last executing test programs: 1m40.892361708s ago: executing program 1 (id=1591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 1m38.500860787s ago: executing program 1 (id=1609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 1m38.279888161s ago: executing program 1 (id=1612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 1m38.020162306s ago: executing program 1 (id=1614): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./file0\x00', 0x0) 1m37.582512615s ago: executing program 1 (id=1619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) inotify_init1(0x0) 1m36.834374281s ago: executing program 1 (id=1623): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000002200)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101080, 0x88) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x2000, 0x0, 0x0}) 1m36.508359197s ago: executing program 32 (id=1623): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000002200)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101080, 0x88) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x2000, 0x0, 0x0}) 52.838176781s ago: executing program 2 (id=2041): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000002c0)=[0x2a, 0x7]) 51.354142501s ago: executing program 2 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000005ffffff"], 0x20}}, 0x0) 51.232494953s ago: executing program 2 (id=2051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000f2000040"]) 51.021695628s ago: executing program 2 (id=2052): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) 50.91807457s ago: executing program 2 (id=2054): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000200000000000018001600100001000900000000000000000010000000550708000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x44}}, 0x0) 50.544852087s ago: executing program 2 (id=2057): setuid(0xee01) socket$inet(0x2, 0x3, 0x102) r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) 50.234673943s ago: executing program 33 (id=2057): setuid(0xee01) socket$inet(0x2, 0x3, 0x102) r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) 4.142499356s ago: executing program 5 (id=2553): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000500)="d6", 0x1}], 0x1}, 0x884) 3.906993931s ago: executing program 5 (id=2556): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@random="e904a200", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0xfc, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 3.850041432s ago: executing program 5 (id=2557): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000002700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES64], 0x1, 0x5540, &(0x7f0000010140)="$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") syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0], 0x1, 0x1d2, &(0x7f0000000480)="$eJzsmDGLE0EUx/8zm2xMqoidCAoGjIWb7AZBEItUKWwERbERF7OG6MbIZgsVJLG08ivoRxB7SWFrJ9jqwcE1B9dcc0XmmJ3JZbjs5hLuCIR7v2L2/2bezLy3M3mBBUEQ55at//v/Pn7evsiBUREVFHT/jnUkwQ3/6Pv96pXfLffns193//5o/Tm+3jUAQiy/v1x73LQQa1sIYzbDgTRlII/AUUERgJ3MuqldnoDB0fo5OB5rHYDhqdavDN2X/o7zshsGzot+2JaiLhtXNp5sGmZ8OQC7nxjaRnzMGB+8//DaD8Mgmhd29tBqYtH7S+JrctwDhKVDNM/LGalnHUNUdJ8LDlfrBhgean0HBf1u+Fz+l3P6uISY7pOe/96qSZaWcc7Lq5fpM8TgS/b0SyvEc8HsmQgFzuQU1yDYyZdyYwVGShQwG+Kbnak8qrXtVVZXY30JzuqH+MZww6ifOaN+1OLeW/m81e35naATvClN1MBtr5bUZtUuqH/FpD6VjPXzGb42s/HOj+PIVa20x/5XPRp5aRXXTuofR/W6spnuM0l+dmUm//pQtbSd4kcQBEEQBEEQBEEQBEEQBHE6roJBpDH9LKks70FiHAYAAP//bSVhTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 3.128243537s ago: executing program 5 (id=2563): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x200001, &(0x7f0000000240)=ANY=[], 0x1, 0x125e2, &(0x7f0000024b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.182689636s ago: executing program 4 (id=2572): sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 1.95266271s ago: executing program 4 (id=2573): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202b, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}}, 0x0) 1.747700324s ago: executing program 4 (id=2574): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, 0x0) 1.615160697s ago: executing program 4 (id=2576): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') 1.358223802s ago: executing program 4 (id=2578): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000004c00)="35b78a259c3d306dedbc8d57d8c01078a4dd14fd58c260c512c386d87551f18513e8b66626c8ad409a8ab83313b561a46f857ff0f17f6e18f5f37fdc57fe91ae9be5e427bde7e705a5998fe6c7e81613c7750078aa39ca3950011baca521f3d9c9acf8e3bfbb0e5485f1bc4934f5ffd9ceef098f7ab6adae48f5a275c3d4c09f1ec3fddde01d2257b8e71ef4250198cf630763f021c0a9345d25adaead684f2b59664bad71b8d5ae00a0e83e9734ba65390dfadea91820fa32163f4e0aa80949755f0b337c6bfe47a71e0f7a8492f675381ab13b161f2169ea2cdceed60177b5", 0xe0}, {&(0x7f0000004d00)="2e8f01702f94fde65d9d351be63d69be781cfe819b9603e82489b6d996aef081a6bebc529e724ea6ab554b7e18cb1ba69474b3961c30efbeb8a09ee4f18d5d617507a03077e3f0121e347f63fa409968c94a5ae6d261fe17a4c123d2a5cbbf", 0x5f}, {&(0x7f00000002c0)="d4", 0xfffffe1d}, {&(0x7f0000000380)="4017f417a8547ccfd00e7f45276c6b0ec9e54f05e5d3d6e101245297cddb7117372f9d866cf1417b4329c52ad58395ac11aa38ca1a3408716c0f5515b118d6d146b6f34cce9fad370d035b1cb265641c3d5397fa352c7a500f540e149f943aa3f7d2aeb3cdc7337f57e11e0fe52c17cbd45f38b395d51a286280ab6d7049adc2597038f232907cfcac93e3bc8b71faf762646154579513e691781039fd", 0x9d}], 0x4}}], 0x1, 0x0) 1.235673695s ago: executing program 0 (id=2580): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback, 0xfffffff3}, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, r1, 0x2000009}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xe93, @remote, 0x2}, {0xa, 0x4e23, 0x7f, @mcast2, 0x8}, r1, 0x2}}, 0x48) 1.138376707s ago: executing program 3 (id=2581): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$eJzs3c9vFFUcAPDvm/7gR9UWYlQ8aBNjIFFaWsAQ4wHuhOCPmxdXWgiy/Ait0aKJkODFxHjxYOLJg/hfKNGrJ28evHgyJMQYjiaume1MWehuacuuU5nPJ5l23rzdfN/s5rtv5u2b2QBqazL/k0XsiYhLKWK8o244isrJ5cfd+evjU/mSotV6888UqdhWPj4V/8eKJ2+PiF9+TLF7aHXchaUr5xrN5vzlojy9eP7S9MLSlf1nzzfOzJ+ZvzD7yuyRw4cOH5k50Ld9PX79vQ/GPzvx9rdf/51mvvvtRIqj0Wq1Pon79qNfJmNy5TXplL+uR/odrCJDxf50vsVpuMIGsSHl+zcSEU/HeAzF3TdvPD59vdLGAQPVSpH3gUAtJfkPNVUeB5Tn9oM4Dwa2ptvHlgcAVuf/8PLYYGxvjw3svJOic1gnRUQ/RubyGD//dOJ6vsSAxuGA7q5ei4hnuuV/aufmRHsUP8//7J78zyLiZPE/3/7GJuNP3leW//DfeZj8f6cj/9/dZHz5DwAAAAAAAP1z81hEvNzt+79sZf5PdJn/MxYRR/sQ/8Hf/2W3+hAG6OL2sYjXus7/zcqHTAwVpcfb8wFG0umzzfkDEfFEROyLkW15eWaNGPs/3/1Vr7rO+X/5kscv5wIW7bg1vO3e58w1FhsPs8/AstvXIp7tOv83rfT/qUv/n38eXFpnjN0v3jjZq+7B+Q8MSuubiL1d+/+7d65Ia9+fY7p9PDBdHhWs9txHX3zfK778h+rk/f/OtfN/InXer2dh4zEOLg23etVt9vh/NL3VvuXMaLHtw8bi4uWZiNF0fPX22Y23GR5FZT6U+ZLn/74X1h7/63b8vyMirq4z5lP/jP3eq07/D9XJ839uQ/3/xldmb0z80Cv++vr/Q+0+fV+xxfgfrG29CVp1OwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/yiLiMciZVMr61k2NRUxFhFPxs6seXFh8aXTF9+/MJfXtX//Pyt/6Xd8uZzK3/+f6CjP3lc+GBG7IuLLoR3t8tSpi825qnceAAAAAAAAAAAAAAAAAAAAtoixHtf/5/4Yqrp1wMANV90AoDLyH+pL/kN9yX+oL/kP9SX/ob7kP9SX/If6kv9QX/IfAAAAAAAeKbuev/lrioirr+5oL7nRom6k0pYBg5ZV3QCgMm7xA/Vl6g/Ul3N8ID2gfvumnwkAAAAAAAAAAAAA9MvePa7/h7py/T/Ul+v/ob5c/w/15RwfcP0/AAAAAAAAAAAAAGx9C0tXzjWazfnLVqxYsbKyUvUnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUPo3AAD//6ERJ48=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @auto="03000000512511c5dd1d3d1c69342b6b"}}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xa06, 0x4083c6, 0x0, 0x7}) 1.073231648s ago: executing program 5 (id=2582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 1.052502909s ago: executing program 0 (id=2583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0xfffffc00, 0x5}, {0xc289, 0x3}], r1}, 0x18, 0x2) 830.401143ms ago: executing program 0 (id=2584): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xbc, 0xfffffffc, 0x7, 0x0, 0x1, "ff7a6c8489ab9470a8b205ae5fce0dc598af1e", 0x27b, 0x3ff}) 809.158873ms ago: executing program 3 (id=2585): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 770.564234ms ago: executing program 0 (id=2586): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 621.679717ms ago: executing program 4 (id=2587): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@space_cache_v1}, {@autodefrag}, {@discard_sync}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@discard_sync}, {@discard_async}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x500000}) 588.512768ms ago: executing program 3 (id=2588): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20040844) 538.947939ms ago: executing program 0 (id=2589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) readv(r0, &(0x7f00000000c0), 0x9) 390.074132ms ago: executing program 0 (id=2590): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) write$binfmt_script(r0, &(0x7f00000021c0)={'#! ', './file3'}, 0xb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 389.303362ms ago: executing program 5 (id=2591): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0xec, 0x2c76f8f4, 0x4, 0xc9cc}) 242.095615ms ago: executing program 3 (id=2592): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) 68.283298ms ago: executing program 3 (id=2593): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 0s ago: executing program 3 (id=2594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000ec0)={0x1, [{0x3, 0x10, 0x10001, &(0x7f00000003c0)="c3e2"}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x1d0, 0x8000, &(0x7f0000000740)="4eb9944114924ad93ce377a3d448c679439191abb6418a83a1b8b0019a607633b637cee1628511d7507d116687f2fb25eb8c085026ccd143d3f1"}, {0x2, 0x0, 0x8, &(0x7f0000000240)}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7f9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x39, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xe, 0x0}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) kernel console output (not intermixed with test programs): a5b65a09. [ 161.084847][ T7743] loop2: detected capacity change from 0 to 256 [ 161.308361][ T7746] loop0: detected capacity change from 0 to 1024 [ 161.439792][ T7746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.443386][ T7753] loop2: detected capacity change from 0 to 2048 [ 161.479287][ T7746] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.555119][ T7756] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.731757][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.918944][ T6688] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.113090][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 162.148963][ T6688] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.157062][ T6688] usb 2-1: config 0 has no interface number 0 [ 162.175907][ T6688] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.193374][ T6688] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.203891][ T6688] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 162.218736][ T6688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.235097][ T6688] usb 2-1: config 0 descriptor?? [ 162.244979][ T7766] veth3: entered promiscuous mode [ 162.584518][ T7781] loop3: detected capacity change from 0 to 1024 [ 162.764667][ T6688] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.000B/input/input8 [ 162.951847][ T6688] holtek_kbd 0003:04D9:A055.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 163.028625][ T6688] usb 2-1: USB disconnect, device number 9 [ 163.205736][ T7794] fido_id[7794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 163.354276][ T7800] loop2: detected capacity change from 0 to 512 [ 163.403497][ T7800] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 163.429289][ T7800] System zones: 0-7 [ 163.454885][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.600202][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.658906][ T966] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.820786][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 163.830659][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.795'. [ 163.849068][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 163.854415][ T5780] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.886651][ T7817] loop2: detected capacity change from 0 to 1024 [ 163.895617][ T966] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.899847][ T7817] EXT4-fs: Ignoring removed nobh option [ 163.916632][ T7814] bond1: entered promiscuous mode [ 163.923991][ T7814] bond1: entered allmulticast mode [ 163.929701][ T7814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.937830][ T966] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.956193][ T7817] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.982139][ T966] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.013958][ T966] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.030451][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.031134][ T7817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.038481][ T966] usb 1-1: Product: syz [ 164.038499][ T966] usb 1-1: Manufacturer: syz [ 164.038515][ T966] usb 1-1: SerialNumber: syz [ 164.045131][ T966] cdc_ncm 1-1:1.0: skipping garbage [ 164.092303][ T966] cdc_ncm 1-1:1.0: skipping garbage [ 164.107001][ T7817] EXT4-fs warning (device loop2): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 164.109856][ T966] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 164.124775][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 164.149706][ T966] cdc_ncm 1-1:1.0: bind() failure [ 164.155596][ T5780] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 164.165523][ T5780] usb 4-1: config 0 has no interface number 0 [ 164.171714][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.202006][ T5780] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 164.218975][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.227207][ T5780] usb 4-1: Product: syz [ 164.243916][ T5780] usb 4-1: Manufacturer: syz [ 164.248592][ T5780] usb 4-1: SerialNumber: syz [ 164.300457][ T5780] usb 4-1: config 0 descriptor?? [ 164.303947][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.310160][ T5780] hub 4-1:0.132: bad descriptor, ignoring hub [ 164.328937][ T5780] hub: probe of 4-1:0.132 failed with error -5 [ 164.333197][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.338173][ T5780] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input9 [ 164.347361][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.367956][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.374383][ T966] usb 1-1: USB disconnect, device number 7 [ 164.441905][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.457590][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.468674][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.488941][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.506688][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.512871][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 164.517463][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.535750][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.547608][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.548130][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 164.555296][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.574446][ T7826] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.593507][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.601370][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.609209][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.616735][ T8] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 164.629971][ T8] hid-generic 0002:0004:0009.000C: hidraw0: HID v0.04 Device [syz0] on syz0 [ 164.793532][ T7827] fido_id[7827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.939459][ T8] usb 4-1: USB disconnect, device number 6 [ 165.268071][ T7844] loop0: detected capacity change from 0 to 4096 [ 165.318227][ T7844] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 165.405583][ T5160] udevd[5160]: worker [7053] terminated by signal 33 (Unknown signal 33) [ 165.414329][ T5160] udevd[5160]: worker [7053] failed while handling '/devices/virtual/block/loop0' [ 165.502582][ T7852] loop1: detected capacity change from 0 to 256 [ 166.145602][ T7863] loop2: detected capacity change from 0 to 4096 [ 166.174534][ T7863] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 166.835010][ T7855] loop3: detected capacity change from 0 to 40427 [ 166.880225][ T7855] F2FS-fs (loop3): heap/no_heap options were deprecated [ 166.920381][ T7855] F2FS-fs (loop3): invalid crc value [ 166.937584][ T7855] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.979008][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.109274][ T7855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 167.119387][ T7867] loop1: detected capacity change from 0 to 32768 [ 167.146515][ T7867] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.819 (7867) [ 167.220991][ T7867] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 167.277225][ T7867] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 167.330631][ T7867] BTRFS info (device loop1): setting nodatacow, compression disabled [ 167.360873][ T7867] BTRFS info (device loop1): turning off barriers [ 167.367422][ T7867] BTRFS info (device loop1): enabling all of the rescue options [ 167.407331][ T7867] BTRFS info (device loop1): ignoring data csums [ 167.437825][ T7867] BTRFS info (device loop1): ignoring bad roots [ 167.446514][ T7867] BTRFS info (device loop1): disabling log replay at mount time [ 167.476906][ T7867] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 167.488217][ T5788] syz-executor: attempt to access beyond end of device [ 167.488217][ T5788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.503123][ T7867] BTRFS info (device loop1): trying to use backup root at mount time [ 167.531745][ T7867] BTRFS info (device loop1): setting datacow [ 167.549070][ T5788] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 167.552440][ T7867] BTRFS info (device loop1): turning on async discard [ 167.578963][ T7867] BTRFS info (device loop1): setting nodatacow, compression disabled [ 167.613941][ T7867] BTRFS info (device loop1): enabling auto defrag [ 167.629220][ T7867] BTRFS info (device loop1): using free space tree [ 167.837731][ T7867] BTRFS info (device loop1: state C): enabling ssd optimizations [ 167.872561][ T7884] loop2: detected capacity change from 0 to 32768 [ 167.892991][ T7884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.825 (7884) [ 167.950529][ T7884] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.978990][ T7884] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 167.987859][ T7884] BTRFS info (device loop2): metadata ratio 2 [ 168.026168][ T7884] BTRFS info (device loop2): allowing degraded mounts [ 168.049090][ T7884] BTRFS info (device loop2): force zlib compression, level 3 [ 168.065253][ T7884] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 168.085197][ T7884] BTRFS info (device loop2): use zstd compression, level 3 [ 168.103161][ T7884] BTRFS info (device loop2): force clearing of disk cache [ 168.133989][ T7884] BTRFS info (device loop2): max_inline at 0 [ 168.159587][ T7884] BTRFS info (device loop2): using free space tree [ 168.164957][ T7880] loop0: detected capacity change from 0 to 32768 [ 168.173482][ T5789] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 168.333587][ T7880] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 168.333587][ T7880] [ 168.355628][ T5800] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (5800) [ 168.427941][ T7880] ERROR: (device loop0): remounting filesystem as read-only [ 168.488332][ T7880] ialloc: diAlloc returned -5! [ 168.609296][ T7884] BTRFS info (device loop2): enabling ssd optimizations [ 168.661323][ T7884] BTRFS info (device loop2): rebuilding free space tree [ 169.116049][ T5791] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.180620][ T7922] loop3: detected capacity change from 0 to 4096 [ 169.779968][ T966] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.978851][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 169.986737][ T966] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 170.024612][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 170.054842][ T966] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 170.096895][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.125294][ T966] usb 1-1: config 0 descriptor?? [ 170.273902][ T7943] loop1: detected capacity change from 0 to 4096 [ 170.292891][ T7942] loop3: detected capacity change from 0 to 4096 [ 170.302029][ T7943] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 170.314339][ T7942] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 170.597279][ T966] cypress 0003:04B4:07B1.000D: unbalanced collection at end of report description [ 170.632836][ T966] cypress 0003:04B4:07B1.000D: parse failed [ 170.654962][ T966] cypress: probe of 0003:04B4:07B1.000D failed with error -22 [ 170.880903][ T966] usb 1-1: USB disconnect, device number 8 [ 171.021157][ T7954] loop1: detected capacity change from 0 to 4096 [ 171.458976][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 172.074056][ T7962] loop3: detected capacity change from 0 to 32768 [ 172.086628][ T7962] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 172.115795][ T7962] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 172.144632][ T7962] BTRFS info (device loop3): setting nodatacow, compression disabled [ 172.153660][ T7962] BTRFS info (device loop3): turning off barriers [ 172.167777][ T7962] BTRFS info (device loop3): enabling all of the rescue options [ 172.176296][ T7962] BTRFS info (device loop3): ignoring data csums [ 172.195091][ T7962] BTRFS info (device loop3): ignoring bad roots [ 172.202184][ T7962] BTRFS info (device loop3): disabling log replay at mount time [ 172.235147][ T7962] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.276339][ T7962] BTRFS info (device loop3): trying to use backup root at mount time [ 172.286837][ T7962] BTRFS info (device loop3): setting datacow [ 172.297203][ T7962] BTRFS info (device loop3): turning on async discard [ 172.306066][ T7962] BTRFS info (device loop3): setting nodatacow, compression disabled [ 172.316784][ T7989] loop2: detected capacity change from 0 to 512 [ 172.325302][ T7962] BTRFS info (device loop3): enabling auto defrag [ 172.357869][ T7962] BTRFS info (device loop3): using free space tree [ 172.403350][ T7989] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.860: bg 0: block 248: padding at end of block bitmap is not set [ 172.455156][ T7991] loop0: detected capacity change from 0 to 4096 [ 172.460729][ T7989] __quota_error: 9 callbacks suppressed [ 172.460752][ T7989] Quota error (device loop2): write_blk: dquota write failed [ 172.475871][ T7989] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 172.487204][ T7989] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.860: Failed to acquire dquot type 1 [ 172.505872][ T7989] EXT4-fs (loop2): 1 truncate cleaned up [ 172.513525][ T7989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.529817][ T7989] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.540864][ T7962] BTRFS info (device loop3: state C): enabling ssd optimizations [ 172.569526][ T5780] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.763017][ T5780] usb 2-1: Using ep0 maxpacket: 16 [ 172.780542][ T5780] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 172.809296][ T5780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.828944][ T5780] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 172.866884][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.879406][ T5788] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 172.885743][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.904422][ T5780] usb 2-1: config 0 descriptor?? [ 172.957749][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.861'. [ 173.094153][ T6008] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (6008) [ 173.388601][ T5780] cypress 0003:04B4:07B1.000E: unbalanced collection at end of report description [ 173.429868][ T5780] cypress 0003:04B4:07B1.000E: parse failed [ 173.459515][ T5780] cypress: probe of 0003:04B4:07B1.000E failed with error -22 [ 173.485652][ T8022] loop0: detected capacity change from 0 to 128 [ 173.564323][ T8022] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.578192][ T5160] udevd[5160]: worker [5800] terminated by signal 33 (Unknown signal 33) [ 173.608860][ T8022] hpfs: filesystem error: improperly stopped [ 173.615170][ T5160] udevd[5160]: worker [5800] failed while handling '/devices/virtual/block/loop0' [ 173.658939][ T8022] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.669112][ T8022] hpfs: You really don't want any checks? You are crazy... [ 173.704605][ T8022] hpfs: hpfs_map_sector(): read error [ 173.737242][ T8022] hpfs: code page support is disabled [ 173.778085][ T8022] hpfs: hpfs_map_4sectors(): unaligned read [ 173.779059][ T5780] usb 2-1: USB disconnect, device number 10 [ 173.802540][ T8022] hpfs: hpfs_map_4sectors(): unaligned read [ 173.815228][ T8022] hpfs: filesystem error: unable to find root dir [ 174.259634][ T28] kernel write not supported for file /input/event2 (pid: 28 comm: kworker/1:1) [ 174.559389][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 174.585433][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 174.602281][ T8051] netlink: 'syz.1.879': attribute type 14 has an invalid length. [ 174.628935][ T8051] netlink: 'syz.1.879': attribute type 13 has an invalid length. [ 174.936465][ T8064] loop3: detected capacity change from 0 to 64 [ 175.040553][ T8061] loop0: detected capacity change from 0 to 4096 [ 175.145156][ T8068] loop2: detected capacity change from 0 to 764 [ 175.222947][ T8068] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 175.967145][ T8092] loop2: detected capacity change from 0 to 4096 [ 175.976130][ T8092] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 175.998236][ T8092] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 176.008225][ T8092] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 176.033417][ T8092] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 176.042812][ T8092] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 176.107190][ T8092] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 176.117417][ T8092] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 176.139611][ T8092] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 176.155586][ T8092] ntfs: volume version 3.1. [ 176.463861][ T8098] loop3: detected capacity change from 0 to 256 [ 176.567153][ T8098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 177.023973][ T8116] loop1: detected capacity change from 0 to 512 [ 177.091581][ T8116] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.912: iget: bad i_size value: 38620345925642 [ 177.130875][ T8116] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.912: couldn't read orphan inode 15 (err -117) [ 177.190352][ T8116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.199307][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 177.259022][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 177.304178][ T8123] netlink: 'syz.3.914': attribute type 14 has an invalid length. [ 177.314574][ T8125] loop2: detected capacity change from 0 to 512 [ 177.338353][ T8123] netlink: 'syz.3.914': attribute type 13 has an invalid length. [ 177.360573][ T8125] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.390732][ T8125] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.915: bg 0: block 248: padding at end of block bitmap is not set [ 177.450604][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.484809][ T8125] __quota_error: 13 callbacks suppressed [ 177.484829][ T8125] Quota error (device loop2): write_blk: dquota write failed [ 177.503105][ T8125] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 177.530304][ T8125] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.915: Failed to acquire dquot type 1 [ 177.568033][ T8125] EXT4-fs (loop2): 1 truncate cleaned up [ 177.614389][ T8125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.812618][ T8125] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 177.856121][ T8125] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 177.981299][ T8137] loop0: detected capacity change from 0 to 4096 [ 177.999348][ T8137] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 178.037826][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.044388][ T8138] loop3: detected capacity change from 0 to 8192 [ 178.057314][ T8137] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 178.074986][ T8137] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 178.161532][ T8137] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 178.209344][ T8137] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 178.273899][ T8137] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 178.313666][ T8137] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 178.373389][ T8137] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 178.420460][ T8137] ntfs: volume version 3.1. [ 178.609705][ T8140] loop1: detected capacity change from 0 to 32768 [ 179.588372][ T8151] loop2: detected capacity change from 0 to 32768 [ 179.627739][ T8160] loop1: detected capacity change from 0 to 4096 [ 179.691211][ T8151] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.731504][ T8160] ntfs: volume version 3.1. [ 179.812510][ T8151] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 179.918349][ T8151] XFS (loop2): Starting recovery (logdev: internal) [ 180.009262][ T8151] XFS (loop2): Ending recovery (logdev: internal) [ 180.099241][ T8151] XFS (loop2): Quotacheck needed: Please wait. [ 180.172235][ T8151] XFS (loop2): Quotacheck: Done. [ 180.215952][ T8178] loop1: detected capacity change from 0 to 8192 [ 180.428245][ T5791] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.859096][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.919533][ T8191] loop0: detected capacity change from 0 to 256 [ 180.939005][ T8191] exfat: Deprecated parameter 'namecase' [ 180.967110][ T8191] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 181.026480][ T8191] process 'syz.0.952' launched './file0' with NULL argv: empty string added [ 181.077260][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.094240][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.135987][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.155524][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.167046][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.217112][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.240602][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.258984][ T8] usb 4-1: Product: syz [ 181.263216][ T8] usb 4-1: Manufacturer: syz [ 181.345922][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 181.361757][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 181.374942][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 181.390554][ T8199] loop0: detected capacity change from 0 to 1024 [ 181.403660][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 181.450601][ T8199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.491062][ T8199] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.501480][ T8205] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 181.636373][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.645779][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 181.848036][ T5780] usb 4-1: USB disconnect, device number 7 [ 182.178292][ T8219] loop0: detected capacity change from 0 to 256 [ 182.226559][ T8209] loop2: detected capacity change from 0 to 32768 [ 182.259147][ T8219] FAT-fs (loop0): Directory bread(block 64) failed [ 182.274506][ T8219] FAT-fs (loop0): Directory bread(block 65) failed [ 182.306154][ T8219] FAT-fs (loop0): Directory bread(block 66) failed [ 182.328949][ T8219] FAT-fs (loop0): Directory bread(block 67) failed [ 182.339321][ T8219] FAT-fs (loop0): Directory bread(block 68) failed [ 182.361684][ T8219] FAT-fs (loop0): Directory bread(block 69) failed [ 182.386822][ T8219] FAT-fs (loop0): Directory bread(block 70) failed [ 182.413902][ T8219] FAT-fs (loop0): Directory bread(block 71) failed [ 182.439027][ T8219] FAT-fs (loop0): Directory bread(block 72) failed [ 182.470374][ T8219] FAT-fs (loop0): Directory bread(block 73) failed [ 182.609730][ T8219] syz.0.954: attempt to access beyond end of device [ 182.609730][ T8219] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 182.676342][ T8219] syz.0.954: attempt to access beyond end of device [ 182.676342][ T8219] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 182.711209][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 182.711226][ T27] audit: type=1800 audit(1757451183.972:35): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.954" name="file1" dev="loop0" ino=1048693 res=0 errno=0 [ 183.049559][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.965'. [ 183.136730][ T8242] loop3: detected capacity change from 0 to 128 [ 183.229744][ T8242] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 183.357790][ T5788] sysv_free_block: flc_count > flc_size [ 183.373313][ T5788] sysv_free_block: flc_count > flc_size [ 183.398863][ T5788] sysv_free_block: flc_count > flc_size [ 183.410676][ T5788] sysv_free_block: flc_count > flc_size [ 183.421800][ T5788] sysv_free_block: flc_count > flc_size [ 183.435915][ T5788] sysv_free_block: flc_count > flc_size [ 183.446154][ T5788] sysv_free_block: flc_count > flc_size [ 183.455438][ T5788] sysv_free_block: flc_count > flc_size [ 183.465633][ T5788] sysv_free_block: flc_count > flc_size [ 183.475834][ T5788] sysv_free_block: flc_count > flc_size [ 183.495356][ T5788] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 183.508643][ T8253] loop2: detected capacity change from 0 to 1024 [ 183.605608][ T8253] hfsplus: bad catalog entry type [ 183.707412][ T11] hfsplus: b-tree write err: -5, ino 4 [ 184.264483][ T8280] loop0: detected capacity change from 0 to 512 [ 184.327073][ T8280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.367736][ T8280] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.375664][ T27] audit: type=1326 audit(1757451185.622:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.499711][ T27] audit: type=1326 audit(1757451185.662:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.533821][ T27] audit: type=1326 audit(1757451185.682:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.574030][ T27] audit: type=1326 audit(1757451185.682:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.608698][ T27] audit: type=1326 audit(1757451185.712:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.609097][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.644146][ T27] audit: type=1326 audit(1757451185.712:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.674659][ T27] audit: type=1326 audit(1757451185.712:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.760244][ T27] audit: type=1326 audit(1757451185.712:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 184.859850][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 184.989225][ T8300] vivid-000: disconnect [ 185.016066][ T8299] vivid-000: reconnect [ 185.238694][ T8305] tipc: Started in network mode [ 185.252984][ T8305] tipc: Node identity 7, cluster identity 4711 [ 185.262404][ T8305] tipc: Node number set to 7 [ 185.268236][ T8305] tipc: Cannot configure node identity twice [ 185.428602][ T8312] loop0: detected capacity change from 0 to 64 [ 185.684621][ T8320] loop2: detected capacity change from 0 to 1764 [ 185.917690][ T8327] [U] Б  [ 186.205722][ T8335] syz.0.1011[8335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.205998][ T8335] syz.0.1011[8335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.219196][ T6688] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.293641][ T8318] loop3: detected capacity change from 0 to 32768 [ 186.327882][ T8318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1002 (8318) [ 186.381646][ T8318] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.406828][ T8318] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 186.437273][ T8318] BTRFS info (device loop3): setting nodatacow, compression disabled [ 186.461848][ T6688] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 186.482736][ T6688] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 186.491926][ T8318] BTRFS info (device loop3): setting datasum, datacow enabled [ 186.512230][ T8318] BTRFS info (device loop3): force zlib compression, level 3 [ 186.519811][ T6688] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 186.538894][ T8318] BTRFS info (device loop3): using free space tree [ 186.545632][ T6688] usb 2-1: config 220 has no interface number 2 [ 186.566760][ T6688] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 186.598905][ T6688] usb 2-1: config 220 interface 0 has no altsetting 0 [ 186.614708][ T6688] usb 2-1: config 220 interface 76 has no altsetting 0 [ 186.629801][ T6688] usb 2-1: config 220 interface 1 has no altsetting 0 [ 186.663929][ T6688] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 186.688901][ T6688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.698630][ T6688] usb 2-1: Product: syz [ 186.703606][ T6688] usb 2-1: Manufacturer: syz [ 186.708327][ T6688] usb 2-1: SerialNumber: syz [ 186.760350][ T8318] BTRFS info (device loop3): enabling ssd optimizations [ 186.767372][ T8318] BTRFS info (device loop3): auto enabling async discard [ 186.999445][ T6688] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 187.029066][ T6688] usb 2-1: No valid video chain found. [ 187.034658][ T6688] usb 2-1: selecting invalid altsetting 0 [ 187.092819][ T6688] usb 2-1: selecting invalid altsetting 0 [ 187.098629][ T6688] usbtest: probe of 2-1:220.1 failed with error -22 [ 187.116150][ T6688] usb 2-1: USB disconnect, device number 11 [ 187.195781][ T27] audit: type=1326 audit(1757451188.452:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 187.225304][ T5788] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.477337][ T8373] loop0: detected capacity change from 0 to 512 [ 187.486284][ T6008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (6008) [ 187.590775][ T8373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.750617][ T8373] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 12: comm syz.0.1022: bad entry in directory: inode out of bounds - offset=60, inode=63, rec_len=16, size=2048 fake=0 [ 187.806869][ T8383] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 12: comm syz.0.1022: bad entry in directory: inode out of bounds - offset=60, inode=63, rec_len=16, size=2048 fake=0 [ 188.005244][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.472815][ T8382] loop2: detected capacity change from 0 to 32768 [ 188.546451][ T8382] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 188.640942][ T8382] XFS (loop2): Ending clean mount [ 188.725391][ T8393] loop0: detected capacity change from 0 to 32768 [ 188.744460][ T8393] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1035 (8393) [ 188.863299][ T8393] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.895844][ T5791] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 188.906786][ T8393] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 188.945706][ T8393] BTRFS info (device loop0): enabling auto defrag [ 188.986250][ T8393] BTRFS info (device loop0): max_inline at 0 [ 188.996012][ T8393] BTRFS info (device loop0): force clearing of disk cache [ 189.049482][ T8393] BTRFS info (device loop0): turning on sync discard [ 189.056628][ T8393] BTRFS info (device loop0): using free space tree [ 189.308938][ T8393] BTRFS info (device loop0): enabling ssd optimizations [ 189.398682][ T8393] BTRFS info (device loop0): rebuilding free space tree [ 189.754596][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 189.768184][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 189.784007][ T5794] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.808986][ T8441] netlink: 'syz.3.1039': attribute type 14 has an invalid length. [ 189.816869][ T8441] netlink: 'syz.3.1039': attribute type 12 has an invalid length. [ 189.937375][ T6008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (6008) [ 190.129859][ T8448] [U] Б  [ 190.328698][ T8461] loop3: detected capacity change from 0 to 512 [ 190.449125][ T8461] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.1048: invalid block [ 190.476834][ T8461] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1048: invalid indirect mapped block 10 (level 1) [ 190.496658][ T8461] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1048: invalid indirect mapped block 8 (level 1) [ 190.511545][ T8461] EXT4-fs (loop3): 1 truncate cleaned up [ 190.551668][ T8461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.655411][ T8469] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 190.688322][ T8469] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 190.706414][ T8469] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 190.715033][ T8469] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 190.721790][ T8469] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 190.731259][ T8469] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 190.734330][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.749402][ T8469] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 191.074974][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 191.074990][ T27] audit: type=1326 audit(1757451192.332:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 191.121281][ T6688] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 191.139179][ T27] audit: type=1326 audit(1757451192.332:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 191.173782][ T27] audit: type=1326 audit(1757451192.422:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 191.197127][ T27] audit: type=1326 audit(1757451192.422:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 191.237083][ T27] audit: type=1326 audit(1757451192.422:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 191.261487][ T8482] netlink: zone id is out of range [ 191.268386][ T27] audit: type=1326 audit(1757451192.422:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 191.291421][ T27] audit: type=1326 audit(1757451192.422:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 191.349342][ T6688] usb 1-1: Using ep0 maxpacket: 8 [ 191.373115][ T6688] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 191.398387][ T6688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.433616][ T6688] pvrusb2: Hardware description: Terratec Grabster AV400 [ 191.472648][ T6688] pvrusb2: ********** [ 191.476703][ T6688] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 191.500458][ T8488] Bluetooth: MGMT ver 1.22 [ 191.517234][ T6688] pvrusb2: Important functionality might not be entirely working. [ 191.538869][ T6688] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 191.561211][ T6688] pvrusb2: ********** [ 191.634814][ T2319] pvrusb2: Invalid write control endpoint [ 191.649092][ T6688] usb 1-1: USB disconnect, device number 9 [ 191.863602][ T2319] pvrusb2: Invalid write control endpoint [ 191.885052][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 191.903775][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 191.919147][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 191.929867][ T2319] pvrusb2: Device being rendered inoperable [ 191.938711][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 191.956201][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 191.963229][ T8503] loop2: detected capacity change from 0 to 1764 [ 191.988728][ T2319] pvrusb2: Attached sub-driver cx25840 [ 192.000711][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 192.014273][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 192.040946][ T8503] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.587056][ T8502] loop3: detected capacity change from 0 to 32768 [ 192.634604][ T8502] [ 192.634604][ T8502] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.634604][ T8502] [ 192.839276][ T48] ERROR: (device loop3): diWrite: ixpxd invalid [ 192.839276][ T48] [ 192.873771][ T48] ERROR: (device loop3): txCommit: [ 192.873771][ T48] [ 192.898889][ T48] jfs_write_inode: jfs_commit_inode failed! [ 192.910517][ T5788] [ 192.910517][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.910517][ T5788] [ 192.925433][ T8505] loop2: detected capacity change from 0 to 32768 [ 192.934843][ T5788] [ 192.934843][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.934843][ T5788] [ 192.996770][ T8513] loop1: detected capacity change from 0 to 2048 [ 193.051204][ T8505] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.143509][ T8521] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.183903][ T8505] XFS (loop2): Ending clean mount [ 193.228483][ T8505] XFS (loop2): Quotacheck needed: Please wait. [ 193.369415][ T8505] XFS (loop2): Quotacheck: Done. [ 193.503661][ T5791] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.784202][ T8539] loop1: detected capacity change from 0 to 1024 [ 193.823082][ T8539] EXT4-fs: inline encryption not supported [ 193.842292][ T8539] EXT4-fs: Ignoring removed i_version option [ 193.901477][ T8539] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.041801][ T8539] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #3: block 1: comm syz.1.1080: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.134647][ T8539] Quota error (device loop1): write_blk: dquota write failed [ 194.193585][ T8539] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 194.231730][ T8539] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1080: Failed to acquire dquot type 0 [ 194.271994][ T8539] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.1080: Freeing blocks not in datazone - block = 0, count = 4096 [ 194.299266][ T5830] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.351852][ T8539] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1080: Invalid inode bitmap blk 0 in block_group 0 [ 194.382029][ T11] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.399560][ T8539] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 194.430278][ T8539] EXT4-fs (loop1): 1 orphan inode deleted [ 194.437525][ T8539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.459234][ T8561] loop3: detected capacity change from 0 to 256 [ 194.460255][ T11] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 194.502390][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:0: Failed to release dquot type 0 [ 194.529266][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.535729][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.554032][ T5830] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 194.567971][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.598942][ T5830] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 194.602733][ T8561] FAT-fs (loop3): Directory bread(block 64) failed [ 194.608023][ T5830] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 194.608049][ T5830] usb 3-1: Manufacturer: syz [ 194.610528][ T5830] usb 3-1: config 0 descriptor?? [ 194.648460][ T8539] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm syz.1.1080: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.672346][ T8561] FAT-fs (loop3): Directory bread(block 65) failed [ 194.682865][ T8561] FAT-fs (loop3): Directory bread(block 66) failed [ 194.697265][ T8539] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1080: Failed to acquire dquot type 0 [ 194.714743][ T8561] FAT-fs (loop3): Directory bread(block 67) failed [ 194.724308][ T8561] FAT-fs (loop3): Directory bread(block 68) failed [ 194.749049][ T8561] FAT-fs (loop3): Directory bread(block 69) failed [ 194.755754][ T8561] FAT-fs (loop3): Directory bread(block 70) failed [ 194.779033][ T8561] FAT-fs (loop3): Directory bread(block 71) failed [ 194.791610][ T8561] FAT-fs (loop3): Directory bread(block 72) failed [ 194.804662][ T8561] FAT-fs (loop3): Directory bread(block 73) failed [ 194.805916][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.839560][ T5830] rc_core: IR keymap rc-hauppauge not found [ 194.845520][ T5830] Registered IR keymap rc-empty [ 194.867798][ T5830] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 194.902058][ T5830] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 194.982270][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 195.314887][ C1] igorplugusb 3-1:0.0: receive overflow, at least 8 lost [ 195.487152][ T8559] loop0: detected capacity change from 0 to 32768 [ 195.506593][ T8559] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 195.524625][ T5780] usb 3-1: USB disconnect, device number 9 [ 195.607051][ T6008] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 195.688887][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 195.696498][ T6548] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.888900][ T6548] usb 2-1: Using ep0 maxpacket: 8 [ 195.896881][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 195.910930][ T6548] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 195.930406][ T8] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.934140][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 195.945950][ T6548] usb 2-1: config 2 has no interface number 0 [ 195.966343][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.975484][ T6548] usb 2-1: config 2 interface 31 has no altsetting 0 [ 195.982352][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 195.993848][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.004605][ T6548] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 196.015463][ T6548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.023601][ T6548] usb 2-1: Product: syz [ 196.030066][ T8] usb 4-1: config 0 descriptor?? [ 196.035326][ T6548] usb 2-1: Manufacturer: syz [ 196.054657][ T6548] usb 2-1: SerialNumber: syz [ 196.395478][ T8590] loop2: detected capacity change from 0 to 4096 [ 196.419030][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 196.426843][ T8590] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 196.465716][ T8] vrc2 0003:07C0:1125.000F: fixing up VRC-2 report descriptor [ 196.508350][ T8590] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 196.517034][ T8] input: HID 07c0:1125 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:07C0:1125.000F/input/input11 [ 196.657897][ T8] vrc2 0003:07C0:1125.000F: input,hidraw0: USB HID v0.02 Joystick [HID 07c0:1125] on usb-dummy_hcd.3-1/input0 [ 196.724342][ T6548] ch9200: probe of 2-1:2.31 failed with error -22 [ 196.735705][ T8] usb 4-1: USB disconnect, device number 8 [ 196.790150][ T6548] usb 2-1: USB disconnect, device number 12 [ 196.988170][ T8596] fido_id[8596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.282797][ T8605] loop0: detected capacity change from 0 to 1024 [ 197.294080][ T8605] EXT4-fs: Ignoring removed bh option [ 197.304094][ T8605] EXT4-fs: inline encryption not supported [ 197.323761][ T8605] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.368908][ T8605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 197.395457][ T8605] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.1109: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.504738][ T8605] __quota_error: 2 callbacks suppressed [ 197.504757][ T8605] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 197.538979][ T8605] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.1109: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.586774][ T8605] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 197.603708][ T8605] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.1109: Failed to acquire dquot type 0 [ 197.639224][ T8605] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 197.666779][ T8601] loop2: detected capacity change from 0 to 32768 [ 197.679880][ T8605] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.1109: mark_inode_dirty error [ 197.723829][ T8605] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 197.736403][ T8605] EXT4-fs (loop0): 1 orphan inode deleted [ 197.749304][ T58] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.788114][ T8605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.807046][ T58] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 197.819152][ T8601] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.832098][ T58] EXT4-fs error (device loop0): ext4_release_dquot:6976: comm kworker/u4:4: Failed to release dquot type 0 [ 197.985329][ T8601] XFS (loop2): Ending clean mount [ 198.020053][ T8608] loop1: detected capacity change from 0 to 32768 [ 198.029704][ T8605] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 198.076323][ T8625] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 198.107544][ T8608] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 198.125571][ T8625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 198.143721][ T8625] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.1109: lblock 0 mapped to illegal pblock 48 (length 1) [ 198.174579][ T5791] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.176856][ T8625] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 198.196713][ T8625] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 198.218819][ T27] audit: type=1800 audit(1757451199.472:58): pid=8608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1110" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 198.260150][ T6548] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 198.331900][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.458984][ T6548] usb 4-1: Using ep0 maxpacket: 8 [ 198.472877][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 198.487898][ T6548] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 198.508503][ T6548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.538924][ T6548] usb 4-1: Product: syz [ 198.543162][ T6548] usb 4-1: Manufacturer: syz [ 198.562727][ T6548] usb 4-1: SerialNumber: syz [ 198.590260][ T6548] usb 4-1: config 0 descriptor?? [ 198.608278][ T6548] gspca_main: sq905-2.14.0 probing 2770:9120 [ 199.273032][ T6548] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 199.298359][ T6548] sq905: probe of 4-1:0.0 failed with error -71 [ 199.311505][ T6548] usb 4-1: USB disconnect, device number 9 [ 199.389246][ T5780] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 199.525114][ T8637] loop1: detected capacity change from 0 to 32768 [ 199.544686][ T8637] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1118 (8637) [ 199.582169][ T8637] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 199.601477][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 199.614105][ T8637] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 199.617826][ T5780] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 199.679047][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.688938][ T8637] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 199.709981][ T8637] BTRFS info (device loop1): use lzo compression, level 0 [ 199.710673][ T5780] usb 1-1: config 0 descriptor?? [ 199.717149][ T8637] BTRFS info (device loop1): turning on async discard [ 199.717170][ T8637] BTRFS info (device loop1): using free space tree [ 199.737801][ T8642] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 199.859172][ T8637] BTRFS info (device loop1): enabling ssd optimizations [ 199.996969][ T8670] loop2: detected capacity change from 0 to 128 [ 200.053536][ T8672] loop3: detected capacity change from 0 to 1024 [ 200.062149][ T8672] EXT4-fs: Ignoring removed nobh option [ 200.067924][ T8672] EXT4-fs: Ignoring removed bh option [ 200.081569][ T8672] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.087942][ T8670] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.126578][ T27] audit: type=1800 audit(1757451201.372:59): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1118" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 200.127671][ T8670] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.208329][ T5780] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 200.219128][ T5780] elan 0003:04F3:0755.0010: item fetching failed at offset 3/5 [ 200.231935][ T5780] elan 0003:04F3:0755.0010: Hid Parse failed [ 200.238284][ T5780] elan: probe of 0003:04F3:0755.0010 failed with error -22 [ 200.250812][ T8672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.291153][ T5791] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.542598][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.557972][ T28] usb 1-1: USB disconnect, device number 10 [ 200.595181][ T5789] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 201.146637][ T8688] loop3: detected capacity change from 0 to 2048 [ 201.187966][ T8690] loop1: detected capacity change from 0 to 512 [ 201.216870][ T8688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.252426][ T8688] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.436913][ T8690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.476370][ T8690] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.634858][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.708251][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 201.709097][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 201.714461][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 201.840546][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.921195][ T8706] loop2: detected capacity change from 0 to 1024 [ 202.040327][ T8706] hfsplus: bad catalog entry type [ 202.157473][ T2986] hfsplus: b-tree write err: -5, ino 4 [ 202.277107][ T8698] loop0: detected capacity change from 0 to 32768 [ 202.356026][ T8698] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.477801][ T8698] XFS (loop0): Ending clean mount [ 202.509131][ T8698] XFS (loop0): Quotacheck needed: Please wait. [ 202.569247][ T5780] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.583961][ T8698] XFS (loop0): Quotacheck: Done. [ 202.674877][ T5794] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.778605][ T5780] usb 3-1: Using ep0 maxpacket: 16 [ 202.804305][ T5780] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 202.832064][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.848956][ T5780] usb 3-1: Product: syz [ 202.868857][ T5780] usb 3-1: Manufacturer: syz [ 202.878457][ T5780] usb 3-1: SerialNumber: syz [ 202.903418][ T5780] r8152-cfgselector 3-1: config 0 descriptor?? [ 202.988496][ T8721] loop3: detected capacity change from 0 to 32768 [ 202.996292][ T8721] XFS: ikeep mount option is deprecated. [ 203.033551][ T8721] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.138348][ T5780] r8152-cfgselector 3-1: Needed 1 retries to read version [ 203.147389][ T5780] r8152-cfgselector 3-1: Unknown version 0x0000 [ 203.154339][ T5780] r8152-cfgselector 3-1: bad CDC descriptors [ 203.273666][ T8721] XFS (loop3): Ending clean mount [ 203.358949][ T5780] r8152-cfgselector 3-1: Unknown version 0x0000 [ 203.392974][ T5780] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 203.439730][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.679266][ T28] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 203.715067][ T8748] loop1: detected capacity change from 0 to 1024 [ 203.813604][ T8750] loop3: detected capacity change from 0 to 1024 [ 203.828491][ T8750] EXT4-fs: inline encryption not supported [ 203.835907][ T8750] EXT4-fs: Ignoring removed i_version option [ 203.843031][ T2986] hfsplus: b-tree write err: -5, ino 4 [ 203.855762][ T8750] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.880129][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 203.911486][ T28] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.956962][ T8750] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #3: block 1: comm syz.3.1152: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.981094][ T28] usb 1-1: config 0 has no interface number 0 [ 204.027488][ T8750] Quota error (device loop3): write_blk: dquota write failed [ 204.038487][ T28] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 204.047935][ T8750] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 204.048028][ T8750] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1152: Failed to acquire dquot type 0 [ 204.082493][ T8750] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.1152: Freeing blocks not in datazone - block = 0, count = 4096 [ 204.106904][ T8750] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1152: Invalid inode bitmap blk 0 in block_group 0 [ 204.115474][ T8757] loop1: detected capacity change from 0 to 256 [ 204.126124][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.135878][ T8750] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 204.139249][ T28] usb 1-1: Product: syz [ 204.158974][ T11] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.161312][ T28] usb 1-1: Manufacturer: syz [ 204.184653][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 204.185596][ T8750] EXT4-fs (loop3): 1 orphan inode deleted [ 204.194066][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:0: Failed to release dquot type 0 [ 204.207288][ T8757] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 204.224949][ T8750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.231390][ T28] usb 1-1: SerialNumber: syz [ 204.273981][ T28] usb 1-1: config 0 descriptor?? [ 204.299838][ T28] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 204.333444][ T28] usb 1-1: selecting invalid altsetting 1 [ 204.352029][ T8750] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm syz.3.1152: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.353461][ T28] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 204.374240][ T5830] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 204.413181][ T8750] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1 [ 204.415579][ T28] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.434062][ T28] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 204.451539][ T28] usb 1-1: media controller created [ 204.453507][ T8750] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 60928 [ 204.479372][ T8750] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1152: Failed to acquire dquot type 0 [ 204.504301][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.565920][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.581662][ T28] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 204.599266][ T5830] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.621001][ T28] zl10353_read_register: readreg error (reg=127, ret==-71) [ 204.628903][ T5830] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.659509][ T28] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 204.666740][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 204.688557][ T5830] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 204.713870][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.776023][ T5830] usb 3-1: config 0 descriptor?? [ 204.860565][ T28] usb 1-1: USB disconnect, device number 11 [ 205.237024][ T5830] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 205.268836][ T5830] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 205.301000][ T5830] hid-steam 0003:28DE:1102.0011: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 205.310390][ T8772] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 205.324846][ T8773] loop1: detected capacity change from 0 to 1024 [ 205.410035][ T5830] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected [ 205.457451][ T8773] hfsplus: bad catalog entry type [ 205.470656][ T5830] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0011/input/input12 [ 205.598496][ T5830] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 205.667644][ T5830] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 205.684507][ T3476] hfsplus: b-tree write err: -5, ino 4 [ 205.741359][ T5830] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 205.833120][ T5830] usb 3-1: USB disconnect, device number 11 [ 205.955869][ T5830] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected [ 206.036944][ T8780] fido_id[8780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 206.074305][ T8769] loop3: detected capacity change from 0 to 32768 [ 206.123059][ T8769] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 206.173395][ T8769] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 206.338064][ T8775] ceph: No mds server is up or the cluster is laggy [ 206.379011][ T27] audit: type=1800 audit(1757451207.632:60): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1164" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 206.539379][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 206.708106][ T8794] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 206.983036][ T8800] loop3: detected capacity change from 0 to 1024 [ 207.005026][ T8800] EXT4-fs: Ignoring removed bh option [ 207.019421][ T8800] EXT4-fs: inline encryption not supported [ 207.041990][ T8800] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 207.142515][ T8800] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 207.231764][ T8800] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.1177: lblock 2 mapped to illegal pblock 2 (length 1) [ 207.301135][ T8813] loop0: detected capacity change from 0 to 1024 [ 207.309667][ T8800] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 207.323787][ T8800] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.1177: lblock 0 mapped to illegal pblock 48 (length 1) [ 207.375087][ T8800] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 207.391037][ T8813] hfsplus: bad catalog entry type [ 207.408890][ T8800] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1177: Failed to acquire dquot type 0 [ 207.439610][ T8800] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 207.479895][ T8800] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.1177: mark_inode_dirty error [ 207.530362][ T2957] hfsplus: b-tree write err: -5, ino 4 [ 207.536353][ T8800] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 207.608986][ T8800] EXT4-fs (loop3): 1 orphan inode deleted [ 207.616112][ T8800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.652665][ T42] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 207.735014][ T42] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 207.769680][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:2: Failed to release dquot type 0 [ 207.856568][ T8800] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 207.880895][ T8824] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 207.899504][ T8824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 207.907975][ T8824] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.1177: lblock 0 mapped to illegal pblock 48 (length 1) [ 207.926117][ T8824] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 207.938981][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 207.957236][ T8824] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 208.021801][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.372137][ T8819] loop2: detected capacity change from 0 to 32768 [ 208.393341][ T8819] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1184 (8819) [ 208.448693][ T8837] loop1: detected capacity change from 0 to 1024 [ 208.466915][ T8819] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 208.501498][ T8819] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 208.541277][ T8819] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 208.588906][ T8819] BTRFS info (device loop2): use lzo compression, level 0 [ 208.596117][ T8819] BTRFS info (device loop2): turning on async discard [ 208.633745][ T8819] BTRFS info (device loop2): using free space tree [ 208.848728][ T8819] BTRFS info (device loop2): enabling ssd optimizations [ 209.006119][ T8864] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1198'. [ 209.087034][ T27] audit: type=1800 audit(1757451210.342:61): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1184" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 209.924657][ T5791] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 210.103210][ T966] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.211594][ T8889] bridge0: entered promiscuous mode [ 210.226328][ T8891] loop0: detected capacity change from 0 to 64 [ 210.273486][ T8891] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 210.309054][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 210.326910][ T966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.374176][ T966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.405255][ T966] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.439483][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.447629][ T966] usb 4-1: Product: syz [ 210.483222][ T966] usb 4-1: Manufacturer: syz [ 210.502601][ T966] usb 4-1: SerialNumber: syz [ 210.516253][ T8893] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1213'. [ 210.940327][ T966] usb 4-1: skipping empty audio interface (v1) [ 211.077757][ T966] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 211.097479][ T8916] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1221'. [ 211.129994][ T966] usb 4-1: USB disconnect, device number 10 [ 211.195857][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.727476][ T966] IPVS: starting estimator thread 0... [ 211.734280][ T8934] IPVS: ip_vs_add_dest(): server weight less than zero [ 211.859164][ T8937] IPVS: using max 16 ests per chain, 38400 per kthread [ 211.866469][ T8939] tipc: Started in network mode [ 211.885522][ T8939] tipc: Node identity ac14142a, cluster identity 4711 [ 211.917842][ T8939] tipc: Enabled bearer , priority 10 [ 211.947305][ T8936] loop2: detected capacity change from 0 to 8192 [ 211.985482][ T8936] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.018633][ T8936] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 212.059930][ T8936] REISERFS (device loop2): using ordered data mode [ 212.066512][ T8936] reiserfs: using flush barriers [ 212.088897][ T8936] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 212.107176][ T8936] REISERFS (device loop2): checking transaction log (loop2) [ 212.117478][ T8936] REISERFS (device loop2): Using r5 hash to sort names [ 212.125024][ T8936] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 212.140039][ T8936] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 212.176677][ T8936] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd [ 212.236511][ T8952] loop0: detected capacity change from 0 to 256 [ 212.587992][ T8958] ax25_connect(): syz.0.1240 uses autobind, please contact jreuter@yaina.de [ 212.713632][ T8960] sp0: Synchronizing with TNC [ 212.833078][ T8967] loop0: detected capacity change from 0 to 16 [ 213.031428][ T6548] tipc: Node number set to 2886997034 [ 213.379479][ T8962] loop2: detected capacity change from 0 to 32768 [ 213.623458][ T8980] loop1: detected capacity change from 0 to 4096 [ 213.700895][ T8980] ntfs: volume version 3.1. [ 213.793098][ T8982] loop3: detected capacity change from 0 to 136 [ 213.876789][ T8982] Symlink component flag not implemented [ 213.919716][ T8982] Symlink component flag not implemented (108) [ 214.226093][ T8976] loop0: detected capacity change from 0 to 40427 [ 214.256316][ T8976] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 214.294550][ T8976] F2FS-fs (loop0): invalid crc value [ 214.323451][ T8976] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.330269][ T8986] loop3: detected capacity change from 0 to 4096 [ 214.426226][ T8989] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.507811][ T8976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.629025][ T8986] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 214.672075][ T8986] Remounting filesystem read-only [ 214.723700][ T5794] syz-executor: attempt to access beyond end of device [ 214.723700][ T5794] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.766034][ T5794] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 214.899017][ T5105] Bluetooth: hci3: command tx timeout [ 215.278098][ T9008] loop3: detected capacity change from 0 to 1024 [ 215.463479][ T48] hfsplus: b-tree write err: -5, ino 4 [ 216.119976][ T9033] loop1: detected capacity change from 0 to 256 [ 216.206497][ T9033] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 216.240996][ T9033] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 216.730011][ T9023] loop2: detected capacity change from 0 to 32768 [ 216.786986][ T9023] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.811131][ T6688] kernel write not supported for file /amidi2 (pid: 6688 comm: kworker/0:5) [ 216.867483][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 216.895487][ T9023] XFS (loop2): Ending clean mount [ 216.948824][ T9023] XFS (loop2): Quotacheck needed: Please wait. [ 217.057445][ T9023] XFS (loop2): Quotacheck: Done. [ 217.368606][ T5791] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.408414][ T9068] loop3: detected capacity change from 0 to 1024 [ 217.495628][ T9044] loop1: detected capacity change from 0 to 32768 [ 218.297742][ T9081] loop1: detected capacity change from 0 to 4096 [ 218.369345][ T9091] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.449761][ T27] audit: type=1800 audit(1757451219.692:62): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1291" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 218.470852][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.402669][ T9093] loop0: detected capacity change from 0 to 32768 [ 219.481296][ T9113] loop3: detected capacity change from 0 to 2048 [ 219.553367][ T9113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.589979][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 220.079187][ T27] audit: type=1326 audit(1757451221.332:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 220.101729][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.208951][ T27] audit: type=1326 audit(1757451221.372:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 220.298973][ T27] audit: type=1326 audit(1757451221.382:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 220.366841][ T27] audit: type=1326 audit(1757451221.382:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbe238ec23 code=0x7ffc0000 [ 220.414573][ T27] audit: type=1326 audit(1757451221.502:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcbe238d69f code=0x7ffc0000 [ 220.415222][ T9133] loop2: detected capacity change from 0 to 8192 [ 220.478561][ T27] audit: type=1326 audit(1757451221.662:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcbe238ec77 code=0x7ffc0000 [ 220.534920][ T27] audit: type=1326 audit(1757451221.672:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbe238d550 code=0x7ffc0000 [ 220.579907][ T27] audit: type=1326 audit(1757451221.672:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbe238e7eb code=0x7ffc0000 [ 220.607687][ T27] audit: type=1326 audit(1757451221.712:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcbe238d84a code=0x7ffc0000 [ 220.840684][ T5780] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.029117][ T5780] usb 2-1: Using ep0 maxpacket: 32 [ 221.045268][ T5780] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 221.065304][ T5780] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.082104][ T5780] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 221.097331][ T5780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.104629][ T5780] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 221.124429][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.144539][ T5780] usb 2-1: config 0 descriptor?? [ 221.605497][ T5780] zeroplus 0003:0C12:0030.0013: item fetching failed at offset 5/7 [ 221.620570][ T5780] zeroplus 0003:0C12:0030.0013: parse failed [ 221.636813][ T5780] zeroplus: probe of 0003:0C12:0030.0013 failed with error -22 [ 221.807574][ T5780] usb 2-1: USB disconnect, device number 13 [ 222.218215][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 222.229366][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 222.238620][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 222.245604][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 222.393129][ T9174] loop2: detected capacity change from 0 to 32768 [ 222.436206][ T9174] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.489621][ T9194] loop1: detected capacity change from 0 to 512 [ 222.511133][ T966] libceph: connect (1)[c::]:6789 error -101 [ 222.522968][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 222.558694][ T9174] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x1802 dinode [ 222.561182][ T9194] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1339: corrupted inode contents [ 222.586011][ T9174] XFS (loop2): Unmount and run xfs_repair [ 222.598149][ T9194] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.1339: mark_inode_dirty error [ 222.609943][ T9174] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 222.612624][ T9194] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1339: corrupted inode contents [ 222.617392][ T9174] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 222.639082][ T9174] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.649476][ T9174] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 222.659050][ T9174] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 222.668066][ T9174] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.677064][ T9174] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.686222][ T9174] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 222.705466][ T9194] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1339: mark_inode_dirty error [ 222.718356][ T9174] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 222.727690][ T9174] XFS (loop2): failed to read RT inodes [ 222.745052][ T9194] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1339: corrupted inode contents [ 222.778035][ T9178] loop0: detected capacity change from 0 to 40427 [ 222.813819][ T9194] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 222.844907][ T9194] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1339: corrupted inode contents [ 222.875027][ T9194] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.1339: mark_inode_dirty error [ 222.894848][ T9178] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.927226][ T9194] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 222.958368][ T9194] EXT4-fs (loop1): 1 truncate cleaned up [ 222.970139][ T42] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:2: Failed to release dquot type 1 [ 222.974878][ T9194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.034069][ T9182] ceph: No mds server is up or the cluster is laggy [ 223.052790][ T9178] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 223.063384][ T966] libceph: connect (1)[c::]:6789 error -101 [ 223.078424][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 223.086893][ T9194] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.186614][ T9178] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.323610][ T9194] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 223.500188][ T5794] syz-executor: attempt to access beyond end of device [ 223.500188][ T5794] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.540446][ T5794] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.570052][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.302242][ T9210] netlink: set zone limit has 8 unknown bytes [ 224.565507][ T9212] loop3: detected capacity change from 0 to 512 [ 224.590546][ T9212] EXT4-fs: Ignoring removed i_version option [ 224.655712][ T9212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.682327][ T9204] loop2: detected capacity change from 0 to 40427 [ 224.734079][ T9204] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 224.774201][ T9204] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 224.783955][ T9208] loop1: detected capacity change from 0 to 32768 [ 224.792074][ T9208] XFS: ikeep mount option is deprecated. [ 224.792118][ T5105] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 224.798536][ T9212] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.831451][ T9204] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 224.859190][ T9204] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 224.897637][ T9208] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 224.909036][ T9204] F2FS-fs (loop2): invalid crc value [ 224.931082][ T9212] EXT4-fs (loop3): resizing filesystem from 128 to 1 blocks [ 225.001127][ T9212] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 225.012738][ T9204] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.020722][ T9208] XFS (loop1): Ending clean mount [ 225.100316][ T9208] XFS (loop1): Quotacheck needed: Please wait. [ 225.239929][ T9208] XFS (loop1): Quotacheck: Done. [ 225.281772][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.299079][ T9204] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 225.316535][ T9204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 225.347904][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 225.347921][ T27] audit: type=1800 audit(1757451226.602:85): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1340" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 225.456664][ T5789] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.733082][ T9234] loop3: detected capacity change from 0 to 4096 [ 225.745997][ T9234] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 225.838517][ T5791] syz-executor: attempt to access beyond end of device [ 225.838517][ T5791] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.869261][ T5791] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 225.904212][ T9234] ntfs: volume version 3.1. [ 225.972600][ T9234] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-ru. You might want to try to use the mount option nls=utf8. [ 226.003265][ T9234] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 226.218114][ T9238] loop0: detected capacity change from 0 to 512 [ 226.309109][ T9238] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 226.336005][ T9238] EXT4-fs (loop0): invalid journal inode [ 226.354052][ T9238] EXT4-fs (loop0): can't get journal size [ 226.395882][ T9238] EXT4-fs (loop0): 1 truncate cleaned up [ 226.489526][ T9238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.594110][ T9244] loop3: detected capacity change from 0 to 2048 [ 226.666820][ T9248] usb usb8: usbfs: process 9248 (syz.2.1350) did not claim interface 4 before use [ 226.681619][ T9249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.690009][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.133860][ T9259] loop0: detected capacity change from 0 to 8 [ 227.240232][ T9259] SQUASHFS error: lzo decompression failed, data probably corrupt [ 227.281836][ T9259] SQUASHFS error: Failed to read block 0x91: -5 [ 227.295626][ T9259] SQUASHFS error: Unable to read metadata cache entry [8f] [ 227.304463][ T9259] SQUASHFS error: Unable to read inode 0x11f [ 227.442704][ T6688] libceph: connect (1)[c::]:6789 error -101 [ 227.449239][ T6688] libceph: mon0 (1)[c::]:6789 connect error [ 227.512655][ T9271] netlink: 'syz.1.1363': attribute type 2 has an invalid length. [ 227.718867][ T9276] 9pnet: Could not find request transport: f [ 227.740897][ T6548] libceph: connect (1)[c::]:6789 error -101 [ 227.750447][ T6548] libceph: mon0 (1)[c::]:6789 connect error [ 228.168843][ T5780] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 228.249171][ T9265] ceph: No mds server is up or the cluster is laggy [ 228.279592][ T6548] libceph: connect (1)[c::]:6789 error -101 [ 228.285708][ T6548] libceph: mon0 (1)[c::]:6789 connect error [ 228.354802][ T9282] loop0: detected capacity change from 0 to 32768 [ 228.361699][ T5780] usb 2-1: Using ep0 maxpacket: 32 [ 228.375243][ T5780] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.408926][ T5780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 228.415736][ T5780] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 228.426408][ T9282] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1368 (9282) [ 228.455755][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.474880][ T9282] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 228.475633][ T5780] usb 2-1: config 0 descriptor?? [ 228.524012][ T9282] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 228.571290][ T9282] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 228.612669][ T9282] BTRFS info (device loop0): use lzo compression, level 0 [ 228.637201][ T9282] BTRFS info (device loop0): turning on async discard [ 228.659966][ T9282] BTRFS info (device loop0): using free space tree [ 228.743564][ T9286] loop3: detected capacity change from 0 to 40427 [ 228.768564][ T9286] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 228.802865][ T9282] BTRFS info (device loop0): enabling ssd optimizations [ 228.842721][ T9286] F2FS-fs (loop3): invalid crc value [ 228.874544][ T9286] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.948634][ T5780] vrc2 0003:07C0:1125.0014: fixing up VRC-2 report descriptor [ 228.996310][ T27] audit: type=1800 audit(1757451230.252:86): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1368" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 228.997137][ T5780] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0014/input/input13 [ 229.136952][ T9286] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.209365][ T5780] vrc2 0003:07C0:1125.0014: input,hidraw0: USB HID v0.02 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 229.243470][ T5780] usb 2-1: USB disconnect, device number 14 [ 229.447535][ T9311] fido_id[9311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 229.485419][ T5788] syz-executor: attempt to access beyond end of device [ 229.485419][ T5788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.501220][ T5788] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.511998][ T5794] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 230.040774][ T9316] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8) [ 230.247751][ T9322] sp0: Synchronizing with TNC [ 230.326474][ T9324] loop1: detected capacity change from 0 to 1024 [ 230.472614][ T9324] hfsplus: bad catalog entry type [ 230.944785][ T9344] netlink: 'syz.1.1389': attribute type 3 has an invalid length. [ 230.955061][ T9344] netlink: 'syz.1.1389': attribute type 1 has an invalid length. [ 230.963748][ T9344] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1389'. [ 231.011179][ T9340] loop2: detected capacity change from 0 to 4096 [ 231.026906][ T9346] loop0: detected capacity change from 0 to 2048 [ 231.033795][ T9340] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 231.056560][ T9340] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 231.105020][ T9340] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 231.159249][ T9340] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.189386][ T9340] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 231.268927][ T9340] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.277883][ T9340] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 231.355392][ T9340] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.393079][ T9340] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 231.437378][ T9340] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.466419][ T9340] ntfs: volume version 3.1. [ 231.648860][ T6548] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 231.817022][ T9361] loop1: detected capacity change from 0 to 4096 [ 231.862883][ T6548] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.879577][ T6548] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.891037][ T9361] ntfs3: loop1: It is recommened to use chkdsk. [ 231.926954][ T6548] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.936304][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 231.973431][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 231.982724][ T6548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 231.998912][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 232.017308][ T6548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 232.039458][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 232.047395][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 232.070367][ T6548] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.091023][ T6548] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.101190][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 232.123303][ T6548] usb 4-1: Product: syz [ 232.128092][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 232.136314][ T6548] usb 4-1: Manufacturer: syz [ 232.158695][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 232.168255][ T6548] cdc_wdm 4-1:1.0: skipping garbage [ 232.183046][ T6548] cdc_wdm 4-1:1.0: skipping garbage [ 232.189624][ T9361] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 232.199754][ T6548] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 232.213488][ T6548] cdc_wdm 4-1:1.0: Unknown control protocol [ 232.425336][ T9369] loop2: detected capacity change from 0 to 1024 [ 232.444667][ T8] usb 4-1: USB disconnect, device number 11 [ 232.500162][ T9369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.813970][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.425418][ T9401] program syz.0.1412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.025761][ T9417] loop2: detected capacity change from 0 to 1024 [ 234.255054][ T11] hfsplus: b-tree write err: -5, ino 4 [ 234.505483][ T9411] loop3: detected capacity change from 0 to 32768 [ 234.538986][ T9411] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1414 (9411) [ 234.602643][ T9411] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 234.634225][ T9411] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 234.662323][ T9411] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 234.682511][ T9410] loop0: detected capacity change from 0 to 32768 [ 234.686232][ T9411] BTRFS info (device loop3): use lzo compression, level 0 [ 234.711883][ T9411] BTRFS info (device loop3): turning on async discard [ 234.739013][ T9411] BTRFS info (device loop3): using free space tree [ 234.814738][ T9410] read_mapping_page failed! [ 234.838050][ T9410] ERROR: (device loop0): txCommit: [ 234.838050][ T9410] [ 234.992372][ T9411] BTRFS info (device loop3): enabling ssd optimizations [ 235.317183][ T9455] loop1: detected capacity change from 0 to 4096 [ 235.364277][ T9455] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 235.461920][ T9455] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 235.656095][ T9455] ntfs3: loop1: ino=1e, "file1" failed to parse mft record [ 235.678891][ T9455] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 235.690339][ T9460] loop0: detected capacity change from 0 to 47 [ 235.759486][ T5788] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 235.775403][ T9460] MINIX-fs: deleted inode referenced: 9 [ 235.819394][ T9460] MINIX-fs: deleted inode referenced: 9 [ 235.974871][ T9462] loop2: detected capacity change from 0 to 2048 [ 236.064763][ T9462] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 236.149090][ T9468] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.516021][ T9473] loop3: detected capacity change from 0 to 2048 [ 236.575805][ T9473] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 236.598910][ T6548] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 236.628922][ T9473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.778899][ T8] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 236.810171][ T6548] usb 2-1: Using ep0 maxpacket: 16 [ 236.817870][ T6548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.834935][ T6548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.858645][ T6548] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.872712][ T6548] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.893260][ T9483] loop3: detected capacity change from 0 to 256 [ 236.916378][ T6548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.948931][ T6548] usb 2-1: config 0 descriptor?? [ 236.991366][ T8] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.995371][ T9483] FAT-fs (loop3): Directory bread(block 64) failed [ 237.033401][ T8] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.038817][ T9483] FAT-fs (loop3): Directory bread(block 65) failed [ 237.057942][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.066369][ T9483] FAT-fs (loop3): Directory bread(block 66) failed [ 237.068879][ T8] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 237.089558][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.092201][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 237.092215][ T27] audit: type=1326 audit(1757451238.352:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.2.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 237.114943][ T8] usb 1-1: config 0 descriptor?? [ 237.132478][ T9483] FAT-fs (loop3): Directory bread(block 67) failed [ 237.155184][ T27] audit: type=1326 audit(1757451238.402:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.2.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 237.158942][ T9483] FAT-fs (loop3): Directory bread(block 68) failed [ 237.177403][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.211664][ T27] audit: type=1326 audit(1757451238.402:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.2.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 237.228828][ T9483] FAT-fs (loop3): Directory bread(block 69) failed [ 237.277316][ T9483] FAT-fs (loop3): Directory bread(block 70) failed [ 237.284545][ T27] audit: type=1326 audit(1757451238.402:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.2.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe238ebe9 code=0x7ffc0000 [ 237.286690][ T9483] FAT-fs (loop3): Directory bread(block 71) failed [ 237.338478][ T9483] FAT-fs (loop3): Directory bread(block 72) failed [ 237.347027][ T9483] FAT-fs (loop3): Directory bread(block 73) failed [ 237.479043][ T6548] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0015/input/input14 [ 237.562877][ T6548] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 237.584826][ T8] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 237.622291][ T8] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 237.653178][ T8] hid-steam 0003:28DE:1102.0016: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 237.726220][ T6548] usb 2-1: USB disconnect, device number 15 [ 237.749951][ T8] hid-steam 0003:28DE:1102.0016: Steam Controller 'XXXXXXXXXX' connected [ 237.774968][ T8] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0016/input/input15 [ 237.804012][ T9488] fido_id[9488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 237.856924][ T8] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 237.893307][ T8] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 237.961158][ T8] hid-steam 0003:28DE:1102.0017: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 238.017474][ T8] usb 1-1: USB disconnect, device number 12 [ 238.122053][ T8] hid-steam 0003:28DE:1102.0016: Steam Controller 'XXXXXXXXXX' disconnected [ 238.218541][ T9493] fido_id[9493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 238.315213][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1449'. [ 238.319230][ T9487] loop2: detected capacity change from 0 to 32768 [ 238.347172][ T9487] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1445 (9487) [ 238.393328][ T9487] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 238.441079][ T9487] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 238.451929][ T9487] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 238.487001][ T9487] BTRFS info (device loop2): use lzo compression, level 0 [ 238.508895][ T9487] BTRFS info (device loop2): turning on async discard [ 238.522626][ T9487] BTRFS info (device loop2): using free space tree [ 238.561863][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 238.673441][ T9487] BTRFS info (device loop2): enabling ssd optimizations [ 238.818235][ T27] audit: type=1800 audit(1757451240.072:96): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1445" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 238.893794][ T9521] loop3: detected capacity change from 0 to 256 [ 238.924994][ T5791] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 239.051705][ T9523] atomic_op ffff88802be7f198 conn xmit_atomic 0000000000000000 [ 239.190683][ T5797] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (5797) [ 239.458275][ T9527] loop0: detected capacity change from 0 to 1764 [ 239.694401][ T9513] loop1: detected capacity change from 0 to 32768 [ 239.791280][ T9513] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 239.900438][ T6548] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 239.990717][ T9513] (syz.1.1450,9513,1):ocfs2_file_write_iter:2445 ERROR: status = -27 [ 240.099163][ T6548] usb 3-1: Using ep0 maxpacket: 32 [ 240.120791][ T6548] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 240.153638][ T6548] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 240.160879][ T5789] (syz-executor,5789,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 240.188144][ T6548] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 240.224036][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 240.235884][ T6548] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 240.268486][ T6548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.287952][ T9521] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 240.288869][ T6548] usb 3-1: Product: syz [ 240.329716][ T6548] usb 3-1: Manufacturer: syz [ 240.333856][ T9521] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 240.334364][ T6548] usb 3-1: SerialNumber: syz [ 240.382982][ T6548] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 240.409152][ T6548] imon 3-1:155.0: unable to initialize intf0, err -19 [ 240.431022][ T6548] imon:imon_probe: failed to initialize context! [ 240.449138][ T6548] imon 3-1:155.0: unable to register, err -19 [ 240.637764][ T9543] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1462'. [ 240.754406][ T6548] usb 3-1: USB disconnect, device number 12 [ 240.989149][ T9547] loop1: detected capacity change from 0 to 4096 [ 241.007699][ T9547] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 241.028171][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.094255][ T9547] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 241.129991][ T9547] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 241.146369][ T9547] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 241.188849][ T9547] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 241.335112][ T9547] ntfs: volume version 3.1. [ 241.666830][ T9569] loop3: detected capacity change from 0 to 256 [ 241.679658][ T9569] exfat: Deprecated parameter 'namecase' [ 241.685525][ T9569] exfat: Deprecated parameter 'utf8' [ 241.722357][ T9569] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 241.780257][ T9572] loop2: detected capacity change from 0 to 256 [ 241.798103][ T9572] exfat: Deprecated parameter 'namecase' [ 241.835397][ T9572] exfat: Deprecated parameter 'utf8' [ 241.934047][ T9572] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x56600a7f, utbl_chksum : 0xe619d30d) [ 242.360094][ T9579] use of bytesused == 0 is deprecated and will be removed in the future, [ 242.408899][ T9579] use the actual size instead. [ 242.511810][ T9581] loop2: detected capacity change from 0 to 512 [ 242.534504][ T9581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.554816][ T9581] EXT4-fs (loop2): filesystem is read-only [ 242.582027][ T9581] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 242.615112][ T9581] EXT4-fs (loop2): filesystem is read-only [ 242.629349][ T9581] EXT4-fs (loop2): orphan cleanup on readonly fs [ 242.654294][ T9581] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.1481: iget: bad i_size value: 648518346341360424 [ 242.698224][ T9568] loop0: detected capacity change from 0 to 32768 [ 242.755620][ T9581] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1481: couldn't read orphan inode 16 (err -117) [ 242.793651][ T9568] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 242.839759][ T9581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 243.124853][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.149771][ T5794] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 243.520274][ T9604] loop2: detected capacity change from 0 to 64 [ 243.751068][ T9573] loop1: detected capacity change from 0 to 65536 [ 243.869463][ T9573] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 244.017266][ T9573] XFS (loop1): Ending clean mount [ 244.080485][ T9602] loop3: detected capacity change from 0 to 40427 [ 244.116851][ T9602] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 244.126296][ T9602] F2FS-fs (loop3): Image doesn't support compression [ 244.134016][ T5789] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 244.144210][ T9602] F2FS-fs (loop3): Image doesn't support compression [ 244.161598][ T9602] F2FS-fs (loop3): invalid crc value [ 244.237009][ T9602] F2FS-fs (loop3): Found nat_bits in checkpoint [ 244.448954][ T9602] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.754306][ T5788] syz-executor: attempt to access beyond end of device [ 244.754306][ T5788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.789274][ T5788] F2FS-fs (loop3): Remounting filesystem read-only [ 244.921350][ T9606] loop0: detected capacity change from 0 to 32768 [ 245.044063][ T9606] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 245.266534][ T5794] ocfs2: Unmounting device (7,0) on (node local) [ 245.377919][ T9620] loop1: detected capacity change from 0 to 40427 [ 245.448993][ T9620] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 245.456020][ T9620] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 245.495863][ T9620] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 245.518284][ T9620] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 245.534957][ T9620] F2FS-fs (loop1): invalid crc value [ 245.582274][ T9620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.748361][ T9620] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 245.777616][ T9620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 245.930410][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 245.930428][ T27] audit: type=1800 audit(1757451247.192:97): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1490" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 245.959467][ T9624] loop2: detected capacity change from 0 to 32768 [ 246.046862][ T9624] jfs_strtoUCS: char2uni returned -22. [ 246.055921][ T9624] charset = iso8859-6, char = 0xdf [ 246.211753][ T5789] syz-executor: attempt to access beyond end of device [ 246.211753][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.259087][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 246.399009][ T9646] warning: `syz.3.1501' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 246.625545][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 246.907158][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1504'. [ 246.932606][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1504'. [ 247.147605][ T9657] ALSA: seq fatal error: cannot create timer (-19) [ 247.202963][ T9661] loop0: detected capacity change from 0 to 164 [ 247.221083][ T9642] loop2: detected capacity change from 0 to 32768 [ 247.536763][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 247.780516][ T9674] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 248.478656][ T9666] loop3: detected capacity change from 0 to 40427 [ 248.517497][ T9666] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 248.524697][ T9666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 248.554128][ T9666] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 248.588978][ T9666] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 248.619837][ T9666] F2FS-fs (loop3): invalid crc value [ 248.665128][ T9666] F2FS-fs (loop3): Found nat_bits in checkpoint [ 248.830990][ T9678] loop0: detected capacity change from 0 to 32768 [ 248.842080][ T9666] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 248.868857][ T9666] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.927721][ T9678] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 248.932915][ T9680] loop2: detected capacity change from 0 to 32768 [ 249.029005][ T9682] loop1: detected capacity change from 0 to 32768 [ 249.065476][ T27] audit: type=1800 audit(1757451250.322:98): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1508" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 249.155080][ T9682] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 249.198495][ T9678] XFS (loop0): Ending clean mount [ 249.240621][ T5788] syz-executor: attempt to access beyond end of device [ 249.240621][ T5788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.262035][ T5788] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.284976][ T9678] XFS (loop0): Quotacheck needed: Please wait. [ 249.410179][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 249.426919][ T9678] XFS (loop0): Quotacheck: Done. [ 249.757239][ T5794] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 250.511243][ T9698] loop2: detected capacity change from 0 to 32768 [ 250.560161][ T9698] (syz.2.1518,9698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 250.598684][ T9698] (syz.2.1518,9698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 250.667633][ T9698] JBD2: Ignoring recovery information on journal [ 250.890237][ T9698] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 251.127226][ T9719] nbd0: detected capacity change from 0 to 127 [ 251.144582][ T9706] loop0: detected capacity change from 0 to 40427 [ 251.150727][ T5105] block nbd0: Receive control failed (result -104) [ 251.227251][ T9706] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 251.291940][ T9706] F2FS-fs (loop0): invalid crc value [ 251.325267][ T9706] F2FS-fs (loop0): Found nat_bits in checkpoint [ 251.348925][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 251.537361][ T9706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.837837][ T5794] syz-executor: attempt to access beyond end of device [ 251.837837][ T5794] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.872966][ T5794] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 252.193901][ T9741] loop1: detected capacity change from 0 to 256 [ 252.296299][ T9741] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 252.808615][ T9731] loop3: detected capacity change from 0 to 32768 [ 252.900100][ T9731] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 253.329365][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 253.347524][ T9759] loop1: detected capacity change from 0 to 2048 [ 253.426153][ T9763] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.435775][ T9763] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.444771][ T9763] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.453701][ T9763] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.464892][ T9759] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.507630][ T9764] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.696022][ T27] audit: type=1800 audit(1757451254.952:99): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1540" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 253.772724][ T9759] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 253.812851][ T9759] Remounting filesystem read-only [ 253.820082][ T9759] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 253.829416][ T9759] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 253.839543][ T9759] NILFS (loop1): error -5 truncating bmap (ino=15) [ 253.846665][ T9759] NILFS (loop1): discard dirty page: offset=0, ino=15 [ 253.855120][ T9759] NILFS (loop1): discard dirty block: blocknr=22, size=1024 [ 253.888114][ T9759] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 253.912729][ T9759] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 253.942764][ T9759] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 254.006329][ T9768] loop3: detected capacity change from 0 to 8192 [ 254.040217][ T9768] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.067195][ T5789] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 254.070860][ T9768] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 254.083122][ T5789] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.083178][ T5789] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.083195][ T5789] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 254.083212][ T5789] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 254.083581][ T5789] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 254.126332][ T9768] REISERFS (device loop3): using ordered data mode [ 254.137957][ T9768] reiserfs: using flush barriers [ 254.160290][ T9768] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.181925][ T5789] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 254.198936][ T5789] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 254.209678][ T9768] REISERFS (device loop3): checking transaction log (loop3) [ 254.222718][ T5789] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 254.249900][ T5789] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 254.262344][ T5789] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.292139][ T5789] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 254.319995][ T5789] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.339270][ T5789] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.358521][ T5789] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 254.376858][ T5789] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.427511][ T9768] REISERFS (device loop3): Using tea hash to sort names [ 254.447541][ T9768] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 255.214883][ T9777] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 255.318897][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 255.431189][ T9807] sit0: entered promiscuous mode [ 255.432629][ T9805] loop1: detected capacity change from 0 to 4096 [ 255.467193][ T9807] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 255.488566][ T9807] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1560'. [ 255.508892][ T9808] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.529195][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 255.550721][ T5837] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 255.576601][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.609872][ T5837] usb 4-1: config 0 has no interface number 0 [ 255.616080][ T5837] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 255.629632][ T5837] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.673337][ T5837] usb 4-1: config 0 interface 52 has no altsetting 0 [ 255.709547][ T5837] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 255.731266][ T5837] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 255.758541][ T5837] usb 4-1: Manufacturer: syz [ 255.774778][ T5837] usb 4-1: config 0 descriptor?? [ 255.814662][ T9805] syz.1.1559 (9805) used greatest stack depth: 19920 bytes left [ 255.830666][ T5837] hub 4-1:0.52: bad descriptor, ignoring hub [ 255.836859][ T5837] hub: probe of 4-1:0.52 failed with error -5 [ 255.939065][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.952774][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.959551][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.026911][ T5837] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input16 [ 256.500028][ T5837] usb 4-1: USB disconnect, device number 12 [ 256.830940][ T9834] sp0: Synchronizing with TNC [ 256.930200][ T9834] Falling back ldisc for ttyS3. [ 257.105182][ T9843] sit0: entered promiscuous mode [ 257.127544][ T9843] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 257.179387][ T9843] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1576'. [ 257.750315][ T9859] loop2: detected capacity change from 0 to 8192 [ 257.769855][ T9859] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 257.787464][ T9859] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 257.811863][ T9859] REISERFS (device loop2): using ordered data mode [ 257.818443][ T9859] reiserfs: using flush barriers [ 257.829268][ T9859] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 257.945210][ T9859] REISERFS (device loop2): checking transaction log (loop2) [ 258.060072][ T6548] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 258.172830][ T9859] REISERFS (device loop2): Using tea hash to sort names [ 258.188151][ T9859] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 258.264844][ T6548] usb 1-1: config 0 has an invalid interface number: 104 but max is 0 [ 258.279088][ T5830] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.282411][ T6548] usb 1-1: config 0 has no interface number 0 [ 258.297124][ T6548] usb 1-1: config 0 interface 104 has no altsetting 0 [ 258.312295][ T6548] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 258.333840][ T6548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.348832][ T6548] usb 1-1: Product: syz [ 258.355355][ T6548] usb 1-1: Manufacturer: syz [ 258.374512][ T6548] usb 1-1: SerialNumber: syz [ 258.391731][ T6548] usb 1-1: config 0 descriptor?? [ 258.411939][ T6548] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 258.484485][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 258.530467][ T5830] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.549214][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.555945][ T5830] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 258.590076][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.612127][ T5830] usb 2-1: config 0 descriptor?? [ 258.629867][ T6548] gspca_vc032x: reg_r err -71 [ 258.652091][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.676651][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.709261][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.721487][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.737334][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.759102][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.774640][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.788849][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.794354][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.804486][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.814627][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.828832][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.838835][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.851687][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.867388][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.877545][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.881304][ T9886] loop2: detected capacity change from 0 to 4096 [ 258.887672][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.897480][ T6548] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.902935][ T9886] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 258.955261][ T6548] gspca_vc032x: Unknown sensor... [ 258.985454][ T6548] vc032x: probe of 1-1:0.104 failed with error -22 [ 259.018859][ T6548] usb 1-1: USB disconnect, device number 13 [ 259.092741][ T5830] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 259.145783][ T5830] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 259.168842][ T5830] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 259.186876][ T5830] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 259.217726][ T5830] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 259.249619][ T5830] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 259.699561][ T6548] usb 2-1: USB disconnect, device number 16 [ 259.751471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 259.763173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 259.773116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 260.538076][ T9918] loop3: detected capacity change from 0 to 128 [ 260.946061][ T9926] loop1: detected capacity change from 0 to 512 [ 261.019280][ T9926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.087927][ T9926] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 261.144471][ T9926] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1614: invalid indirect mapped block 2683928664 (level 1) [ 261.177240][ T9926] EXT4-fs (loop1): Remounting filesystem read-only [ 261.184933][ T9926] EXT4-fs (loop1): 1 truncate cleaned up [ 261.192139][ T9926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.241363][ T9926] overlayfs: failed to get redirect (-5) [ 261.295185][ T9934] loop3: detected capacity change from 0 to 1024 [ 261.321953][ T9910] loop0: detected capacity change from 0 to 32768 [ 261.340908][ T9936] mkiss: ax0: crc mode is auto. [ 261.439773][ T27] audit: type=1800 audit(1757451262.692:100): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1606" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 261.454892][ T9910] syz.0.1606: attempt to access beyond end of device [ 261.454892][ T9910] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 261.491231][ T9910] metapage_write_end_io: I/O error [ 261.498639][ T9910] ERROR: (device loop0): diWrite: ixpxd invalid [ 261.498639][ T9910] [ 261.599733][ T9910] ERROR: (device loop0): remounting filesystem as read-only [ 261.626979][ T9910] ERROR: (device loop0): txCommit: [ 261.626979][ T9910] [ 261.669617][ T9910] blkno = 8ed2c, nblocks = 1 [ 261.675151][ T9938] loop2: detected capacity change from 0 to 256 [ 261.681949][ T9910] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 261.681949][ T9910] [ 261.697850][ T9938] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.709690][ T9938] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 261.725356][ T9938] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 261.815412][ T9910] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 261.815412][ T9910] [ 261.839208][ T9910] syz.0.1606: attempt to access beyond end of device [ 261.839208][ T9910] loop0: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 261.859825][ T58] hfsplus: b-tree write err: -5, ino 8 [ 261.893059][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.916164][ T9910] syz.0.1606: attempt to access beyond end of device [ 261.916164][ T9910] loop0: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 261.963593][ T9910] syz.0.1606: attempt to access beyond end of device [ 261.963593][ T9910] loop0: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 262.046675][ T110] blkno = 8ed2c, nblocks = 4 [ 262.058806][ T110] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 262.058806][ T110] [ 262.078911][ T110] blkno = 8ef00, nblocks = 141 [ 262.089095][ T110] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 262.089095][ T110] [ 262.318878][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.407459][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 262.523784][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 262.542474][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 262.556446][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.576987][ T9] usb 4-1: config 0 has no interface number 0 [ 262.611166][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 262.629302][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.654490][ T9] usb 4-1: Product: syz [ 262.674103][ T9] usb 4-1: Manufacturer: syz [ 262.678930][ T9] usb 4-1: SerialNumber: syz [ 262.704918][ T9] usb 4-1: config 0 descriptor?? [ 262.838882][ T5837] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 262.940856][ T9] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 262.942386][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.947276][ T9] usb 4-1: No valid video chain found. [ 262.951628][ T9] usb 4-1: USB disconnect, device number 13 [ 262.960305][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.975598][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.987546][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.997170][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.006963][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.103604][ T5837] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 263.123342][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.131836][ T5837] usb 3-1: Product: syz [ 263.136168][ T5837] usb 3-1: Manufacturer: syz [ 263.141095][ T5837] usb 3-1: SerialNumber: syz [ 263.167625][ T5837] usb 3-1: config 0 descriptor?? [ 263.481583][ T9955] chnl_net:caif_netlink_parms(): no params data found [ 263.821852][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.846807][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.859123][ T9955] bridge_slave_0: entered allmulticast mode [ 263.888078][ T9955] bridge_slave_0: entered promiscuous mode [ 263.908494][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.920596][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.928110][ T9955] bridge_slave_1: entered allmulticast mode [ 263.938662][ T9955] bridge_slave_1: entered promiscuous mode [ 264.005180][ T5837] usb 3-1: f81604_write: reg: 105 data: 92 failed: -EPROTO [ 264.024450][ T5837] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 264.075601][ T5837] f81604: probe of 3-1:0.0 failed with error -71 [ 264.108687][ T5837] usb 3-1: USB disconnect, device number 13 [ 264.161898][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.193671][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.207526][ T9980] kvm: user requested TSC rate below hardware speed [ 264.288259][ T9955] team0: Port device team_slave_0 added [ 264.303315][ T9955] team0: Port device team_slave_1 added [ 264.344059][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.351215][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.389521][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.419214][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.426300][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.452231][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.463643][ T9987] loop3: detected capacity change from 0 to 64 [ 264.487491][ T9987] MINIX-fs: bad superblock or unable to read bitmaps [ 264.506594][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.682685][ T9987] loop3: detected capacity change from 0 to 2048 [ 264.787164][ T9987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.803209][ T9955] hsr_slave_0: entered promiscuous mode [ 264.847988][ T9955] hsr_slave_1: entered promiscuous mode [ 264.940132][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.970627][ T9955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.978258][ T9955] Cannot create hsr debugfs directory [ 265.083161][ T5803] Bluetooth: hci1: command tx timeout [ 265.523045][T10014] syz.0.1653 uses obsolete (PF_INET,SOCK_PACKET) [ 265.558846][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 265.781111][ T9] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 265.801783][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.828498][ T9] usb 4-1: Product: syz [ 265.838952][ T9] usb 4-1: Manufacturer: syz [ 265.849184][ T9] usb 4-1: SerialNumber: syz [ 265.870957][ T9] usb 4-1: config 0 descriptor?? [ 265.883550][ T9955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.903170][ T9] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 014 [ 265.940032][ T9955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.942053][T10018] loop2: detected capacity change from 0 to 1024 [ 265.964163][ T9955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.005971][ T9955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.360888][ T9] (null): failure reading functionality [ 266.382435][T10033] macsec2: entered allmulticast mode [ 266.383065][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 266.394279][T10033] macvlan0: entered allmulticast mode [ 266.402107][T10033] veth1_vlan: entered allmulticast mode [ 266.418476][T10033] macvlan0: left allmulticast mode [ 266.428681][T10033] veth1_vlan: left allmulticast mode [ 266.573091][ T9955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.674880][ T9955] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.708559][ T6548] usb 4-1: USB disconnect, device number 14 [ 266.726595][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.733850][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.804244][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.811458][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.139986][ T5803] Bluetooth: hci1: command tx timeout [ 267.475586][ T9955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.277059][T10063] loop3: detected capacity change from 0 to 1024 [ 268.550639][ T9955] veth0_vlan: entered promiscuous mode [ 268.600312][ T5788] hfsplus: node 4:3 still has 1 user(s)! [ 268.619939][ T9955] veth1_vlan: entered promiscuous mode [ 268.732265][ T9955] veth0_macvtap: entered promiscuous mode [ 268.772475][ T9955] veth1_macvtap: entered promiscuous mode [ 268.834956][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.868954][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.894738][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.923654][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.938615][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.959089][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.003535][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.018945][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.050781][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.076248][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.103944][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.124120][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.144998][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.165419][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.188624][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.219261][ T5803] Bluetooth: hci1: command tx timeout [ 269.225033][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.238960][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.250619][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.284222][ T9955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.314709][ T9955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.341742][ T9955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.367431][ T9955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.604617][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.646711][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.757486][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.785008][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.858072][T10080] loop2: detected capacity change from 0 to 128 [ 269.979354][T10080] FAT-fs (loop2): error, clusters badly computed (2 != 0) [ 269.986645][T10080] FAT-fs (loop2): Filesystem has been set read-only [ 270.062056][T10080] FAT-fs (loop2): error, clusters badly computed (3 != 1) [ 270.079671][T10080] FAT-fs (loop2): error, clusters badly computed (4 != 2) [ 270.130423][ T5803] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 270.369629][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 270.732161][T10101] program syz.3.1682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.300454][ T5803] Bluetooth: hci1: command tx timeout [ 271.608006][T10127] loop2: detected capacity change from 0 to 8 [ 271.707163][T10131] loop3: detected capacity change from 0 to 128 [ 271.723524][T10127] SQUASHFS error: zlib decompression failed, data probably corrupt [ 271.735592][T10127] SQUASHFS error: Failed to read block 0x13e: -5 [ 271.750566][T10127] SQUASHFS error: Unable to read metadata cache entry [13c] [ 271.772814][T10127] SQUASHFS error: Unable to read directory block [13c:26] [ 272.081216][T10137] loop2: detected capacity change from 0 to 2048 [ 272.160995][T10137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.299642][ T27] audit: type=1326 audit(1757451273.552:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 272.368935][ T27] audit: type=1326 audit(1757451273.552:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 272.439389][ T27] audit: type=1326 audit(1757451273.582:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 272.545623][ T27] audit: type=1326 audit(1757451273.582:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 272.629041][ T27] audit: type=1326 audit(1757451273.582:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 272.729811][ T27] audit: type=1326 audit(1757451273.582:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 272.809147][ T27] audit: type=1326 audit(1757451273.582:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 272.882007][ T27] audit: type=1326 audit(1757451273.602:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 273.020167][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 273.241910][T10135] loop4: detected capacity change from 0 to 32768 [ 273.369904][ T27] audit: type=1800 audit(1757451274.632:109): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1696" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 273.385015][T10135] syz.4.1696: attempt to access beyond end of device [ 273.385015][T10135] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 273.447071][T10135] metapage_write_end_io: I/O error [ 273.467195][T10135] ERROR: (device loop4): diWrite: ixpxd invalid [ 273.467195][T10135] [ 273.527366][T10135] ERROR: (device loop4): remounting filesystem as read-only [ 273.538831][T10135] ERROR: (device loop4): txCommit: [ 273.538831][T10135] [ 273.560344][T10135] blkno = 8ed2c, nblocks = 1 [ 273.565024][T10135] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 273.565024][T10135] [ 273.653713][T10135] ERROR: (device loop4): dbAllocBits: leaf page corrupt [ 273.653713][T10135] [ 273.683551][T10135] syz.4.1696: attempt to access beyond end of device [ 273.683551][T10135] loop4: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 273.724491][T10135] syz.4.1696: attempt to access beyond end of device [ 273.724491][T10135] loop4: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 273.751655][T10135] syz.4.1696: attempt to access beyond end of device [ 273.751655][T10135] loop4: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 273.778109][ T111] blkno = 8ed2c, nblocks = 4 [ 273.783954][ T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 273.783954][ T111] [ 273.818861][ T111] blkno = 8ef00, nblocks = 141 [ 273.823704][ T111] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 273.823704][ T111] [ 274.192426][ T5803] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 274.218870][ T5803] Bluetooth: hci2: Injecting HCI hardware error event [ 274.229062][ T5803] Bluetooth: hci2: hardware error 0x00 [ 274.541298][T10162] loop2: detected capacity change from 0 to 32768 [ 274.908118][T10169] loop3: detected capacity change from 0 to 32768 [ 274.950841][T10169] XFS: attr2 mount option is deprecated. [ 275.023031][T10169] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 275.061025][T10169] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.237643][T10169] XFS (loop3): Ending clean mount [ 275.283326][T10169] XFS (loop3): Quotacheck needed: Please wait. [ 275.408293][T10169] XFS (loop3): Quotacheck: Done. [ 275.559353][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 275.661227][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.764141][T10191] loop2: detected capacity change from 0 to 512 [ 275.791866][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 275.819301][T10191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.832939][ T5837] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.880849][ T5837] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.924835][ T5837] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 275.985514][T10191] EXT4-fs (loop2): 1 truncate cleaned up [ 275.991533][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.018295][T10191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.030417][ T5837] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 276.030449][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.072410][ T5837] usb 5-1: config 0 descriptor?? [ 276.197281][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.280716][ T5803] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 276.533933][ T5837] hid (null): invalid report_size 27418 [ 276.603990][ T6005] udevd[6005]: failed to send result of seq 15158 to main daemon: Connection refused [ 276.796632][ T786] usb 5-1: USB disconnect, device number 2 [ 276.851731][T10212] loop2: detected capacity change from 0 to 512 [ 276.874744][T10212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 276.897843][T10212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c018, mo2=0002] [ 276.906585][T10212] System zones: 1-12 [ 276.916163][T10212] EXT4-fs (loop2): 1 truncate cleaned up [ 276.923564][T10212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.995751][T10217] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 277.006018][T10217] netlink: 'syz.3.1730': attribute type 2 has an invalid length. [ 277.016685][T10217] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 277.031014][T10218] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 277.061647][T10217] netlink: 'syz.3.1730': attribute type 2 has an invalid length. [ 277.217301][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.496647][T10222] loop3: detected capacity change from 0 to 8192 [ 277.518011][T10222] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.539344][T10222] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 277.563034][T10222] REISERFS (device loop3): using ordered data mode [ 277.593034][T10222] reiserfs: using flush barriers [ 277.630665][T10222] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.667111][T10222] REISERFS (device loop3): checking transaction log (loop3) [ 277.681454][T10222] REISERFS (device loop3): Using r5 hash to sort names [ 277.690819][T10222] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 277.928992][ T786] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.132022][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.154089][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.169005][ T786] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 278.184287][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.205882][ T786] usb 1-1: config 0 descriptor?? [ 278.346071][ T2957] kworker/u4:10: attempt to access beyond end of device [ 278.346071][ T2957] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 278.367025][ T2957] metapage_write_end_io: I/O error [ 278.373648][ T2957] JFS: metapage_get_blocks failed [ 278.389900][ T2957] JFS: metapage_get_blocks failed [ 278.679577][ T786] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 278.874965][ T786] cp2112 0003:10C4:EA90.001A: Part Number: 0x00 Device Version: 0x00 [ 278.949938][T10258] loop2: detected capacity change from 0 to 40427 [ 278.958040][T10258] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 278.985272][T10258] F2FS-fs (loop2): invalid crc value [ 278.997533][T10258] F2FS-fs (loop2): invalid crc value [ 279.005343][T10258] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 279.092030][ T786] cp2112 0003:10C4:EA90.001A: error requesting SMBus config [ 279.110262][ T786] cp2112: probe of 0003:10C4:EA90.001A failed with error -71 [ 279.126452][ T786] usb 1-1: USB disconnect, device number 14 [ 279.318984][ T28] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 279.452423][T10272] autofs4:pid:10272:autofs_fill_super: pipe file descriptor does not contain proper ops [ 279.519119][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 279.527465][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.548620][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.566876][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 279.577268][ T28] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 279.587634][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.623926][ T28] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.633947][ T28] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.642490][ T28] usb 4-1: Manufacturer: syz [ 279.650416][ T28] usb 4-1: config 0 descriptor?? [ 280.018858][ T28] rc_core: IR keymap rc-hauppauge not found [ 280.032677][ T28] Registered IR keymap rc-empty [ 280.048144][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.093091][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.139901][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 280.171175][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 280.199033][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.239073][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.277960][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.318990][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.359595][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.389059][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.439190][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.473316][T10283] loop2: detected capacity change from 0 to 32768 [ 280.495960][T10283] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1757 (10283) [ 280.528925][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.559014][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.559414][T10283] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 280.585967][T10283] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 280.588912][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.597006][T10283] BTRFS info (device loop2): using free space tree [ 280.650775][ T28] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 280.667703][ T28] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 280.682507][ T28] usb 4-1: USB disconnect, device number 15 [ 280.716202][T10283] BTRFS info (device loop2): enabling ssd optimizations [ 280.736811][T10283] BTRFS info (device loop2): auto enabling async discard [ 280.915958][ T27] audit: type=1800 audit(1757451282.172:110): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1757" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 281.069203][ T5791] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 281.550109][ T54] block nbd0: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 30 seconds [ 281.563411][ T54] block nbd0: Possible stuck request ffff888021b60200: control (read@1024,1024B). Runtime 30 seconds [ 281.579629][ T54] block nbd0: Possible stuck request ffff888021b60400: control (read@2048,1024B). Runtime 30 seconds [ 281.590649][ T54] block nbd0: Possible stuck request ffff888021b60600: control (read@3072,1024B). Runtime 30 seconds [ 281.925248][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 282.276972][T10320] loop2: detected capacity change from 0 to 32768 [ 282.365658][T10320] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.564766][T10320] XFS (loop2): Ending clean mount [ 282.821987][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.382626][T10357] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1780'. [ 283.435153][T10357] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1780'. [ 283.461313][ T48] JFS: metapage_get_blocks failed [ 283.509211][T10351] loop3: detected capacity change from 0 to 32768 [ 283.545836][T10351] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 283.556965][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 283.674464][ T5788] (syz-executor,5788,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 283.721285][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1783'. [ 283.734157][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 283.905569][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1786'. [ 284.735972][T10399] loop2: detected capacity change from 0 to 1024 [ 284.792574][T10399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 284.828097][T10399] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.870489][T10410] loop3: detected capacity change from 0 to 1024 [ 284.908173][T10410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.949987][T10399] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: comm syz.2.1798: lblock 0 mapped to illegal pblock 0 (length 1) [ 285.009751][T10399] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 285.055949][T10399] EXT4-fs (loop2): This should not happen!! Data will be lost [ 285.055949][T10399] [ 285.097624][T10412] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: comm syz.2.1798: lblock 0 mapped to illegal pblock 0 (length 1) [ 285.240581][T10419] loop3: detected capacity change from 0 to 64 [ 285.250016][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 285.254355][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 285.698634][T10430] loop3: detected capacity change from 0 to 2048 [ 285.739500][T10430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.822796][ T27] audit: type=1800 audit(1757451287.082:111): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1810" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 285.843685][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 285.890617][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.050398][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 286.059382][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.067714][ T9] usb 5-1: config 0 has no interface number 0 [ 286.086829][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.098112][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.118617][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 286.128065][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.147511][ T9] usb 5-1: config 0 descriptor?? [ 286.535204][ T5780] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.669054][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 286.721200][ T5780] usb 4-1: config 0 has no interfaces? [ 286.729701][ T5780] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 286.739052][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.747083][ T5780] usb 4-1: Product: syz [ 286.751461][ T5780] usb 4-1: Manufacturer: syz [ 286.756090][ T5780] usb 4-1: SerialNumber: syz [ 286.775367][ T9] uclogic 0003:28BD:0071.001B: pen parameters not found [ 286.776260][ T5780] r8152-cfgselector 4-1: config 0 descriptor?? [ 286.792713][ T9] uclogic 0003:28BD:0071.001B: interface is invalid, ignoring [ 286.808857][ T9] usb 5-1: USB disconnect, device number 3 [ 287.016232][ T5780] r8152-cfgselector 4-1: Needed 2 retries to read version [ 287.024098][ T5780] r8152-cfgselector 4-1: Unknown version 0x0080 [ 287.274158][ T5780] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 287.622645][T10488] input: syz0 as /devices/virtual/input/input18 [ 287.692265][T10490] ubi31: attaching mtd0 [ 287.696921][T10490] ubi31 error: ubi_attach_mtd_dev: bad VID header (536940548) or data offsets (536940612) [ 287.779257][ T6688] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 287.839135][ T5837] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 287.962152][ T6688] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 287.971027][ T6688] usb 3-1: config 1 has no interface number 0 [ 287.977356][ T6688] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 287.991492][ T6688] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 288.001703][ T6688] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid maxpacket 1983, setting to 1024 [ 288.018117][ T6688] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 288.035868][ T6688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.050387][ T6688] usb 3-1: Product: syz [ 288.050817][ T5837] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 288.054595][ T6688] usb 3-1: Manufacturer: syz [ 288.069239][T10499] loop3: detected capacity change from 0 to 8192 [ 288.077571][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.089504][ T6688] usb 3-1: SerialNumber: syz [ 288.095191][T10499] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 288.098166][T10481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.116467][T10481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.123869][T10481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.124275][ T5837] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 288.139631][ T6688] usb 3-1: Expected 3 endpoints, found: 2 [ 288.149203][T10499] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 288.158376][ T5837] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 288.158969][T10499] REISERFS (device loop3): using ordered data mode [ 288.166503][ T5837] usb 1-1: Manufacturer: syz [ 288.178453][T10499] reiserfs: using flush barriers [ 288.182846][ T5837] usb 1-1: config 0 descriptor?? [ 288.186485][T10499] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.205716][T10499] REISERFS (device loop3): checking transaction log (loop3) [ 288.294762][T10499] REISERFS (device loop3): Using tea hash to sort names [ 288.302870][T10499] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 288.312210][ T5837] rc_core: IR keymap rc-hauppauge not found [ 288.318156][ T5837] Registered IR keymap rc-empty [ 288.324073][ T5837] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 288.339866][ T5837] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 288.394875][T10499] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 288.428974][ T6688] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 288.460920][ T6548] usb 3-1: USB disconnect, device number 14 [ 288.499363][ T3476] JFS: metapage_get_blocks failed [ 288.513634][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 288.522642][ T9] usb 1-1: USB disconnect, device number 15 [ 288.643216][ T6688] usb 5-1: Using ep0 maxpacket: 16 [ 288.656484][ T6688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.676185][ T6688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.677739][T10509] loop3: detected capacity change from 0 to 1024 [ 288.687716][ T6688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.697395][T10509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.713669][ T6688] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 288.717929][T10509] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 288.724460][ T6688] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.742192][T10509] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 288.751429][ T6688] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 288.764790][T10509] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.1844: lblock 2 mapped to illegal pblock 2 (length 1) [ 288.765534][ T6688] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 288.787226][ T6688] usb 5-1: Manufacturer: syz [ 288.787999][T10509] EXT4-fs (loop3): Remounting filesystem read-only [ 288.798696][T10509] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 288.803722][ T6688] usb 5-1: config 0 descriptor?? [ 288.806998][T10509] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 288.828644][T10509] EXT4-fs (loop3): 1 orphan inode deleted [ 288.835809][T10509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.915098][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.090756][T10517] veth0_to_bond: entered allmulticast mode [ 289.179060][ T6688] rc_core: IR keymap rc-hauppauge not found [ 289.194971][ T6688] Registered IR keymap rc-empty [ 289.211220][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.249023][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.299883][ T6688] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 289.320633][ T6688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 289.355443][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.429132][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.479031][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.528901][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.579165][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.628890][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.669113][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.708554][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.758229][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.808958][ T6688] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.852940][ T6688] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 289.865984][ T6688] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 289.888045][ T6688] usb 5-1: USB disconnect, device number 4 [ 290.059107][ T5830] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 290.179838][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 290.249805][ T5830] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 290.268411][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.286212][ T5830] usb 3-1: Product: syz [ 290.295829][ T5830] usb 3-1: Manufacturer: syz [ 290.300677][ T5830] usb 3-1: SerialNumber: syz [ 290.313325][ T5830] usb 3-1: config 0 descriptor?? [ 290.405315][ T9] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 290.428281][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping [ 290.447314][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 64 [ 290.458459][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.480709][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 290.498922][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.512386][ T9] usb 4-1: Manufacturer: syz [ 290.525436][ T9] usb 4-1: config 0 descriptor?? [ 290.535398][T10543] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 290.551186][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 290.558369][ T5830] usb 3-1: ignoring: probably an ADSL modem [ 290.837607][ T5780] usb 4-1: USB disconnect, device number 17 [ 290.963597][ T5830] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 291.035080][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 291.188431][ T5780] usb 3-1: USB disconnect, device number 15 [ 291.567005][T10578] loop3: detected capacity change from 0 to 2048 [ 291.586889][T10578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.621928][ T3476] kworker/u4:12: attempt to access beyond end of device [ 291.621928][ T3476] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 291.636676][ T3476] metapage_write_end_io: I/O error [ 292.099313][ T5830] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 292.289119][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 292.300011][ T5830] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 292.315120][ T5830] usb 3-1: config 0 has no interface number 0 [ 292.324936][ T5830] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 292.338811][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.354879][ T5830] usb 3-1: Product: syz [ 292.363423][ T5830] usb 3-1: Manufacturer: syz [ 292.368212][ T5830] usb 3-1: SerialNumber: syz [ 292.384393][ T5830] usb 3-1: config 0 descriptor?? [ 292.508903][ T6688] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 292.626588][ T5830] radio-si470x 3-1:0.35: this is not a si470x device. [ 292.637237][T10585] loop2: detected capacity change from 0 to 64 [ 292.692586][ T5830] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 292.708800][ T6688] usb 4-1: Using ep0 maxpacket: 32 [ 292.716297][ T6688] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 292.726506][ T6688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.756170][ T6688] usb 4-1: config 0 descriptor?? [ 292.894414][ T5830] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 292.908403][ T5830] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 292.921933][ T5830] usb 3-1: USB disconnect, device number 16 [ 292.929198][ T5830] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 292.974664][ T6688] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 292.985124][ T6688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.998946][ T6688] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 293.000549][T10610] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 293.017483][T10610] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 293.023177][ T6688] usb 4-1: media controller created [ 293.080558][ T6688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.197134][ T6688] az6027: usb out operation failed. (-71) [ 293.211510][ T6688] az6027: usb out operation failed. (-71) [ 293.217340][ T6688] stb0899_attach: Driver disabled by Kconfig [ 293.229126][ T6688] az6027: no front-end attached [ 293.229126][ T6688] [ 293.243157][ T6688] az6027: usb out operation failed. (-71) [ 293.254142][ T6688] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 293.263627][ T6688] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 293.276494][ T6688] dvb-usb: schedule remote query interval to 400 msecs. [ 293.283741][ T6688] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 293.294889][ T6688] usb 4-1: USB disconnect, device number 18 [ 293.359433][ T6688] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 294.245033][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 294.381879][ T6688] kernel write not supported for file /uhid (pid: 6688 comm: kworker/0:5) [ 294.949045][ T5830] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 295.141132][ T5830] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 295.158122][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.169245][ T5830] usb 3-1: config 0 descriptor?? [ 295.177377][ T5830] cp210x 3-1:0.0: cp210x converter detected [ 295.346660][T10680] loop3: detected capacity change from 0 to 32768 [ 295.378532][T10680] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 295.378532][T10680] [ 295.388967][ T28] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 295.398474][T10680] xtLookup: xtSearch returned -5 [ 295.405696][T10680] free_index: error reading directory table [ 295.413237][T10680] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 295.413237][T10680] [ 295.423386][T10680] xtLookup: xtSearch returned -5 [ 295.428377][T10680] free_index: error reading directory table [ 295.434376][T10680] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 295.434376][T10680] [ 295.446225][T10680] xtLookup: xtSearch returned -5 [ 295.451856][T10680] free_index: error reading directory table [ 295.569054][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 295.581609][ T28] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 295.598826][ T5830] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 295.606898][ T28] usb 5-1: config 0 has no interface number 0 [ 295.613821][ T5830] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 295.623081][ T5780] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 295.634445][ T28] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 295.641985][T10694] loop3: detected capacity change from 0 to 16 [ 295.644836][ T5830] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 295.658099][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.660206][T10694] erofs: (device loop3): mounted with root inode @ nid 36. [ 295.668808][ T28] usb 5-1: Product: syz [ 295.678498][ T28] usb 5-1: Manufacturer: syz [ 295.683737][ T5830] usb 3-1: cp210x converter now attached to ttyUSB0 [ 295.693622][ T5830] usb 3-1: USB disconnect, device number 17 [ 295.708952][ T28] usb 5-1: SerialNumber: syz [ 295.730261][ T28] usb 5-1: config 0 descriptor?? [ 295.736664][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.751200][ T28] smsc95xx v2.0.0 [ 295.754935][ T28] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 295.767348][ T5830] cp210x 3-1:0.0: device disconnected [ 295.774623][ T28] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 295.831483][ T5780] usb 1-1: config 0 has no interfaces? [ 295.847628][ T5780] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 295.857149][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.872994][ T5780] usb 1-1: Product: syz [ 295.877238][ T5780] usb 1-1: Manufacturer: syz [ 295.882520][ T5780] usb 1-1: SerialNumber: syz [ 295.897078][ T5780] r8152-cfgselector 1-1: config 0 descriptor?? [ 295.982331][T10686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 296.000466][ T5830] usb 5-1: USB disconnect, device number 5 [ 296.138353][ T5780] r8152-cfgselector 1-1: Needed 2 retries to read version [ 296.145802][ T5780] r8152-cfgselector 1-1: Unknown version 0x0080 [ 296.362900][ T6688] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 296.664370][ T48] JFS: metapage_get_blocks failed [ 296.679726][ T48] JFS: metapage_get_blocks failed [ 296.826912][T10714] loop3: detected capacity change from 0 to 32768 [ 296.845197][T10714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1934 (10714) [ 296.876601][T10714] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.897380][T10714] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 296.908965][T10714] BTRFS info (device loop3): using free space tree [ 297.017315][T10735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1938'. [ 297.034861][T10714] BTRFS info (device loop3): enabling ssd optimizations [ 297.049259][T10714] BTRFS info (device loop3): auto enabling async discard [ 297.186629][T10716] loop2: detected capacity change from 0 to 32768 [ 297.215254][T10716] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 297.226819][ T5788] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.255913][T10716] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 297.591188][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 297.988518][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1948'. [ 297.999989][T10760] netlink: 'syz.2.1945': attribute type 29 has an invalid length. [ 298.008222][T10760] netlink: 'syz.2.1945': attribute type 29 has an invalid length. [ 299.105125][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 299.114347][T10802] bridge: RTM_NEWNEIGH with invalid ether address [ 299.938998][ T5837] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 300.150524][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.180519][ T5837] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 300.212442][ T5837] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 300.238168][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.279881][ T5837] usb 1-1: config 0 descriptor?? [ 300.288268][ T5837] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 300.298853][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 300.311161][ T5837] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 300.325986][ T5837] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 300.347242][ T5837] usb 1-1: media controller created [ 300.358388][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.389932][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 300.396372][ T5837] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 300.422504][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 300.449076][ T5837] dvb-usb: schedule remote query interval to 150 msecs. [ 300.458816][ T5837] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 300.510255][T10820] dibusb: i2c wr: len=61 is too big! [ 300.510255][T10820] [ 300.530483][ T5837] usb 1-1: USB disconnect, device number 17 [ 300.548356][ T5837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 300.591490][T10812] loop2: detected capacity change from 0 to 65536 [ 300.617274][T10812] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 300.664593][T10812] XFS (loop2): Ending clean mount [ 300.682497][T10812] XFS (loop2): Quotacheck needed: Please wait. [ 300.719771][ T6688] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 300.757442][T10812] XFS (loop2): Quotacheck: Done. [ 300.876075][ T5791] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 300.952978][ T6688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.966470][ T6688] usb 4-1: no configurations [ 300.976735][ T6688] usb 4-1: can't read configurations, error -22 [ 301.529087][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.546872][T10852] loop3: detected capacity change from 0 to 2048 [ 301.563227][T10852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.699553][ T3476] JFS: metapage_get_blocks failed [ 301.739880][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 301.759313][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.778573][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.797773][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.806282][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.818279][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.829503][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.838067][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.854435][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.878901][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.889693][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.909115][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.928769][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.937741][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.947620][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.961062][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.972145][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.982339][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.993783][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 302.002775][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.026415][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.040162][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 302.060263][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.092512][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.104163][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 302.126614][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 302.150155][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 302.160979][ T9] usb 5-1: Product: syz [ 302.165289][ T9] usb 5-1: Manufacturer: syz [ 302.191228][ T9] usb 5-1: SerialNumber: syz [ 302.198598][ T9] usb 5-1: config 0 descriptor?? [ 302.213245][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 302.545888][ T9] usb 5-1: USB disconnect, device number 6 [ 302.556451][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 302.563232][T10867] cifs: Unknown parameter 'mode' [ 302.599679][ T5830] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 302.789024][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 302.807826][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.828993][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.848872][ T5830] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 302.868409][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.890054][ T5830] usb 4-1: config 0 descriptor?? [ 303.081533][T10887] loop2: detected capacity change from 0 to 128 [ 303.349972][ T5830] hid (null): bogus close delimiter [ 303.533127][ T5830] usb 4-1: string descriptor 0 read error: -71 [ 303.569257][ T5830] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 303.593340][ T5830] letsketch: probe of 0003:6161:4D15.001C failed with error -32 [ 303.607899][ T5830] usb 4-1: USB disconnect, device number 21 [ 305.480305][T10958] loop3: detected capacity change from 0 to 4096 [ 306.378931][ T5837] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 306.570829][ T5837] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 306.588815][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.610361][ T5837] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 306.628794][ T5837] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 306.638889][ T5837] usb 3-1: Manufacturer: syz [ 306.656132][ T5837] usb 3-1: config 0 descriptor?? [ 306.749454][ T2957] JFS: metapage_get_blocks failed [ 306.799322][ T5837] rc_core: IR keymap rc-hauppauge not found [ 306.815608][ T5837] Registered IR keymap rc-empty [ 306.824308][ T5837] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 306.842728][ T5837] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 306.907733][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 306.918011][ T6688] usb 3-1: USB disconnect, device number 18 [ 307.590895][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'. [ 307.859072][ T5837] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 308.050355][T11004] loop3: detected capacity change from 0 to 128 [ 308.061358][T11004] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 308.073506][ T5837] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 308.075525][T11004] hpfs: filesystem error: improperly stopped [ 308.094732][T11004] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 308.099732][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.119630][T11004] hpfs: You really don't want any checks? You are crazy... [ 308.128041][ T5837] usb 5-1: config 0 descriptor?? [ 308.130687][T11004] hpfs: hpfs_map_sector(): read error [ 308.141365][T11004] hpfs: code page support is disabled [ 308.148025][T11004] hpfs: hpfs_map_4sectors(): unaligned read [ 308.149153][ T5837] cp210x 5-1:0.0: cp210x converter detected [ 308.154362][T11004] hpfs: hpfs_map_4sectors(): unaligned read [ 308.165902][T11004] hpfs: filesystem error: unable to find root dir [ 308.362316][ T2957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.523571][ T2957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.672398][ T2957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.803301][ T5837] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 308.827779][ T5837] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 308.848651][ T2957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.865481][ T5837] usb 5-1: cp210x converter now attached to ttyUSB0 [ 308.900560][ T5837] usb 5-1: USB disconnect, device number 7 [ 308.944764][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.986903][ T5837] cp210x 5-1:0.0: device disconnected [ 309.178247][ T2957] tipc: Left network mode [ 309.416332][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.432908][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.441783][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.453468][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.467642][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.476786][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.523772][T11010] syz.3.2060 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 309.639308][ T5837] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 309.839269][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 309.851744][ T5837] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 309.871972][ T5837] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 309.881378][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.898785][ T5837] usb 1-1: Product: syz [ 309.903160][ T5837] usb 1-1: Manufacturer: syz [ 309.907802][ T5837] usb 1-1: SerialNumber: syz [ 309.919499][ T5837] usb 1-1: config 0 descriptor?? [ 309.927915][ T5837] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 309.946515][ T5837] usb 1-1: setting power ON [ 309.957119][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 309.975456][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.987288][ T5837] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 309.996233][ T5837] usb 1-1: media controller created [ 310.024499][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.078789][ T5837] usb 1-1: selecting invalid altsetting 6 [ 310.085185][ T5837] usb 1-1: digital interface selection failed (-22) [ 310.092058][ T5837] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 310.101637][T11030] loop3: detected capacity change from 0 to 1024 [ 310.109253][ T5837] usb 1-1: setting power OFF [ 310.117611][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 310.136575][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 310.147892][T11019] dvb-usb: bulk message failed: -22 (3/0) [ 310.155775][T11019] dvb-usb: bulk message failed: -22 (5/0) [ 310.161695][ T5837] (NULL device *): no alternate interface [ 310.170856][T11019] dvb-usb: bulk message failed: -22 (3/0) [ 310.184244][T11019] dvb-usb: bulk message failed: -22 (3/0) [ 310.255647][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 310.287370][ T5837] usb 1-1: USB disconnect, device number 18 [ 310.444270][T11018] chnl_net:caif_netlink_parms(): no params data found [ 310.807631][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.815466][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.823161][T11018] bridge_slave_0: entered allmulticast mode [ 310.841963][T11018] bridge_slave_0: entered promiscuous mode [ 310.878317][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.886149][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.895453][T11018] bridge_slave_1: entered allmulticast mode [ 310.911509][T11018] bridge_slave_1: entered promiscuous mode [ 311.009916][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.030152][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.128968][ T2957] hsr_slave_0: left promiscuous mode [ 311.148563][ T2957] hsr_slave_1: left promiscuous mode [ 311.167687][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.191751][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.201105][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.208674][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.220988][ T2957] bridge_slave_1: left allmulticast mode [ 311.226685][ T2957] bridge_slave_1: left promiscuous mode [ 311.245591][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.275271][ T2957] bridge_slave_0: left allmulticast mode [ 311.281407][ T2957] bridge_slave_0: left promiscuous mode [ 311.287209][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.356835][ T2957] veth1_macvtap: left promiscuous mode [ 311.365254][ T2957] veth0_macvtap: left promiscuous mode [ 311.372791][ T2957] veth1_vlan: left promiscuous mode [ 311.381405][ T2957] veth0_vlan: left promiscuous mode [ 311.392823][T11060] loop3: detected capacity change from 0 to 64 [ 311.543227][ T5105] Bluetooth: hci3: command tx timeout [ 311.630645][ T54] block nbd0: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 60 seconds [ 311.641793][ T54] block nbd0: Possible stuck request ffff888021b60200: control (read@1024,1024B). Runtime 60 seconds [ 311.653107][ T54] block nbd0: Possible stuck request ffff888021b60400: control (read@2048,1024B). Runtime 60 seconds [ 311.664112][ T54] block nbd0: Possible stuck request ffff888021b60600: control (read@3072,1024B). Runtime 60 seconds [ 312.141464][ T2957] bond1 (unregistering): Released all slaves [ 313.442407][ T2957] team0 (unregistering): Port device team_slave_1 removed [ 313.506781][ T2957] team0 (unregistering): Port device team_slave_0 removed [ 313.570785][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.626626][ T5105] Bluetooth: hci3: command tx timeout [ 313.636377][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.344783][ T2957] bond0 (unregistering): Released all slaves [ 314.493412][T11018] team0: Port device team_slave_0 added [ 314.551016][T11018] team0: Port device team_slave_1 added [ 314.648858][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.657491][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.695966][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.710137][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.717272][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.776369][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.954105][T11018] hsr_slave_0: entered promiscuous mode [ 314.993648][T11018] hsr_slave_1: entered promiscuous mode [ 315.164588][T11100] @: renamed from vlan0 (while UP) [ 315.180094][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'. [ 315.560333][T11018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 315.583571][T11018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 315.631732][T11018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.661997][T11018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.700311][ T5105] Bluetooth: hci3: command tx timeout [ 315.898486][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.956425][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.976375][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.983600][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.036145][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.043366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.423822][T11126] team0: Device gtp0 is of different type [ 316.741689][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.384415][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.408290][T11018] veth0_vlan: entered promiscuous mode [ 317.432829][T11018] veth1_vlan: entered promiscuous mode [ 317.453507][T11168] mmap: syz.3.2118 (11168) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 317.521708][T11018] veth0_macvtap: entered promiscuous mode [ 317.563341][T11018] veth1_macvtap: entered promiscuous mode [ 317.593432][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.629009][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.645205][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.661141][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.677077][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.694886][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.708014][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.719138][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.738155][T11018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.764588][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.780867][ T5105] Bluetooth: hci3: command tx timeout [ 317.793657][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.803925][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.815031][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.828877][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.841304][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.851859][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.862639][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.874612][T11018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.927291][T11018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.968861][T11018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.977719][T11018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.017182][T11018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.243793][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.278800][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.355601][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.368599][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.852756][T11206] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 318.899505][T11205] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2133'. [ 320.240042][T11227] loop5: detected capacity change from 0 to 40427 [ 320.271554][T11227] F2FS-fs (loop5): invalid crc value [ 320.297136][T11227] F2FS-fs (loop5): Found nat_bits in checkpoint [ 320.429522][T11227] F2FS-fs (loop5): Start checkpoint disabled! [ 320.446030][T11227] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 320.561775][T11227] syz.5.2143: attempt to access beyond end of device [ 320.561775][T11227] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.847732][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.857116][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.127754][ T2986] kworker/u4:11: attempt to access beyond end of device [ 321.127754][ T2986] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 321.144930][ T2986] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 321.157637][ T2986] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 321.341056][T11271] syzkaller0: tun_chr_ioctl cmd 35108 [ 321.988919][ T5780] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 322.168859][ T5780] usb 5-1: Using ep0 maxpacket: 8 [ 322.190899][ T5780] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 322.207494][ T5780] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.219215][ T5780] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.229877][ T5780] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.240843][ T5780] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.268805][ T5780] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.288215][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.310050][ T28] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 322.430396][T11302] loop5: detected capacity change from 0 to 64 [ 322.467899][ T27] audit: type=1800 audit(1757451323.722:112): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2175" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 322.491267][T11302] hfs: request for non-existent node 131072 in B*Tree [ 322.498661][T11302] hfs: request for non-existent node 131072 in B*Tree [ 322.506328][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 322.543897][ T5780] usb 5-1: GET_CAPABILITIES returned 0 [ 322.550374][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.563995][ T5780] usbtmc 5-1:16.0: can't read capabilities [ 322.570066][ T28] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 322.581193][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.599952][ T28] usb 4-1: config 0 descriptor?? [ 322.611660][ T28] hub 4-1:0.0: USB hub found [ 322.779655][ T966] usb 5-1: USB disconnect, device number 8 [ 322.827840][ T28] hub 4-1:0.0: 1 port detected [ 322.999115][ T5780] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 323.037611][ T28] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 323.045209][ T28] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 323.068383][ T28] usbhid 4-1:0.0: can't add hid device: -71 [ 323.078674][ T28] usbhid: probe of 4-1:0.0 failed with error -71 [ 323.120082][ T28] usb 4-1: USB disconnect, device number 22 [ 323.183635][ T5780] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 323.208403][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.217406][ T5780] usb 6-1: Product: syz [ 323.228819][ T5780] usb 6-1: Manufacturer: syz [ 323.236625][ T5780] usb 6-1: SerialNumber: syz [ 323.250203][ T5780] usb 6-1: config 0 descriptor?? [ 323.484045][ T28] usb 6-1: USB disconnect, device number 2 [ 324.326618][T11323] loop3: detected capacity change from 0 to 32768 [ 324.358925][T11323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2185 (11323) [ 324.392353][T11323] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.419863][T11323] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 324.437042][T11323] BTRFS info (device loop3): using free space tree [ 324.615246][T11323] BTRFS info (device loop3): enabling ssd optimizations [ 324.629251][T11323] BTRFS info (device loop3): auto enabling async discard [ 324.825456][ T5788] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.186832][T11365] QAT: Device 7 not found [ 326.235319][T11367] loop5: detected capacity change from 0 to 32768 [ 326.267910][T11367] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 326.324530][T11367] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.516635][T11367] XFS (loop5): Ending clean mount [ 326.543443][T11367] XFS (loop5): Quotacheck needed: Please wait. [ 326.641106][T11367] XFS (loop5): Quotacheck: Done. [ 326.732345][T11402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 326.923483][T11018] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 327.146245][T11409] loop3: detected capacity change from 0 to 4096 [ 327.173827][T11409] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 327.299013][ T27] audit: type=1800 audit(1757451328.542:113): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2216" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 327.606156][T11422] loop5: detected capacity change from 0 to 1024 [ 327.667720][T11422] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.734361][T11422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.892142][T11433] netlink: 884 bytes leftover after parsing attributes in process `syz.3.2225'. [ 327.904650][T11422] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 327.961358][T11422] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 327.997837][T11422] EXT4-fs (loop5): This should not happen!! Data will be lost [ 327.997837][T11422] [ 328.018365][T11422] EXT4-fs (loop5): Total free blocks count 0 [ 328.028506][T11422] EXT4-fs (loop5): Free/Dirty block details [ 328.045067][T11422] EXT4-fs (loop5): free_blocks=20480 [ 328.062184][T11422] EXT4-fs (loop5): dirty_blocks=32 [ 328.078913][T11422] EXT4-fs (loop5): Block reservation details [ 328.099236][T11422] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 328.255108][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 329.811645][T11490] loop3: detected capacity change from 0 to 164 [ 329.869323][ T28] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 329.941345][T11492] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 330.063390][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.084948][ T28] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 330.109064][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.139323][ T28] usb 5-1: config 0 descriptor?? [ 330.587971][ T28] elecom 0003:056E:00FF.001D: item fetching failed at offset 0/3 [ 330.591451][T11518] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 330.617143][ T28] elecom: probe of 0003:056E:00FF.001D failed with error -22 [ 330.818452][ T9] usb 5-1: USB disconnect, device number 9 [ 330.958843][ T28] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 330.998433][T11533] loop3: detected capacity change from 0 to 1024 [ 331.006864][T11533] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 331.018894][ T966] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 331.054430][T11533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.066767][T11533] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.132816][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.138863][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 331.170577][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 331.188131][ T28] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 331.199020][ T966] usb 6-1: Using ep0 maxpacket: 16 [ 331.213513][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.229846][ T966] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.248379][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.257052][ T966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.275196][ T28] usb 1-1: Product: syz [ 331.280017][ T28] usb 1-1: Manufacturer: syz [ 331.284655][ T28] usb 1-1: SerialNumber: syz [ 331.289602][ T966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 331.301846][ T966] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 331.313325][ T966] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.361609][ T966] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 331.379083][ T966] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 331.387186][ T966] usb 6-1: Manufacturer: syz [ 331.410999][ T966] usb 6-1: config 0 descriptor?? [ 331.465259][T11545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 331.472455][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 331.487063][T11545] vhci_hcd vhci_hcd.0: Device attached [ 331.511265][T11547] vhci_hcd: connection closed [ 331.516525][ T2957] vhci_hcd: stop threads [ 331.537232][ T2957] vhci_hcd: release socket [ 331.544270][ T2957] vhci_hcd: disconnect device [ 331.549851][ T28] cdc_ncm 1-1:1.0: bind() failure [ 331.554492][ T28] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 331.569155][ T28] cdc_ncm 1-1:1.1: bind() failure [ 331.580030][ T28] usb 1-1: USB disconnect, device number 19 [ 331.718992][ T966] rc_core: IR keymap rc-hauppauge not found [ 331.725004][ T966] Registered IR keymap rc-empty [ 331.732563][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 331.772563][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 331.809988][ T966] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 331.831806][ T966] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 331.856455][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 331.902306][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 331.939563][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 331.989091][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 332.029195][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 332.069059][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 332.102085][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 332.139179][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 332.188940][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 332.235886][ T966] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 332.267371][T11556] loop3: detected capacity change from 0 to 4096 [ 332.280378][ T966] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 332.289886][T11556] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 332.308935][ T966] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 332.322321][ T966] usb 6-1: USB disconnect, device number 3 [ 332.429625][ T27] audit: type=1800 audit(1757451333.692:114): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2279" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 332.478176][T11556] ntfs3: loop3: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 332.719768][T11566] loop3: detected capacity change from 0 to 1024 [ 332.899193][ T2986] hfsplus: b-tree write err: -5, ino 4 [ 333.019793][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 333.263593][T11580] __sock_release: fasync list not empty! [ 333.333812][T11582] loop5: detected capacity change from 0 to 512 [ 333.373471][T11582] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 334.201650][T11600] loop3: detected capacity change from 0 to 4096 [ 334.218310][T11600] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 334.289267][T11600] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 334.307078][T11600] ntfs3: loop3: Failed to load $Extend (-22). [ 334.321364][T11600] ntfs3: loop3: Failed to initialize $Extend. [ 334.814445][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 334.838869][ T786] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 334.988924][ T28] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 335.008044][T11630] ipvlan2: entered promiscuous mode [ 335.014569][T11630] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 335.022040][T11630] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 335.041121][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 335.057249][ T786] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 335.066592][ T786] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 335.075079][ T786] usb 4-1: Product: syz [ 335.079462][ T786] usb 4-1: Manufacturer: syz [ 335.084097][ T786] usb 4-1: SerialNumber: syz [ 335.091421][ T786] usb 4-1: config 0 descriptor?? [ 335.184301][ T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.194665][ T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.206567][ T28] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 335.216682][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 335.226493][ T28] usb 5-1: SerialNumber: syz [ 335.226527][ T786] IPVS: starting estimator thread 0... [ 335.329137][T11633] IPVS: using max 15 ests per chain, 36000 per kthread [ 335.407068][ T786] usb 4-1: USB disconnect, device number 23 [ 335.452491][ T28] usb 5-1: 0:2 : does not exist [ 335.489858][ T28] usb 5-1: USB disconnect, device number 10 [ 335.631166][T11643] netlink: 'syz.5.2319': attribute type 21 has an invalid length. [ 335.639500][T11643] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2319'. [ 335.652920][T11643] netlink: 'syz.5.2319': attribute type 21 has an invalid length. [ 335.661157][T11643] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2319'. [ 336.561568][T11667] program syz.4.2330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.897019][T11660] loop5: detected capacity change from 0 to 32768 [ 336.905523][T11660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2327 (11660) [ 336.933192][T11660] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 336.952850][T11660] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 336.967033][T11660] BTRFS info (device loop5): using free space tree [ 337.054438][T11660] BTRFS info (device loop5): enabling ssd optimizations [ 337.079374][T11660] BTRFS info (device loop5): auto enabling async discard [ 337.242771][ T27] audit: type=1800 audit(1757451338.502:115): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2327" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 337.410027][T11018] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 337.593278][T11702] loop3: detected capacity change from 0 to 512 [ 337.770177][T11702] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 338.075720][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 339.326181][T11731] loop3: detected capacity change from 0 to 32768 [ 339.377303][T11731] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 339.511417][T11731] XFS (loop3): Ending clean mount [ 339.520542][T11755] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2361'. [ 339.727775][ T5788] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 339.846592][T11764] loop5: detected capacity change from 0 to 4096 [ 340.524854][T11787] loop3: detected capacity change from 0 to 2048 [ 340.552091][T11787] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 340.576508][T11787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.270997][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2384'. [ 341.643548][T11825] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 341.674798][T11826] netlink: 178584 bytes leftover after parsing attributes in process `syz.3.2394'. [ 341.694186][T11826] netlink: zone id is out of range [ 341.700978][ T54] block nbd0: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 90 seconds [ 341.712070][ T54] block nbd0: Possible stuck request ffff888021b60200: control (read@1024,1024B). Runtime 90 seconds [ 341.723231][ T54] block nbd0: Possible stuck request ffff888021b60400: control (read@2048,1024B). Runtime 90 seconds [ 341.736814][ T54] block nbd0: Possible stuck request ffff888021b60600: control (read@3072,1024B). Runtime 90 seconds [ 341.748868][T11826] netlink: zone id is out of range [ 341.755899][T11826] netlink: zone id is out of range [ 341.779704][T11826] netlink: zone id is out of range [ 341.800919][T11826] netlink: zone id is out of range [ 341.806236][T11826] netlink: zone id is out of range [ 341.811593][T11826] netlink: zone id is out of range [ 341.823589][T11826] netlink: zone id is out of range [ 341.828880][T11826] netlink: zone id is out of range [ 341.834170][T11826] netlink: zone id is out of range [ 342.078248][T11845] loop5: detected capacity change from 0 to 128 [ 342.129524][T11845] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.149750][T11845] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.243583][T11851] loop3: detected capacity change from 0 to 8192 [ 342.271429][T11851] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 342.296454][T11851] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 342.308310][T11851] REISERFS (device loop3): using ordered data mode [ 342.315040][T11851] reiserfs: using flush barriers [ 342.335420][T11851] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 342.369314][T11018] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.395544][T11851] REISERFS (device loop3): checking transaction log (loop3) [ 342.465702][T11851] REISERFS (device loop3): Using r5 hash to sort names [ 342.481719][T11851] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 342.496360][T11851] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 342.588124][T11851] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 343.314773][T11862] loop5: detected capacity change from 0 to 32768 [ 343.324535][T11862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2408 (11862) [ 343.366308][T11862] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.393112][T11862] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 343.408072][T11862] BTRFS info (device loop5): setting nodatacow, compression disabled [ 343.425760][T11862] BTRFS info (device loop5): max_inline at 0 [ 343.439256][T11862] BTRFS info (device loop5): enabling disk space caching [ 343.452013][T11862] BTRFS info (device loop5): turning off barriers [ 343.469094][T11862] BTRFS info (device loop5): turning on flush-on-commit [ 343.476224][T11862] BTRFS info (device loop5): doing ref verification [ 343.517607][T11862] BTRFS info (device loop5): force clearing of disk cache [ 343.543667][T11862] BTRFS info (device loop5): enabling ssd optimizations [ 343.556941][T11862] BTRFS info (device loop5): max_inline at 4096 [ 343.570159][T11862] BTRFS info (device loop5): disk space caching is enabled [ 343.714456][T11862] BTRFS info (device loop5): auto enabling async discard [ 343.759548][T11862] BTRFS info (device loop5): rebuilding free space tree [ 343.800206][T11862] BTRFS info (device loop5): disabling free space tree [ 343.808988][T11862] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 343.839031][T11862] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 344.040025][ T27] audit: type=1800 audit(1757451345.292:116): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2408" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 344.232643][T11906] loop3: detected capacity change from 0 to 2048 [ 344.270946][T11906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.295633][T11906] ext4 filesystem being mounted at /625/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.411025][T11018] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.440851][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.739485][T11919] loop3: detected capacity change from 0 to 256 [ 344.778064][ T27] audit: type=1800 audit(1757451346.032:117): pid=11919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2430" name="bus" dev="loop3" ino=1048726 res=0 errno=0 [ 345.143852][T11930] loop3: detected capacity change from 0 to 512 [ 345.164586][T11930] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 345.188926][T11930] EXT4-fs (loop3): invalid journal inode [ 345.194700][T11930] EXT4-fs (loop3): can't get journal size [ 345.217415][T11930] EXT4-fs (loop3): 1 truncate cleaned up [ 345.237370][T11930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.442977][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.848044][T11953] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2444'. [ 346.589311][ T27] audit: type=1326 audit(1757451347.832:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 346.611862][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.644560][T11976] loop3: detected capacity change from 0 to 4096 [ 346.658094][T11976] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 346.676659][T11976] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 346.687459][ T27] audit: type=1326 audit(1757451347.832:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 346.717738][T11976] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 346.737281][T11976] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 346.758797][ T27] audit: type=1326 audit(1757451347.882:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 346.802440][T11976] ntfs: volume version 3.1. [ 346.833356][ T27] audit: type=1326 audit(1757451347.882:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1872d8ebe9 code=0x7ffc0000 [ 347.920341][T12015] overlayfs: upper fs does not support file handles, falling back to index=off. [ 347.944572][T12015] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 348.261699][ T5803] Bluetooth: hci3: command 0x0405 tx timeout [ 348.575062][T12028] input: syz1 as /devices/virtual/input/input26 [ 348.615073][T12028] input: failed to attach handler leds to device input26, error: -6 [ 348.675211][T12030] loop3: detected capacity change from 0 to 4096 [ 349.841483][T12081] syz.4.2500 (12081) used greatest stack depth: 19824 bytes left [ 350.012251][T12092] loop9: detected capacity change from 0 to 7 [ 350.060731][T12092] Dev loop9: unable to read RDB block 7 [ 350.066907][T12092] loop9: unable to read partition table [ 350.083441][T12092] loop9: partition table beyond EOD, truncated [ 350.096841][T12092] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 350.339995][ T5803] Bluetooth: hci3: command 0x0405 tx timeout [ 350.372055][T12098] loop3: detected capacity change from 0 to 512 [ 350.410542][T12098] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 350.456453][T12098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.527675][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 350.619608][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 350.665927][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 350.747929][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 350.789174][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 350.815648][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 350.856845][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 350.897630][T12098] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 18: comm syz.3.2508: lblock 23 mapped to illegal pblock 18 (length 1) [ 350.956881][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 350.988297][T12098] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 20: comm syz.3.2508: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 351.435211][ T5788] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 351.486172][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.581915][T12135] loop5: detected capacity change from 0 to 1024 [ 351.599489][T12135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 351.649711][T12135] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.889060][T11018] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 352.233169][T12146] loop3: detected capacity change from 0 to 4096 [ 352.485610][T12157] loop5: detected capacity change from 0 to 512 [ 352.543099][T12157] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 352.605783][T12157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.750683][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 352.815290][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 352.856429][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 352.884389][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 352.917436][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 352.946591][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 352.976731][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 353.003873][T12157] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #2: block 18: comm syz.5.2533: lblock 23 mapped to illegal pblock 18 (length 1) [ 353.030558][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 19: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 353.062745][T12157] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 20: comm syz.5.2533: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 353.475309][T11018] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 353.507186][T11018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.961004][T12186] loop5: detected capacity change from 0 to 2048 [ 353.994168][T12186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.461503][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 354.461521][ T27] audit: type=1326 audit(1757451355.722:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.525286][ T27] audit: type=1326 audit(1757451355.722:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.548476][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2551'. [ 354.558223][T12198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2551'. [ 354.570326][ T27] audit: type=1326 audit(1757451355.762:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.594106][ T27] audit: type=1326 audit(1757451355.762:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.627604][ T27] audit: type=1326 audit(1757451355.762:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.653565][ T27] audit: type=1326 audit(1757451355.762:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.723901][ T27] audit: type=1326 audit(1757451355.762:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.771863][ T27] audit: type=1326 audit(1757451355.762:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 354.807880][ T27] audit: type=1326 audit(1757451355.762:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 354.851650][ T27] audit: type=1326 audit(1757451355.762:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349e58ebe9 code=0x7ffc0000 [ 355.198887][ T966] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 355.379228][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 355.406210][ T966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.424626][T12212] loop5: detected capacity change from 0 to 40427 [ 355.425220][ T966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.442277][T12212] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 355.449409][ T966] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.469096][T12212] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 355.477462][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.485707][ T966] usb 4-1: Product: syz [ 355.498039][ T966] usb 4-1: Manufacturer: syz [ 355.503332][ T966] usb 4-1: SerialNumber: syz [ 355.523289][T12212] F2FS-fs (loop5): Found nat_bits in checkpoint [ 355.585364][T12212] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 355.592710][T12212] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 355.735112][ T966] usb 4-1: 0:2 : does not exist [ 355.753376][ T966] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 355.819505][ T966] usb 4-1: USB disconnect, device number 24 [ 356.597587][T12244] loop3: detected capacity change from 0 to 512 [ 356.653129][T12244] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 356.673579][T12244] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 356.729529][T12244] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 356.738017][T12244] System zones: 0-2, 18-18, 34-35 [ 356.761367][T12244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 356.896034][T12244] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 356.909276][T12244] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 356.932098][T12244] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 356.996349][T12244] fscrypt (loop3, inode 12): Error -61 getting encryption context [ 357.132394][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.134911][T12238] loop5: detected capacity change from 0 to 32768 [ 357.197137][T12238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 357.206384][T12238] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 357.380072][T12238] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 357.401867][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 357.416828][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 357.493014][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms [ 357.506422][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 357.514303][T12238] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 357.632774][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2579'. [ 357.642055][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 357.776349][T12268] loop3: detected capacity change from 0 to 1024 [ 357.812428][T12268] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 357.847239][T12268] System zones: 0-1, 3-36 [ 357.855792][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.967008][T12268] EXT4-fs (loop3): shut down requested (2) [ 358.079320][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.090033][ T2957] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 358.339771][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.640943][T12292] loop5: detected capacity change from 0 to 1024 [ 358.666634][T12292] EXT4-fs: Ignoring removed nobh option [ 358.680709][T12292] EXT4-fs: Ignoring removed bh option [ 358.699633][T12292] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.755728][T12292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.984971][T12292] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.2591: Allocating blocks 497-513 which overlap fs metadata [ 359.014068][T12292] EXT4-fs (loop5): Remounting filesystem read-only serialport: VM disconnected.