last executing test programs: 5.415084974s ago: executing program 0 (id=935): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@autodefrag}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000780)={0x2, 0x7, {0x3ff, @usage=0x1, 0x0, 0x1, 0x5c6, 0x9, 0xffffffffffffff96, 0x6bd, 0x21, @usage=0x80000001, 0x0, 0xb83c, [0xfffffffffffffd6e, 0xfffffffffffffff7, 0x3, 0x0, 0x6, 0x7]}, {0x7fff, @usage=0x3, 0x0, 0x3, 0xffffffff, 0xcc, 0xb, 0x4, 0x20, @usage=0x4, 0x9, 0x372f2380, [0x4, 0x10001, 0xd, 0x1d52b6d3, 0x81, 0x5]}, {0x2, @usage=0x2e, 0x0, 0x62c, 0x6, 0x0, 0x8, 0x20, 0x320, @struct={0x4, 0x6}, 0xb31, 0x3, [0xffffffffffffffd1, 0xa, 0x7, 0xe9, 0x9, 0x1]}, {0x2, 0x745, 0x9}}) 5.19680238s ago: executing program 3 (id=937): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.941532518s ago: executing program 3 (id=938): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000200)='./file1\x00', 0x12a) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) readv(r0, 0x0, 0x0) 4.577244427s ago: executing program 3 (id=939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000102, 0x0, 0x100000000004}]}) 4.220779357s ago: executing program 3 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 3.980190143s ago: executing program 3 (id=943): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, 0x0) 3.407876839s ago: executing program 1 (id=945): connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000440)=0xc, 0x4) 3.014797419s ago: executing program 0 (id=946): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000240)="a9", 0x1, 0x9000) 2.965446741s ago: executing program 1 (id=947): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000e0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x10042) 2.837489364s ago: executing program 2 (id=948): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf5400000000000007"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 2.804062485s ago: executing program 1 (id=949): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x16, 0x100, 0x4, 0x1, 0xd, &(0x7f0000000000)='C'}) 2.477986804s ago: executing program 0 (id=950): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x2b, 0x4) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x81}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2.429563485s ago: executing program 2 (id=951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="050034006e000000080026008a09000008009f0006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 2.23816653s ago: executing program 2 (id=952): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.114633274s ago: executing program 3 (id=953): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f00000005c0)="67e543057fa0917f3d7ebecbde1a67d3a8ff365d3d440346b5e0b62c636e4997425cb7e80e139c5b34e853cb418e61ff8b49acdf524535765b") 1.985367647s ago: executing program 2 (id=954): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xe, @mcast2, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@private1, r1}, 0x14) 1.904599629s ago: executing program 2 (id=955): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f08000103100b3d797dda9cb253ede8d06a432fac1e81be175e2c74d61a346d06d7cde9adea62b4f973ec0efc64fb72c3dafe092a81f9fc6dcd98c0e8013ac69765a4c4a48e641cdf954190a5f32346775e90aa8572db8140209476acc2784069260c352d0d7a54eabfa351812878a691ae4601000000cee491859a1857ba2d54ea6de5090c6a1ab1034f2de74a33a10a6e7459c82f87820545527fded64b567edb8a8ab5b6a78c257c21ab9589169d019cb76f789a31606263b9da99e65d0e17e686df3f58c83b06c45f2eb26f6cfa6ce40a9917354a3890ea0f0f8bbb845897a6e0659f4463284d0ba94671a907dfeb332c737efa86a75e4716991dc31969d8213ca4f0518741473361c42f93f34ab785008103843169c43f"], 0x60}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x1c3142, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.833992101s ago: executing program 1 (id=956): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) fcntl$setlease(r0, 0x400, 0x2) 1.755557153s ago: executing program 1 (id=957): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000100)={[{@compress_force}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd}, {@noenospc_debug}]}, 0x1, 0x559d, &(0x7f0000005680)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x194) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 1.457533981s ago: executing program 0 (id=958): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@i_version}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000100)='./file1\x00', 0x9) fallocate(r0, 0x20, 0x0, 0x8000) 1.171326049s ago: executing program 0 (id=959): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a"], 0x5c}}, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000002440)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 238.455804ms ago: executing program 0 (id=960): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 121.527937ms ago: executing program 1 (id=961): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) 0s ago: executing program 2 (id=962): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000400)=ANY=[], 0x1, 0x2b1, &(0x7f0000000100)="$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") openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) kernel console output (not intermixed with test programs): 110.845998][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.846241][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.846258][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.846498][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.846514][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.850031][ T5829] usb 2-1: USB disconnect, device number 5 [ 110.869218][ T8] usb 1-1: USB disconnect, device number 3 [ 112.209168][ T6363] loop1: detected capacity change from 0 to 40427 [ 112.228628][ T6363] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 112.238392][ T6363] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.278819][ T6363] F2FS-fs (loop1): invalid crc value [ 112.311568][ T6363] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.457543][ T6363] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 112.476278][ T6363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.537104][ T6363] F2FS-fs (loop1): Corrupted max_depth of 3: 255 [ 112.547083][ T6363] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 112.559721][ T5829] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.708796][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.759049][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 112.789423][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.812817][ T5829] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.839465][ T5829] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 112.860388][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.882877][ T5829] usb 1-1: Product: syz [ 112.887226][ T5829] usb 1-1: Manufacturer: syz [ 112.912437][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 112.929632][ T5829] usb 1-1: SerialNumber: syz [ 112.939158][ T8] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 112.955383][ T5829] usb 1-1: config 0 descriptor?? [ 112.962903][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 112.972229][ T8] usb 3-1: config 0 has no interface number 0 [ 112.989265][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.008770][ T8] usb 3-1: config 0 has no interface number 0 [ 113.017660][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.032111][ T8] usb 3-1: config 0 has no interface number 0 [ 113.043135][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.055676][ T8] usb 3-1: config 0 has no interface number 0 [ 113.065685][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.074136][ T8] usb 3-1: config 0 has no interface number 0 [ 113.082584][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.091363][ T8] usb 3-1: config 0 has no interface number 0 [ 113.099354][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.107512][ T8] usb 3-1: config 0 has no interface number 0 [ 113.122585][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.136560][ T8] usb 3-1: config 0 has no interface number 0 [ 113.150464][ T8] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 113.160221][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.170143][ T5829] kernel read not supported for file /dsp (pid: 5829 comm: kworker/0:5) [ 113.179631][ T8] usb 3-1: Product: syz [ 113.183885][ T8] usb 3-1: Manufacturer: syz [ 113.200651][ T8] usb 3-1: SerialNumber: syz [ 113.216240][ T8] usb 3-1: config 0 descriptor?? [ 113.239442][ T8] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 113.243730][ T5829] usb 1-1: USB disconnect, device number 4 [ 113.360892][ T6393] loop3: detected capacity change from 0 to 7 [ 113.371154][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.380709][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.397972][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.407357][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.427615][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.436921][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.445402][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.454687][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.463154][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.472428][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.504201][ T8] etas_es58x 3-1:0.2: could not retrieve the product info string [ 113.507489][ T6396] vivid-002: disconnect [ 113.520743][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.524814][ T6395] vivid-002: reconnect [ 113.529995][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.543135][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.552545][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.560766][ T6393] ldm_validate_partition_table(): Disk read failed. [ 113.571817][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.581379][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.594208][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.603677][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.626531][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.636166][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 113.644742][ T6393] Dev loop3: unable to read RDB block 0 [ 113.651172][ T6393] loop3: unable to read partition table [ 113.657250][ T6393] loop3: partition table beyond EOD, truncated [ 113.667046][ T6393] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 113.939680][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.969809][ T6404] block nbd0: not configured, cannot reconfigure [ 114.129202][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 114.140750][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 114.173003][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 114.193523][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.214602][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.255184][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.284947][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.532590][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 114.546411][ T23] usbtmc 2-1:16.0: can't read capabilities [ 114.768153][ T6407] loop3: detected capacity change from 0 to 32768 [ 114.814736][ T6398] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 114.815248][ T6407] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.231 (6407) [ 114.854272][ T5761] usb 2-1: USB disconnect, device number 6 [ 114.876906][ T6426] erspan0: entered promiscuous mode [ 114.945442][ T6407] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.957468][ T6407] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 114.998599][ T6407] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.029544][ T6407] BTRFS info (device loop3): use zstd compression, level 3 [ 115.036989][ T6407] BTRFS info (device loop3): using free space tree [ 115.243714][ T6407] BTRFS info (device loop3): enabling ssd optimizations [ 115.260412][ C1] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 115.271770][ C1] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 115.280162][ C1] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 115.290924][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 115.310574][ T5761] usb 3-1: USB disconnect, device number 4 [ 115.326785][ T6407] BTRFS info (device loop3): auto enabling async discard [ 115.335198][ T5433] etas_es58x 3-1:0.2 can0: es58x_submit_urb: USB send urb failure: -ENODEV [ 115.346719][ T5433] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -ENODEV [ 115.356367][ T5761] etas_es58x 3-1:0.2: Disconnecting syz syz [ 115.390255][ T5811] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.581394][ T28] audit: type=1800 audit(1777610641.672:5): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.231" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 115.608933][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 115.635452][ T5811] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.688309][ T5811] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.749348][ T5811] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.791811][ T5811] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.868753][ T5811] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.923052][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.935675][ T28] audit: type=1326 audit(1777610642.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 115.982860][ T28] audit: type=1326 audit(1777610642.032:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.017797][ T6461] loop2: detected capacity change from 0 to 256 [ 116.098019][ T28] audit: type=1326 audit(1777610642.072:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.204291][ T5776] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.249737][ T5811] usb 1-1: GET_CAPABILITIES returned 0 [ 116.255339][ T5811] usbtmc 1-1:16.0: can't read capabilities [ 116.271797][ T28] audit: type=1326 audit(1777610642.072:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.356241][ T28] audit: type=1326 audit(1777610642.072:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.391509][ T28] audit: type=1326 audit(1777610642.072:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.415982][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.423093][ T28] audit: type=1326 audit(1777610642.072:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.449158][ T28] audit: type=1326 audit(1777610642.082:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.501950][ T28] audit: type=1326 audit(1777610642.082:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a7d9cdd9 code=0x7ffc0000 [ 116.539491][ T8] usb 1-1: USB disconnect, device number 5 [ 116.620310][ T6469] loop1: detected capacity change from 0 to 128 [ 116.656739][ T6469] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.680764][ T6469] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.068211][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.406685][ T6520] loop3: detected capacity change from 0 to 256 [ 118.430831][ T6517] loop2: detected capacity change from 0 to 128 [ 118.466028][ T6520] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 118.556332][ T6517] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 118.624273][ T6517] hpfs: filesystem error: improperly stopped [ 118.655755][ T6517] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 118.684017][ T6523] loop0: detected capacity change from 0 to 512 [ 118.699401][ T6517] hpfs: You really don't want any checks? You are crazy... [ 118.732348][ T6517] hpfs: hpfs_map_sector(): read error [ 118.765084][ T6517] hpfs: code page support is disabled [ 118.766062][ T6523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.790173][ T6517] hpfs: hpfs_map_4sectors(): unaligned read [ 118.801212][ T6484] loop1: detected capacity change from 0 to 40427 [ 118.808081][ T6517] hpfs: hpfs_map_4sectors(): unaligned read [ 118.833582][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.860311][ T6517] hpfs: filesystem error: unable to find root dir [ 118.872273][ T6484] F2FS-fs (loop1): invalid crc value [ 118.939126][ T6523] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.970545][ T6484] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.172936][ T6484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.215028][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.637102][ T5774] syz-executor: attempt to access beyond end of device [ 119.637102][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.710543][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 119.949498][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.157928][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.212342][ T5811] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.249980][ T5811] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.270961][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.299849][ T5811] usb 3-1: SerialNumber: syz [ 120.492271][ T23] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 120.565072][ T5811] usb 3-1: 0:2 : does not exist [ 120.640108][ T5811] usb 3-1: USB disconnect, device number 5 [ 120.767316][ T6322] udevd[6322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.174024][ T6576] loop1: detected capacity change from 0 to 256 [ 121.843786][ T6591] loop1: detected capacity change from 0 to 8 [ 121.961362][ T6591] SQUASHFS error: Unable to read directory block [249:c] [ 121.982415][ T6566] loop3: detected capacity change from 0 to 40427 [ 122.018864][ T6566] F2FS-fs (loop3): invalid crc value [ 122.029642][ T6589] loop0: detected capacity change from 0 to 8192 [ 122.047597][ T6566] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.102116][ T6589] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.130226][ T6589] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 122.141373][ T6589] REISERFS (device loop0): using ordered data mode [ 122.147948][ T6589] reiserfs: using flush barriers [ 122.222831][ T6566] F2FS-fs (loop3): Start checkpoint disabled! [ 122.226268][ T6589] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.261367][ T6597] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.278871][ T6566] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 122.289319][ T6589] REISERFS (device loop0): checking transaction log (loop0) [ 122.328627][ T6589] REISERFS (device loop0): Using r5 hash to sort names [ 122.359514][ T6589] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 122.519048][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.728975][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 122.764642][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 122.786317][ T34] kworker/u4:2: attempt to access beyond end of device [ 122.786317][ T34] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 122.798275][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 122.834981][ T5811] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 122.841021][ T34] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.869421][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.912129][ T34] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.930029][ T5811] usb 2-1: config 0 descriptor?? [ 122.939237][ T6608] process 'syz.2.285' launched '/dev/fd/4' with NULL argv: empty string added [ 122.943528][ T34] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.965445][ T6599] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.436435][ T5811] hid (null): report_id 0 is invalid [ 123.470542][ T5811] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 123.488201][ T5811] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 123.503491][ T5811] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x6 [ 123.512639][ T5811] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 123.525387][ T5811] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 123.533008][ T5811] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 123.559218][ T5811] saitek 0003:06A3:0CCD.0002: report_id 0 is invalid [ 123.588964][ T5811] saitek 0003:06A3:0CCD.0002: item 0 1 1 8 parsing failed [ 123.625313][ T5811] saitek 0003:06A3:0CCD.0002: parse failed [ 123.655896][ T5811] saitek: probe of 0003:06A3:0CCD.0002 failed with error -22 [ 123.664273][ T6623] loop3: detected capacity change from 0 to 256 [ 123.700055][ T5811] usb 2-1: USB disconnect, device number 7 [ 124.157733][ T6633] mkiss: ax0: crc mode is auto. [ 124.605005][ T6624] loop0: detected capacity change from 0 to 32768 [ 124.724228][ T6624] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.873510][ T6624] XFS (loop0): Ending clean mount [ 125.062758][ T6664] Zero length message leads to an empty skb [ 125.325548][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.789045][ T5811] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.999484][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.006586][ T5811] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 126.044171][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.044276][ T6690] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 126.081028][ T5811] usb 2-1: config 0 descriptor?? [ 126.167063][ T6694] netlink: 1 bytes leftover after parsing attributes in process `syz.0.311'. [ 126.402126][ T6700] loop0: detected capacity change from 0 to 512 [ 126.429615][ T6697] tap0: tun_chr_ioctl cmd 1074025677 [ 126.439905][ T6697] tap0: linktype set to 780 [ 126.531838][ T5811] kye 0003:0458:501B.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 126.585538][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.609101][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.628781][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.635883][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.651521][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.674220][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.700043][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.719021][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.748895][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.766462][ T5811] kye 0003:0458:501B.0003: unknown main item tag 0x0 [ 126.815933][ T5811] kye 0003:0458:501B.0003: hidraw1: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 126.850341][ T6682] loop2: detected capacity change from 0 to 32768 [ 126.887171][ T5811] kye 0003:0458:501B.0003: tablet-enabling feature report not found [ 126.918769][ T5811] kye 0003:0458:501B.0003: tablet enabling failed [ 126.989264][ T5811] usb 2-1: USB disconnect, device number 8 [ 127.023563][ T6709] loop0: detected capacity change from 0 to 4096 [ 127.087569][ T6708] fido_id[6708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 127.152385][ T6682] JBD2: Ignoring recovery information on journal [ 127.186752][ T6713] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.310925][ T6682] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.449492][ T6718] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 127.725442][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 127.894184][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 128.077694][ T6731] loop3: detected capacity change from 0 to 1024 [ 128.169494][ T6733] loop1: detected capacity change from 0 to 512 [ 128.176927][ T6733] EXT4-fs: Ignoring removed bh option [ 128.197667][ T6731] hfsplus: can't free extent [ 128.219411][ T6733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.285357][ T6733] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.324: bad orphan inode 131083 [ 128.377142][ T6733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.742156][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.834332][ T6751] loop2: detected capacity change from 0 to 1024 [ 129.143501][ T3528] hfsplus: b-tree write err: -5, ino 25 [ 129.159201][ T3528] hfsplus: b-tree write err: -5, ino 4 [ 129.165279][ T3528] hfsplus: b-tree write err: -5, ino 2 [ 129.529029][ T5812] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.731168][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.771796][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.789519][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.806982][ T5812] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 129.817182][ T6772] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.842330][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.864045][ T5812] usb 4-1: config 0 descriptor?? [ 129.870473][ T6757] loop1: detected capacity change from 0 to 32768 [ 129.944582][ T6757] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.118243][ T6757] XFS (loop1): Ending clean mount [ 130.170664][ T6757] XFS (loop1): Quotacheck needed: Please wait. [ 130.257485][ T6757] XFS (loop1): Quotacheck: Done. [ 130.324138][ T5812] hid-rmi 0003:0461:4E72.0004: unknown main item tag 0x2 [ 130.375580][ T5812] hid-rmi 0003:0461:4E72.0004: unknown main item tag 0x0 [ 130.397768][ T5812] hid-rmi 0003:0461:4E72.0004: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 130.615217][ T5812] usb 4-1: USB disconnect, device number 5 [ 130.629364][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.710263][ T6796] loop0: detected capacity change from 0 to 1024 [ 130.718317][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 130.786079][ T6796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.073751][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.361787][ T6808] netlink: 64 bytes leftover after parsing attributes in process `syz.3.350'. [ 131.516193][ T6814] loop0: detected capacity change from 0 to 512 [ 131.559828][ T6816] mmap: syz.3.354 (6816) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.590250][ T6814] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.352: iget: bad i_size value: 38620345925642 [ 131.699486][ T5812] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 131.718830][ T6814] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.352: couldn't read orphan inode 15 (err -117) [ 131.771519][ T6814] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.925908][ T6823] loop1: detected capacity change from 0 to 4096 [ 131.926668][ T5812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.958819][ T5812] usb 3-1: config 0 has no interface number 0 [ 131.970274][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 131.986785][ T5812] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.016022][ T5812] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.042028][ T6823] NILFS (loop1): invalid segment: Checksum error in segment payload [ 132.064728][ T5812] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.086314][ T6823] NILFS (loop1): trying rollback from an earlier position [ 132.127794][ T5812] usb 3-1: config 0 interface 1 has no altsetting 0 [ 132.140999][ T5812] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 132.153601][ T6823] NILFS (loop1): recovery complete [ 132.172466][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.193227][ T6831] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.194499][ T5812] usb 3-1: config 0 descriptor?? [ 132.330970][ T6823] capability: warning: `syz.1.357' uses 32-bit capabilities (legacy support in use) [ 132.909454][ T5812] uclogic 0003:145F:0212.0005: pen parameters not found [ 132.916651][ T5812] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 132.987051][ T5812] usb 3-1: USB disconnect, device number 6 [ 133.045080][ T6838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.363'. [ 133.316595][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.328794][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.333117][ T6846] loop0: detected capacity change from 0 to 256 [ 133.815021][ T6840] loop3: detected capacity change from 0 to 32768 [ 133.843534][ T6840] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.938886][ T6840] XFS (loop3): Ending clean mount [ 134.149368][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.512648][ T6870] loop0: detected capacity change from 0 to 4096 [ 134.553027][ T6870] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 134.847995][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 134.927978][ T6885] loop3: detected capacity change from 0 to 1764 [ 135.180230][ T6889] loop2: detected capacity change from 0 to 64 [ 135.199315][ T6887] capability: warning: `syz.1.381' uses deprecated v2 capabilities in a way that may be insecure [ 135.285961][ T6889] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 135.401636][ T6887] Falling back ldisc for ttyS3. [ 135.412339][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 135.412356][ T28] audit: type=1804 audit(1777610661.502:16): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.382" name="/newroot/116/bus/file0" dev="loop2" ino=4 res=1 errno=0 [ 135.798375][ T6898] loop3: detected capacity change from 0 to 1024 [ 135.816444][ T6898] EXT4-fs: Ignoring removed oldalloc option [ 135.847583][ T6898] EXT4-fs: inline encryption not supported [ 135.918302][ T6898] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.054648][ T6898] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.385: lblock 2 mapped to illegal pblock 2 (length 1) [ 136.153861][ T6898] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 136.207315][ T6898] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.385: lblock 0 mapped to illegal pblock 48 (length 1) [ 136.249390][ T6898] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 136.288522][ T6898] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.385: Failed to acquire dquot type 0 [ 136.330971][ T6898] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 136.365813][ T6898] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.385: mark_inode_dirty error [ 136.405596][ T6898] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 136.425292][ T6898] EXT4-fs (loop3): 1 orphan inode deleted [ 136.444060][ T6898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.468886][ T34] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.548863][ T34] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 136.598884][ T34] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 136.685023][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.725541][ T5776] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 136.774307][ T5776] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 136.818367][ T5776] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 137.359057][ T5812] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.429936][ T6924] loop2: detected capacity change from 0 to 32768 [ 137.478994][ T6924] (syz.2.391,6924,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.544710][ T6924] (syz.2.391,6924,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.580642][ T5812] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 137.619020][ T5812] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 137.652453][ T5812] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 137.693176][ T5812] usb 2-1: config 220 has no interface number 2 [ 137.711599][ T6924] JBD2: Ignoring recovery information on journal [ 137.718310][ T5812] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 137.749787][ T5812] usb 2-1: config 220 interface 0 has no altsetting 0 [ 137.780217][ T5812] usb 2-1: config 220 interface 76 has no altsetting 0 [ 137.787172][ T5812] usb 2-1: config 220 interface 1 has no altsetting 0 [ 137.787760][ T6958] loop3: detected capacity change from 0 to 64 [ 137.837511][ T5812] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 137.873164][ T6924] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 137.880577][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.916842][ T5812] usb 2-1: Product: syz [ 137.937023][ T5812] usb 2-1: Manufacturer: syz [ 137.954160][ T5812] usb 2-1: SerialNumber: syz [ 137.960047][ T6962] tipc: Started in network mode [ 137.977265][ T6962] tipc: Node identity ac14140f, cluster identity 4711 [ 138.005918][ T28] audit: type=1800 audit(1777610664.108:17): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.400" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 138.061050][ T6962] tipc: New replicast peer: 172.20.20.187 [ 138.131694][ T6962] tipc: Enabled bearer , priority 10 [ 138.240724][ T5812] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 138.259958][ T5812] usb 2-1: No valid video chain found. [ 138.265657][ T5812] usb 2-1: selecting invalid altsetting 0 [ 138.371035][ T5812] usb 2-1: selecting invalid altsetting 0 [ 138.394152][ T5812] usbtest: probe of 2-1:220.1 failed with error -22 [ 138.405411][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 138.420162][ T5812] usb 2-1: USB disconnect, device number 9 [ 138.907951][ T6978] loop0: detected capacity change from 0 to 128 [ 138.932931][ T6978] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 138.979308][ T6978] hpfs: filesystem error: improperly stopped [ 138.990573][ T6978] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.001072][ T6978] hpfs: You really don't want any checks? You are crazy... [ 139.019900][ T6978] hpfs: hpfs_map_sector(): read error [ 139.039961][ T6978] hpfs: code page support is disabled [ 139.048337][ T6978] hpfs: hpfs_map_4sectors(): unaligned read [ 139.055108][ T6978] hpfs: hpfs_map_4sectors(): unaligned read [ 139.071971][ T6978] hpfs: filesystem error: unable to find root dir [ 139.080557][ T5811] tipc: Node number set to 2886997007 [ 139.215566][ T6978] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 140.547131][ T6996] loop0: detected capacity change from 0 to 32768 [ 140.581122][ T6996] (syz.0.414,6996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.616500][ T6996] (syz.0.414,6996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.738352][ T6996] JBD2: Ignoring recovery information on journal [ 140.824096][ T7012] Bluetooth: MGMT ver 1.22 [ 140.875549][ T6996] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 140.974411][ T7009] loop3: detected capacity change from 0 to 4096 [ 141.406803][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 141.914306][ T7030] loop2: detected capacity change from 0 to 256 [ 141.943933][ T7030] exfat: Deprecated parameter 'utf8' [ 141.984787][ T7030] exfat: Deprecated parameter 'utf8' [ 141.993912][ T7030] exfat: Deprecated parameter 'utf8' [ 142.035177][ T7030] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 142.395821][ T7042] program syz.0.435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.552227][ T7044] loop2: detected capacity change from 0 to 128 [ 142.577221][ T7044] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.628493][ T7044] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.823158][ T7052] loop3: detected capacity change from 0 to 16 [ 142.853074][ T5778] Bluetooth: hci2: command 0x0401 tx timeout [ 142.859995][ T5783] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 142.883373][ T7052] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 143.073618][ T7058] loop0: detected capacity change from 0 to 256 [ 143.139616][ T7058] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 143.330406][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 143.352798][ T7062] team0: Port device batadv1 added [ 144.167084][ T7086] loop1: detected capacity change from 0 to 256 [ 144.331192][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 144.354514][ T7073] loop0: detected capacity change from 0 to 32768 [ 144.395923][ T7073] JBD2: Ignoring recovery information on journal [ 144.477518][ T5761] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.497656][ T7073] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 144.674771][ T5761] usb 2-1: Using ep0 maxpacket: 32 [ 144.720456][ T5761] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.746520][ T5761] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.775987][ T5761] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.801441][ T5761] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 144.829999][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.880104][ T5761] usb 2-1: config 0 descriptor?? [ 144.989373][ T7098] netlink: 56 bytes leftover after parsing attributes in process `syz.2.458'. [ 145.002426][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 145.338225][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 145.358743][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 145.376562][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 145.403850][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 145.433981][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 145.467247][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 145.474329][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x6 [ 145.513394][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x3 [ 145.537352][ T5761] wacom 0003:056A:00C6.0006: unknown main item tag 0x7 [ 145.550491][ T5761] wacom 0003:056A:00C6.0006: hidraw0: USB HID v0.81 Device [HID 056a:00c6] on usb-dummy_hcd.1-1/input0 [ 145.604776][ T5761] usb 2-1: USB disconnect, device number 10 [ 145.768945][ T7113] fido_id[7113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.899871][ T7117] loop3: detected capacity change from 0 to 4096 [ 145.907877][ T7117] EXT4-fs: Ignoring removed i_version option [ 145.937182][ T7117] EXT4-fs: Ignoring removed oldalloc option [ 145.984838][ T7117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.010646][ T7117] EXT4-fs (loop3): Test dummy encryption mode enabled [ 146.033973][ T7117] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 146.451803][ T7112] loop0: detected capacity change from 0 to 32768 [ 146.478155][ T5761] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.542372][ T7112] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.583259][ T7136] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 146.594042][ T7136] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.684262][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 146.699550][ T5761] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 146.717799][ T7112] XFS (loop0): Ending clean mount [ 146.737693][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.754725][ T7112] XFS (loop0): Quotacheck needed: Please wait. [ 146.774797][ T5761] usb 3-1: config 0 descriptor?? [ 146.876054][ T7112] XFS (loop0): Quotacheck: Done. [ 147.064771][ T5761] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 147.095303][ T5761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.107949][ T5761] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 147.116008][ T7144] loop1: detected capacity change from 0 to 512 [ 147.124565][ T5761] usb 3-1: media controller created [ 147.147923][ T7144] EXT4-fs: Ignoring removed orlov option [ 147.177152][ T7144] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.184204][ T7144] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.230311][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.243331][ T7144] EXT4-fs (loop1): 1 truncate cleaned up [ 147.252932][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.300452][ T28] audit: type=1800 audit(1777610673.621:18): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.476" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 147.356044][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.394225][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.406728][ T5761] az6027: usb out operation failed. (-71) [ 147.420378][ T5761] az6027: usb out operation failed. (-71) [ 147.427885][ T5761] stb0899_attach: Driver disabled by Kconfig [ 147.451099][ T5761] az6027: no front-end attached [ 147.451099][ T5761] [ 147.472659][ T5761] az6027: usb out operation failed. (-71) [ 147.479043][ T5761] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 147.497979][ T7150] Bluetooth: MGMT ver 1.22 [ 147.579991][ T5761] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 147.621342][ T5761] dvb-usb: schedule remote query interval to 400 msecs. [ 147.657021][ T5761] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 147.686413][ T5761] usb 3-1: USB disconnect, device number 7 [ 147.941815][ T5761] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 148.385102][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.601508][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 148.631024][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 148.650945][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.674939][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.715174][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.750373][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.804374][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.838235][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.958392][ T7152] loop3: detected capacity change from 0 to 40427 [ 149.002066][ T7152] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 149.019873][ T7152] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.050174][ T7152] F2FS-fs (loop3): invalid crc value [ 149.092382][ T23] usb 1-1: GET_CAPABILITIES returned 0 [ 149.111775][ T23] usbtmc 1-1:16.0: can't read capabilities [ 149.127487][ T7152] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.255405][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 149.327715][ T7152] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 149.362929][ T7152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.371868][ T5812] usb 1-1: USB disconnect, device number 6 [ 149.735280][ T5776] syz-executor: attempt to access beyond end of device [ 149.735280][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.761481][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 149.945422][ T7172] loop1: detected capacity change from 0 to 32768 [ 150.012086][ T7172] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.487 (7172) [ 150.082055][ T7172] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 150.108291][ T7172] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 150.137425][ T7172] BTRFS info (device loop1): using free space tree [ 150.223980][ T7191] loop2: detected capacity change from 0 to 1024 [ 150.389881][ T7172] BTRFS info (device loop1): enabling ssd optimizations [ 150.404508][ T7172] BTRFS info (device loop1): auto enabling async discard [ 150.423999][ T7206] hfsplus: bad catalog entry type [ 150.567497][ T12] hfsplus: b-tree write err: -5, ino 25 [ 150.611164][ T12] hfsplus: b-tree write err: -5, ino 4 [ 150.631376][ T12] hfsplus: b-tree write err: -5, ino 2 [ 150.638350][ T12] hfsplus: b-tree write err: -5, ino 26 [ 150.699780][ T5774] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 151.199942][ T6322] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop1 scanned by udevd (6322) [ 151.418074][ T7187] loop0: detected capacity change from 0 to 32768 [ 152.041834][ T7236] vxcan0: tx address claim with dest, not broadcast [ 152.952714][ T7249] netlink: 92 bytes leftover after parsing attributes in process `syz.3.512'. [ 152.971340][ T7249] netem: unknown loss type 0 [ 152.979759][ T7249] netem: change failed [ 153.043545][ T7238] loop1: detected capacity change from 0 to 32768 [ 153.080497][ T7238] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 153.156021][ T7238] JBD2: Ignoring recovery information on journal [ 153.174030][ T7252] loop2: detected capacity change from 0 to 512 [ 153.229596][ T7238] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 153.333306][ T7252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.414661][ T7252] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.503644][ T7238] (syz.1.510,7238,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 153.693403][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 153.717889][ T7265] loop0: detected capacity change from 0 to 128 [ 153.893667][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.171035][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 154.209357][ T7271] block nbd0: Unsupported socket: should be TCP or UNIX. [ 154.492521][ T7279] x_tables: duplicate entry at hook 3 [ 154.523360][ T1212] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.750962][ T1212] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 154.760362][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.783625][ T1212] usb 4-1: Product: syz [ 154.794250][ T1212] usb 4-1: Manufacturer: syz [ 154.803392][ T1212] usb 4-1: SerialNumber: syz [ 154.818103][ T1212] usb 4-1: config 0 descriptor?? [ 154.831833][ T1212] ch341 4-1:0.0: ch341-uart converter detected [ 154.860709][ T5783] Bluetooth: hci2: link tx timeout [ 154.866880][ T5783] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.090513][ T7296] loop0: detected capacity change from 0 to 4096 [ 155.122385][ T7299] loop2: detected capacity change from 0 to 256 [ 155.189865][ T7296] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 155.252263][ T7299] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 155.263007][ T7296] ntfs3: loop0: Failed to load $Extend (-22). [ 155.304426][ T7296] ntfs3: loop0: Failed to initialize $Extend. [ 155.650837][ T1212] usb 4-1: failed to send control message: -71 [ 155.667447][ T1212] ch341-uart: probe of ttyUSB0 failed with error -71 [ 155.711961][ T1212] usb 4-1: USB disconnect, device number 6 [ 155.730013][ T1212] ch341 4-1:0.0: device disconnected [ 155.889820][ T7312] loop2: detected capacity change from 0 to 1024 [ 155.997778][ T7312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.035505][ T7312] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.206521][ T7312] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.539: bg 0: block 112: padding at end of block bitmap is not set [ 156.281719][ T7306] loop1: detected capacity change from 0 to 32768 [ 156.324509][ T7306] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.410748][ T4696] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm kworker/u4:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 156.443692][ T7331] loop3: detected capacity change from 0 to 4096 [ 156.473342][ T7306] XFS (loop1): Ending clean mount [ 156.487639][ T4696] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 156.539914][ T4696] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.539914][ T4696] [ 156.563687][ T7332] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.577058][ T4696] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 5) [ 156.641113][ T4696] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 156.701548][ T4696] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.701548][ T4696] [ 156.738405][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.768854][ T7334] loop0: detected capacity change from 0 to 2048 [ 156.776089][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.879903][ T5778] Bluetooth: hci2: command 0x0401 tx timeout [ 156.905365][ T7334] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 156.958521][ T7334] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 157.023924][ T7334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.110211][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'. [ 158.067480][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 158.073025][ T7352] loop0: detected capacity change from 0 to 2048 [ 158.099059][ T7354] netlink: 'syz.1.555': attribute type 21 has an invalid length. [ 158.135069][ T7358] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.244760][ T7357] use of bytesused == 0 is deprecated and will be removed in the future, [ 158.286262][ T7357] use the actual size instead. [ 158.557464][ T7363] loop3: detected capacity change from 0 to 512 [ 158.591145][ T7363] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.558: invalid indirect mapped block 2185560079 (level 0) [ 158.706541][ T7366] loop0: detected capacity change from 0 to 256 [ 158.747549][ T7366] exfat: Deprecated parameter 'utf8' [ 158.768970][ T7363] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.558: invalid indirect mapped block 2683928664 (level 1) [ 158.803130][ T7366] exfat: Deprecated parameter 'utf8' [ 158.825899][ T7363] EXT4-fs (loop3): 1 truncate cleaned up [ 158.861671][ T7363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.880577][ T7366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 159.003372][ T7363] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.558: Invalid inode table block 1633771873 in block_group 0 [ 159.036700][ T7363] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 159.057060][ T7363] EXT4-fs error (device loop3): add_dirent_to_buf:2216: inode #2: comm syz.3.558: mark_inode_dirty error [ 159.082336][ T7363] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.558: Invalid inode table block 1633771873 in block_group 0 [ 159.143989][ T7363] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 159.163117][ T7363] EXT4-fs error (device loop3): ext4_add_nondir:2855: inode #18: comm syz.3.558: mark_inode_dirty error [ 159.185315][ T7363] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.558: Invalid inode table block 1633771873 in block_group 0 [ 159.214007][ T7363] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 159.231942][ T7363] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #18: comm syz.3.558: mark_inode_dirty error [ 159.255038][ T7363] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 159.275254][ T7371] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.558: Invalid inode bitmap blk 1630561644 in block_group 0 [ 159.299587][ T7361] loop1: detected capacity change from 0 to 32768 [ 159.373423][ T7361] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.489147][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.599980][ T7361] XFS (loop1): Ending clean mount [ 159.834039][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.891667][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.335425][ T7391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.343534][ T7391] IPv6: NLM_F_CREATE should be set when creating new route [ 160.350965][ T7391] IPv6: NLM_F_CREATE should be set when creating new route [ 160.358524][ T7391] IPv6: NLM_F_CREATE should be set when creating new route [ 160.455710][ T136] hfsplus: b-tree write err: -5, ino 25 [ 160.471249][ T136] hfsplus: b-tree write err: -5, ino 4 [ 160.490172][ T136] hfsplus: b-tree write err: -5, ino 2 [ 160.738997][ T7400] binder: 7399:7400 ioctl c018620c 200000000280 returned -1 [ 160.885667][ T7387] set_capacity_and_notify: 1 callbacks suppressed [ 160.885683][ T7387] loop3: detected capacity change from 0 to 40427 [ 160.941194][ T7387] F2FS-fs (loop3): invalid crc value [ 160.953815][ T7387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.133264][ T7387] F2FS-fs (loop3): Start checkpoint disabled! [ 161.145879][ T7387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 161.491315][ T4696] kworker/u4:9: attempt to access beyond end of device [ 161.491315][ T4696] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.517588][ T4696] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 161.613414][ T7413] loop2: detected capacity change from 0 to 64 [ 161.944973][ T7416] loop1: detected capacity change from 0 to 16 [ 162.025292][ T7416] erofs: (device loop1): mounted with root inode @ nid 36. [ 162.035763][ T7417] loop0: detected capacity change from 0 to 1024 [ 162.170984][ T7419] loop2: detected capacity change from 0 to 512 [ 162.297476][ T7419] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.577: iget: bad i_size value: 38620345925642 [ 162.402489][ T7419] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.577: couldn't read orphan inode 15 (err -117) [ 162.458311][ T7419] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.656104][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 163.033533][ T7437] program syz.2.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.191275][ T7435] loop1: detected capacity change from 0 to 131072 [ 164.199853][ T7435] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 164.206712][ T7435] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.217790][ T7435] F2FS-fs (loop1): invalid crc value [ 164.273905][ T7435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.344292][ T7435] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.351809][ T7435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 164.361314][ T7430] loop3: detected capacity change from 0 to 32768 [ 164.456021][ T7430] [ 164.456021][ T7430] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.456021][ T7430] [ 164.546146][ T7430] ERROR: (device loop3): diWrite: ixpxd invalid [ 164.546146][ T7430] [ 164.553451][ T7451] loop0: detected capacity change from 0 to 1024 [ 164.595247][ T7430] ERROR: (device loop3): txCommit: [ 164.595247][ T7430] [ 164.658792][ T7452] ERROR: (device loop3): diWrite: ixpxd invalid [ 164.658792][ T7452] [ 164.683231][ T7452] ERROR: (device loop3): txCommit: [ 164.683231][ T7452] [ 164.818626][ T5776] [ 164.818626][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.818626][ T5776] [ 164.882471][ T5776] [ 164.882471][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.882471][ T5776] [ 164.895750][ T3528] hfsplus: b-tree write err: -5, ino 25 [ 164.902771][ T3528] hfsplus: b-tree write err: -5, ino 4 [ 164.926470][ T3528] hfsplus: b-tree write err: -5, ino 2 [ 164.926580][ T7441] loop2: detected capacity change from 0 to 32768 [ 164.939738][ T3528] hfsplus: b-tree write err: -5, ino 26 [ 165.005550][ T7441] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 165.346482][ T7441] XFS (loop2): Starting recovery (logdev: internal) [ 165.479650][ T7441] XFS (loop2): Ending recovery (logdev: internal) [ 165.506580][ T7464] loop0: detected capacity change from 0 to 8192 [ 165.565040][ T7464] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.622972][ T7464] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 165.683357][ T7464] REISERFS (device loop0): using ordered data mode [ 165.728281][ T7464] reiserfs: using flush barriers [ 165.756919][ T7464] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.807793][ T7464] REISERFS (device loop0): checking transaction log (loop0) [ 165.820979][ T5772] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 166.230826][ T7464] REISERFS (device loop0): Using tea hash to sort names [ 166.246811][ T7464] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 166.269176][ T7464] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 166.771645][ T7481] loop2: detected capacity change from 0 to 512 [ 166.810893][ T7481] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.598: invalid indirect mapped block 256 (level 2) [ 166.880345][ T7481] EXT4-fs (loop2): 2 truncates cleaned up [ 166.894269][ T7481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.068936][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.286460][ T7494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.601'. [ 167.962686][ T7512] loop3: detected capacity change from 0 to 128 [ 168.002250][ T7512] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 168.057627][ T7512] hpfs: filesystem error: improperly stopped [ 168.063817][ T7512] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 168.155593][ T7512] hpfs: You really don't want any checks? You are crazy... [ 168.163395][ T7512] hpfs: hpfs_map_sector(): read error [ 168.202219][ T7512] hpfs: code page support is disabled [ 168.235470][ T7512] hpfs: hpfs_map_4sectors(): unaligned read [ 168.242655][ T7512] hpfs: hpfs_map_4sectors(): unaligned read [ 168.265214][ T7512] hpfs: filesystem error: unable to find root dir [ 168.761044][ T7523] loop2: detected capacity change from 0 to 512 [ 168.806367][ T7523] EXT4-fs: Ignoring removed bh option [ 168.903760][ T7523] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 168.955210][ T7523] EXT4-fs (loop2): 1 truncate cleaned up [ 168.983479][ T7523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.150023][ T7523] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.614: bg 0: block 465: padding at end of block bitmap is not set [ 169.174406][ T7520] loop3: detected capacity change from 0 to 32768 [ 169.213574][ T7523] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 169.264761][ T28] audit: type=1800 audit(1777610695.783:19): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 169.279640][ T7523] EXT4-fs (loop2): This should not happen!! Data will be lost [ 169.279640][ T7523] [ 169.286309][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.345403][ T7509] loop1: detected capacity change from 0 to 40427 [ 169.428375][ T7509] F2FS-fs (loop1): invalid crc value [ 169.436798][ T7509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 169.581143][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.585454][ T7509] F2FS-fs (loop1): Start checkpoint disabled! [ 169.609532][ T7509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 169.863531][ T7531] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 170.016177][ T7531] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.120509][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.125988][ T34] kworker/u4:2: attempt to access beyond end of device [ 170.125988][ T34] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 170.187595][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 170.195895][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 170.210308][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 170.815965][ T7530] loop2: detected capacity change from 0 to 40427 [ 170.835952][ T5778] block nbd0: Receive control failed (result -32) [ 170.835952][ T5783] block nbd0: Receive control failed (result -32) [ 170.902550][ T7530] F2FS-fs (loop2): heap/no_heap options were deprecated [ 170.955853][ T7530] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 170.957500][ T7542] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.986876][ T7530] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77e8c [ 171.038482][ T7530] F2FS-fs (loop2): invalid crc value [ 171.086591][ T7530] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 171.179481][ T7530] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.323123][ T7530] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 171.386702][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 171.434569][ T7530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 171.514117][ T7530] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 171.539533][ T7530] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_unlink+0x395/0x9e0 [ 171.586873][ T7530] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 172.319045][ T7562] loop0: detected capacity change from 0 to 4096 [ 172.613986][ T7562] ntfs3: loop0: MFT: r=1b, expect seq=1 instead of 0! [ 173.476133][ T7574] tap0: tun_chr_ioctl cmd 1074025677 [ 173.482315][ T7574] tap0: linktype set to 776 [ 173.747952][ T7566] loop3: detected capacity change from 0 to 32768 [ 173.860171][ T7572] loop2: detected capacity change from 0 to 32768 [ 173.866790][ T7566] JBD2: Ignoring recovery information on journal [ 173.868694][ T7566] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 173.916292][ T7566] JBD2: bad block at offset 32 [ 173.986394][ T7566] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 174.083964][ T7582] program syz.0.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.160996][ T7566] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 174.220090][ T7566] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 174.242547][ T7566] OCFS2: File system is now read-only. [ 174.249930][ T7566] (syz.3.630,7566,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 174.267755][ T7566] (syz.3.630,7566,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 174.324961][ T7566] (syz.3.630,7566,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 174.350459][ T7566] (syz.3.630,7566,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 174.365781][ T7566] (syz.3.630,7566,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 174.385419][ T7566] (syz.3.630,7566,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 174.400920][ T7566] (syz.3.630,7566,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 174.409577][ T7566] (syz.3.630,7566,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 174.441361][ T7566] (syz.3.630,7566,0):ocfs2_mknod:298 ERROR: status = -5 [ 174.472799][ T7566] (syz.3.630,7566,0):ocfs2_mknod:502 ERROR: status = -5 [ 174.480130][ T7566] (syz.3.630,7566,0):ocfs2_mkdir:659 ERROR: status = -5 [ 174.537250][ T7566] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 174.567053][ T7566] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 174.587457][ T7566] (syz.3.630,7566,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 174.598702][ T7566] (syz.3.630,7566,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 174.609056][ T7566] (syz.3.630,7566,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 174.618274][ T7566] (syz.3.630,7566,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 174.629854][ T7566] (syz.3.630,7566,0):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 174.639417][ T7566] (syz.3.630,7566,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 174.727487][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 174.791775][ T5811] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.021362][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 175.043439][ T5811] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 175.064230][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.092668][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 175.126945][ T5811] pvrusb2: ********** [ 175.137167][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 175.172702][ T5811] pvrusb2: Important functionality might not be entirely working. [ 175.200569][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 175.238708][ T5811] pvrusb2: ********** [ 175.310861][ T2320] pvrusb2: Invalid write control endpoint [ 175.434050][ T7601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.493240][ T2320] pvrusb2: Invalid write control endpoint [ 175.516932][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 175.530863][ T7606] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 175.537689][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 175.570348][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 175.573852][ T23] usb 1-1: USB disconnect, device number 7 [ 175.589351][ T2320] pvrusb2: Device being rendered inoperable [ 175.603086][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 175.622636][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 175.652519][ T2320] pvrusb2: Attached sub-driver cx25840 [ 175.658901][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 175.689971][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 175.731088][ T7601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.859020][ T7608] loop2: detected capacity change from 0 to 256 [ 175.914469][ T7608] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 175.941622][ T7601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.984939][ T7597] loop1: detected capacity change from 0 to 32768 [ 176.108212][ T7597] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 176.120057][ T7601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.148596][ T7597] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.327943][ T7597] XFS (loop1): Ending clean mount [ 176.369121][ T7597] XFS (loop1): Quotacheck needed: Please wait. [ 176.490835][ T7601] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.524376][ T7601] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.544250][ T7597] XFS (loop1): Quotacheck: Done. [ 176.599527][ T7601] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.688674][ T7601] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.693070][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.844883][ T7622] loop0: detected capacity change from 0 to 4096 [ 177.740855][ T7633] loop0: detected capacity change from 0 to 4096 [ 177.755845][ T7633] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 178.030121][ T7641] loop2: detected capacity change from 0 to 512 [ 178.053141][ T7633] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 178.417409][ T7645] loop0: detected capacity change from 0 to 256 [ 178.453931][ T7645] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.460430][ T7648] netlink: 552 bytes leftover after parsing attributes in process `syz.3.662'. [ 178.484019][ T7645] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 178.507254][ T7645] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 178.553439][ T7631] loop1: detected capacity change from 0 to 32768 [ 178.620848][ T7631] JBD2: Ignoring recovery information on journal [ 178.653205][ T28] audit: type=1800 audit(1777610705.192:20): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.660" name="file1" dev="loop0" ino=1048626 res=0 errno=0 [ 178.806656][ T7631] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.972217][ T7657] loop0: detected capacity change from 0 to 64 [ 179.210496][ T7631] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 179.239063][ T7631] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 179.264379][ T7631] OCFS2: File system is now read-only. [ 179.275429][ T7631] (syz.1.651,7631,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 179.330578][ T7631] (syz.1.651,7631,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 179.338865][ T7631] (syz.1.651,7631,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 179.361860][ T7631] (syz.1.651,7631,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 179.380076][ T7631] (syz.1.651,7631,1):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 179.388692][ T7631] (syz.1.651,7631,1):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 179.409001][ T7631] (syz.1.651,7631,1):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30 [ 179.430045][ T7631] (syz.1.651,7631,1):ocfs2_expand_inline_dir:3023 ERROR: status = -30 [ 179.443100][ T7631] (syz.1.651,7631,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 179.443169][ T7631] (syz.1.651,7631,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 179.443195][ T7631] (syz.1.651,7631,1):ocfs2_mknod:298 ERROR: status = -30 [ 179.443219][ T7631] (syz.1.651,7631,1):ocfs2_mknod:502 ERROR: status = -30 [ 179.443241][ T7631] (syz.1.651,7631,1):ocfs2_mkdir:659 ERROR: status = -30 [ 179.486539][ T7631] syz.1.651 (7631) used greatest stack depth: 18768 bytes left [ 179.616392][ T5774] (syz-executor,5774,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 179.616495][ T5774] (syz-executor,5774,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12 [ 179.616587][ T5774] (syz-executor,5774,1):_ocfs2_free_clusters:2583 ERROR: status = -12 [ 179.616608][ T5774] (syz-executor,5774,1):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 179.616630][ T5774] (syz-executor,5774,1):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 179.616653][ T5774] (syz-executor,5774,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 179.711350][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 180.158557][ T7664] loop3: detected capacity change from 0 to 4096 [ 180.203357][ T7664] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 180.213568][ T5829] IPVS: starting estimator thread 0... [ 180.268394][ T7664] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 180.328382][ T7669] IPVS: using max 18 ests per chain, 43200 per kthread [ 180.431574][ T7664] ntfs3: loop3: ino=1f, "file2" failed to parse mft record [ 180.488206][ T5761] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.523362][ T49] ntfs3: loop3: ino=1f, failed to parse mft record [ 180.677812][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 180.707564][ T5761] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.742566][ T5761] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.760217][ T5761] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.785391][ T5761] usb 1-1: config 1 interface 0 has no altsetting 0 [ 180.796304][ T5761] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 180.814553][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.827782][ T5761] usb 1-1: Product: syz [ 180.832921][ T5761] usb 1-1: Manufacturer: syz [ 180.849932][ T5761] usb 1-1: SerialNumber: syz [ 180.940601][ T7679] loop3: detected capacity change from 0 to 4096 [ 181.109208][ T5761] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 181.145602][ T7679] ntfs3: loop3: ino=5, "/" attr_set_size [ 181.177175][ T7679] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 181.332357][ T7674] loop1: detected capacity change from 0 to 40427 [ 181.363733][ T5811] usb 1-1: USB disconnect, device number 8 [ 181.391106][ T7674] F2FS-fs (loop1): invalid crc value [ 181.403084][ T5811] usblp0: removed [ 181.430955][ T7674] F2FS-fs (loop1): Found nat_bits in checkpoint [ 181.586007][ T7674] F2FS-fs (loop1): Start checkpoint disabled! [ 181.637916][ T7674] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 181.847451][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 182.078311][ T3528] kworker/u4:8: attempt to access beyond end of device [ 182.078311][ T3528] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 182.132823][ T3528] kworker/u4:8: attempt to access beyond end of device [ 182.132823][ T3528] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 182.150461][ T3528] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 182.158418][ T3528] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 182.184687][ T3528] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 182.503460][ T7681] loop2: detected capacity change from 0 to 40427 [ 182.528337][ T7681] F2FS-fs (loop2): invalid crc value [ 182.572032][ T7681] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.776682][ T7681] F2FS-fs (loop2): Start checkpoint disabled! [ 182.823657][ T7681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 183.039777][ T28] audit: type=1800 audit(1777610709.601:21): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.675" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 183.061053][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.417045][ T49] kworker/u4:3: attempt to access beyond end of device [ 183.417045][ T49] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 183.462324][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 183.477159][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 183.494172][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 183.601107][ T7702] loop0: detected capacity change from 0 to 32768 [ 183.699700][ T7702] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.842768][ T7704] loop3: detected capacity change from 0 to 40427 [ 183.871671][ T7704] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 183.879711][ T7704] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 183.916647][ T7702] XFS (loop0): Ending clean mount [ 183.951751][ T7702] XFS (loop0): Quotacheck needed: Please wait. [ 183.961247][ T7704] F2FS-fs (loop3): Found nat_bits in checkpoint [ 184.117355][ T7702] XFS (loop0): Quotacheck: Done. [ 184.172869][ T7704] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 184.219367][ T7704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 184.619058][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.524333][ T7752] loop1: detected capacity change from 0 to 64 [ 186.423276][ T7744] loop2: detected capacity change from 0 to 32768 [ 186.502828][ T7744] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.521528][ T7744] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.615824][ T7744] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 186.833062][ T7744] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 187.516759][ T7779] loop3: detected capacity change from 0 to 32768 [ 187.594351][ T7779] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 187.594351][ T7779] [ 187.627364][ T7779] xtLookup: xtSearch returned -5 [ 187.645297][ T7779] add_index: get/read_metapage failed! [ 187.670332][ T7779] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 187.670332][ T7779] [ 187.699723][ T7779] xtLookup: xtSearch returned -5 [ 187.710916][ T7779] free_index: error reading directory table [ 187.751092][ T7779] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 187.751092][ T7779] [ 187.782969][ T7779] xtLookup: xtSearch returned -5 [ 187.792816][ T7779] free_index: error reading directory table [ 187.805836][ T7779] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 187.805836][ T7779] [ 187.814288][ T7790] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 187.822646][ T7779] xtLookup: xtSearch returned -5 [ 187.830215][ T7779] free_index: error reading directory table [ 187.845365][ T7779] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 187.845365][ T7779] [ 187.877331][ T7779] xtLookup: xtSearch returned -5 [ 187.890572][ T7779] free_index: error reading directory table [ 187.909448][ T7779] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 187.909448][ T7779] [ 187.959767][ T7779] xtLookup: xtSearch returned -5 [ 187.985852][ T7779] free_index: error reading directory table [ 188.190183][ T7783] loop1: detected capacity change from 0 to 40427 [ 188.225643][ T7783] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 188.232524][ T7783] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 188.285536][ T7783] F2FS-fs (loop1): invalid crc value [ 188.556720][ T7801] loop0: detected capacity change from 0 to 64 [ 188.600204][ T7783] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 188.609154][ T7801] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 188.625568][ T7783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.864484][ T28] audit: type=1800 audit(1777610715.439:22): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.711" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 188.885602][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.015123][ T5774] syz-executor: attempt to access beyond end of device [ 189.015123][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.055914][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 189.475037][ T5761] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.684242][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 189.696666][ T5761] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.708133][ T5761] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.719158][ T5761] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.733800][ T5761] usb 4-1: config 1 interface 0 has no altsetting 0 [ 189.745595][ T5761] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 189.755156][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.765826][ T5761] usb 4-1: Product: syz [ 189.775266][ T5761] usb 4-1: Manufacturer: syz [ 189.793776][ T5761] usb 4-1: SerialNumber: syz [ 189.893656][ T5829] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.082981][ T5761] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 190.083456][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 190.115131][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.127220][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.138235][ T5829] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.159076][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.174798][ T5829] usb 2-1: config 0 descriptor?? [ 190.195177][ T5829] hub 2-1:0.0: USB hub found [ 190.384812][ T1212] usb 4-1: USB disconnect, device number 7 [ 190.409666][ T1212] usblp0: removed [ 190.413658][ T5829] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 190.831631][ T5829] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 190.844817][ T5829] hid-generic: probe of 0003:046D:C31C.0007 failed with error -22 [ 191.007246][ T7845] loop0: detected capacity change from 0 to 512 [ 191.114368][ T7845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.118875][ T7847] sp0: Synchronizing with TNC [ 191.167501][ T7845] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.332959][ T7845] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.738: corrupted xattr block 33: invalid ea_ino [ 191.353543][ T23] usb 2-1: USB disconnect, device number 11 [ 191.403707][ T7855] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.738: corrupted xattr block 33: invalid ea_ino [ 191.417361][ T7854] loop2: detected capacity change from 0 to 512 [ 191.607588][ T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 191.665906][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 29 with error 28 [ 191.701739][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 191.701739][ T11] [ 191.717707][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 191.732175][ T11] EXT4-fs (loop0): Free/Dirty block details [ 191.738800][ T11] EXT4-fs (loop0): free_blocks=65280 [ 191.762670][ T11] EXT4-fs (loop0): dirty_blocks=29 [ 191.768681][ T11] EXT4-fs (loop0): Block reservation details [ 191.797218][ T11] EXT4-fs (loop0): i_reserved_data_blocks=29 [ 191.885335][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.897120][ T7865] loop2: detected capacity change from 0 to 256 [ 192.016194][ T7865] FAT-fs (loop2): Directory bread(block 64) failed [ 192.055945][ T7865] FAT-fs (loop2): Directory bread(block 65) failed [ 192.091338][ T7865] FAT-fs (loop2): Directory bread(block 66) failed [ 192.100065][ T7865] FAT-fs (loop2): Directory bread(block 67) failed [ 192.120831][ T7865] FAT-fs (loop2): Directory bread(block 68) failed [ 192.144733][ T7865] FAT-fs (loop2): Directory bread(block 69) failed [ 192.161712][ T7865] FAT-fs (loop2): Directory bread(block 70) failed [ 192.179818][ T7865] FAT-fs (loop2): Directory bread(block 71) failed [ 192.205298][ T7865] FAT-fs (loop2): Directory bread(block 72) failed [ 192.222264][ T7865] FAT-fs (loop2): Directory bread(block 73) failed [ 192.402122][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 192.601398][ T23] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.629030][ T23] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.659580][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.677282][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 192.688419][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.725844][ T23] usb 4-1: config 0 descriptor?? [ 192.985832][ T7886] loop0: detected capacity change from 0 to 4096 [ 192.997108][ T7884] loop1: detected capacity change from 0 to 8192 [ 193.134774][ T7886] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 193.215116][ T23] wacom 0003:056A:0144.0008: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 193.250630][ T28] audit: type=1800 audit(1777610719.834:23): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.755" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 193.526663][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 193.542653][ T5811] usb 4-1: USB disconnect, device number 8 [ 194.104422][ T7910] loop1: detected capacity change from 0 to 1024 [ 194.129983][ T5829] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.217883][ T34] hfsplus: b-tree write err: -5, ino 25 [ 194.235923][ T34] hfsplus: b-tree write err: -5, ino 4 [ 194.250956][ T34] hfsplus: b-tree write err: -5, ino 2 [ 194.278589][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.285950][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.362803][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.407985][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.459750][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 194.478910][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 194.503280][ T5829] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 194.513699][ T7918] loop2: detected capacity change from 0 to 128 [ 194.525407][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.548637][ T7918] EXT4-fs: Ignoring removed i_version option [ 194.549253][ T5829] usb 1-1: Product: syz [ 194.612570][ T7918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 194.629203][ T5829] usb 1-1: Manufacturer: syz [ 194.640669][ T5829] usb 1-1: SerialNumber: syz [ 194.658492][ T7918] System zones: 1-3, 19-19, 35-36 [ 194.695364][ T5829] usb 1-1: config 0 descriptor?? [ 194.721954][ T7918] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.769636][ T7918] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.920840][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.989657][ T5829] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 194.999951][ T7925] loop3: detected capacity change from 0 to 512 [ 195.290773][ T7903] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 195.320798][ T23] usb 1-1: USB disconnect, device number 9 [ 195.342427][ T7917] loop1: detected capacity change from 0 to 40427 [ 195.378263][ T7917] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 195.398809][ T7917] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.430053][ T7917] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 195.452489][ T7917] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.566229][ T7917] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 195.587203][ T7917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.705456][ T7917] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 195.735682][ T7917] F2FS-fs (loop1): Should run fsck to repair first. [ 195.996386][ T7945] loop1: detected capacity change from 0 to 256 [ 196.294725][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 197.019047][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 197.069583][ T7970] loop0: detected capacity change from 0 to 16 [ 197.128355][ T7970] erofs: (device loop0): mounted with root inode @ nid 36. [ 197.232450][ T7970] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1416] out[3560] [ 197.260593][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.277574][ T7970] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 80 of nid 36 [ 197.294608][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.302115][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.368231][ T7974] bridge_slave_0: left allmulticast mode [ 197.377767][ T7974] bridge_slave_0: left promiscuous mode [ 197.384018][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.473730][ T7974] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.619728][ T7980] loop0: detected capacity change from 0 to 1024 [ 197.638162][ T7980] EXT4-fs: Ignoring removed bh option [ 197.743966][ T7980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.886141][ T7982] loop3: detected capacity change from 0 to 8192 [ 197.948759][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.436616][ T7972] loop1: detected capacity change from 0 to 40427 [ 198.461587][ T7972] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 198.472577][ T7972] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 198.538574][ T7997] loop3: detected capacity change from 0 to 2048 [ 198.545419][ T7972] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.550615][ T7997] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.557272][ T7995] loop0: detected capacity change from 0 to 4096 [ 198.571617][ T7997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.661525][ T7995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.825246][ T7972] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 198.856286][ T7972] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.895495][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.955735][ T8005] loop3: detected capacity change from 0 to 512 [ 199.077262][ T8005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.423432][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.713431][ T8014] vxcan1: tx address claim with dest, not broadcast [ 200.265761][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 200.692394][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 200.715190][ T8037] netlink: 'syz.3.818': attribute type 5 has an invalid length. [ 200.826795][ T5829] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.055016][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 201.073261][ T5829] usb 2-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 201.096207][ T5829] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 201.139409][ T5829] usb 2-1: config 0 has no interface number 0 [ 201.149290][ T5829] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.181359][ T5829] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.194980][ T5829] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 201.215165][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.240918][ T5829] usb 2-1: config 0 descriptor?? [ 201.328232][ T8054] loop0: detected capacity change from 0 to 64 [ 201.373939][ T8055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.827'. [ 201.464794][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 201.471618][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 201.709222][ T5829] corsair 0003:1B1C:1B34.0009: unknown main item tag 0x0 [ 201.736703][ T5829] corsair 0003:1B1C:1B34.0009: unknown main item tag 0x0 [ 201.757949][ T5829] corsair 0003:1B1C:1B34.0009: failed to start in urb: -90 [ 201.783260][ T5829] corsair 0003:1B1C:1B34.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input1 [ 202.000239][ T5811] usb 2-1: USB disconnect, device number 12 [ 202.531174][ T8073] loop2: detected capacity change from 0 to 512 [ 202.579023][ T8074] loop3: detected capacity change from 0 to 1024 [ 202.596069][ T8073] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 202.646387][ T8073] EXT4-fs (loop2): orphan cleanup on readonly fs [ 202.704164][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 202.717861][ T8073] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 202.774568][ T8073] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 202.865066][ T8073] EXT4-fs (loop2): 1 truncate cleaned up [ 202.936015][ T8073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.950455][ T23] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 202.970241][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.989378][ T23] usb 1-1: Product: syz [ 203.004122][ T23] usb 1-1: Manufacturer: syz [ 203.008911][ T23] usb 1-1: SerialNumber: syz [ 203.032550][ T23] usb 1-1: config 0 descriptor?? [ 203.145791][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.861087][ T23] usb 1-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 203.873735][ T23] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 203.902562][ T23] f81604: probe of 1-1:0.0 failed with error -71 [ 203.924504][ T23] usb 1-1: USB disconnect, device number 10 [ 204.051567][ T8107] loop1: detected capacity change from 0 to 4096 [ 204.119731][ T8110] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.286497][ T8107] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 204.315286][ T8107] Remounting filesystem read-only [ 204.356040][ T5774] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 204.382111][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 204.393328][ T5774] NILFS (loop1): discard dirty block: blocknr=13, size=4096 [ 204.401588][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 204.429165][ T5774] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 204.447438][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 204.463408][ T5774] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 204.476945][ T5774] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 204.501016][ T5774] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 204.522726][ T5774] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 204.530717][ T5774] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 204.540380][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=13 [ 204.548474][ T5774] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 204.570609][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 204.596863][ T5774] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 204.617559][ T5774] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 204.635343][ T5774] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 204.653585][ T5774] NILFS (loop1): discard dirty page: offset=663552, ino=3 [ 204.674129][ T5774] NILFS (loop1): discard dirty block: blocknr=34, size=4096 [ 205.123193][ T8125] vlan2: entered allmulticast mode [ 205.128727][ T8125] vlan0: entered allmulticast mode [ 205.142981][ T8125] veth0_vlan: entered allmulticast mode [ 205.156230][ T5811] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 205.373983][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 205.394861][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.422884][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.461250][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.493050][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.515001][ T5811] usb 2-1: config 0 descriptor?? [ 205.545855][ T5811] hub 2-1:0.0: USB hub found [ 205.649745][ T8119] loop0: detected capacity change from 0 to 40427 [ 205.681719][ T8119] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 205.688678][ T8119] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 205.713471][ T8119] F2FS-fs (loop0): invalid crc value [ 205.747236][ T5811] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 205.909092][ T8119] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 205.932805][ T8119] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.191493][ T5811] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 206.218172][ T8127] loop2: detected capacity change from 0 to 32768 [ 206.223041][ T5771] syz-executor: attempt to access beyond end of device [ 206.223041][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 206.272987][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 206.300647][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 206.341934][ T8127] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.482866][ T787] usb 2-1: USB disconnect, device number 13 [ 206.740367][ T8127] XFS (loop2): Ending clean mount [ 206.764873][ T8127] XFS (loop2): Quotacheck needed: Please wait. [ 206.837601][ T8127] XFS (loop2): Quotacheck: Done. [ 207.055639][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.699443][ T8156] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.865'. [ 207.710391][ T8156] netlink: zone id is out of range [ 207.716178][ T8156] netlink: zone id is out of range [ 207.721736][ T8156] netlink: zone id is out of range [ 207.727592][ T8156] netlink: zone id is out of range [ 207.733377][ T8156] netlink: zone id is out of range [ 207.738767][ T8156] netlink: zone id is out of range [ 207.748813][ T8156] netlink: zone id is out of range [ 207.754940][ T8156] netlink: zone id is out of range [ 207.760317][ T8156] netlink: zone id is out of range [ 207.772630][ T8156] netlink: zone id is out of range [ 207.800393][ T8145] loop3: detected capacity change from 0 to 40427 [ 207.862464][ T8145] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 207.894984][ T8145] F2FS-fs (loop3): invalid crc value [ 207.929264][ T8145] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.088724][ T8162] loop2: detected capacity change from 0 to 1024 [ 208.163988][ T8145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.404142][ T5776] syz-executor: attempt to access beyond end of device [ 208.404142][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.452078][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 208.466752][ T8165] loop1: detected capacity change from 0 to 64 [ 208.841809][ T8169] netlink: 48 bytes leftover after parsing attributes in process `syz.2.873'. [ 209.162070][ T8158] loop0: detected capacity change from 0 to 32768 [ 209.287924][ T8158] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.377969][ T8190] loop3: detected capacity change from 0 to 128 [ 209.508724][ T8158] XFS (loop0): Ending clean mount [ 209.666433][ T8192] loop3: detected capacity change from 0 to 128 [ 209.741871][ T28] audit: type=1800 audit(1777610736.333:24): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.868" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 209.952297][ T8195] loop1: detected capacity change from 0 to 256 [ 210.087383][ T8195] FAT-fs (loop1): Directory bread(block 64) failed [ 210.095610][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.131789][ T8195] FAT-fs (loop1): Directory bread(block 65) failed [ 210.152732][ T8195] FAT-fs (loop1): Directory bread(block 66) failed [ 210.181742][ T8195] FAT-fs (loop1): Directory bread(block 67) failed [ 210.189170][ T8195] FAT-fs (loop1): Directory bread(block 68) failed [ 210.238389][ T8195] FAT-fs (loop1): Directory bread(block 69) failed [ 210.258740][ T8195] FAT-fs (loop1): Directory bread(block 70) failed [ 210.284824][ T8195] FAT-fs (loop1): Directory bread(block 71) failed [ 210.301456][ T8195] FAT-fs (loop1): Directory bread(block 72) failed [ 210.318567][ T8195] FAT-fs (loop1): Directory bread(block 73) failed [ 210.361214][ T8182] loop2: detected capacity change from 0 to 32768 [ 210.421346][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.466597][ T8182] JBD2: Ignoring recovery information on journal [ 210.616294][ T8195] syz.1.880: attempt to access beyond end of device [ 210.616294][ T8195] loop1: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 210.641439][ T8195] syz.1.880: attempt to access beyond end of device [ 210.641439][ T8195] loop1: rw=1, sector=1320, nr_sectors = 36 limit=256 [ 210.643409][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 210.693069][ T8182] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 210.726646][ T5829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 210.740908][ T11] (kworker/u4:0,11,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 210.768439][ T5829] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 210.798895][ T5829] usb 4-1: string descriptor 0 read error: -22 [ 210.812104][ T5829] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 210.843958][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.902364][ T8197] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.941335][ T5829] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 210.971952][ T5829] usb 4-1: MIDIStreaming interface descriptor not found [ 211.049597][ T28] audit: type=1800 audit(1777610737.633:25): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.878" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=17058 res=0 errno=0 [ 211.083412][ T8205] (syz.2.878,8205,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 211.105964][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.166447][ T8205] (syz.2.878,8205,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 211.190213][ T8205] (syz.2.878,8205,1):__ocfs2_prepare_orphan_dir:2171 ERROR: status = -2 [ 211.221315][ T8205] (syz.2.878,8205,1):ocfs2_prepare_orphan_dir:2213 ERROR: status = -2 [ 211.255417][ T8205] (syz.2.878,8205,1):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 211.291129][ T8205] (syz.2.878,8205,1):ocfs2_rename:1466 ERROR: status = -2 [ 211.333017][ T8205] (syz.2.878,8205,1):ocfs2_rename:1690 ERROR: status = -2 [ 211.512559][ T8182] syz.2.878 (8182) used greatest stack depth: 18320 bytes left [ 211.590637][ T5829] usb 4-1: USB disconnect, device number 9 [ 211.761786][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 212.611557][ T8211] loop1: detected capacity change from 0 to 32768 [ 212.651958][ T8211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.887 (8211) [ 212.701768][ T8211] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.727546][ T8211] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 212.754001][ T8211] BTRFS info (device loop1): setting nodatacow, compression disabled [ 212.779978][ T8211] BTRFS info (device loop1): setting datasum, datacow enabled [ 212.800619][ T8211] BTRFS info (device loop1): force clearing of disk cache [ 212.809350][ T8211] BTRFS info (device loop1): enabling ssd optimizations [ 212.827888][ T8211] BTRFS info (device loop1): using spread ssd allocation scheme [ 212.840152][ T8211] BTRFS info (device loop1): turning on sync discard [ 212.873272][ T8211] BTRFS info (device loop1): turning off barriers [ 212.893668][ T8211] BTRFS info (device loop1): enabling auto defrag [ 212.920613][ T8211] BTRFS info (device loop1): not using ssd optimizations [ 212.928003][ T8211] BTRFS info (device loop1): not using spread ssd allocation scheme [ 212.957577][ T8211] BTRFS info (device loop1): using free space tree [ 213.147603][ T8211] BTRFS info (device loop1): rebuilding free space tree [ 213.347037][ T28] audit: type=1800 audit(1777610739.934:26): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.887" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 213.521084][ T8211] BTRFS info (device loop1): balance: start -sconvert=dup,soft,limit=25769803780 [ 213.543120][ T8211] BTRFS info (device loop1): balance: ended with status: 0 [ 213.630040][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 213.811271][ T5774] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 214.326489][ T8263] loop1: detected capacity change from 0 to 2048 [ 214.409140][ T8245] loop0: detected capacity change from 0 to 40427 [ 214.446293][ T8245] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 214.460385][ T8245] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 214.519813][ T8245] F2FS-fs (loop0): invalid crc value [ 214.529984][ T8245] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 214.547876][ T8263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.609258][ T8245] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.652441][ T28] audit: type=1800 audit(1777610741.244:27): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.902" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 214.726491][ T8263] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 214.819785][ T8263] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 214.840587][ T8263] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.840587][ T8263] [ 214.842891][ T8271] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 214.855503][ T8263] EXT4-fs (loop1): Total free blocks count 0 [ 214.871810][ T8263] EXT4-fs (loop1): Free/Dirty block details [ 214.878960][ T8263] EXT4-fs (loop1): free_blocks=66060288 [ 214.885405][ T8245] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 214.894091][ T8245] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.902821][ T8263] EXT4-fs (loop1): dirty_blocks=256 [ 214.919047][ T8271] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.919047][ T8271] [ 214.939877][ T8263] EXT4-fs (loop1): Block reservation details [ 215.129622][ T5771] syz-executor: attempt to access beyond end of device [ 215.129622][ T5771] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 215.200228][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 215.221605][ T5771] syz-executor: attempt to access beyond end of device [ 215.221605][ T5771] loop0: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 215.258618][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 216.278786][ T8292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 216.287202][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.313276][ T8296] loop1: detected capacity change from 0 to 1024 [ 216.348164][ T8298] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 216.355565][ T8298] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 216.380022][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 216.397308][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 216.417427][ T8298] vhci_hcd vhci_hcd.0: Device attached [ 216.441450][ T8301] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 216.449211][ T8301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.513174][ T8301] vhci_hcd vhci_hcd.0: Device attached [ 216.561504][ T8292] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 216.568490][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.583731][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 216.604565][ T8302] vhci_hcd: connection closed [ 216.611535][ T49] vhci_hcd: stop threads [ 216.619981][ T1212] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 216.631042][ T8299] vhci_hcd: connection closed [ 216.631505][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.641282][ T49] vhci_hcd: release socket [ 216.648027][ T8293] vhci_hcd: connection closed [ 216.679724][ T8297] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 216.700311][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.710651][ T49] vhci_hcd: disconnect device [ 216.720378][ T49] vhci_hcd: stop threads [ 216.742005][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.751176][ T49] vhci_hcd: release socket [ 216.779117][ T49] vhci_hcd: disconnect device [ 216.783956][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.783989][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.791676][ T8] usb 3-1: config 0 descriptor?? [ 216.805125][ T8306] vhci_hcd: connection closed [ 216.814520][ T8313] loop1: detected capacity change from 0 to 512 [ 216.826757][ T49] vhci_hcd: stop threads [ 216.831855][ T49] vhci_hcd: release socket [ 216.844510][ T49] vhci_hcd: disconnect device [ 216.860350][ T49] vhci_hcd: stop threads [ 216.865079][ T49] vhci_hcd: release socket [ 216.881055][ T49] vhci_hcd: disconnect device [ 216.961203][ T8313] EXT4-fs (loop1): 1 truncate cleaned up [ 216.968440][ T8313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.006779][ T28] audit: type=1800 audit(1777610743.594:28): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.917" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 217.096572][ T8313] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.917: invalid indirect mapped block 4294967295 (level 1) [ 217.120598][ T8313] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.917: invalid indirect mapped block 65535 (level 2) [ 217.258122][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 217.320349][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 217.364045][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.383043][ T8322] loop3: detected capacity change from 0 to 4096 [ 217.485331][ T8] usb 3-1: USB disconnect, device number 8 [ 217.528547][ T8322] ntfs: volume version 3.1. [ 217.610953][ T787] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 217.841714][ T787] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 217.875334][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.891501][ T787] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 217.912298][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.953951][ T787] usb 1-1: config 0 descriptor?? [ 217.973139][ T8324] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 218.117540][ T8335] loop2: detected capacity change from 0 to 256 [ 218.154086][ T8335] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.178223][ T8335] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 218.240957][ T8335] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 218.315045][ T8339] netlink: 'syz.1.928': attribute type 21 has an invalid length. [ 218.465390][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.483023][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.503022][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.535138][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.575872][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.599049][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.628572][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.648239][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.656955][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.672332][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.689309][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.706756][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.729288][ T787] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 218.768694][ T787] lua 0003:1E7D:2C2E.000C: hidraw0: USB HID vff.ff Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 218.820318][ T787] usb 1-1: USB disconnect, device number 11 [ 219.013375][ T8352] fido_id[8352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 219.515443][ T8348] loop1: detected capacity change from 0 to 32768 [ 219.661604][ T8348] JBD2: Ignoring recovery information on journal [ 219.825235][ T8348] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 219.909233][ T34] (kworker/u4:2,34,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 220.010057][ T8353] loop2: detected capacity change from 0 to 40427 [ 220.052559][ T8353] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 220.084411][ T8353] F2FS-fs (loop2): invalid crc value [ 220.108834][ T8364] (syz.1.933,8364,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 220.125406][ T28] audit: type=1800 audit(1777610746.695:29): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.933" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=17058 res=0 errno=0 [ 220.168069][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.200574][ T8353] F2FS-fs (loop2): Found nat_bits in checkpoint [ 220.231196][ T8364] (syz.1.933,8364,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 220.278775][ T8364] (syz.1.933,8364,0):__ocfs2_prepare_orphan_dir:2171 ERROR: status = -2 [ 220.318159][ T8364] (syz.1.933,8364,0):ocfs2_prepare_orphan_dir:2213 ERROR: status = -2 [ 220.335894][ T8364] (syz.1.933,8364,0):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 220.345009][ T8353] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 220.379584][ T8348] syz.1.933 (8348) used greatest stack depth: 17712 bytes left [ 220.399141][ T8364] (syz.1.933,8364,0):ocfs2_rename:1466 ERROR: status = -2 [ 220.415723][ T8364] (syz.1.933,8364,0):ocfs2_rename:1690 ERROR: status = -2 [ 220.593196][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 220.616909][ T5772] syz-executor: attempt to access beyond end of device [ 220.616909][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.663763][ T8357] loop0: detected capacity change from 0 to 32768 [ 220.671861][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 220.697271][ T8357] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.935 (8357) [ 220.752813][ T8357] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.783680][ T8357] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 220.822156][ T8357] BTRFS info (device loop0): setting nodatacow, compression disabled [ 220.851036][ T8357] BTRFS info (device loop0): setting datasum, datacow enabled [ 220.878599][ T8357] BTRFS info (device loop0): force clearing of disk cache [ 220.949758][ T8357] BTRFS info (device loop0): enabling ssd optimizations [ 220.957077][ T8357] BTRFS info (device loop0): using spread ssd allocation scheme [ 220.999040][ T8357] BTRFS info (device loop0): turning on sync discard [ 221.007190][ T8357] BTRFS info (device loop0): turning off barriers [ 221.034753][ T8357] BTRFS info (device loop0): enabling auto defrag [ 221.046053][ T8357] BTRFS info (device loop0): not using ssd optimizations [ 221.075971][ T8357] BTRFS info (device loop0): not using spread ssd allocation scheme [ 221.109146][ T8357] BTRFS info (device loop0): using free space tree [ 221.238919][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.315036][ T8357] BTRFS info (device loop0): rebuilding free space tree [ 221.429073][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 221.440623][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.471927][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.508533][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.543301][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.599000][ T28] audit: type=1800 audit(1777610748.185:30): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.935" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 221.623610][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.638886][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.675135][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.699954][ T8357] BTRFS info (device loop0): balance: start -sconvert=dup,soft,limit=25769803780 [ 221.718252][ T8357] BTRFS info (device loop0): balance: ended with status: 0 [ 221.780382][ T1212] vhci_hcd: vhci_device speed not set [ 221.819911][ T5771] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.905567][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 221.918884][ T8] usbtmc 4-1:16.0: can't read capabilities [ 222.132697][ T8] usb 4-1: USB disconnect, device number 10 [ 222.502403][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 223.089440][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.180184][ T5829] usb usb34-port1: attempt power cycle [ 223.238703][ T5811] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 223.298849][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 223.323264][ T787] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.338626][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.345514][ T787] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 223.379140][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.409241][ T787] usb 4-1: config 0 descriptor?? [ 223.428677][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 223.431719][ T8431] loop0: detected capacity change from 0 to 128 [ 223.448343][ T8431] EXT4-fs: Ignoring removed i_version option [ 223.461135][ T5811] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 223.478603][ T5811] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 223.511542][ T8431] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.514647][ T5811] usb 3-1: string descriptor 0 read error: -22 [ 223.531012][ T8431] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.557112][ T5811] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 223.603177][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.613619][ T8429] loop1: detected capacity change from 0 to 32768 [ 223.649115][ T8425] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 223.680398][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 223.687630][ T5811] usb 3-1: MIDIStreaming interface descriptor not found [ 223.701680][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.704705][ T8429] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.957 (8429) [ 223.773560][ T8429] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 223.825003][ T8429] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 223.830121][ T5829] usb usb34-port1: unable to enumerate USB device [ 223.858063][ T8429] BTRFS info (device loop1): force zlib compression, level 3 [ 223.874724][ T8429] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.939223][ T787] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 223.978691][ T8429] BTRFS info (device loop1): use zstd compression, level 3 [ 223.996062][ T8429] BTRFS info (device loop1): enabling ssd optimizations [ 224.035477][ T8429] BTRFS info (device loop1): using free space tree [ 224.191537][ T5829] usb 3-1: USB disconnect, device number 9 [ 224.284041][ T8435] loop0: detected capacity change from 0 to 8192 [ 224.344238][ T8429] BTRFS info (device loop1): auto enabling async discard [ 224.506913][ T787] usb 4-1: USB disconnect, device number 11 [ 224.580500][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 224.761577][ T5774] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 224.900701][ T34] wlan1: Trigger new scan to find an IBSS to join [ 224.969919][ T34] ------------[ cut here ]------------ [ 224.976377][ T34] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 224.988731][ T34] WARNING: CPU: 0 PID: 34 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 224.998861][ T34] Modules linked in: [ 225.002947][ T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 225.010920][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.022890][ T34] Workqueue: events_unbound cfg80211_wiphy_work [ 225.030765][ T34] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 225.037747][ T34] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 a0 04 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b b2 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 225.055875][ T8456] loop2: detected capacity change from 0 to 128 [ 225.060322][ T34] RSP: 0000:ffffc90000aaf380 EFLAGS: 00010246 [ 225.060422][ T34] RAX: 7d537a6ee3302800 RBX: 000000000000000c RCX: ffff8880186f9e00 [ 225.060440][ T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 225.060453][ T34] RBP: 0000000000000084 R08: ffffc90000aaef87 R09: 1ffff92000155df0 [ 225.060469][ T34] R10: dffffc0000000000 R11: fffff52000155df1 R12: 0000000000000020 [ 225.060484][ T34] R13: dffffc0000000000 R14: ffff88805b48b358 R15: ffff88802fed8a28 [ 225.060499][ T34] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 225.060516][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.135351][ T34] CR2: 00007f482e854000 CR3: 0000000025031000 CR4: 00000000003506f0 [ 225.143685][ T34] Call Trace: [ 225.147106][ T34] [ 225.150376][ T34] rate_control_send_low+0x194/0x790 [ 225.155937][ T34] rate_control_get_rate+0x20b/0x5d0 [ 225.161701][ T34] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 225.167570][ T34] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 225.173708][ T34] ? __lock_acquire+0x1273/0x7d40 [ 225.178938][ T34] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 225.185216][ T34] invoke_tx_handlers_late+0xb6/0x1810 [ 225.190919][ T34] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 225.196916][ T34] ieee80211_tx+0x2d8/0x460 [ 225.201650][ T34] ? ieee80211_skb_resize+0x630/0x630 [ 225.207193][ T34] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 225.212806][ T34] ? __bpf_trace_tasklet+0x160/0x160 [ 225.218329][ T34] ? ieee80211_xmit+0x310/0x3f0 [ 225.223253][ T34] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 225.229623][ T34] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 225.236004][ T34] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 225.242944][ T34] ieee80211_scan_state_send_probe+0x560/0x930 [ 225.249254][ T34] ieee80211_scan_work+0x4e9/0x1c40 [ 225.252650][ T8458] loop3: detected capacity change from 0 to 256 [ 225.254835][ T34] cfg80211_wiphy_work+0x225/0x260 [ 225.266698][ T34] ? process_scheduled_works+0x96f/0x15d0 [ 225.272748][ T34] process_scheduled_works+0xa5d/0x15d0 [ 225.278543][ T34] ? worker_attach_to_pool+0x380/0x380 [ 225.284451][ T34] ? assign_work+0x3d2/0x5d0 [ 225.289437][ T34] worker_thread+0xa55/0xfc0 [ 225.294147][ T34] kthread+0x2fa/0x390 [ 225.298330][ T34] ? pr_cont_work+0x560/0x560 [ 225.303352][ T34] ? kthread_blkcg+0xd0/0xd0 [ 225.307997][ T34] ret_from_fork+0x48/0x80 [ 225.312613][ T34] ? kthread_blkcg+0xd0/0xd0 [ 225.317578][ T34] ret_from_fork_asm+0x11/0x20 [ 225.322569][ T34] [ 225.325821][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.333244][ T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 225.341106][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.351671][ T34] Workqueue: events_unbound cfg80211_wiphy_work [ 225.358320][ T34] Call Trace: [ 225.361735][ T34] [ 225.364711][ T34] dump_stack_lvl+0x18c/0x250 [ 225.369572][ T34] ? show_regs_print_info+0x20/0x20 [ 225.374895][ T34] ? load_image+0x420/0x420 [ 225.379651][ T34] panic+0x2dc/0x730 [ 225.383695][ T34] ? bpf_jit_dump+0xd0/0xd0 [ 225.388250][ T34] ? ret_from_fork_asm+0x11/0x20 [ 225.393756][ T34] __warn+0x2e0/0x470 [ 225.397998][ T34] ? __rate_control_send_low+0x635/0x880 [ 225.403776][ T34] ? __rate_control_send_low+0x635/0x880 [ 225.409467][ T34] report_bug+0x2be/0x4f0 [ 225.414183][ T34] ? __rate_control_send_low+0x635/0x880 [ 225.420607][ T34] ? __rate_control_send_low+0x635/0x880 [ 225.426478][ T34] ? __rate_control_send_low+0x637/0x880 [ 225.432432][ T34] handle_bug+0xcf/0x120 [ 225.436871][ T34] exc_invalid_op+0x1a/0x50 [ 225.441502][ T34] asm_exc_invalid_op+0x1a/0x20 [ 225.446455][ T34] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 225.452800][ T34] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 a0 04 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b b2 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 225.472773][ T34] RSP: 0000:ffffc90000aaf380 EFLAGS: 00010246 [ 225.479120][ T34] RAX: 7d537a6ee3302800 RBX: 000000000000000c RCX: ffff8880186f9e00 [ 225.487215][ T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 225.495519][ T34] RBP: 0000000000000084 R08: ffffc90000aaef87 R09: 1ffff92000155df0 [ 225.503807][ T34] R10: dffffc0000000000 R11: fffff52000155df1 R12: 0000000000000020 [ 225.512150][ T34] R13: dffffc0000000000 R14: ffff88805b48b358 R15: ffff88802fed8a28 [ 225.520545][ T34] rate_control_send_low+0x194/0x790 [ 225.526157][ T34] rate_control_get_rate+0x20b/0x5d0 [ 225.532040][ T34] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 225.538629][ T34] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 225.545247][ T34] ? __lock_acquire+0x1273/0x7d40 [ 225.550585][ T34] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 225.556856][ T34] invoke_tx_handlers_late+0xb6/0x1810 [ 225.562442][ T34] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 225.569122][ T34] ieee80211_tx+0x2d8/0x460 [ 225.574018][ T34] ? ieee80211_skb_resize+0x630/0x630 [ 225.579617][ T34] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 225.585808][ T34] ? __bpf_trace_tasklet+0x160/0x160 [ 225.591488][ T34] ? ieee80211_xmit+0x310/0x3f0 [ 225.596558][ T34] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 225.602829][ T34] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 225.609498][ T34] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 225.615955][ T34] ieee80211_scan_state_send_probe+0x560/0x930 [ 225.622255][ T34] ieee80211_scan_work+0x4e9/0x1c40 [ 225.627507][ T34] cfg80211_wiphy_work+0x225/0x260 [ 225.633012][ T34] ? process_scheduled_works+0x96f/0x15d0 [ 225.638953][ T34] process_scheduled_works+0xa5d/0x15d0 [ 225.644728][ T34] ? worker_attach_to_pool+0x380/0x380 [ 225.650465][ T34] ? assign_work+0x3d2/0x5d0 [ 225.655273][ T34] worker_thread+0xa55/0xfc0 [ 225.660195][ T34] kthread+0x2fa/0x390 [ 225.664283][ T34] ? pr_cont_work+0x560/0x560 [ 225.669282][ T34] ? kthread_blkcg+0xd0/0xd0 [ 225.674097][ T34] ret_from_fork+0x48/0x80 [ 225.678545][ T34] ? kthread_blkcg+0xd0/0xd0 [ 225.683356][ T34] ret_from_fork_asm+0x11/0x20 [ 225.688259][ T34] [ 225.691507][ T34] Kernel Offset: disabled [ 225.696159][ T34] Rebooting in 86400 seconds..