (device loop1): using free space tree [ 159.238642][ T8131] BTRFS info (device loop1): enabling ssd optimizations [ 159.467691][ T8171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.884'. [ 159.589880][ T5767] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.865246][ T8181] Bluetooth: MGMT ver 1.22 [ 160.184229][ T8189] loop3: detected capacity change from 0 to 256 [ 160.269556][ T8189] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 160.445904][ T8175] loop2: detected capacity change from 0 to 32768 [ 160.457802][ T8175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.885 (8175) [ 160.553310][ T8175] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.604147][ T8175] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 160.654279][ T8175] BTRFS info (device loop2): setting nodatacow, compression disabled [ 160.662410][ T8175] BTRFS info (device loop2): enabling auto defrag [ 160.692688][ T8175] BTRFS info (device loop2): max_inline at 0 [ 160.704705][ T8175] BTRFS info (device loop2): using free space tree [ 160.886839][ T8175] BTRFS info (device loop2): auto enabling async discard [ 161.221682][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.431910][ T8229] loop3: detected capacity change from 0 to 8192 [ 161.530227][ T8229] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 161.584258][ T8229] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 161.604578][ T8229] REISERFS (device loop3): using ordered data mode [ 161.615661][ T8229] reiserfs: using flush barriers [ 161.665918][ T8229] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.744646][ T8229] REISERFS (device loop3): checking transaction log (loop3) [ 161.775157][ T8229] REISERFS (device loop3): Using r5 hash to sort names [ 161.829528][ T8229] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 161.973673][ T8229] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 162.031699][ T8229] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 162.082833][ T8229] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 162.094204][ T8248] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 162.094251][ T8248] REISERFS (device loop3): Remounting filesystem read-only [ 162.094264][ T8248] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 162.232843][ T8257] loop0: detected capacity change from 0 to 128 [ 163.062690][ T8262] loop3: detected capacity change from 0 to 32768 [ 163.090302][ T8262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.910 (8262) [ 163.149631][ T8262] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.193747][ T8262] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 163.211880][ T8262] BTRFS info (device loop3): setting nodatasum [ 163.232256][ T8262] BTRFS info (device loop3): force zlib compression, level 3 [ 163.268539][ T8262] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 163.283157][ T8262] BTRFS info (device loop3): use lzo compression, level 0 [ 163.300853][ T8262] BTRFS info (device loop3): turning on flush-on-commit [ 163.314940][ T8262] BTRFS info (device loop3): enabling auto defrag [ 163.321517][ T8262] BTRFS info (device loop3): max_inline at 4096 [ 163.347125][ T8262] BTRFS info (device loop3): using free space tree [ 163.540438][ T8268] loop0: detected capacity change from 0 to 32768 [ 163.572198][ T8262] BTRFS info (device loop3): enabling ssd optimizations [ 163.591082][ T8268] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.818016][ T8268] XFS (loop0): Ending clean mount [ 163.836928][ T8268] XFS (loop0): Quotacheck needed: Please wait. [ 163.858691][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.944357][ T8268] XFS (loop0): Quotacheck: Done. [ 164.553538][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.631771][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 164.661715][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 164.848285][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 165.238661][ T8353] loop0: detected capacity change from 0 to 128 [ 165.286753][ T8353] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.326367][ T8353] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.379456][ T8355] loop3: detected capacity change from 0 to 4096 [ 165.444492][ T8355] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 165.532957][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.575440][ T8355] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 165.743595][ T8355] ntfs3: loop3: ino=1b, "file0" failed to parse mft record [ 165.790864][ T8355] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 165.964563][ T5770] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 166.226645][ T8385] loop2: detected capacity change from 0 to 4096 [ 166.244733][ T8385] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 166.304223][ T8385] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 166.345019][ T8385] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 166.387159][ T8385] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 166.433479][ T8385] ntfs: volume version 3.1. [ 166.474313][ T8395] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 166.541591][ T8394] loop3: detected capacity change from 0 to 8192 [ 166.591166][ T42] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 166.599404][ T8398] netlink: 27 bytes leftover after parsing attributes in process `syz.0.955'. [ 166.605274][ T8394] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.628612][ T5769] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 166.640684][ T8394] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 166.690761][ T8394] REISERFS (device loop3): using ordered data mode [ 166.723600][ T8394] reiserfs: using flush barriers [ 166.747265][ T8394] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.808033][ T8394] REISERFS (device loop3): checking transaction log (loop3) [ 166.875469][ T8403] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.875856][ T8394] REISERFS (device loop3): Using r5 hash to sort names [ 166.921095][ T8394] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 167.039279][ T27] audit: type=1800 audit(1776128214.036:53): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.954" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 167.062764][ T8405] loop1: detected capacity change from 0 to 4096 [ 167.064610][ T8409] loop0: detected capacity change from 0 to 128 [ 167.098645][ T8405] EXT4-fs: inline encryption not supported [ 167.104206][ T8409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 167.122477][ T8405] EXT4-fs (loop1): Test dummy encryption mode enabled [ 167.154726][ T8409] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.233169][ T8405] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 167.268563][ T8409] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.301488][ T8405] System zones: 0-5 [ 167.335797][ T8405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.573110][ T8409] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 167.587521][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.611099][ T8408] loop2: detected capacity change from 0 to 32768 [ 167.710575][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.734307][ T8408] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.792822][ T8429] loop3: detected capacity change from 0 to 128 [ 167.816745][ T8429] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.874333][ T8408] XFS (loop2): Ending clean mount [ 167.877477][ T8429] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.898148][ T5808] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 167.911274][ T5808] XFS (loop2): Unmount and run xfs_repair [ 167.930094][ T5808] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 167.967291][ T5808] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 168.021671][ T5808] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 168.067672][ T5808] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 168.081707][ T5808] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 168.093446][ T5808] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 168.108014][ T5808] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 168.118305][ T5808] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 168.128216][ T5808] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 168.130707][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.147690][ T8408] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 168.160602][ T8408] XFS (loop2): Failed to initialize disk quotas. [ 168.184221][ T1188] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.320210][ T8439] loop1: detected capacity change from 0 to 64 [ 168.364195][ T1188] usb 1-1: Using ep0 maxpacket: 32 [ 168.371913][ T1188] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 168.399280][ T1188] usb 1-1: config 0 has no interface number 0 [ 168.424823][ T1188] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.456490][ T1188] usb 1-1: config 0 interface 85 has no altsetting 0 [ 168.465428][ T28] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 168.468403][ T1188] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 168.494228][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.498733][ T5769] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.509838][ T8442] loop3: detected capacity change from 0 to 1024 [ 168.523111][ T1188] usb 1-1: Product: syz [ 168.527356][ T28] XFS (loop2): Unmount and run xfs_repair [ 168.527401][ T28] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 168.527417][ T28] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 168.527431][ T28] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 168.527444][ T28] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 168.527456][ T28] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 168.527468][ T28] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 168.527481][ T28] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 168.527493][ T28] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 168.527505][ T28] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 168.612862][ T5826] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 168.626983][ T5826] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 168.641882][ T5826] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 168.691746][ T1188] usb 1-1: Manufacturer: syz [ 168.710745][ T1188] usb 1-1: SerialNumber: syz [ 168.732925][ T1188] usb 1-1: config 0 descriptor?? [ 169.089718][ T8451] loop1: detected capacity change from 0 to 1024 [ 169.122932][ T8451] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 169.152325][ T8451] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 169.163819][ T8451] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.972: Failed to acquire dquot type 0 [ 169.177400][ T8451] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 169.202465][ T8451] EXT4-fs (loop1): 1 truncate cleaned up [ 169.210410][ T8451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.236485][ T8451] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 169.293012][ T8451] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.972: Failed to acquire dquot type 0 [ 169.427607][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.446125][ T1188] appletouch 1-1:0.85: Geyser mode initialized. [ 169.467404][ T1188] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9 [ 169.548281][ T8447] loop3: detected capacity change from 0 to 32768 [ 169.555697][ T8447] XFS: attr2 mount option is deprecated. [ 169.639585][ T8447] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.760689][ T1188] usb 1-1: USB disconnect, device number 7 [ 169.773529][ T8447] XFS (loop3): Ending clean mount [ 169.811279][ T1188] appletouch 1-1:0.85: input: appletouch disconnected [ 169.844623][ T8447] XFS (loop3): Quotacheck needed: Please wait. [ 169.963694][ T8447] XFS (loop3): Quotacheck: Done. [ 170.091822][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.464759][ T1188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.486610][ T5808] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.640358][ T8493] loop3: detected capacity change from 0 to 2048 [ 170.655253][ T1188] usb 3-1: Using ep0 maxpacket: 32 [ 170.661734][ T8493] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.673481][ T1188] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.688822][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 170.694087][ T1188] usb 3-1: config 1 interface 0 has no altsetting 0 [ 170.709378][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.714215][ T8494] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.721056][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 170.744674][ T1188] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 170.754228][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.762334][ T1188] usb 3-1: Product: syz [ 170.766757][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 170.788296][ T1188] usb 3-1: Manufacturer: syz [ 170.799420][ T1188] usb 3-1: SerialNumber: syz [ 170.813299][ T5808] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 32 [ 170.841108][ T5808] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 170.868069][ T5808] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 170.877780][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.894265][ T5808] usb 2-1: Product: syz [ 170.900461][ T5808] usb 2-1: Manufacturer: syz [ 170.920836][ T5808] usb 2-1: SerialNumber: syz [ 170.955833][ T8479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.089649][ T1188] usbhid 3-1:1.0: can't add hid device: -71 [ 171.100305][ T1188] usbhid: probe of 3-1:1.0 failed with error -71 [ 171.113955][ T1188] usb 3-1: USB disconnect, device number 6 [ 171.192184][ T5808] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 171.313985][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 171.314614][ T5808] usb 2-1: USB disconnect, device number 8 [ 171.459217][ T8436] udevd[8436]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.514858][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.992'. [ 172.117518][ T8508] set_capacity_and_notify: 1 callbacks suppressed [ 172.117532][ T8508] loop0: detected capacity change from 0 to 32768 [ 172.145643][ T8508] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.993 (8508) [ 172.203336][ T8508] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 172.224757][ T8508] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 172.244844][ T8508] BTRFS info (device loop0): force zlib compression, level 3 [ 172.255811][ T8508] BTRFS info (device loop0): force clearing of disk cache [ 172.274292][ T8508] BTRFS info (device loop0): use zlib compression, level 3 [ 172.281532][ T8508] BTRFS info (device loop0): allowing degraded mounts [ 172.304766][ T8508] BTRFS info (device loop0): turning on sync discard [ 172.312270][ T8508] BTRFS info (device loop0): using free space tree [ 172.324334][ T787] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.424733][ T8516] loop3: detected capacity change from 0 to 32768 [ 172.474148][ T8508] BTRFS info (device loop0): enabling ssd optimizations [ 172.475355][ T8516] [ 172.475355][ T8516] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.475355][ T8516] [ 172.505149][ T8508] BTRFS info (device loop0): rebuilding free space tree [ 172.534173][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 172.551415][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.577100][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.614134][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.654121][ T787] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.682393][ T8508] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.694149][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.730756][ T8518] loop2: detected capacity change from 0 to 40427 [ 172.737791][ T787] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.756680][ T787] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.764146][ T8518] F2FS-fs (loop2): invalid crc value [ 172.774308][ T787] usb 2-1: Manufacturer: syz [ 172.785650][ T8518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.805721][ T11] read_mapping_page failed! [ 172.815537][ T11] ERROR: (device loop3): txCommit: [ 172.815537][ T11] [ 172.826948][ T5768] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 172.846830][ T787] usb 2-1: config 0 descriptor?? [ 172.865224][ T11] jfs_write_inode: jfs_commit_inode failed! [ 172.871250][ T5770] [ 172.871250][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.871250][ T5770] [ 172.919344][ T5770] [ 172.919344][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.919344][ T5770] [ 173.001127][ T8518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.224954][ T787] rc_core: IR keymap rc-hauppauge not found [ 173.244276][ T787] Registered IR keymap rc-empty [ 173.249666][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.296724][ T5769] syz-executor: attempt to access beyond end of device [ 173.296724][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.325222][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.347567][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 173.373259][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 173.417602][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 173.476351][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.534389][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.589948][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.643260][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.694353][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.754398][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.808100][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.854289][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.897128][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.954546][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.964141][ T1188] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.998486][ T787] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 174.018447][ T787] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 174.032355][ T787] usb 2-1: USB disconnect, device number 9 [ 174.154251][ T1188] usb 1-1: Using ep0 maxpacket: 32 [ 174.161569][ T1188] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 174.183601][ T1188] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 174.203299][ T1188] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 174.218654][ T8565] loop3: detected capacity change from 0 to 512 [ 174.222700][ T1188] usb 1-1: config 1 has no interface number 0 [ 174.240142][ T8565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.250224][ T1188] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.280853][ T1188] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 174.318667][ T1188] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.359253][ T8565] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1009: bad orphan inode 131083 [ 174.369796][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.403421][ T8565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.425942][ T1188] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 174.610344][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.727233][ T1188] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 174.837518][ T8583] loop1: detected capacity change from 0 to 128 [ 174.868565][ T8583] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 174.890859][ T8583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.004384][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.050307][ T8588] ax25_connect(): syz.1.1019 uses autobind, please contact jreuter@yaina.de [ 175.143280][ T8590] loop1: detected capacity change from 0 to 256 [ 175.202934][ T8590] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 175.211573][ T5826] usb 1-1: USB disconnect, device number 8 [ 175.223705][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 175.232607][ T5826] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 175.233640][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 175.281697][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 175.294998][ T787] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.324053][ T787] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 175.333425][ T787] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 175.342279][ T787] usb 3-1: Product: syz [ 175.346812][ T787] usb 3-1: Manufacturer: syz [ 175.363771][ T787] usb 3-1: SerialNumber: syz [ 175.376134][ T787] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11 [ 175.455227][ T8595] loop3: detected capacity change from 0 to 512 [ 175.522206][ T8595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.570021][ T8595] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.624609][ T787] usb 3-1: USB disconnect, device number 7 [ 175.652284][ T787] appletouch 3-1:1.0: input: appletouch disconnected [ 175.742149][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.060109][ T8609] loop0: detected capacity change from 0 to 2048 [ 176.088521][ T8609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.278304][ T8603] loop3: detected capacity change from 0 to 32768 [ 176.329018][ T8603] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.418102][ T8603] XFS (loop3): Ending clean mount [ 176.489729][ T8603] XFS (loop3): User initiated shutdown received. [ 176.507348][ T8603] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 176.529916][ T8603] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 176.672401][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.844245][ T1188] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 176.988133][ T8629] loop2: detected capacity change from 0 to 4096 [ 176.999478][ T8629] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 177.027476][ T8629] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 177.065395][ T1188] usb 1-1: Using ep0 maxpacket: 32 [ 177.085432][ T8629] ntfs3: loop2: ino=1b, "file0" failed to parse mft record [ 177.096718][ T8629] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 177.099477][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.119366][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.131990][ T1188] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 177.153000][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.155019][ T8629] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 177.173032][ T1188] usb 1-1: config 0 descriptor?? [ 177.301622][ T5769] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 177.636900][ T1188] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 177.668315][ T1188] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 177.688565][ T1188] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 177.707269][ T1188] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 177.734216][ T1188] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 177.762028][ T1188] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 177.799229][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 178.113256][ T1188] usb 1-1: USB disconnect, device number 9 [ 178.351195][ T8661] loop3: detected capacity change from 0 to 1024 [ 178.382932][ T8648] loop2: detected capacity change from 0 to 32768 [ 178.412154][ T8648] [ 178.412154][ T8648] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.412154][ T8648] [ 178.428834][ T8661] __quota_error: 1 callbacks suppressed [ 178.428849][ T8661] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 178.455438][ T8661] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 178.465301][ T8661] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1047: Failed to acquire dquot type 0 [ 178.483845][ T8661] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 178.500861][ T8661] EXT4-fs (loop3): 1 truncate cleaned up [ 178.507943][ T8661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.544606][ T8661] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 178.548860][ T8648] ERROR: (device loop2): diWrite: ixpxd invalid [ 178.548860][ T8648] [ 178.553938][ T8661] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 178.571913][ T8661] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1047: Failed to acquire dquot type 0 [ 178.591737][ T8648] ERROR: (device loop2): txCommit: [ 178.591737][ T8648] [ 178.653606][ T8648] [ 178.653606][ T8648] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.653606][ T8648] [ 178.681956][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.704267][ T8648] [ 178.704267][ T8648] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.704267][ T8648] [ 178.768449][ T8648] read_mapping_page failed! [ 178.773326][ T8648] ERROR: (device loop2): txCommit: [ 178.773326][ T8648] [ 178.870837][ T1097] ERROR: (device loop2): diWrite: ixpxd invalid [ 178.870837][ T1097] [ 178.890709][ T1097] ERROR: (device loop2): txCommit: [ 178.890709][ T1097] [ 178.905742][ T1097] jfs_write_inode: jfs_commit_inode failed! [ 178.912074][ T5769] [ 178.912074][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.912074][ T5769] [ 178.922967][ T5769] [ 178.922967][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.922967][ T5769] [ 179.034208][ T5773] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.255257][ T5773] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.279181][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.298841][ T5773] usb 1-1: config 0 descriptor?? [ 179.317395][ T5773] cp210x 1-1:0.0: cp210x converter detected [ 179.442934][ T8683] loop1: detected capacity change from 0 to 8192 [ 179.451814][ T8683] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.465515][ T8683] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 179.474907][ T8683] REISERFS (device loop1): using ordered data mode [ 179.481618][ T8683] reiserfs: using flush barriers [ 179.490160][ T8683] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.531327][ T8683] REISERFS (device loop1): checking transaction log (loop1) [ 179.707554][ T8683] REISERFS (device loop1): Using r5 hash to sort names [ 179.716783][ T8683] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 179.726891][ T5773] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 179.761717][ T5773] usb 1-1: cp210x converter now attached to ttyUSB0 [ 179.978692][ T1188] usb 1-1: USB disconnect, device number 10 [ 179.998340][ T1188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.011855][ T8692] loop2: detected capacity change from 0 to 4096 [ 180.029160][ T1188] cp210x 1-1:0.0: device disconnected [ 180.129287][ T8692] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 180.153747][ T8692] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 180.187541][ T8698] loop3: detected capacity change from 0 to 512 [ 180.240633][ T8698] EXT4-fs (loop3): 1 truncate cleaned up [ 180.263396][ T8698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.323207][ T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 180.369816][ T5769] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 180.400985][ T5769] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 180.421181][ T5769] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 180.434976][ T3522] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 180.478656][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.575649][ T8705] loop2: detected capacity change from 0 to 16 [ 180.638185][ T8705] erofs: (device loop2): mounted with root inode @ nid 36. [ 180.702418][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 180.913483][ T8718] loop2: detected capacity change from 0 to 1024 [ 181.005559][ T8717] pim6reg: tun_chr_ioctl cmd 1074812117 [ 181.061601][ T8718] hfsplus: xattr searching failed [ 181.313114][ T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 181.391285][ T8735] loop1: detected capacity change from 0 to 64 [ 181.516214][ T787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.535567][ T787] usb 1-1: config 0 has no interface number 0 [ 181.550842][ T787] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.579712][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.614159][ T787] usb 1-1: Product: syz [ 181.618416][ T787] usb 1-1: Manufacturer: syz [ 181.623030][ T787] usb 1-1: SerialNumber: syz [ 181.659741][ T787] usb 1-1: config 0 descriptor?? [ 181.936373][ T787] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 181.973831][ T787] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.007428][ T787] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 182.024137][ T787] usb 1-1: media controller created [ 182.037050][ T8756] loop1: detected capacity change from 0 to 128 [ 182.059323][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.073932][ T8756] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 182.125701][ T8756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.144454][ T787] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 182.197151][ T1188] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.218616][ T787] usb 1-1: USB disconnect, device number 11 [ 182.404091][ T1188] usb 4-1: Using ep0 maxpacket: 32 [ 182.410978][ T1188] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 182.419223][ T1188] usb 4-1: config 0 has no interface number 0 [ 182.425455][ T1188] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.436623][ T1188] usb 4-1: config 0 interface 85 has no altsetting 0 [ 182.445804][ T1188] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 182.454959][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.462963][ T1188] usb 4-1: Product: syz [ 182.467239][ T1188] usb 4-1: Manufacturer: syz [ 182.471845][ T1188] usb 4-1: SerialNumber: syz [ 182.479699][ T1188] usb 4-1: config 0 descriptor?? [ 182.604145][ T5776] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.794100][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 182.816055][ T5776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.833363][ T5776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.846899][ T5776] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.853735][ T5776] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 182.874056][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.885069][ T5776] usb 2-1: config 0 descriptor?? [ 183.022460][ T27] audit: type=1326 audit(1776128230.016:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8c39c819 code=0x7ffc0000 [ 183.064240][ T27] audit: type=1326 audit(1776128230.026:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8c39c819 code=0x7ffc0000 [ 183.097044][ T27] audit: type=1326 audit(1776128230.026:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca8c39b687 code=0x7ffc0000 [ 183.128082][ T1188] appletouch 4-1:0.85: Geyser mode initialized. [ 183.152367][ T1188] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 183.158570][ T27] audit: type=1326 audit(1776128230.026:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8c39c819 code=0x7ffc0000 [ 183.184004][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.190499][ T27] audit: type=1326 audit(1776128230.026:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8c39c819 code=0x7ffc0000 [ 183.212682][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.229063][ T27] audit: type=1326 audit(1776128230.026:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fca8c39c819 code=0x7ffc0000 [ 183.251217][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.305682][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.354510][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.417428][ T787] usb 4-1: USB disconnect, device number 8 [ 183.446612][ T787] appletouch 4-1:0.85: input: appletouch disconnected [ 183.588485][ T28] usb 2-1: USB disconnect, device number 10 [ 184.018640][ T8786] loop3: detected capacity change from 0 to 16 [ 184.031395][ T8788] loop2: detected capacity change from 0 to 512 [ 184.043038][ T8786] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.045044][ T8788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.088253][ T8788] EXT4-fs (loop2): 1 truncate cleaned up [ 184.096099][ T8788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.145932][ T8788] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1113: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 184.173202][ T8788] EXT4-fs (loop2): Remounting filesystem read-only [ 184.265324][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.952356][ T8816] loop1: detected capacity change from 0 to 16 [ 185.008316][ T8816] erofs: (device loop1): mounted with root inode @ nid 36. [ 185.048877][ T8820] loop3: detected capacity change from 0 to 512 [ 185.270659][ T8822] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1121'. [ 185.470362][ T8810] loop0: detected capacity change from 0 to 32768 [ 185.576700][ T8833] overlayfs: statfs failed on './file0' [ 186.194087][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 186.200148][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 186.211211][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 186.266604][ T8832] loop3: detected capacity change from 0 to 32768 [ 186.302931][ T8832] [ 186.302931][ T8832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.302931][ T8832] [ 186.383972][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 186.383985][ T27] audit: type=1800 audit(1776128233.376:64): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1127" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 186.445196][ T8832] [ 186.445196][ T8832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.445196][ T8832] [ 186.513056][ T8832] [ 186.513056][ T8832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.513056][ T8832] [ 186.597742][ T112] [ 186.597742][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.597742][ T112] [ 186.611086][ T8836] loop1: detected capacity change from 0 to 32768 [ 186.651091][ T8836] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1129 (8836) [ 186.734803][ T8844] loop0: detected capacity change from 0 to 32768 [ 186.761756][ T8836] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.772304][ T8844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1132 (8844) [ 186.786998][ T5770] [ 186.786998][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.786998][ T5770] [ 186.797658][ T8836] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 186.817138][ T8836] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 186.829001][ T5770] [ 186.829001][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.829001][ T5770] [ 186.853816][ T8844] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.864448][ T8836] BTRFS info (device loop1): use zstd compression, level 3 [ 186.871686][ T8836] BTRFS info (device loop1): using free space tree [ 186.883293][ T8844] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 186.904773][ T8844] BTRFS info (device loop0): using free space tree [ 187.021171][ T8836] BTRFS info (device loop1): enabling ssd optimizations [ 187.050481][ T8844] BTRFS info (device loop0): enabling ssd optimizations [ 187.070702][ T8836] BTRFS info (device loop1): auto enabling async discard [ 187.081331][ T8844] BTRFS info (device loop0): auto enabling async discard [ 187.135645][ T8836] BTRFS info (device loop1): Snapshot src from another FS [ 187.254746][ T5767] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 187.284689][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.578036][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 187.620231][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1138'. [ 188.195000][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.399542][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 188.432046][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.472168][ T5826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.487157][ T8891] loop0: detected capacity change from 0 to 32768 [ 188.521368][ T5826] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.537682][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.556005][ T5826] usb 3-1: Product: syz [ 188.560374][ T5826] usb 3-1: Manufacturer: syz [ 188.565604][ T5826] usb 3-1: SerialNumber: syz [ 188.582069][ T8891] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.680896][ T8891] XFS (loop0): Ending clean mount [ 188.712257][ T8891] XFS (loop0): Quotacheck needed: Please wait. [ 188.739508][ T8922] loop3: detected capacity change from 0 to 128 [ 188.793728][ T5826] usb 3-1: 0:2 : does not exist [ 188.843746][ T5826] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 188.905240][ T8891] XFS (loop0): Quotacheck: Done. [ 188.923649][ T5826] usb 3-1: USB disconnect, device number 8 [ 189.001571][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.098130][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.106855][ T5773] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 189.127473][ T8926] loop3: detected capacity change from 0 to 8192 [ 189.171410][ T8926] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.294816][ T5773] usb 2-1: Using ep0 maxpacket: 32 [ 189.334377][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.374161][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.388401][ T5773] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 189.407688][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.435172][ T5773] usb 2-1: config 0 descriptor?? [ 189.872233][ T5773] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 189.894071][ T5773] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 189.902355][ T8938] loop3: detected capacity change from 0 to 8192 [ 189.911527][ T5773] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 189.928196][ T5773] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 189.944505][ T5773] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 189.945884][ T8938] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.966288][ T8938] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 189.984165][ T8938] REISERFS (device loop3): using ordered data mode [ 189.990915][ T8938] reiserfs: using flush barriers [ 189.998772][ T8938] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.005979][ T5773] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 190.015554][ T8938] REISERFS (device loop3): checking transaction log (loop3) [ 190.243332][ T8938] REISERFS (device loop3): Using tea hash to sort names [ 190.267630][ T8938] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 190.403487][ T8932] loop0: detected capacity change from 0 to 32768 [ 190.458463][ T1188] usb 2-1: USB disconnect, device number 11 [ 190.473113][ T8932] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.664269][ T8932] XFS (loop0): Ending clean mount [ 190.803378][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.249895][ T8970] loop0: detected capacity change from 0 to 128 [ 191.516259][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 191.554190][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 191.934265][ T5773] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.126772][ T5773] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 192.149601][ T5773] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 192.168577][ T5773] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 192.190256][ T5773] usb 1-1: config 220 has no interface number 2 [ 192.199691][ T5773] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 192.220625][ T5773] usb 1-1: config 220 interface 0 has no altsetting 0 [ 192.227842][ T5773] usb 1-1: config 220 interface 76 has no altsetting 0 [ 192.242267][ T5773] usb 1-1: config 220 interface 1 has no altsetting 0 [ 192.261249][ T5773] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 192.270648][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.279367][ T5773] usb 1-1: Product: syz [ 192.283722][ T5773] usb 1-1: Manufacturer: syz [ 192.298760][ T5773] usb 1-1: SerialNumber: syz [ 192.502265][ T9010] loop2: detected capacity change from 0 to 4096 [ 192.523184][ T9010] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 192.547441][ T5773] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 192.553833][ T5773] usb 1-1: No valid video chain found. [ 192.566040][ T5773] usb 1-1: selecting invalid altsetting 0 [ 192.598608][ T5773] usb 1-1: selecting invalid altsetting 0 [ 192.604957][ T5773] usbtest: probe of 1-1:220.1 failed with error -22 [ 192.632645][ T5773] usb 1-1: USB disconnect, device number 12 [ 192.667688][ T9010] ntfs: volume version 3.1. [ 192.712243][ T9010] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 192.764293][ T9010] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 192.898306][ T9019] loop3: detected capacity change from 0 to 256 [ 192.937494][ T9023] loop2: detected capacity change from 0 to 64 [ 193.350273][ T9029] loop2: detected capacity change from 0 to 4096 [ 193.397564][ T9034] loop3: detected capacity change from 0 to 256 [ 193.448386][ T9034] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 194.173898][ T9040] loop1: detected capacity change from 0 to 512 [ 194.194016][ C0] sched: RT throttling activated [ 194.210268][ T9040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.270502][ T9032] loop0: detected capacity change from 0 to 131072 [ 194.281227][ T9032] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 194.282473][ T9040] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1196: iget: bad i_size value: 38620345925642 [ 194.290753][ T9032] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 194.321452][ T9032] F2FS-fs (loop0): invalid crc value [ 194.327939][ T9040] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1196: couldn't read orphan inode 15 (err -117) [ 194.362712][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369942][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.388968][ T9032] F2FS-fs (loop0): Found nat_bits in checkpoint [ 194.408644][ T9040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.440056][ T9032] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 194.447201][ T9032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 194.564419][ T9032] F2FS-fs (loop0): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 194.577696][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 194.656298][ T9051] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1196: bg 0: block 5: invalid block bitmap [ 194.733724][ T9051] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 488 with error 28 [ 194.750328][ T9051] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.750328][ T9051] [ 194.778763][ T9051] EXT4-fs (loop1): Total free blocks count 0 [ 194.795147][ T9051] EXT4-fs (loop1): Free/Dirty block details [ 194.814175][ T9051] EXT4-fs (loop1): free_blocks=0 [ 194.819770][ T9051] EXT4-fs (loop1): dirty_blocks=488 [ 194.826319][ T9051] EXT4-fs (loop1): Block reservation details [ 194.832469][ T9051] EXT4-fs (loop1): i_reserved_data_blocks=488 [ 194.934711][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.035856][ T5826] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.242897][ T9063] loop1: detected capacity change from 0 to 2048 [ 195.258218][ T5826] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 195.268765][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.292284][ T9063] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.314144][ T5826] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.354326][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.384866][ T5826] usb 4-1: Product: syz [ 195.389069][ T5826] usb 4-1: Manufacturer: syz [ 195.393672][ T5826] usb 4-1: SerialNumber: syz [ 195.426448][ T5826] usb 4-1: config 0 descriptor?? [ 195.432131][ T9054] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.446847][ T5826] usb 4-1: selecting invalid altsetting 0 [ 195.624308][ T5776] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.745070][ T9054] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.758066][ T5826] usb 4-1: USB disconnect, device number 9 [ 195.804826][ T9076] program syz.0.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.826086][ T5776] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.850772][ T5776] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.860953][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.878269][ T5776] usb 3-1: SerialNumber: syz [ 195.924541][ T28] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.013810][ T9080] loop0: detected capacity change from 0 to 4096 [ 196.042411][ T9081] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.114282][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 196.134404][ T28] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 196.150862][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.164495][ T28] usb 2-1: config 0 descriptor?? [ 196.396103][ T28] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 196.421973][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.429540][ T9087] vxcan0: tx address claim with dest, not broadcast [ 196.455803][ T28] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 196.471831][ T28] usb 2-1: media controller created [ 196.524408][ T5776] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 196.541474][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.599116][ T28] az6027: usb out operation failed. (-71) [ 196.613587][ T28] az6027: usb out operation failed. (-71) [ 196.624073][ T28] stb0899_attach: Driver disabled by Kconfig [ 196.630155][ T28] az6027: no front-end attached [ 196.630155][ T28] [ 196.637633][ T28] az6027: usb out operation failed. (-71) [ 196.643455][ T28] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 196.652047][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 196.674387][ T28] dvb-usb: schedule remote query interval to 400 msecs. [ 196.693765][ T28] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 196.721370][ T28] usb 2-1: USB disconnect, device number 12 [ 196.756413][ T5776] usb 3-1: USB disconnect, device number 9 [ 196.814263][ T1188] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.826752][ T28] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 197.004748][ T1188] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 197.039619][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.048592][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.064299][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.072268][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.090344][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.101309][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.110393][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.122177][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.133274][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.149668][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.158669][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.194090][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.202440][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.216624][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.237624][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.250555][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.256686][ T9093] ubi31: attaching mtd0 [ 197.259546][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.274916][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.278997][ T9093] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216) [ 197.282867][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.300170][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.355824][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.363667][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.395189][ T1188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.419533][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.442071][ T1188] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 197.464226][ T1188] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 197.472824][ T1188] usb 4-1: Product: syz [ 197.477091][ T1188] usb 4-1: Manufacturer: syz [ 197.481844][ T1188] usb 4-1: SerialNumber: syz [ 197.488907][ T1188] usb 4-1: config 0 descriptor?? [ 197.514603][ T1188] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 197.704239][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.840377][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 197.848269][ T1188] usb 4-1: USB disconnect, device number 10 [ 197.858843][ T1188] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 197.905463][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 197.913142][ T5808] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 197.921678][ T5808] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.931674][ T5808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.942145][ T5808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.952305][ T5808] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.965518][ T5808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.974793][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.197884][ T5808] usb 3-1: GET_CAPABILITIES returned 0 [ 198.203508][ T5808] usbtmc 3-1:16.0: can't read capabilities [ 198.418297][ T5808] usb 3-1: USB disconnect, device number 10 [ 199.044097][ T28] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 199.238480][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 199.258954][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.280955][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.289220][ T9129] loop1: detected capacity change from 0 to 8192 [ 199.304602][ T28] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.334063][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.365544][ T28] usb 1-1: config 0 descriptor?? [ 199.394932][ T28] hub 1-1:0.0: USB hub found [ 199.639461][ T28] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 200.041011][ T28] hid-generic 0003:046D:C31C.0008: item fetching failed at offset 0/1 [ 200.083034][ T28] hid-generic: probe of 0003:046D:C31C.0008 failed with error -22 [ 200.093925][ T9131] loop2: detected capacity change from 0 to 32768 [ 200.132452][ T27] audit: type=1800 audit(1776128247.126:65): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1233" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 200.182178][ T9131] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 200.182178][ T9131] [ 200.217547][ T9131] ERROR: (device loop2): remounting filesystem as read-only [ 200.266348][ T9131] syz.2.1233: attempt to access beyond end of device [ 200.266348][ T9131] loop2: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 200.380237][ T9144] loop3: detected capacity change from 0 to 2048 [ 200.399866][ T5769] ------------[ cut here ]------------ [ 200.406343][ T5769] kernel BUG at fs/jfs/inode.c:175! [ 200.420012][ T5769] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 200.426113][ T5769] CPU: 1 PID: 5769 Comm: syz-executor Not tainted syzkaller #0 [ 200.433661][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.443728][ T5769] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 200.449294][ T5769] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 a9 c2 df fe e9 16 fe ff ff e8 1f 8b 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 200.468914][ T5769] RSP: 0018:ffffc9000471fac0 EFLAGS: 00010293 [ 200.474993][ T5769] RAX: ffffffff82ff96e1 RBX: ffff88805c623bb0 RCX: ffff88802484da00 [ 200.482968][ T5769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805c623bb0 [ 200.490954][ T5769] RBP: 0000000000000002 R08: ffffffff911c5657 R09: 1ffffffff2238aca [ 200.498935][ T5769] R10: dffffc0000000000 R11: fffffbfff2238acb R12: dffffc0000000000 [ 200.506918][ T5769] R13: dffffc0000000000 R14: ffff88805c623838 R15: ffff88805c623be8 [ 200.514894][ T5769] FS: 0000555566d12500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 200.523834][ T5769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.530429][ T5769] CR2: 00007fa2c7385980 CR3: 0000000061cc6000 CR4: 00000000003506e0 [ 200.538413][ T5769] Call Trace: [ 200.540378][ T9145] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.541686][ T5769] [ 200.541692][ T5769] ? evict+0x4c4/0x8d0 [ 200.559192][ T5769] ? jfs_write_inode+0x220/0x220 [ 200.564144][ T5769] evict+0x4ca/0x8d0 [ 200.568058][ T5769] ? proc_nr_inodes+0x230/0x230 [ 200.572928][ T5769] ? do_raw_spin_unlock+0x121/0x230 [ 200.578143][ T5769] ? do_raw_spin_unlock+0x121/0x230 [ 200.583359][ T5769] evict_inodes+0x606/0x6a0 [ 200.587878][ T5769] ? clear_inode+0x150/0x150 [ 200.592485][ T5769] generic_shutdown_super+0x97/0x2b0 [ 200.597779][ T5769] kill_block_super+0x44/0x90 [ 200.602462][ T5769] deactivate_locked_super+0x97/0x100 [ 200.607843][ T5769] cleanup_mnt+0x43b/0x4d0 [ 200.612251][ T5769] task_work_run+0x1d4/0x260 [ 200.616830][ T5769] ? task_work_cancel+0x220/0x220 [ 200.621849][ T5769] ? exit_to_user_mode_loop+0x3b/0x110 [ 200.627304][ T5769] exit_to_user_mode_loop+0xe6/0x110 [ 200.632584][ T5769] exit_to_user_mode_prepare+0xee/0x180 [ 200.638124][ T5769] syscall_exit_to_user_mode+0x1a/0x50 [ 200.643572][ T5769] do_syscall_64+0x61/0xa0 [ 200.647974][ T5769] ? clear_bhb_loop+0x40/0x90 [ 200.652642][ T5769] ? clear_bhb_loop+0x40/0x90 [ 200.657305][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.663185][ T5769] RIP: 0033:0x7eff2759da57 [ 200.667591][ T5769] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 200.687185][ T5769] RSP: 002b:00007ffc9a46b388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 200.695587][ T5769] RAX: 0000000000000000 RBX: 00007eff27632048 RCX: 00007eff2759da57 [ 200.703567][ T5769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a46b440 [ 200.711527][ T5769] RBP: 00007ffc9a46b440 R08: 00007ffc9a46c440 R09: 00000000ffffffff [ 200.719660][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9a46c4d0 [ 200.727650][ T5769] R13: 00007eff27632048 R14: 0000000000030e7c R15: 00007ffc9a46c510 [ 200.735788][ T5769] [ 200.738822][ T5769] Modules linked in: [ 200.742774][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.750709][ T5769] ---[ end trace 0000000000000000 ]--- [ 200.755267][ T28] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.764512][ T5776] usb 1-1: USB disconnect, device number 13 [ 200.765869][ T5769] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 200.786385][ T5769] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 a9 c2 df fe e9 16 fe ff ff e8 1f 8b 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 200.806927][ T5769] RSP: 0018:ffffc9000471fac0 EFLAGS: 00010293 [ 200.813053][ T5769] RAX: ffffffff82ff96e1 RBX: ffff88805c623bb0 RCX: ffff88802484da00 [ 200.821120][ T5769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805c623bb0 [ 200.830447][ T5769] RBP: 0000000000000002 R08: ffffffff911c5657 R09: 1ffffffff2238aca [ 200.838459][ T5769] R10: dffffc0000000000 R11: fffffbfff2238acb R12: dffffc0000000000 [ 200.847696][ T5769] R13: dffffc0000000000 R14: ffff88805c623838 R15: ffff88805c623be8 [ 200.855832][ T5769] FS: 0000555566d12500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 200.864873][ T5769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.871482][ T5769] CR2: 00007fa2c75e92f8 CR3: 0000000061cc6000 CR4: 00000000003506e0 [ 200.879510][ T5769] Kernel panic - not syncing: Fatal exception [ 200.885875][ T5769] Kernel Offset: disabled [ 200.890187][ T5769] Rebooting in 86400 seconds..