last executing test programs: 3.569538284s ago: executing program 3 (id=1620): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)=ANY=[], 0x835, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 3.18073436s ago: executing program 3 (id=1624): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4210, r0) 2.888998355s ago: executing program 0 (id=1626): semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 2.697937508s ago: executing program 0 (id=1627): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x89, &(0x7f0000000180)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 2.697788617s ago: executing program 3 (id=1628): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2.359000623s ago: executing program 0 (id=1631): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="6f1629c69806f5241516fc51045989b0", 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) 2.091780267s ago: executing program 0 (id=1632): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x10001, 0x0, 0x0, r0}]) 1.941784349s ago: executing program 2 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000c30085000000860000008500000050000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r1, r0}, 0xc) 1.776607982s ago: executing program 0 (id=1636): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 1.733983632s ago: executing program 2 (id=1637): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f0000001580)=""/4098, 0x1002}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f00000013c0)=""/89, 0x59}, {&(0x7f0000001480)=""/62, 0x3e}], 0x6}}], 0x1, 0x34000, 0x0) 1.603678675s ago: executing program 2 (id=1638): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.504672546s ago: executing program 1 (id=1639): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) close(0x3) 1.381583368s ago: executing program 2 (id=1640): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x81, 0x0, 0x0) 1.325987489s ago: executing program 1 (id=1641): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4148, 0x1034}], 0xf}, 0x42) 1.23869355s ago: executing program 2 (id=1642): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.22557881s ago: executing program 1 (id=1643): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 1.053526453s ago: executing program 1 (id=1644): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c, 0x0}, 0x40818) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) 994.018114ms ago: executing program 3 (id=1645): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8040) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4083, 0xff3}], 0x1, 0x0, 0x61}, 0x0) 385.496534ms ago: executing program 2 (id=1649): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4084, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x11, 0x4427, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) 192.640126ms ago: executing program 3 (id=1650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 0s ago: executing program 3 (id=1651): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) kernel console output (not intermixed with test programs): ltsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.132936][ T5807] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 159.152413][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.165160][ T5807] usb 1-1: config 0 descriptor?? [ 159.179776][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.525405][ T5833] usb 4-1: USB disconnect, device number 12 [ 159.623202][ T5807] sony 0003:054C:024B.0016: hiddev0,hidraw0: USB HID v0.c0 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 159.635123][ T5807] sony 0003:054C:024B.0016: failed to claim input [ 159.834155][ T5833] usb 1-1: USB disconnect, device number 9 [ 160.440869][ T8176] loop1: detected capacity change from 0 to 512 [ 160.480711][ T8176] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.555049][ T8176] EXT4-fs (loop1): 1 orphan inode deleted [ 160.560915][ T8176] EXT4-fs (loop1): 1 truncate cleaned up [ 160.614145][ T8176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.781714][ T8176] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.809: bad inode number: 12 [ 160.815425][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 161.410327][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.537769][ T8179] loop0: detected capacity change from 0 to 32768 [ 161.562391][ T8179] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.801 (8179) [ 161.605072][ T8179] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 161.617286][ T8179] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.631176][ T8179] BTRFS info (device loop0): using free space tree [ 161.728989][ T8185] loop1: detected capacity change from 0 to 8192 [ 161.751183][ T8179] BTRFS info (device loop0): enabling ssd optimizations [ 161.765390][ T8179] BTRFS info (device loop0): auto enabling async discard [ 161.808170][ T8185] loop1: p1 p2 p4 [ 161.812190][ T8185] loop1: p1 size 108920841 extends beyond EOD, truncated [ 161.824976][ T5837] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 161.886712][ T8185] loop1: p2 start 861536256 is beyond EOD, truncated [ 161.905998][ T8185] loop1: p4 size 65536 extends beyond EOD, truncated [ 161.993809][ T5769] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 162.059434][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.091062][ T5837] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 162.140254][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.201012][ T6225] udevd[6225]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 162.206323][ T5837] usb 3-1: config 0 descriptor?? [ 162.213385][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 162.405232][ T5807] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.421263][ T8186] loop3: detected capacity change from 0 to 32768 [ 162.449790][ T8186] XFS: attr2 mount option is deprecated. [ 162.509763][ T8186] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.595110][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.625053][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.635099][ T5807] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 162.644207][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.655499][ T5807] usb 2-1: config 0 descriptor?? [ 162.687979][ T5837] sony 0003:054C:024B.0017: hiddev0,hidraw0: USB HID v0.c0 Device [HID 054c:024b] on usb-dummy_hcd.2-1/input0 [ 162.702546][ T5837] sony 0003:054C:024B.0017: failed to claim input [ 162.770704][ T8186] XFS (loop3): Ending clean mount [ 162.789212][ T8186] XFS (loop3): Quotacheck needed: Please wait. [ 162.858291][ T8186] XFS (loop3): Quotacheck: Done. [ 162.967327][ T8208] loop0: detected capacity change from 0 to 32768 [ 162.977659][ T8208] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.816 (8208) [ 163.016511][ T8208] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 163.029553][ T5810] usb 3-1: USB disconnect, device number 13 [ 163.049165][ T8208] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.060411][ T8208] BTRFS info (device loop0): using free space tree [ 163.101925][ T5807] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 163.115469][ T5807] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 163.130609][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.130948][ T5807] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0018/input/input17 [ 163.187483][ T5807] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 163.296689][ T8208] BTRFS info (device loop0): enabling ssd optimizations [ 163.324057][ T8208] BTRFS info (device loop0): auto enabling async discard [ 163.448879][ T5807] usb 2-1: USB disconnect, device number 9 [ 163.532079][ T5769] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 163.856230][ T8238] loop0: detected capacity change from 0 to 4096 [ 163.940691][ T8238] NILFS (loop0): invalid segment: Checksum error in segment payload [ 163.985113][ T8238] NILFS (loop0): trying rollback from an earlier position [ 164.039372][ T8238] NILFS (loop0): recovery complete [ 164.072077][ T8241] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.221968][ T8243] loop2: detected capacity change from 0 to 32768 [ 165.332436][ T8243] JBD2: Ignoring recovery information on journal [ 165.535502][ T8243] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.888543][ T8257] loop0: detected capacity change from 0 to 8192 [ 165.898789][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 165.961696][ T8257] loop0: p1 p2 p4 [ 165.976850][ T8257] loop0: p1 size 108920841 extends beyond EOD, truncated [ 166.022721][ T8257] loop0: p2 start 861536256 is beyond EOD, truncated [ 166.035138][ T8257] loop0: p4 size 65536 extends beyond EOD, truncated [ 166.416267][ T6225] udevd[6225]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 166.419139][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 166.564899][ T5833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.582118][ T8261] loop3: detected capacity change from 0 to 32768 [ 166.607808][ T8259] loop1: detected capacity change from 0 to 32768 [ 166.626235][ T8259] XFS: attr2 mount option is deprecated. [ 166.677527][ T8259] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.677856][ T8261] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.767662][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.786662][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.796593][ T5833] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 166.805701][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.817119][ T5833] usb 3-1: config 0 descriptor?? [ 166.895608][ T8261] XFS (loop3): Ending clean mount [ 166.903657][ T8259] XFS (loop1): Ending clean mount [ 166.924308][ T8261] XFS (loop3): Quotacheck needed: Please wait. [ 166.932664][ T8259] XFS (loop1): Quotacheck needed: Please wait. [ 167.013019][ T8259] XFS (loop1): Quotacheck: Done. [ 167.021259][ T8261] XFS (loop3): Quotacheck: Done. [ 167.232286][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.255830][ T5833] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 167.282495][ T5833] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 167.317560][ T5833] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0019/input/input18 [ 167.380575][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.402401][ T5833] cm6533_jd 0003:0D8C:0022.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 167.617782][ T5807] usb 3-1: USB disconnect, device number 14 [ 167.756855][ T8287] fido_id[8287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 168.064919][ T8291] loop3: detected capacity change from 0 to 4096 [ 168.091464][ T8291] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 168.285002][ T27] audit: type=1804 audit(1750190174.061:49): pid=8291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.827" name="/newroot/211/file1/bus" dev="loop3" ino=33 res=1 errno=0 [ 169.470919][ T8305] loop3: detected capacity change from 0 to 1024 [ 170.067972][ T8310] loop0: detected capacity change from 0 to 32768 [ 170.093896][ T8310] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.122004][ T8309] loop2: detected capacity change from 0 to 32768 [ 170.164411][ T8309] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.286096][ T8310] XFS (loop0): Ending clean mount [ 170.338778][ T8309] XFS (loop2): Ending clean mount [ 170.345267][ T8310] XFS (loop0): Quotacheck needed: Please wait. [ 170.367228][ T8309] XFS (loop2): Quotacheck needed: Please wait. [ 170.415538][ T8310] XFS (loop0): Quotacheck: Done. [ 170.495405][ T8309] XFS (loop2): Quotacheck: Done. [ 170.624118][ T27] audit: type=1800 audit(1750190176.401:50): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.835" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 170.678205][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.698846][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.752930][ T5807] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 170.778222][ T5810] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.948783][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.959892][ T5807] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 170.975207][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.975854][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 170.986055][ T5807] usb 4-1: config 0 descriptor?? [ 171.000193][ T8335] loop2: detected capacity change from 0 to 512 [ 171.017148][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.023182][ T8335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.031137][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.058591][ T8335] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 171.062049][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 171.083548][ T8335] EXT4-fs (loop2): 1 truncate cleaned up [ 171.086229][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 171.091821][ T8335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.110274][ T5810] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 171.164580][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.180580][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.195564][ T5810] hub 2-1:1.0: bad descriptor, ignoring hub [ 171.201665][ T5810] hub: probe of 2-1:1.0 failed with error -5 [ 171.208552][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 171.213945][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 171.246656][ T5810] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 171.259376][ T5810] cdc_wdm 2-1:1.0: Unknown control protocol [ 171.445421][ T5807] sony 0003:054C:024B.001A: hiddev1,hidraw0: USB HID v0.c0 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 171.468590][ T5807] sony 0003:054C:024B.001A: failed to claim input [ 171.669713][ T5810] usb 4-1: USB disconnect, device number 13 [ 171.766213][ T5833] usb 2-1: USB disconnect, device number 10 [ 172.354808][ T5833] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.547489][ T8348] loop1: detected capacity change from 0 to 4096 [ 172.554816][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 172.561100][ T8352] loop2: detected capacity change from 0 to 8192 [ 172.573099][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.591629][ T8348] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 172.610112][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.636264][ T8352] loop2: p1 p2 p4 [ 172.645323][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.651509][ T8352] loop2: p1 size 108920841 extends beyond EOD, [ 172.673278][ T5833] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 172.687220][ T8352] truncated [ 172.709290][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.723493][ T8352] loop2: p2 start 861536256 is beyond EOD, truncated [ 172.756005][ T8352] loop2: p4 size 65536 extends beyond EOD, truncated [ 172.766038][ T5833] usb 1-1: config 0 descriptor?? [ 172.831548][ T27] audit: type=1804 audit(1750190178.601:51): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.844" name="/newroot/210/file1/bus" dev="loop1" ino=33 res=1 errno=0 [ 173.246221][ T5833] hid-udraw 0003:20D6:CB17.001B: unknown main item tag 0x7 [ 173.296741][ T5833] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.001B/input/input19 [ 173.458362][ T5833] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.001B/input/input20 [ 173.547348][ T5833] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.001B/input/input21 [ 173.650379][ T5833] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.001B/input/input22 [ 173.831498][ T5833] hid-udraw 0003:20D6:CB17.001B: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 173.869592][ T6227] udevd[6227]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 173.912100][ T5833] usb 1-1: USB disconnect, device number 10 [ 173.922716][ T6225] udevd[6225]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 174.052699][ T8359] fido_id[8359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 174.567184][ T8367] loop1: detected capacity change from 0 to 8192 [ 174.599605][ T8358] loop3: detected capacity change from 0 to 32768 [ 174.662614][ T8358] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.736889][ T8354] loop2: detected capacity change from 0 to 32768 [ 174.787123][ T8354] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.805489][ T5833] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.927582][ T8358] XFS (loop3): Ending clean mount [ 174.942055][ T8358] XFS (loop3): Quotacheck needed: Please wait. [ 174.994879][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 175.003921][ T5833] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.017397][ T5833] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.030245][ T8358] XFS (loop3): Quotacheck: Done. [ 175.038598][ T8354] XFS (loop2): Ending clean mount [ 175.062166][ T8354] XFS (loop2): Quotacheck needed: Please wait. [ 175.078207][ T5833] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 175.126310][ T5833] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 175.157521][ T5833] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 175.178004][ T8354] XFS (loop2): Quotacheck: Done. [ 175.183898][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.213306][ T5833] hub 1-1:1.0: bad descriptor, ignoring hub [ 175.219982][ T27] audit: type=1800 audit(1750190181.011:52): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.849" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 175.234862][ T5833] hub: probe of 1-1:1.0 failed with error -5 [ 175.257188][ T5833] cdc_wdm 1-1:1.0: skipping garbage [ 175.266023][ T5833] cdc_wdm 1-1:1.0: skipping garbage [ 175.292281][ T5833] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 175.324893][ T5833] cdc_wdm 1-1:1.0: Unknown control protocol [ 175.382937][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.518339][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.542918][ T8387] IPVS: Unknown mcast interface: bridge_s [ 175.762709][ T8389] loop1: detected capacity change from 0 to 8192 [ 175.771964][ T5833] usb 1-1: USB disconnect, device number 11 [ 175.796798][ T8389] loop1: p1 p2 p4 [ 175.800762][ T8389] loop1: p1 size 108920841 extends beyond EOD, truncated [ 175.819201][ T8389] loop1: p2 start 861536256 is beyond EOD, truncated [ 175.827045][ T8389] loop1: p4 size 65536 extends beyond EOD, truncated [ 175.896061][ T8391] loop2: detected capacity change from 0 to 4096 [ 175.909780][ T8391] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 176.083550][ T27] audit: type=1804 audit(1750190181.861:53): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.857" name="/newroot/219/file1/bus" dev="loop2" ino=33 res=1 errno=0 [ 176.184086][ T6225] udevd[6225]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 176.199804][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 177.354946][ T5837] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.535026][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 177.543252][ T5837] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 177.552485][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.561928][ T5837] usb 4-1: config 0 descriptor?? [ 177.988067][ T5837] konepure 0003:1E7D:2DBE.001C: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 178.214325][ T9] usb 4-1: USB disconnect, device number 14 [ 178.988765][ T8410] loop0: detected capacity change from 0 to 8192 [ 179.074864][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.184865][ T5807] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 179.264853][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 179.282270][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.304844][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.315472][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.320098][ T8414] loop3: detected capacity change from 0 to 32768 [ 179.329105][ T9] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 179.345127][ T8414] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.867 (8414) [ 179.354834][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.376273][ T9] usb 2-1: config 0 descriptor?? [ 179.399639][ T5807] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.414335][ T5807] usb 3-1: config 0 has no interface number 0 [ 179.420837][ T5807] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 179.423495][ T8414] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 179.457312][ T5807] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 179.475292][ T8414] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 179.494902][ T5807] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.506956][ T8414] BTRFS info (device loop3): using free space tree [ 179.514516][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.534842][ T5807] usb 3-1: config 0 descriptor?? [ 179.549206][ T8412] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.564639][ T5807] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 179.616179][ T8414] BTRFS info (device loop3): enabling ssd optimizations [ 179.623210][ T8414] BTRFS info (device loop3): auto enabling async discard [ 179.799405][ T9] hid-udraw 0003:20D6:CB17.001D: unknown main item tag 0x7 [ 179.829091][ T9] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001D/input/input23 [ 179.851110][ T5833] usb 3-1: USB disconnect, device number 15 [ 179.930333][ T5768] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 179.949211][ T9] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001D/input/input24 [ 180.021712][ T9] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001D/input/input25 [ 180.127147][ T9] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001D/input/input26 [ 180.221526][ T9] hid-udraw 0003:20D6:CB17.001D: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 180.295444][ T9] usb 2-1: USB disconnect, device number 11 [ 180.474213][ T8436] fido_id[8436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 181.390046][ T8461] loop3: detected capacity change from 0 to 128 [ 181.428307][ T8461] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.479097][ T8461] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.815569][ T27] audit: type=1326 audit(1750190187.601:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.0.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f611e38e929 code=0x0 [ 182.237945][ T8491] loop1: detected capacity change from 0 to 1024 [ 182.332068][ T5926] hfsplus: b-tree write err: -5, ino 4 [ 182.456925][ T8500] loop1: detected capacity change from 0 to 256 [ 182.520370][ T8500] FAT-fs (loop1): Directory bread(block 64) failed [ 182.520407][ T8500] FAT-fs (loop1): Directory bread(block 65) failed [ 182.520476][ T8500] FAT-fs (loop1): Directory bread(block 66) failed [ 182.554911][ T8500] FAT-fs (loop1): Directory bread(block 67) failed [ 182.555065][ T8500] FAT-fs (loop1): Directory bread(block 68) failed [ 182.555090][ T8500] FAT-fs (loop1): Directory bread(block 69) failed [ 182.555234][ T8500] FAT-fs (loop1): Directory bread(block 70) failed [ 182.555258][ T8500] FAT-fs (loop1): Directory bread(block 71) failed [ 182.555343][ T8500] FAT-fs (loop1): Directory bread(block 72) failed [ 182.555366][ T8500] FAT-fs (loop1): Directory bread(block 73) failed [ 182.716100][ T8505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.904'. [ 182.757555][ T5809] IPVS: starting estimator thread 0... [ 182.808178][ T8510] ax25_connect(): syz.0.906 uses autobind, please contact jreuter@yaina.de [ 182.854853][ T8507] IPVS: using max 19 ests per chain, 45600 per kthread [ 182.973170][ T8516] loop0: detected capacity change from 0 to 512 [ 183.029754][ T8516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.029856][ T8516] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.162139][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.673995][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 183.841906][ T8546] loop0: detected capacity change from 0 to 2048 [ 183.911927][ T8546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.932449][ T8557] sp0: Synchronizing with TNC [ 184.099047][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.503020][ T8578] loop1: detected capacity change from 0 to 256 [ 184.547032][ T8578] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 184.695539][ T8588] loop2: detected capacity change from 0 to 8 [ 184.739118][ T8588] SQUASHFS error: zlib decompression failed, data probably corrupt [ 184.764940][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.775058][ T8588] SQUASHFS error: Failed to read block 0x9b: -5 [ 184.781427][ T8588] SQUASHFS error: Unable to read metadata cache entry [99] [ 184.797041][ T8588] SQUASHFS error: Unable to read inode 0x127 [ 184.832911][ T27] audit: type=1326 audit(1750190190.611:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.3.944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b4e18e929 code=0x0 [ 184.865926][ T5758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.965602][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 184.979875][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 185.000138][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.017711][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.034580][ T9] usb 1-1: Product: syz [ 185.039607][ T9] usb 1-1: Manufacturer: syz [ 185.046153][ T9] usb 1-1: SerialNumber: syz [ 185.058937][ T9] usb 1-1: config 0 descriptor?? [ 185.069857][ T8580] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.086268][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 185.092235][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 185.219578][ T8603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.948'. [ 185.232167][ T8603] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 185.302856][ T8605] loop1: detected capacity change from 0 to 512 [ 185.356978][ T8605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.369851][ T8605] ext4 filesystem being mounted at /243/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 185.422050][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.455283][ T9] usb 1-1: USB disconnect, device number 12 [ 185.824882][ T5837] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 185.834887][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.995379][ T8624] loop2: detected capacity change from 0 to 256 [ 186.024947][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.042490][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.045000][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 186.053276][ T5837] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 186.068468][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.072177][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 186.093386][ T5837] usb 2-1: config 0 descriptor?? [ 186.098941][ T9] usb 1-1: string descriptor 0 read error: -22 [ 186.116030][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.126503][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.142457][ T9] usb 1-1: config 0 descriptor?? [ 186.156785][ T8580] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 186.174662][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 186.180768][ T5833] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 186.189158][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 186.384777][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 186.405751][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.440055][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.451311][ T5833] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 186.469922][ T8632] loop2: detected capacity change from 0 to 4096 [ 186.475841][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.492119][ T5833] usb 4-1: config 0 descriptor?? [ 186.496607][ T8632] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 186.521666][ T5837] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 186.547387][ T5837] arvo 0003:1E7D:30D4.001E: item fetching failed at offset 5/7 [ 186.563659][ T5837] arvo 0003:1E7D:30D4.001E: parse failed [ 186.573799][ T8632] ntfs3: loop2: Failed to load $Extend (-22). [ 186.580582][ T5837] arvo: probe of 0003:1E7D:30D4.001E failed with error -22 [ 186.591237][ T8632] ntfs3: loop2: Failed to initialize $Extend. [ 186.605474][ T9] usb 1-1: USB disconnect, device number 13 [ 186.781520][ T9] usb 2-1: USB disconnect, device number 12 [ 186.922152][ T5833] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 186.934920][ T5833] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 186.952166][ T5833] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 186.964206][ T5833] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 186.971395][ T5833] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 186.987771][ T5833] savu 0003:1E7D:2D5A.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 187.143359][ T8641] loop2: detected capacity change from 0 to 2048 [ 187.182563][ T5809] usb 4-1: USB disconnect, device number 15 [ 187.215732][ T8641] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 187.223880][ T8641] UDF-fs: Scanning with blocksize 512 failed [ 187.255125][ T8641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.631622][ T8651] loop2: detected capacity change from 0 to 4096 [ 188.656802][ T8692] loop3: detected capacity change from 0 to 64 [ 188.746668][ T8692] hfs: bad catalog entry type 0 [ 188.777677][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 188.989848][ T8704] netlink: 'syz.2.995': attribute type 2 has an invalid length. [ 189.004886][ T8704] netlink: 84 bytes leftover after parsing attributes in process `syz.2.995'. [ 189.582842][ T8701] loop3: detected capacity change from 0 to 32768 [ 189.658890][ T8721] loop1: detected capacity change from 0 to 64 [ 191.136923][ T8753] loop0: detected capacity change from 0 to 32768 [ 191.369527][ T8755] loop1: detected capacity change from 0 to 32768 [ 191.481136][ T27] audit: type=1800 audit(1750190197.261:56): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1017" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 191.503687][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 191.510208][ T5767] Bluetooth: hci0: command 0x0406 tx timeout [ 191.512901][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 191.646729][ T8764] loop2: detected capacity change from 0 to 128 [ 191.912284][ T27] audit: type=1107 audit(1750190197.691:57): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 192.172202][ T8768] loop0: detected capacity change from 0 to 40427 [ 192.178817][ T5837] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 192.192550][ T8768] F2FS-fs (loop0): invalid crc value [ 192.209959][ T8768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 192.275584][ T8768] F2FS-fs (loop0): Start checkpoint disabled! [ 192.299467][ T8768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 192.344980][ T5810] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 192.365525][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 192.391370][ T5837] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 192.431904][ T5837] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.455987][ T5837] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.484557][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.493228][ T5837] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 192.507039][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.549064][ T5837] usb 4-1: config 0 descriptor?? [ 192.554926][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 192.564330][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.572312][ T5929] kworker/u4:20: attempt to access beyond end of device [ 192.572312][ T5929] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 192.581217][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.593969][ T5929] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 192.609705][ T5929] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 192.617379][ T5810] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 192.627004][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.638538][ T5810] usb 3-1: config 0 descriptor?? [ 192.979376][ T5837] zeroplus 0003:0C12:0030.0020: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 192.992319][ T5837] zeroplus 0003:0C12:0030.0020: no inputs found [ 193.066990][ T5810] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 193.074223][ T5810] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 193.081805][ T5810] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 193.090224][ T5810] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 193.102259][ T5810] konepure 0003:1E7D:2DB4.0021: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 193.196062][ T787] usb 4-1: USB disconnect, device number 16 [ 193.298808][ T5810] usb 3-1: USB disconnect, device number 16 [ 194.052402][ T8792] loop3: detected capacity change from 0 to 2048 [ 194.054482][ T8789] loop2: detected capacity change from 0 to 8192 [ 194.111286][ T8792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.215710][ T8792] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 194.536010][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.542373][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.058449][ T8805] loop1: detected capacity change from 0 to 64 [ 195.735291][ T8823] loop3: detected capacity change from 0 to 32768 [ 195.773029][ T27] audit: type=1800 audit(1750190201.551:58): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1046" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 195.886780][ T8826] loop2: detected capacity change from 0 to 32768 [ 195.950610][ T8826] read_mapping_page failed! [ 195.963073][ T8826] ERROR: (device loop2): txCommit: [ 195.963073][ T8826] [ 195.988101][ T8826] ERROR: (device loop2): remounting filesystem as read-only [ 196.395170][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 196.909262][ T8849] loop3: detected capacity change from 0 to 128 [ 197.359009][ T8869] usb usb1: usbfs: process 8869 (syz.0.1064) did not claim interface 1 before use [ 197.578769][ T8875] smc: net device bond0 applied user defined pnetid S [ 197.659757][ T8873] loop0: detected capacity change from 0 to 8192 [ 198.446952][ T8878] loop1: detected capacity change from 0 to 128 [ 198.550069][ T8878] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.624293][ T8878] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.656270][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.747770][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.024849][ T5837] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 199.031471][ T8898] loop3: detected capacity change from 0 to 8192 [ 199.224877][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 199.232307][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.257037][ T8906] loop2: detected capacity change from 0 to 2048 [ 199.263591][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.287686][ T5837] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 199.299014][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.317750][ T8906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.329499][ T5837] usb 1-1: config 0 descriptor?? [ 199.413926][ T8906] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 199.578582][ T8914] loop2: detected capacity change from 0 to 256 [ 199.592109][ T8912] loop1: detected capacity change from 0 to 4096 [ 199.604057][ T8914] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.629080][ T8914] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 199.701373][ T8914] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 199.758609][ T5837] konepure 0003:1E7D:2DB4.0022: unknown main item tag 0x0 [ 199.794840][ T5837] konepure 0003:1E7D:2DB4.0022: unknown main item tag 0x0 [ 199.802039][ T5837] konepure 0003:1E7D:2DB4.0022: unknown main item tag 0x0 [ 199.860174][ T5837] konepure 0003:1E7D:2DB4.0022: unknown main item tag 0x0 [ 199.905200][ T5837] konepure 0003:1E7D:2DB4.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 200.076054][ T5833] usb 1-1: USB disconnect, device number 14 [ 200.170937][ T8915] fido_id[8915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 200.778211][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 201.187927][ T8941] loop1: detected capacity change from 0 to 8192 [ 201.274033][ T8921] loop3: detected capacity change from 0 to 40427 [ 201.323056][ T8921] F2FS-fs (loop3): invalid crc value [ 201.369053][ T8921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.568673][ T8921] F2FS-fs (loop3): Start checkpoint disabled! [ 201.591568][ T8921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 201.921727][ T5929] kworker/u4:20: attempt to access beyond end of device [ 201.921727][ T5929] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 201.949549][ T5929] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 201.985662][ T5929] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 202.236859][ T8948] loop2: detected capacity change from 0 to 32768 [ 202.244274][ T8948] XFS: noikeep mount option is deprecated. [ 202.323863][ T8948] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.451606][ T8948] XFS (loop2): Ending clean mount [ 202.472866][ T8948] XFS (loop2): Quotacheck needed: Please wait. [ 202.580981][ T8948] XFS (loop2): Quotacheck: Done. [ 202.677365][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.911143][ T8972] loop3: detected capacity change from 0 to 4096 [ 202.959978][ T8972] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 203.017570][ T8972] ntfs3: loop3: Failed to load $Extend (-22). [ 203.045050][ T8972] ntfs3: loop3: Failed to initialize $Extend. [ 203.554233][ T8989] loop1: detected capacity change from 0 to 64 [ 203.601886][ T8989] hfs: bad catalog entry type 0 [ 203.814544][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 203.820050][ T8997] loop3: detected capacity change from 0 to 2048 [ 203.852325][ T8997] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 203.889335][ T8997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.222909][ T9013] loop1: detected capacity change from 0 to 64 [ 204.345799][ T9016] loop3: detected capacity change from 0 to 8 [ 204.374129][ T9016] SQUASHFS error: zlib decompression failed, data probably corrupt [ 204.386936][ T9016] SQUASHFS error: Failed to read block 0x9b: -5 [ 204.422549][ T9016] SQUASHFS error: Unable to read metadata cache entry [99] [ 204.439278][ T9016] SQUASHFS error: Unable to read inode 0x127 [ 204.488650][ T5758] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.139535][ T9029] loop2: detected capacity change from 0 to 256 [ 205.178817][ T9029] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 205.200074][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.200074][ T5926] loop1: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 205.242113][ T5926] Buffer I/O error on dev loop1, logical block 4169, lost async page write [ 205.274179][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.274179][ T5926] loop1: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 205.298302][ T5926] Buffer I/O error on dev loop1, logical block 4170, lost async page write [ 205.307142][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.307142][ T5926] loop1: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 205.322426][ T5926] Buffer I/O error on dev loop1, logical block 4172, lost async page write [ 205.331659][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.331659][ T5926] loop1: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 205.345220][ T5926] Buffer I/O error on dev loop1, logical block 4173, lost async page write [ 205.353871][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.353871][ T5926] loop1: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 205.367934][ T5926] Buffer I/O error on dev loop1, logical block 4174, lost async page write [ 205.383753][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.383753][ T5926] loop1: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 205.439953][ T5926] Buffer I/O error on dev loop1, logical block 4175, lost async page write [ 205.463282][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.463282][ T5926] loop1: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 205.477596][ T5926] Buffer I/O error on dev loop1, logical block 4176, lost async page write [ 205.488188][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.488188][ T5926] loop1: rw=1, sector=4177, nr_sectors = 1 limit=64 [ 205.550960][ T5926] Buffer I/O error on dev loop1, logical block 4177, lost async page write [ 205.575408][ T5926] kworker/u4:19: attempt to access beyond end of device [ 205.575408][ T5926] loop1: rw=1, sector=4178, nr_sectors = 16 limit=64 [ 205.613995][ T9038] loop0: detected capacity change from 0 to 2048 [ 205.621083][ T5926] Buffer I/O error on dev loop1, logical block 4196, lost async page write [ 205.638863][ T5926] Buffer I/O error on dev loop1, logical block 4197, lost async page write [ 205.667419][ T9038] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 205.697323][ T9038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.314851][ T5807] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 206.458460][ T9055] loop2: detected capacity change from 0 to 1024 [ 206.515236][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 206.546015][ T5807] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.576025][ T5807] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.591709][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 206.610996][ T5807] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.611901][ T5929] hfsplus: b-tree write err: -5, ino 4 [ 206.628798][ T5807] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 206.655512][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.676051][ T5807] usb 1-1: config 0 descriptor?? [ 207.117628][ T5807] magicmouse 0003:05AC:0265.0023: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 207.395374][ T5837] usb 1-1: USB disconnect, device number 15 [ 207.540746][ T9062] loop3: detected capacity change from 0 to 40427 [ 207.549914][ T9062] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 207.564220][ T9062] F2FS-fs (loop3): invalid crc value [ 207.584578][ T9062] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.671466][ T9062] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.105676][ T9088] sp0: Synchronizing with TNC [ 208.132002][ T9090] loop1: detected capacity change from 0 to 512 [ 208.195961][ T9090] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.202497][ T9090] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.249203][ T9090] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 208.290191][ T9090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec11c, mo2=0002] [ 208.315283][ T9090] System zones: 1-12 [ 208.367020][ T9090] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1161: corrupted in-inode xattr: e_value size too large [ 208.441301][ T9090] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1161: couldn't read orphan inode 15 (err -117) [ 208.487321][ T9090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.654275][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.021904][ T9118] sp0: Synchronizing with TNC [ 209.085179][ T5837] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.279153][ T5837] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.288240][ T9128] loop0: detected capacity change from 0 to 256 [ 209.299002][ T5837] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.333648][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.356298][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.361630][ T9132] loop2: detected capacity change from 0 to 64 [ 209.384840][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.396560][ T9128] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 209.411389][ T5837] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.428852][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.444635][ T5837] usb 4-1: Product: syz [ 209.449441][ T5837] usb 4-1: Manufacturer: syz [ 209.497995][ T5837] cdc_wdm 4-1:1.0: skipping garbage [ 209.522577][ T5837] cdc_wdm 4-1:1.0: skipping garbage [ 209.556212][ T5837] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 209.586902][ T5837] cdc_wdm 4-1:1.0: Unknown control protocol [ 209.706315][ T5837] usb 4-1: USB disconnect, device number 17 [ 210.039498][ T9130] loop1: detected capacity change from 0 to 32768 [ 210.053039][ T9140] loop0: detected capacity change from 0 to 512 [ 210.060791][ T9130] XFS: noikeep mount option is deprecated. [ 210.072245][ T9140] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1185: corrupted in-inode xattr: invalid ea_ino [ 210.095272][ T9140] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1185: couldn't read orphan inode 15 (err -117) [ 210.113369][ T9130] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.128657][ T9140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.307047][ T9130] XFS (loop1): Ending clean mount [ 210.332306][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.359105][ T1315] bio_check_eod: 71 callbacks suppressed [ 210.359122][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.359122][ T1315] loop2: rw=1, sector=2185, nr_sectors = 1984 limit=64 [ 210.360104][ T9130] XFS (loop1): Quotacheck needed: Please wait. [ 210.371579][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.371579][ T1315] loop2: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 210.475256][ T1315] buffer_io_error: 62 callbacks suppressed [ 210.475268][ T1315] Buffer I/O error on dev loop2, logical block 4169, lost async page write [ 210.500862][ T9130] XFS (loop1): Quotacheck: Done. [ 210.520747][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.520747][ T1315] loop2: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 210.534472][ T1315] Buffer I/O error on dev loop2, logical block 4170, lost async page write [ 210.566481][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.566481][ T1315] loop2: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 210.610571][ T1315] Buffer I/O error on dev loop2, logical block 4172, lost async page write [ 210.629805][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.629805][ T1315] loop2: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 210.674207][ T1315] Buffer I/O error on dev loop2, logical block 4173, lost async page write [ 210.708489][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.708489][ T1315] loop2: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 210.734404][ T1315] Buffer I/O error on dev loop2, logical block 4174, lost async page write [ 210.751642][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.756266][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.756266][ T1315] loop2: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 210.774948][ T1315] Buffer I/O error on dev loop2, logical block 4175, lost async page write [ 210.784043][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.784043][ T1315] loop2: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 210.797719][ T1315] Buffer I/O error on dev loop2, logical block 4176, lost async page write [ 210.808895][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.808895][ T1315] loop2: rw=1, sector=4177, nr_sectors = 1 limit=64 [ 210.822937][ T1315] Buffer I/O error on dev loop2, logical block 4177, lost async page write [ 210.837007][ T1315] kworker/u4:6: attempt to access beyond end of device [ 210.837007][ T1315] loop2: rw=1, sector=4178, nr_sectors = 16 limit=64 [ 210.871852][ T1315] Buffer I/O error on dev loop2, logical block 4196, lost async page write [ 210.897489][ T1315] Buffer I/O error on dev loop2, logical block 4197, lost async page write [ 211.333508][ T9153] loop0: detected capacity change from 0 to 32768 [ 211.370791][ T9153] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1195 (9153) [ 211.388568][ T9165] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 211.426514][ T9153] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.454883][ T9153] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 211.484252][ T9153] BTRFS info (device loop0): using free space tree [ 211.607211][ T9179] loop3: detected capacity change from 0 to 64 [ 211.669150][ T9153] BTRFS info (device loop0): enabling ssd optimizations [ 211.676360][ T9153] BTRFS info (device loop0): auto enabling async discard [ 211.866555][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.178744][ T5758] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (5758) [ 212.203428][ T9194] ax25_connect(): syz.2.1199 uses autobind, please contact jreuter@yaina.de [ 212.844833][ T5833] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 213.038578][ T9210] loop3: detected capacity change from 0 to 16 [ 213.054354][ T9210] erofs: (device loop3): mounted with root inode @ nid 36. [ 213.065822][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 213.086846][ T5833] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.118706][ T5833] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.164276][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.184607][ T5833] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 213.207744][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.242773][ T5833] usb 3-1: config 0 descriptor?? [ 213.494883][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 213.684131][ T5833] magicmouse 0003:05AC:0265.0024: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 213.696034][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 213.706333][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 213.719833][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.734294][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 213.742971][ T9] usb 2-1: Product: syz [ 213.747660][ T9] usb 2-1: Manufacturer: syz [ 213.752297][ T9] usb 2-1: SerialNumber: syz [ 213.764140][ T9] usb 2-1: config 0 descriptor?? [ 213.771214][ T9212] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 213.782110][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 213.788302][ T9] hub: probe of 2-1:0.0 failed with error -5 [ 213.899978][ T5833] usb 3-1: USB disconnect, device number 17 [ 214.115099][ T5807] usb 2-1: USB disconnect, device number 13 [ 214.481369][ T5807] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.607269][ T9229] loop0: detected capacity change from 0 to 64 [ 214.685116][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 214.708170][ T5807] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 214.729621][ T5807] usb 2-1: string descriptor 0 read error: -22 [ 214.755168][ T5807] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.775909][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.818904][ T5807] usb 2-1: config 0 descriptor?? [ 214.829261][ T9212] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.868017][ T5807] hub 2-1:0.0: bad descriptor, ignoring hub [ 214.873986][ T5807] hub: probe of 2-1:0.0 failed with error -5 [ 214.951163][ T9237] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 215.225496][ T5807] usb 2-1: USB disconnect, device number 14 [ 215.374881][ T9244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1216'. [ 215.435791][ T1315] bio_check_eod: 179 callbacks suppressed [ 215.435808][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.435808][ T1315] loop0: rw=1048577, sector=2705, nr_sectors = 1464 limit=64 [ 215.496468][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.496468][ T1315] loop0: rw=1048577, sector=4169, nr_sectors = 1 limit=64 [ 215.529311][ T1315] buffer_io_error: 158 callbacks suppressed [ 215.529328][ T1315] Buffer I/O error on dev loop0, logical block 4169, lost async page write [ 215.545841][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.545841][ T1315] loop0: rw=1048577, sector=4170, nr_sectors = 1 limit=64 [ 215.575116][ T1315] Buffer I/O error on dev loop0, logical block 4170, lost async page write [ 215.595007][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.595007][ T1315] loop0: rw=1048577, sector=4172, nr_sectors = 1 limit=64 [ 215.618097][ T1315] Buffer I/O error on dev loop0, logical block 4172, lost async page write [ 215.630366][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.630366][ T1315] loop0: rw=1048577, sector=4173, nr_sectors = 1 limit=64 [ 215.675643][ T1315] Buffer I/O error on dev loop0, logical block 4173, lost async page write [ 215.685374][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.685374][ T1315] loop0: rw=1048577, sector=4174, nr_sectors = 1 limit=64 [ 215.703447][ T1315] Buffer I/O error on dev loop0, logical block 4174, lost async page write [ 215.723965][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.723965][ T1315] loop0: rw=1048577, sector=4175, nr_sectors = 1 limit=64 [ 215.744831][ T1315] Buffer I/O error on dev loop0, logical block 4175, lost async page write [ 215.753520][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.753520][ T1315] loop0: rw=1048577, sector=4176, nr_sectors = 1 limit=64 [ 215.783079][ T1315] Buffer I/O error on dev loop0, logical block 4176, lost async page write [ 215.794817][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.794817][ T1315] loop0: rw=1048577, sector=4177, nr_sectors = 1 limit=64 [ 215.818117][ T1315] Buffer I/O error on dev loop0, logical block 4177, lost async page write [ 215.828885][ T1315] kworker/u4:6: attempt to access beyond end of device [ 215.828885][ T1315] loop0: rw=1048577, sector=4178, nr_sectors = 16 limit=64 [ 215.874833][ T1315] Buffer I/O error on dev loop0, logical block 4196, lost async page write [ 215.883516][ T1315] Buffer I/O error on dev loop0, logical block 4197, lost async page write [ 215.895679][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.104835][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 216.117826][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.157996][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 216.192733][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.208615][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 216.230315][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.248274][ T9] usb 4-1: config 0 descriptor?? [ 216.467029][ T9270] loop0: detected capacity change from 0 to 64 [ 216.688866][ T9] magicmouse 0003:05AC:0265.0025: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 216.944344][ T9] usb 4-1: USB disconnect, device number 18 [ 217.845069][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 218.058738][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 218.070202][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 218.101287][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 218.125205][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 218.153764][ T9] usb 4-1: Product: syz [ 218.163193][ T9] usb 4-1: Manufacturer: syz [ 218.179046][ T9] usb 4-1: SerialNumber: syz [ 218.205859][ T9] usb 4-1: config 0 descriptor?? [ 218.225656][ T9278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.255760][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 218.261735][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 218.635015][ T5807] usb 4-1: USB disconnect, device number 19 [ 219.024844][ T5807] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 219.224850][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 219.242382][ T5807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 219.269444][ T5807] usb 4-1: string descriptor 0 read error: -22 [ 219.284938][ T5807] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.305959][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.321053][ T5807] usb 4-1: config 0 descriptor?? [ 219.335925][ T9278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.344349][ T5807] hub 4-1:0.0: bad descriptor, ignoring hub [ 219.352874][ T5807] hub: probe of 4-1:0.0 failed with error -5 [ 219.695671][ T5807] usb 4-1: USB disconnect, device number 20 [ 219.944898][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.045083][ T5807] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 220.132349][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 220.140152][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.159649][ T9] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.180077][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.187286][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 220.203468][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.220381][ T9] usb 2-1: config 0 descriptor?? [ 220.238594][ T5807] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.272549][ T5807] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.304904][ T5807] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.325108][ T5807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 220.345303][ T5807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 220.366376][ T5807] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.394860][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.402894][ T5807] usb 1-1: Product: syz [ 220.414857][ T5807] usb 1-1: Manufacturer: syz [ 220.434488][ T5807] cdc_wdm 1-1:1.0: skipping garbage [ 220.445127][ T5807] cdc_wdm 1-1:1.0: skipping garbage [ 220.456647][ T5807] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 220.469295][ T5807] cdc_wdm 1-1:1.0: Unknown control protocol [ 220.674609][ T9] magicmouse 0003:05AC:0265.0026: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 220.721765][ T9] usb 1-1: USB disconnect, device number 16 [ 220.900538][ T5807] usb 2-1: USB disconnect, device number 15 [ 221.109338][ T27] audit: type=1326 audit(1750190226.891:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 221.136049][ T27] audit: type=1326 audit(1750190226.891:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 221.159912][ T27] audit: type=1326 audit(1750190226.891:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 221.167313][ T9319] loop3: detected capacity change from 0 to 512 [ 221.182786][ T27] audit: type=1326 audit(1750190226.891:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 221.245942][ T27] audit: type=1326 audit(1750190226.891:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 221.252838][ T9319] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1249: corrupted in-inode xattr: invalid ea_ino [ 221.306566][ T27] audit: type=1326 audit(1750190226.891:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 221.329894][ T27] audit: type=1326 audit(1750190226.891:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 221.370348][ T9319] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1249: couldn't read orphan inode 15 (err -117) [ 221.384826][ T9319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.534119][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.038518][ T9325] loop2: detected capacity change from 0 to 32768 [ 222.067162][ T9325] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.140982][ T9325] XFS (loop2): Ending clean mount [ 222.203710][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.716537][ T9356] loop1: detected capacity change from 0 to 1024 [ 222.844870][ T28] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 222.890644][ T5926] hfsplus: b-tree write err: -5, ino 3 [ 223.061541][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 223.087861][ T28] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.120317][ T28] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.139728][ T28] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.149295][ T5837] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 223.157177][ T28] usb 3-1: Product: syz [ 223.161673][ T28] usb 3-1: Manufacturer: syz [ 223.167096][ T28] usb 3-1: SerialNumber: syz [ 223.175850][ T28] usb 3-1: config 0 descriptor?? [ 223.183507][ T9352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.198612][ T28] hub 3-1:0.0: bad descriptor, ignoring hub [ 223.207125][ T28] hub: probe of 3-1:0.0 failed with error -5 [ 223.354798][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 223.366979][ T5837] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.378151][ T5837] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.391210][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.397938][ T5837] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 223.424774][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.449882][ T5837] usb 4-1: config 0 descriptor?? [ 223.539399][ T9369] loop0: detected capacity change from 0 to 32768 [ 223.563630][ T9369] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.576142][ T5807] usb 3-1: USB disconnect, device number 18 [ 223.658232][ T9369] XFS (loop0): Ending clean mount [ 223.751133][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.910212][ T5837] magicmouse 0003:05AC:0265.0027: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 223.936475][ T5807] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 224.132395][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 224.139823][ T9] usb 4-1: USB disconnect, device number 21 [ 224.151968][ T5807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 224.169917][ T5807] usb 3-1: string descriptor 0 read error: -22 [ 224.176592][ T5807] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.185744][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.198504][ T5807] usb 3-1: config 0 descriptor?? [ 224.204338][ T9352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.217814][ T5807] hub 3-1:0.0: bad descriptor, ignoring hub [ 224.224915][ T5807] hub: probe of 3-1:0.0 failed with error -5 [ 224.557275][ T9] usb 3-1: USB disconnect, device number 19 [ 225.192864][ T9395] loop3: detected capacity change from 0 to 1024 [ 225.252782][ T9397] loop1: detected capacity change from 0 to 2048 [ 225.264596][ T9395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.274238][ T9397] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 225.287118][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 225.295212][ T9395] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.353355][ T9397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.408806][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.499647][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 225.528077][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.556897][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.582652][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.606728][ T9] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 225.629101][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.652879][ T9405] loop1: detected capacity change from 0 to 4096 [ 225.669528][ T9] usb 3-1: config 0 descriptor?? [ 225.726140][ T9405] NILFS (loop1): invalid segment: Checksum error in segment payload [ 225.753317][ T9405] NILFS (loop1): trying rollback from an earlier position [ 225.795259][ T9405] NILFS (loop1): recovery complete [ 225.813023][ T9414] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.045017][ T5833] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 226.053237][ T9419] loop0: detected capacity change from 0 to 1024 [ 226.104015][ T9] hid-udraw 0003:20D6:CB17.0028: unknown main item tag 0x7 [ 226.137692][ T9] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0028/input/input27 [ 226.233057][ T9] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0028/input/input28 [ 226.233632][ T5926] hfsplus: b-tree write err: -5, ino 3 [ 226.253540][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 226.292094][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 226.319220][ T9] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0028/input/input29 [ 226.336166][ T5833] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 226.356646][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 226.378876][ T9] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0028/input/input30 [ 226.407993][ T5833] usb 4-1: Product: syz [ 226.412210][ T5833] usb 4-1: Manufacturer: syz [ 226.464810][ T5833] usb 4-1: SerialNumber: syz [ 226.486373][ T5833] usb 4-1: config 0 descriptor?? [ 226.502846][ T9413] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 226.516059][ T9] hid-udraw 0003:20D6:CB17.0028: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 226.576937][ T5833] hub 4-1:0.0: bad descriptor, ignoring hub [ 226.593446][ T5833] hub: probe of 4-1:0.0 failed with error -5 [ 226.645007][ T9] usb 3-1: USB disconnect, device number 20 [ 226.789623][ T9426] fido_id[9426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 226.976111][ T5833] usb 4-1: USB disconnect, device number 22 [ 226.993383][ T9434] loop0: detected capacity change from 0 to 128 [ 227.028351][ T9434] bio_check_eod: 206 callbacks suppressed [ 227.028366][ T9434] syz.0.1294: attempt to access beyond end of device [ 227.028366][ T9434] loop0: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 227.252074][ T9429] loop1: detected capacity change from 0 to 32768 [ 227.374945][ T5833] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 227.565086][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 227.572012][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.585266][ T5833] usb 4-1: string descriptor 0 read error: -22 [ 227.591554][ T5833] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.601306][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.610964][ T5833] usb 4-1: config 0 descriptor?? [ 227.616911][ T9413] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.625051][ T5833] hub 4-1:0.0: bad descriptor, ignoring hub [ 227.631015][ T5833] hub: probe of 4-1:0.0 failed with error -5 [ 227.965394][ T5833] usb 4-1: USB disconnect, device number 23 [ 228.917757][ T9456] loop0: detected capacity change from 0 to 1024 [ 228.949788][ T9456] EXT4-fs: Ignoring removed bh option [ 228.957605][ T9456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.030834][ T9456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.078983][ T9439] loop3: detected capacity change from 0 to 32768 [ 229.101599][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.164661][ T9439] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.226223][ T9475] loop0: detected capacity change from 0 to 512 [ 229.293385][ T9475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.312658][ T9475] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.328916][ T9475] Quota error (device loop0): do_check_range: Getting block 4128768 out of range 0-5 [ 229.385032][ T5807] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 229.402526][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.454991][ T9439] XFS (loop3): Ending clean mount [ 229.538031][ T9481] loop0: detected capacity change from 0 to 256 [ 229.568977][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.574832][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 229.584440][ T9481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 229.593994][ T27] audit: type=1800 audit(1750190235.361:66): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1309" name="file2" dev="loop0" ino=1048734 res=0 errno=0 [ 229.596858][ T5807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 229.622111][ T9481] FAT-fs (loop0): Filesystem has been set read-only [ 229.636574][ T9481] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 229.643624][ T5807] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.665154][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.673370][ T5807] usb 3-1: Product: syz [ 229.677764][ T5807] usb 3-1: Manufacturer: syz [ 229.691061][ T5807] usb 3-1: SerialNumber: syz [ 229.719702][ T5807] usb 3-1: config 0 descriptor?? [ 229.742553][ T9464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.766534][ T5807] hub 3-1:0.0: bad descriptor, ignoring hub [ 229.772502][ T5807] hub: probe of 3-1:0.0 failed with error -5 [ 230.117200][ T9491] loop0: detected capacity change from 0 to 128 [ 230.235074][ T28] usb 3-1: USB disconnect, device number 21 [ 230.417911][ T9501] loop3: detected capacity change from 0 to 2048 [ 230.436849][ T9501] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 230.459684][ T9501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.604949][ T28] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 230.654885][ T5807] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 230.731846][ T9511] loop3: detected capacity change from 0 to 64 [ 230.750157][ T9511] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 230.785130][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 230.800157][ T28] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 230.831974][ T28] usb 3-1: string descriptor 0 read error: -22 [ 230.838532][ T28] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 230.864977][ T28] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 230.885987][ T5807] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 230.915576][ T28] usb 3-1: config 0 descriptor?? [ 230.920610][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.936334][ T9464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.944763][ T28] hub 3-1:0.0: bad descriptor, ignoring hub [ 230.950713][ T28] hub: probe of 3-1:0.0 failed with error -5 [ 230.957621][ T5807] usb 2-1: Product: syz [ 230.961828][ T5807] usb 2-1: Manufacturer: syz [ 230.972529][ T5807] usb 2-1: SerialNumber: syz [ 231.001391][ T5807] usb 2-1: config 0 descriptor?? [ 231.241158][ T9517] loop3: detected capacity change from 0 to 32768 [ 231.261263][ T9517] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 231.335169][ T28] usb 3-1: USB disconnect, device number 22 [ 231.349349][ T5758] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 231.642982][ T5807] usb 2-1: Firmware version (0.0) predates our first public release. [ 231.656567][ T5807] usb 2-1: Please update to version 0.2 or newer [ 231.720884][ T5807] usb 2-1: USB disconnect, device number 16 [ 231.782774][ T9528] loop3: detected capacity change from 0 to 2048 [ 231.820121][ T9528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.241948][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1337'. [ 232.282982][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 232.388875][ T9546] loop1: detected capacity change from 0 to 1024 [ 232.420870][ T9546] EXT4-fs: Ignoring removed orlov option [ 232.443302][ T9546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.471250][ T9546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.484123][ T9553] loop3: detected capacity change from 0 to 16 [ 232.494178][ T9553] erofs: (device loop3): mounted with root inode @ nid 36. [ 232.495221][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 232.510085][ T9] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.523894][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.530963][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 232.540514][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.557265][ T9] usb 1-1: config 0 descriptor?? [ 232.667274][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.779422][ T5777] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 232.990653][ T9] corsair-psu 0003:1B1C:1C09.0029: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 233.075340][ T9] corsair-psu 0003:1B1C:1C09.0029: unable to initialize device (-38) [ 233.120506][ T9] corsair-psu: probe of 0003:1B1C:1C09.0029 failed with error -38 [ 233.153729][ T9570] loop1: detected capacity change from 0 to 512 [ 233.190521][ T9] usb 1-1: USB disconnect, device number 17 [ 233.216388][ T9570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.230235][ T9570] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.249323][ T9570] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5 [ 233.380690][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.394303][ T9578] loop3: detected capacity change from 0 to 128 [ 233.413442][ T9578] EXT4-fs: Ignoring removed oldalloc option [ 233.437204][ T9578] EXT4-fs: inline encryption not supported [ 233.468777][ T9578] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.506552][ T9578] ext4 filesystem being mounted at /340/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.619998][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.648403][ T5810] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 233.846935][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 233.869998][ T5810] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.888628][ T5810] usb 3-1: config 179 has no interface number 0 [ 233.902119][ T5810] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 233.934498][ T5810] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 233.967435][ T5810] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 233.982374][ T5810] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 234.002318][ T5810] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 234.039528][ T5810] usb 3-1: config 179 interface 65 has no altsetting 0 [ 234.052172][ T5810] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 234.074284][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.152469][ T5810] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input31 [ 234.225253][ T5128] input input31: unable to receive magic message: -110 [ 234.267683][ T5128] input input31: unable to receive magic message: -32 [ 234.327840][ T6225] input input31: unable to receive magic message: -32 [ 234.387346][ T9588] loop3: detected capacity change from 0 to 32768 [ 234.398483][ T5128] input input31: unable to receive magic message: -32 [ 234.433745][ T5837] usb 3-1: USB disconnect, device number 23 [ 234.434130][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 234.450439][ T5837] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 234.772927][ T9613] loop3: detected capacity change from 0 to 256 [ 234.846268][ T27] audit: type=1800 audit(1750190240.611:67): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1375" name="file2" dev="loop3" ino=1048739 res=0 errno=0 [ 234.876620][ T9613] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 234.892014][ T9613] FAT-fs (loop3): Filesystem has been set read-only [ 234.903899][ T9613] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 235.098419][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1370'. [ 235.291090][ T9626] loop3: detected capacity change from 0 to 1024 [ 235.314179][ T9626] EXT4-fs: Ignoring removed orlov option [ 235.331379][ T9626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.335891][ T9628] loop2: detected capacity change from 0 to 512 [ 235.344527][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 235.384563][ T9626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.408606][ T9628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.509572][ T9628] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.544743][ T9628] Quota error (device loop2): do_check_range: Getting block 4128768 out of range 0-5 [ 235.612330][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.629813][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.752849][ T9636] loop1: detected capacity change from 0 to 2048 [ 235.758076][ T9625] loop0: detected capacity change from 0 to 32768 [ 235.774239][ T9636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.788143][ T9625] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1372 (9625) [ 235.814549][ T9625] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 235.850103][ T9625] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 235.885473][ T9625] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 235.907595][ T9625] BTRFS info (device loop0): use zstd compression, level 3 [ 235.934796][ T9625] BTRFS info (device loop0): using free space tree [ 235.980551][ T9645] loop1: detected capacity change from 0 to 16 [ 236.009998][ T9645] erofs: (device loop1): mounted with root inode @ nid 36. [ 236.085718][ T9625] BTRFS info (device loop0): enabling ssd optimizations [ 236.112918][ T9625] BTRFS info (device loop0): auto enabling async discard [ 236.304108][ T27] audit: type=1800 audit(1750190242.081:68): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1372" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 236.341646][ T9664] loop1: detected capacity change from 0 to 1024 [ 236.399990][ T9664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.467725][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.512909][ T5769] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 236.854343][ T9677] loop1: detected capacity change from 0 to 512 [ 236.897460][ T9677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 236.986788][ T9677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.011748][ T28] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 237.035659][ T9677] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.200106][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.208470][ T28] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 237.222007][ T9689] loop2: detected capacity change from 0 to 1024 [ 237.230239][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.252254][ T28] usb 4-1: Product: syz [ 237.281890][ T28] usb 4-1: Manufacturer: syz [ 237.296624][ T28] usb 4-1: SerialNumber: syz [ 237.315511][ T28] usb 4-1: config 0 descriptor?? [ 237.401076][ T27] audit: type=1326 audit(1750190243.181:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f678e929 code=0x7ffc0000 [ 237.427064][ T27] audit: type=1326 audit(1750190243.181:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f678e929 code=0x7ffc0000 [ 237.429142][ T5926] hfsplus: b-tree write err: -5, ino 4 [ 237.452905][ T27] audit: type=1326 audit(1750190243.211:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20f678e929 code=0x7ffc0000 [ 237.569519][ T27] audit: type=1326 audit(1750190243.211:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f678e929 code=0x7ffc0000 [ 237.616974][ T27] audit: type=1326 audit(1750190243.211:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f678e929 code=0x7ffc0000 [ 237.674916][ T27] audit: type=1326 audit(1750190243.271:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f20f678e929 code=0x7ffc0000 [ 237.756220][ T27] audit: type=1326 audit(1750190243.271:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f678e929 code=0x7ffc0000 [ 237.806743][ T9697] loop2: detected capacity change from 0 to 2048 [ 237.850595][ T9697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.990861][ T28] usb 4-1: Firmware version (0.0) predates our first public release. [ 238.004747][ T28] usb 4-1: Please update to version 0.2 or newer [ 238.024654][ T9687] loop0: detected capacity change from 0 to 32768 [ 238.099065][ T28] usb 4-1: USB disconnect, device number 24 [ 238.179460][ T9695] loop1: detected capacity change from 0 to 32768 [ 238.239823][ T9695] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.560206][ T9695] XFS (loop1): Ending clean mount [ 238.606815][ T9695] XFS (loop1): Quotacheck needed: Please wait. [ 238.709378][ T9695] XFS (loop1): Quotacheck: Done. [ 238.832346][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.853772][ T9717] loop3: detected capacity change from 0 to 2048 [ 238.960697][ T9717] Alternate GPT is invalid, using primary GPT. [ 238.987860][ T9717] loop3: p1 p2 p3 [ 239.245450][ T5768] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 239.248826][ T6208] I/O error, dev loop3, sector 105 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.254880][ T5758] I/O error, dev loop3, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.271856][ T6225] I/O error, dev loop3, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.274075][ T6208] I/O error, dev loop3, sector 105 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.294928][ T6225] I/O error, dev loop3, sector 56 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.324922][ T6225] buffer_io_error: 182 callbacks suppressed [ 239.324936][ T6225] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 239.327819][ T6208] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 239.330967][ T6225] I/O error, dev loop3, sector 57 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.339180][ T6208] I/O error, dev loop3, sector 106 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.355663][ T5758] I/O error, dev loop3, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.378632][ T6208] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 239.405013][ T6208] I/O error, dev loop3, sector 107 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.414360][ T6208] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 239.431023][ T5758] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 239.449620][ T6225] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 239.466112][ T6208] I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.480881][ T5758] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 239.489154][ T6225] Buffer I/O error on dev loop3p2, logical block 10, async page read [ 239.503897][ T6208] Buffer I/O error on dev loop3p3, logical block 11, async page read [ 239.517272][ T5758] Buffer I/O error on dev loop3p1, logical block 2, async page read [ 239.664245][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 239.665766][ T6225] udevd[6225]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 239.695853][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 239.714848][ T5833] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 239.733944][ T9734] loop1: detected capacity change from 0 to 1024 [ 239.782501][ T9734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.842233][ T9734] autofs4:pid:9734:autofs_fill_super: called with bogus options [ 239.894951][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 239.903423][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.915884][ T5833] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 239.937214][ T5833] usb 4-1: config 179 has no interface number 0 [ 239.943570][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 239.995920][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 240.025149][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 240.067244][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 240.094805][ T5833] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.138554][ T5833] usb 4-1: config 179 interface 65 has no altsetting 0 [ 240.154771][ T5833] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 240.167436][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.201747][ T5833] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input32 [ 240.285257][ T5128] input input32: unable to receive magic message: -110 [ 240.296730][ T5128] input input32: unable to receive magic message: -32 [ 240.370639][ T9748] loop1: detected capacity change from 0 to 256 [ 240.372468][ T5128] input input32: unable to receive magic message: -32 [ 240.418427][ T9748] exfat: Deprecated parameter 'namecase' [ 240.454640][ T9748] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 240.467016][ T5128] input input32: unable to receive magic message: -32 [ 240.501039][ T5128] input input32: unable to receive magic message: -32 [ 240.524093][ T5810] usb 4-1: USB disconnect, device number 25 [ 240.530151][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 240.566575][ T5810] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 240.731957][ T9754] loop1: detected capacity change from 0 to 8 [ 241.144873][ T28] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 241.238868][ T9764] loop3: detected capacity change from 0 to 512 [ 241.266862][ T9764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.274817][ T5810] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.316870][ T9764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.334848][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 241.345060][ T28] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.355253][ T9764] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.374953][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.381665][ T28] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 241.407372][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.425838][ T28] usb 3-1: config 0 descriptor?? [ 241.487306][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.516502][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.536448][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.553072][ T5810] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 241.563290][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.615534][ T5810] usb 2-1: config 0 descriptor?? [ 241.813911][ T9771] loop3: detected capacity change from 0 to 256 [ 241.861741][ T28] corsair-psu 0003:1B1C:1C09.002A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 241.894141][ T9771] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 241.974791][ T28] corsair-psu 0003:1B1C:1C09.002A: unable to initialize device (-38) [ 242.041568][ T28] corsair-psu: probe of 0003:1B1C:1C09.002A failed with error -38 [ 242.061088][ T5810] hid-generic 0003:05AC:4262.002B: unbalanced delimiter at end of report description [ 242.071699][ T28] usb 3-1: USB disconnect, device number 24 [ 242.088513][ T5810] hid-generic: probe of 0003:05AC:4262.002B failed with error -22 [ 242.291730][ T5837] usb 2-1: USB disconnect, device number 17 [ 242.521704][ T9790] mkiss: ax0: crc mode is auto. [ 242.772280][ T9799] loop2: detected capacity change from 0 to 256 [ 242.797514][ T9799] exfat: Deprecated parameter 'namecase' [ 242.832560][ T9799] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 243.110076][ T9807] loop2: detected capacity change from 0 to 1024 [ 243.232734][ T9807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.329676][ T9807] autofs4:pid:9807:autofs_fill_super: called with bogus options [ 243.421340][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.524862][ T5808] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 243.744765][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 243.756767][ T5808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.775326][ T5808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 243.790302][ T5808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 243.802041][ T5808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 243.813675][ T5808] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 243.830659][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.844119][ T5808] hub 1-1:1.0: bad descriptor, ignoring hub [ 243.854937][ T5808] hub: probe of 1-1:1.0 failed with error -5 [ 243.861443][ T5808] cdc_wdm 1-1:1.0: skipping garbage [ 243.879341][ T5808] cdc_wdm 1-1:1.0: skipping garbage [ 243.887155][ T5808] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 243.893114][ T5808] cdc_wdm 1-1:1.0: Unknown control protocol [ 243.924909][ T5810] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 244.134777][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 244.146306][ T5810] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.174751][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.195178][ T5810] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 244.211059][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.229066][ T5810] usb 2-1: config 0 descriptor?? [ 244.235865][ T5808] usb 1-1: USB disconnect, device number 18 [ 244.682835][ T5810] corsair-psu 0003:1B1C:1C09.002C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 244.777494][ T9842] loop0: detected capacity change from 0 to 256 [ 244.804816][ T5810] corsair-psu 0003:1B1C:1C09.002C: unable to initialize device (-38) [ 244.826910][ T5808] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 244.829898][ T9842] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 244.841475][ T5810] corsair-psu: probe of 0003:1B1C:1C09.002C failed with error -38 [ 244.954384][ T5810] usb 2-1: USB disconnect, device number 18 [ 245.039107][ T5808] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 245.064757][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.072819][ T5808] usb 3-1: Product: syz [ 245.089786][ T5808] usb 3-1: Manufacturer: syz [ 245.095144][ T5808] usb 3-1: SerialNumber: syz [ 245.131495][ T5808] usb 3-1: config 0 descriptor?? [ 245.457348][ T9852] loop0: detected capacity change from 0 to 8 [ 245.662354][ T9858] loop0: detected capacity change from 0 to 1024 [ 245.732381][ T9858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.761169][ T9858] autofs4:pid:9858:autofs_fill_super: called with bogus options [ 245.779064][ T5808] usb 3-1: Firmware version (0.0) predates our first public release. [ 245.796795][ T5808] usb 3-1: Please update to version 0.2 or newer [ 245.871175][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.897081][ T5808] usb 3-1: USB disconnect, device number 25 [ 245.904990][ T5810] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 246.117557][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 246.133581][ T5810] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.154257][ T5810] usb 2-1: config 179 has no interface number 0 [ 246.161022][ T5810] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 246.177087][ T5810] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 246.191110][ T5810] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 246.208121][ T5810] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 246.221222][ T5810] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.244415][ T5810] usb 2-1: config 179 interface 65 has no altsetting 0 [ 246.251828][ T5810] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 246.261505][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.311377][ T5810] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input33 [ 246.385015][ T5128] input input33: unable to receive magic message: -110 [ 246.470855][ T5128] input input33: unable to receive magic message: -32 [ 246.508894][ T6225] input input33: unable to receive magic message: -32 [ 246.550729][ T5128] input input33: unable to receive magic message: -32 [ 246.624868][ T5128] input input33: unable to receive magic message: -32 [ 246.674857][ T5810] usb 2-1: USB disconnect, device number 19 [ 246.680857][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 246.736017][ T5810] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 246.801967][ T9870] loop0: detected capacity change from 0 to 32768 [ 246.837403][ T9870] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1467 (9870) [ 246.871171][ T9870] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.878292][ T9884] ALSA: seq fatal error: cannot create timer (-22) [ 246.913285][ T9870] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 246.938794][ T9870] BTRFS info (device loop0): enabling auto defrag [ 246.949219][ T9870] BTRFS info (device loop0): doing ref verification [ 246.971411][ T9870] BTRFS info (device loop0): max_inline at 0 [ 246.994947][ T9870] BTRFS info (device loop0): force clearing of disk cache [ 247.002135][ T9870] BTRFS info (device loop0): turning on sync discard [ 247.011459][ T9870] BTRFS info (device loop0): disabling free space tree [ 247.069459][ T9870] BTRFS info (device loop0): enabling ssd optimizations [ 247.097374][ T9870] BTRFS info (device loop0): rebuilding free space tree [ 247.212354][ T9870] BTRFS info (device loop0): disabling free space tree [ 247.220345][ T9870] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 247.233255][ T9870] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 247.400278][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.459946][ T5837] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 247.685376][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 247.688985][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 247.710679][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.744117][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 247.774584][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.827775][ T5837] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 247.845555][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.863927][ T5837] usb 4-1: Product: syz [ 247.874057][ T5837] usb 4-1: Manufacturer: syz [ 247.904846][ T5837] usb 4-1: SerialNumber: syz [ 247.927174][ T5837] usb 4-1: config 0 descriptor?? [ 247.957415][ T5837] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 247.992830][ T5837] gspca_stv06xx: st6422 sensor detected [ 248.275198][ T5837] STV06xx: probe of 4-1:0.0 failed with error -71 [ 248.281838][ T9920] loop0: detected capacity change from 0 to 32768 [ 248.312582][ T5837] usb 4-1: USB disconnect, device number 26 [ 248.313091][ T9920] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.1484 (9920) [ 248.361435][ T9920] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 248.394983][ T9920] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 248.424785][ T9920] BTRFS info (device loop0): using free space tree [ 248.489922][ T9920] BTRFS info (device loop0): enabling ssd optimizations [ 248.504907][ T9920] BTRFS info (device loop0): auto enabling async discard [ 248.571719][ T9928] loop1: detected capacity change from 0 to 32768 [ 248.577068][ T5769] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 248.686696][ T9928] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 248.901272][ T5758] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 9 /dev/loop0 scanned by udevd (5758) [ 248.945650][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 248.997009][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1493'. [ 249.119482][ T5810] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 249.337887][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.359214][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.387864][ T5810] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.424727][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.476768][ T5810] usb 3-1: config 0 descriptor?? [ 249.516683][ T5810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 249.568954][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 249.611430][ T9969] loop3: detected capacity change from 0 to 1024 [ 249.646052][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 249.652549][ T9969] EXT4-fs: Ignoring removed orlov option [ 249.697706][ T5810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 249.733762][ T5810] usb 3-1: media controller created [ 249.750026][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.761491][ T9969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.847734][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 249.858066][ T5810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 249.883222][ T9969] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.934513][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 249.975772][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 249.999721][ T5810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 250.045205][ T5810] usb 3-1: USB disconnect, device number 26 [ 250.146795][ T5810] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 250.229543][ T9987] loop3: detected capacity change from 0 to 512 [ 250.260964][ T9989] loop1: detected capacity change from 0 to 1024 [ 250.268455][ T9987] EXT4-fs: inline encryption not supported [ 250.337514][ T9988] hfsplus: invalid extended attribute record [ 250.424325][ T9987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.507628][ T5922] hfsplus: b-tree write err: -5, ino 4 [ 250.521989][ T9987] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.689334][ T9987] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.1508: Directory hole found for htree leaf block 0 [ 250.794176][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.797614][T10008] loop2: detected capacity change from 0 to 64 [ 250.925298][ T28] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 250.969405][T10015] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1519'. [ 250.987842][T10015] netlink: 'syz.0.1519': attribute type 9 has an invalid length. [ 251.144215][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.155588][ T28] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 251.169083][T10019] loop3: detected capacity change from 0 to 1024 [ 251.175703][ T28] usb 2-1: config 9 has an invalid interface number: 199 but max is 1 [ 251.183889][ T28] usb 2-1: config 9 has no interface number 0 [ 251.192314][T10019] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.224374][ T28] usb 2-1: config 9 has no interface number 1 [ 251.235322][ T28] usb 2-1: config 9 interface 199 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 251.255015][ T28] usb 2-1: config 9 interface 5 has no altsetting 0 [ 251.266856][ T28] usb 2-1: New USB device found, idVendor=1508, idProduct=1001, bcdDevice= 0.b4 [ 251.282061][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.284141][T10019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.291202][ T28] usb 2-1: Product: syz [ 251.307384][ T28] usb 2-1: Manufacturer: syz [ 251.312007][ T28] usb 2-1: SerialNumber: syz [ 251.399194][T10019] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.1520: missing EA_INODE flag [ 251.454600][T10019] EXT4-fs (loop3): Remounting filesystem read-only [ 251.587816][ T28] option 2-1:9.199: GSM modem (1-port) converter detected [ 251.596581][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.622860][ T28] usb 2-1: USB disconnect, device number 20 [ 251.631700][ T28] option 2-1:9.199: device disconnected [ 252.352200][T10028] loop0: detected capacity change from 0 to 40427 [ 252.361146][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 252.361159][ T27] audit: type=1326 audit(1750190258.131:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 252.404191][T10028] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 252.426756][T10028] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 252.445043][ T27] audit: type=1326 audit(1750190258.131:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 252.477168][T10028] F2FS-fs (loop0): invalid crc value [ 252.509117][T10028] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.513294][ T27] audit: type=1326 audit(1750190258.151:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 252.541868][T10051] loop3: detected capacity change from 0 to 512 [ 252.600181][T10051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.630536][ T27] audit: type=1326 audit(1750190258.151:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 252.653112][T10051] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.736051][ T27] audit: type=1326 audit(1750190258.161:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 252.758561][T10028] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 252.775380][T10028] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.785006][T10051] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1535: corrupted xattr block 32: invalid header [ 252.814842][ T27] audit: type=1326 audit(1750190258.161:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 252.900217][ T27] audit: type=1326 audit(1750190258.161:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 253.206558][T10048] loop1: detected capacity change from 0 to 32768 [ 253.285240][T10048] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.410765][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.540622][T10048] XFS (loop1): Ending clean mount [ 253.584417][T10048] XFS (loop1): Quotacheck needed: Please wait. [ 253.682297][T10048] XFS (loop1): Quotacheck: Done. [ 254.003647][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.028976][T10093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.255884][ T5810] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 254.465287][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.486911][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.507213][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.534777][ T5810] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 254.554172][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.582362][ T5810] usb 3-1: config 0 descriptor?? [ 254.742198][T10097] loop3: detected capacity change from 0 to 32768 [ 254.823057][T10097] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 254.823057][T10097] [ 254.850736][T10097] ERROR: (device loop3): remounting filesystem as read-only [ 255.048919][ T5810] ntrig 0003:1B96:0009.002D: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.2-1/input0 [ 255.080078][T10118] binder: 10117:10118 ioctl c0306201 2000000001c0 returned -22 [ 255.236852][ T5810] usb 3-1: USB disconnect, device number 27 [ 255.450740][T10128] loop0: detected capacity change from 0 to 64 [ 255.969956][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976570][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.266101][T10153] loop2: detected capacity change from 0 to 512 [ 256.284444][T10153] EXT4-fs: inline encryption not supported [ 256.360931][T10153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.402861][T10153] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.560229][T10153] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.1576: Directory hole found for htree leaf block 0 [ 256.686367][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.907352][T10154] loop3: detected capacity change from 0 to 32768 [ 256.963136][T10154] JBD2: Ignoring recovery information on journal [ 257.039790][T10154] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 257.421043][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 258.203833][ T27] audit: type=1326 audit(1750190263.981:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.264932][ T27] audit: type=1326 audit(1750190263.981:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.301608][ T27] audit: type=1326 audit(1750190263.981:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.325302][ T27] audit: type=1326 audit(1750190263.981:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.412805][ T27] audit: type=1326 audit(1750190263.981:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.462653][T10214] loop3: detected capacity change from 0 to 65 [ 258.478981][T10214] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 258.504760][ T27] audit: type=1326 audit(1750190264.031:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.550614][T10216] loop1: detected capacity change from 0 to 512 [ 258.562755][ T27] audit: type=1326 audit(1750190264.031:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.586578][ T27] audit: type=1326 audit(1750190264.031:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10203 comm="syz.2.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026e58e929 code=0x7ffc0000 [ 258.611199][T10216] EXT4-fs: Ignoring removed bh option [ 258.644102][T10216] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 258.739979][T10216] EXT4-fs (loop1): 1 truncate cleaned up [ 258.823114][T10216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.883796][T10225] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1606'. [ 259.108191][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.347421][T10234] loop3: detected capacity change from 0 to 1024 [ 259.365925][T10234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.431164][T10234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.679539][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.694216][T10228] loop2: detected capacity change from 0 to 40427 [ 259.721257][T10228] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 259.751650][T10228] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 259.806359][T10228] F2FS-fs (loop2): invalid crc value [ 259.840505][T10228] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.017709][T10228] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 260.032953][T10228] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.113743][T10254] random: crng reseeded on system resumption [ 260.422947][T10261] loop3: detected capacity change from 0 to 1024 [ 260.476679][T10261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.709663][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.210574][T10279] loop2: detected capacity change from 0 to 64 [ 261.259049][T10283] loop0: detected capacity change from 0 to 65 [ 261.284953][T10283] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 261.543402][T10285] loop1: detected capacity change from 0 to 4096 [ 261.585773][T10285] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 261.694980][T10285] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 261.731878][T10285] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 261.826423][T10285] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 261.886860][ T27] audit: type=1800 audit(1750190267.661:92): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1629" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 262.015002][ T5926] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 262.024840][ T5765] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 262.039191][ T5765] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 262.074848][ T5765] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 262.081529][ T5922] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 262.314188][T10302] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1635'. [ 262.463029][T10282] loop3: detected capacity change from 0 to 40427 [ 262.492426][T10282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 262.505065][T10282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 262.535090][T10282] F2FS-fs (loop3): invalid crc value [ 262.561761][T10282] F2FS-fs (loop3): Found nat_bits in checkpoint [ 262.701806][T10282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 262.712602][T10282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 263.483409][T10329] loop3: detected capacity change from 0 to 1024 [ 263.508092][T10329] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 263.543384][T10329] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 263.563715][T10329] JBD2: no valid journal superblock found [ 263.575529][T10329] EXT4-fs (loop3): Could not load journal inode [ 263.704546][T10324] loop1: detected capacity change from 0 to 32768 [ 263.754876][T10333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.779158][T10324] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 263.832896][ T5922] (kworker/u4:17,5922,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 263.883186][T10324] [ 263.885560][T10324] ====================================================== [ 263.892583][T10324] WARNING: possible circular locking dependency detected [ 263.899627][T10324] 6.6.93-syzkaller #0 Not tainted [ 263.904656][T10324] ------------------------------------------------------ [ 263.911676][T10324] syz.1.1647/10324 is trying to acquire lock: [ 263.917744][T10324] ffff88805ba46ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fa/0x720 [ 263.927080][T10324] [ 263.927080][T10324] but task is already holding lock: [ 263.934453][T10324] ffff888026722990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 263.943713][T10324] [ 263.943713][T10324] which lock already depends on the new lock. [ 263.943713][T10324] [ 263.954129][T10324] [ 263.954129][T10324] the existing dependency chain (in reverse order) is: [ 263.963152][T10324] [ 263.963152][T10324] -> #4 (jbd2_handle){++++}-{0:0}: [ 263.969498][T10331] loop2: detected capacity change from 0 to 32768 [ 263.970456][T10324] start_this_handle+0x1e9d/0x20c0 [ 263.982538][T10324] jbd2__journal_start+0x2bb/0x5b0 [ 263.988199][T10324] jbd2_journal_start+0x2a/0x40 [ 263.993592][T10324] ocfs2_start_trans+0x376/0x6c0 [ 263.999060][T10324] ocfs2_reserve_suballoc_bits+0x715/0x4360 [ 264.005487][T10324] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 264.012331][T10324] ocfs2_extend_dir+0xc60/0x4760 [ 264.017785][T10324] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 264.024361][T10324] ocfs2_mknod+0x818/0x20f0 [ 264.029373][T10324] ocfs2_mkdir+0x196/0x410 [ 264.034328][T10324] vfs_mkdir+0x296/0x440 [ 264.039102][T10324] do_mkdirat+0x1d4/0x440 [ 264.043944][T10324] __x64_sys_mkdirat+0x89/0xa0 [ 264.049217][T10324] do_syscall_64+0x55/0xb0 [ 264.054148][T10324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.060562][T10324] [ 264.060562][T10324] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 264.069071][T10324] down_read+0x46/0x2e0 [ 264.073742][T10324] ocfs2_start_trans+0x36a/0x6c0 [ 264.079186][T10324] ocfs2_reserve_suballoc_bits+0x715/0x4360 [ 264.085590][T10324] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 264.092428][T10324] ocfs2_extend_dir+0xc60/0x4760 [ 264.097876][T10324] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 264.104449][T10324] ocfs2_mknod+0x818/0x20f0 [ 264.109472][T10324] ocfs2_mkdir+0x196/0x410 [ 264.114398][T10324] vfs_mkdir+0x296/0x440 [ 264.119148][T10324] do_mkdirat+0x1d4/0x440 [ 264.123982][T10324] __x64_sys_mkdirat+0x89/0xa0 [ 264.129267][T10324] do_syscall_64+0x55/0xb0 [ 264.134196][T10324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.140605][T10324] [ 264.140605][T10324] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 264.148074][T10324] ocfs2_start_trans+0x26b/0x6c0 [ 264.153524][T10324] ocfs2_truncate_file+0x611/0x13a0 [ 264.159236][T10324] ocfs2_setattr+0x150d/0x1b20 [ 264.164526][T10324] notify_change+0xb0d/0xe10 [ 264.169642][T10324] do_truncate+0x19b/0x220 [ 264.174573][T10324] path_openat+0x298c/0x3190 [ 264.179669][T10324] do_filp_open+0x1c5/0x3d0 [ 264.184683][T10324] do_sys_openat2+0x12c/0x1c0 [ 264.189876][T10324] __x64_sys_creat+0x90/0xb0 [ 264.194980][T10324] do_syscall_64+0x55/0xb0 [ 264.199907][T10324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.206315][T10324] [ 264.206315][T10324] -> #1 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 264.214121][T10324] down_write+0x97/0x1f0 [ 264.218874][T10324] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 264.225368][T10324] ocfs2_truncate_file+0xd84/0x13a0 [ 264.231080][T10324] ocfs2_setattr+0x150d/0x1b20 [ 264.236356][T10324] notify_change+0xb0d/0xe10 [ 264.241457][T10324] do_truncate+0x19b/0x220 [ 264.246382][T10324] path_openat+0x298c/0x3190 [ 264.251482][T10324] do_filp_open+0x1c5/0x3d0 [ 264.256491][T10324] do_sys_openat2+0x12c/0x1c0 [ 264.261682][T10324] __x64_sys_creat+0x90/0xb0 [ 264.266961][T10324] do_syscall_64+0x55/0xb0 [ 264.271891][T10324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.278298][T10324] [ 264.278298][T10324] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 264.286104][T10324] __lock_acquire+0x2ddb/0x7c80 [ 264.291461][T10324] lock_acquire+0x197/0x410 [ 264.296472][T10324] down_read+0x46/0x2e0 [ 264.301135][T10324] ocfs2_init_acl+0x2fa/0x720 [ 264.306318][T10324] ocfs2_mknod+0x12e5/0x20f0 [ 264.311419][T10324] ocfs2_mkdir+0x196/0x410 [ 264.316349][T10324] vfs_mkdir+0x296/0x440 [ 264.321103][T10324] do_mkdirat+0x1d4/0x440 [ 264.325941][T10324] __x64_sys_mkdirat+0x89/0xa0 [ 264.331216][T10324] do_syscall_64+0x55/0xb0 [ 264.336144][T10324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.342551][T10324] [ 264.342551][T10324] other info that might help us debug this: [ 264.342551][T10324] [ 264.352769][T10324] Chain exists of: [ 264.352769][T10324] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 264.352769][T10324] [ 264.366489][T10324] Possible unsafe locking scenario: [ 264.366489][T10324] [ 264.373923][T10324] CPU0 CPU1 [ 264.379275][T10324] ---- ---- [ 264.384624][T10324] rlock(jbd2_handle); [ 264.388767][T10324] lock(&journal->j_trans_barrier); [ 264.396555][T10324] lock(jbd2_handle); [ 264.403127][T10324] rlock(&oi->ip_xattr_sem); [ 264.407789][T10324] [ 264.407789][T10324] *** DEADLOCK *** [ 264.407789][T10324] [ 264.415915][T10324] 8 locks held by syz.1.1647/10324: [ 264.421096][T10324] #0: ffff88807bc42418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 264.430312][T10324] #1: ffff88805ba46d98 (&type->i_mutex_dir_key#15/1){+.+.}-{3:3}, at: filename_create+0x1f6/0x460 [ 264.441007][T10324] #2: ffff88805d5eb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 264.454650][T10324] #3: ffff88805ba42658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 264.468299][T10324] #4: ffff88805d5ed118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 264.482209][T10324] #5: ffff88807bc42608 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xe47/0x20f0 [ 264.491432][T10324] #6: ffff888024cd08e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x36a/0x6c0 [ 264.502119][T10324] #7: ffff888026722990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 264.511766][T10324] [ 264.511766][T10324] stack backtrace: [ 264.517650][T10324] CPU: 1 PID: 10324 Comm: syz.1.1647 Not tainted 6.6.93-syzkaller #0 [ 264.525700][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.535751][T10324] Call Trace: [ 264.539020][T10324] [ 264.541945][T10324] dump_stack_lvl+0x16c/0x230 [ 264.546616][T10324] ? load_image+0x3b0/0x3b0 [ 264.551106][T10324] ? show_regs_print_info+0x20/0x20 [ 264.556299][T10324] ? print_circular_bug+0x12b/0x1a0 [ 264.561491][T10324] check_noncircular+0x2bd/0x3c0 [ 264.566424][T10324] ? print_deadlock_bug+0x5d0/0x5d0 [ 264.571616][T10324] ? lockdep_lock+0xe0/0x220 [ 264.576195][T10324] ? _find_first_zero_bit+0xd3/0x100 [ 264.581476][T10324] __lock_acquire+0x2ddb/0x7c80 [ 264.586321][T10324] ? verify_lock_unused+0x140/0x140 [ 264.591507][T10324] ? __find_get_block+0x2a2/0xed0 [ 264.596521][T10324] ? verify_lock_unused+0x140/0x140 [ 264.601712][T10324] ? __ocfs2_journal_access+0x612/0x7f0 [ 264.607254][T10324] lock_acquire+0x197/0x410 [ 264.611744][T10324] ? ocfs2_init_acl+0x2fa/0x720 [ 264.616585][T10324] ? __might_sleep+0xe0/0xe0 [ 264.621164][T10324] ? read_lock_is_recursive+0x20/0x20 [ 264.626537][T10324] ? do_raw_spin_unlock+0x121/0x230 [ 264.631730][T10324] down_read+0x46/0x2e0 [ 264.635877][T10324] ? ocfs2_init_acl+0x2fa/0x720 [ 264.640715][T10324] ocfs2_init_acl+0x2fa/0x720 [ 264.645381][T10324] ? ocfs2_acl_chmod+0x320/0x320 [ 264.650309][T10324] ? dquot_alloc_inode+0x211/0xa40 [ 264.655420][T10324] ? ocfs2_journal_access+0x40/0x40 [ 264.660607][T10324] ? ocfs2_block_signals+0x95/0xd0 [ 264.665714][T10324] ? ocfs2_free_mem_caches+0x50/0x50 [ 264.670992][T10324] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 264.677048][T10324] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 264.682756][T10324] ocfs2_mknod+0x12e5/0x20f0 [ 264.687344][T10324] ? ocfs2_mkdir+0x410/0x410 [ 264.691922][T10324] ? verify_lock_unused+0x140/0x140 [ 264.697121][T10324] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 264.702833][T10324] ? __lock_acquire+0x7c80/0x7c80 [ 264.707846][T10324] ? do_raw_spin_lock+0x121/0x2c0 [ 264.712868][T10324] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 264.718771][T10324] ? __lock_acquire+0x7c80/0x7c80 [ 264.723809][T10324] ? __rwlock_init+0x150/0x150 [ 264.728568][T10324] ? do_raw_spin_unlock+0x121/0x230 [ 264.733782][T10324] ? put_pid+0xde/0x120 [ 264.737943][T10324] ocfs2_mkdir+0x196/0x410 [ 264.742351][T10324] ? make_kgid+0x640/0x640 [ 264.746756][T10324] ? apparmor_path_mkdir+0x1a7/0x220 [ 264.752033][T10324] ? ocfs2_symlink+0x2550/0x2550 [ 264.756962][T10324] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 264.761892][T10324] ? inode_permission+0xf3/0x480 [ 264.766830][T10324] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 264.771860][T10324] ? security_inode_mkdir+0xb7/0x100 [ 264.777153][T10324] vfs_mkdir+0x296/0x440 [ 264.781389][T10324] do_mkdirat+0x1d4/0x440 [ 264.785714][T10324] ? vfs_mkdir+0x440/0x440 [ 264.790124][T10324] __x64_sys_mkdirat+0x89/0xa0 [ 264.794877][T10324] do_syscall_64+0x55/0xb0 [ 264.799307][T10324] ? clear_bhb_loop+0x40/0x90 [ 264.803971][T10324] ? clear_bhb_loop+0x40/0x90 [ 264.808635][T10324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.814523][T10324] RIP: 0033:0x7f20f678d197 [ 264.818939][T10324] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.838533][T10324] RSP: 002b:00007f20f75e3e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 264.846937][T10324] RAX: ffffffffffffffda RBX: 00007f20f75e3ef0 RCX: 00007f20f678d197 [ 264.854897][T10324] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 264.862858][T10324] RBP: 00002000000002c0 R08: 00002000000001c0 R09: 0000000000000000 [ 264.870833][T10324] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000040 [ 264.878804][T10324] R13: 00007f20f75e3eb0 R14: 0000000000000000 R15: 0000000000000000 [ 264.886782][T10324] [ 264.993109][T10331] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 265.016848][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 265.036023][T10331] JBD2: Ignoring recovery information on journal [ 265.075521][T10331] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 265.164201][ T5770] ocfs2: Unmounting device (7,2) on (node local)