last executing test programs: 5.963281428s ago: executing program 0 (id=1391): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4c7, &(0x7f0000001240)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000003c0)='./file3\x00') 4.556592464s ago: executing program 3 (id=1402): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="06", 0x1}], 0x1}}], 0x1, 0x0) 4.555201144s ago: executing program 0 (id=1409): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000000000000001"]) 3.677252461s ago: executing program 0 (id=1403): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 3.676906541s ago: executing program 3 (id=1405): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) 3.509201074s ago: executing program 1 (id=1406): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x20) fsmount(r0, 0x0, 0x0) 3.454650565s ago: executing program 3 (id=1407): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400aa6"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.297959058s ago: executing program 1 (id=1411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x20}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gretap0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x44024) 3.226618879s ago: executing program 1 (id=1412): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r1}, 0x10) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x29, 0x0, 0x0}], 0x1}) 3.053893782s ago: executing program 1 (id=1413): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.505870442s ago: executing program 3 (id=1416): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000000000000001"]) 1.504948582s ago: executing program 0 (id=1424): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 1.504322122s ago: executing program 1 (id=1417): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.484480992s ago: executing program 2 (id=1418): mount$9p_fd(0x0, 0x0, 0x0, 0x20000, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 1.404800933s ago: executing program 2 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 1.362593905s ago: executing program 0 (id=1420): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) 1.226414687s ago: executing program 1 (id=1421): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0]) 1.101972769s ago: executing program 0 (id=1422): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x3137, 0x1801, 0x2, &(0x7f00000003c0)="9f9e"}], 0x1}) 1.08208855s ago: executing program 2 (id=1423): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000680)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@adinicb}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@uid}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 812.236865ms ago: executing program 2 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001840)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 716.976526ms ago: executing program 2 (id=1426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 605.949788ms ago: executing program 2 (id=1427): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) 528.78912ms ago: executing program 3 (id=1428): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0) 0s ago: executing program 3 (id=1429): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'hfs\x00', 0x3a, '#! ', 0x3a, './file2'}, 0x2e) kernel console output (not intermixed with test programs): 808][ T7544] fido_id[7544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 162.235936][ T7539] EXT4-fs (loop0): Remounting filesystem read-only [ 162.382041][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.429415][ T7548] loop1: detected capacity change from 0 to 2048 [ 162.512009][ T7548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.716380][ T7541] loop3: detected capacity change from 0 to 32768 [ 162.866739][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 162.949616][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 162.982637][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 162.982637][ T12] [ 162.993539][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 163.013227][ T12] EXT4-fs (loop1): Free/Dirty block details [ 163.022367][ T12] EXT4-fs (loop1): free_blocks=4096 [ 163.034119][ T12] EXT4-fs (loop1): dirty_blocks=576 [ 163.041392][ T12] EXT4-fs (loop1): Block reservation details [ 163.052003][ T12] EXT4-fs (loop1): i_reserved_data_blocks=36 [ 163.082608][ T1094] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 544 with error 28 [ 163.392851][ T28] audit: type=1326 audit(1751804244.168:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758d98e929 code=0x7fc00000 [ 163.867110][ T7579] QAT: Invalid ioctl 1075883590 [ 163.872890][ T7579] QAT: Invalid ioctl 1075883590 [ 163.891614][ T7579] QAT: Invalid ioctl 1075883590 [ 163.915141][ T7579] QAT: Invalid ioctl 1075883590 [ 163.921413][ T7579] QAT: Invalid ioctl 1075883590 [ 163.948054][ T7579] QAT: Invalid ioctl 1075883590 [ 163.967256][ T7579] QAT: Invalid ioctl 1075883590 [ 163.985544][ T7579] QAT: Invalid ioctl 1075883590 [ 163.991993][ T7579] QAT: Invalid ioctl 1075883590 [ 164.006363][ T7579] QAT: Invalid ioctl 1075883590 [ 164.272106][ T7593] loop3: detected capacity change from 0 to 512 [ 164.302701][ T7593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.351193][ T7593] EXT4-fs (loop3): 1 truncate cleaned up [ 164.376061][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.377896][ T7596] warning: `syz.0.704' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.652805][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.546310][ T7622] loop3: detected capacity change from 0 to 2048 [ 165.601384][ T7622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.808641][ T7614] loop2: detected capacity change from 0 to 40427 [ 165.850094][ T7614] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 165.896998][ T7630] loop1: detected capacity change from 0 to 512 [ 165.923955][ T7614] F2FS-fs (loop2): invalid crc value [ 165.935576][ T7630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.971367][ T7614] F2FS-fs (loop2): Found nat_bits in checkpoint [ 165.985311][ T7630] EXT4-fs (loop1): 1 truncate cleaned up [ 166.008715][ T7630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.184837][ T7614] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 166.247916][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.269537][ T2918] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 166.339414][ T7614] F2FS-fs (loop2): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x97f/0x19e0 [ 166.355727][ T2918] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 166.383492][ T2918] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.383492][ T2918] [ 166.407299][ T7614] syz.2.712: attempt to access beyond end of device [ 166.407299][ T7614] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 166.436192][ T2918] EXT4-fs (loop3): Total free blocks count 0 [ 166.456048][ T2918] EXT4-fs (loop3): Free/Dirty block details [ 166.471040][ T2918] EXT4-fs (loop3): free_blocks=4096 [ 166.478090][ T2918] EXT4-fs (loop3): dirty_blocks=512 [ 166.483807][ T2918] EXT4-fs (loop3): Block reservation details [ 166.499227][ T2918] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 166.510362][ T2918] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 166.556492][ T5789] syz-executor: attempt to access beyond end of device [ 166.556492][ T5789] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.584421][ T5789] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 166.856397][ T7629] loop0: detected capacity change from 0 to 32768 [ 166.917572][ T7642] loop3: detected capacity change from 0 to 1024 [ 166.926915][ T7629] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.959808][ T7642] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.086112][ T7642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.121007][ T7629] XFS (loop0): Ending clean mount [ 167.138624][ T7629] XFS (loop0): Quotacheck needed: Please wait. [ 167.160102][ T7642] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.327105][ T7640] loop1: detected capacity change from 0 to 32768 [ 167.332273][ T7629] XFS (loop0): Quotacheck: Done. [ 167.347522][ T7642] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 167.374569][ T7642] EXT4-fs (loop3): Remounting filesystem read-only [ 167.385422][ T7640] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.722 (7640) [ 167.435964][ T7640] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.487246][ T7640] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 167.556535][ T7640] BTRFS info (device loop1): setting nodatacow, compression disabled [ 167.567128][ T7640] BTRFS info (device loop1): max_inline at 0 [ 167.573452][ T7640] BTRFS info (device loop1): enabling disk space caching [ 167.590662][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.592339][ T7640] BTRFS info (device loop1): turning off barriers [ 167.629397][ T7640] BTRFS info (device loop1): turning on flush-on-commit [ 167.638924][ T5792] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.653164][ T7640] BTRFS info (device loop1): doing ref verification [ 167.686969][ T7640] BTRFS info (device loop1): force clearing of disk cache [ 167.716758][ T7640] BTRFS info (device loop1): enabling ssd optimizations [ 167.745659][ T7640] BTRFS info (device loop1): max_inline at 4096 [ 167.784962][ T7640] BTRFS info (device loop1): disk space caching is enabled [ 168.085044][ T7640] BTRFS info (device loop1): auto enabling async discard [ 168.113646][ T7640] BTRFS info (device loop1): rebuilding free space tree [ 168.160762][ T7640] BTRFS info (device loop1): disabling free space tree [ 168.194937][ T7640] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.214756][ T7640] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.559795][ T7678] loop0: detected capacity change from 0 to 64 [ 168.593533][ T5790] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.946295][ T7655] loop3: detected capacity change from 0 to 32768 [ 168.989736][ T7655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.724 (7655) [ 169.099657][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.138809][ T7655] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.145407][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.188125][ T7655] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 169.213882][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.255306][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.271058][ T7655] BTRFS info (device loop3): setting nodatacow, compression disabled [ 169.276987][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.321020][ T7655] BTRFS info (device loop3): enabling ssd optimizations [ 169.334841][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.353959][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.354478][ T7655] BTRFS info (device loop3): setting datacow [ 169.368589][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.388797][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.417162][ T7655] BTRFS info (device loop3): doing ref verification [ 169.435700][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.474264][ T7655] BTRFS info (device loop3): force clearing of disk cache [ 169.483277][ T7655] BTRFS info (device loop3): turning off barriers [ 169.485281][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.534974][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.554383][ T7655] BTRFS info (device loop3): using spread ssd allocation scheme [ 169.560051][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.592641][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.611394][ T23] hid-generic 00A1:0009:0003.000E: unknown main item tag 0x0 [ 169.616662][ T7655] BTRFS info (device loop3): using free space tree [ 169.693551][ T23] hid-generic 00A1:0009:0003.000E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 169.911761][ T7655] BTRFS info (device loop3): auto enabling async discard [ 169.947595][ T7655] BTRFS info (device loop3): rebuilding free space tree [ 170.295690][ T28] audit: type=1800 audit(1751804251.058:33): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.724" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 170.443714][ T5794] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.217221][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 171.380833][ T7742] loop1: detected capacity change from 0 to 128 [ 171.470192][ T28] audit: type=1800 audit(1751804252.248:34): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.743" name="file2" dev="loop1" ino=1048653 res=0 errno=0 [ 171.511059][ T7742] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 171.529868][ T7742] FAT-fs (loop1): Filesystem has been set read-only [ 171.539704][ T7742] syz.1.743: attempt to access beyond end of device [ 171.539704][ T7742] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 171.580685][ T7742] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 171.598507][ T7742] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 171.616601][ T7742] syz.1.743: attempt to access beyond end of device [ 171.616601][ T7742] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 171.637815][ T7742] syz.1.743: attempt to access beyond end of device [ 171.637815][ T7742] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 171.687392][ T7742] syz.1.743: attempt to access beyond end of device [ 171.687392][ T7742] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 171.711683][ T7742] syz.1.743: attempt to access beyond end of device [ 171.711683][ T7742] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 171.771870][ T7751] loop0: detected capacity change from 0 to 64 [ 171.832916][ T7751] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 172.059390][ T7755] vxcan0: tx address claim with dlc 0 [ 172.422103][ T7769] loop2: detected capacity change from 0 to 2048 [ 172.452355][ T7769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.910573][ T7780] loop2: detected capacity change from 0 to 512 [ 172.926704][ T7780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.955217][ T7780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.985006][ T7780] EXT4-fs (loop2): 1 truncate cleaned up [ 173.006390][ T7780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.074114][ T7784] loop3: detected capacity change from 0 to 512 [ 173.094787][ T28] audit: type=1800 audit(1751804253.868:35): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.760" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 173.178949][ T7788] loop0: detected capacity change from 0 to 512 [ 173.188390][ T7784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 173.235932][ T7784] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.250447][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.287606][ T7788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.325236][ T7788] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.447388][ T7788] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 10: comm syz.0.762: lblock 15 mapped to illegal pblock 10 (length 19) [ 173.471954][ T7788] EXT4-fs (loop0): Remounting filesystem read-only [ 173.577932][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.581451][ T7794] loop2: detected capacity change from 0 to 256 [ 173.620473][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 173.752526][ T7796] loop1: detected capacity change from 0 to 2048 [ 173.811554][ T7802] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.071618][ T7806] loop1: detected capacity change from 0 to 2048 [ 174.133273][ T7806] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 174.155234][ T7806] UDF-fs: Scanning with blocksize 512 failed [ 174.226281][ T7806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.536104][ T7818] loop2: detected capacity change from 0 to 64 [ 174.742925][ T28] audit: type=1326 audit(1751804255.508:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 174.814285][ T28] audit: type=1326 audit(1751804255.508:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 174.944667][ T28] audit: type=1326 audit(1751804255.558:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 174.981579][ T7828] loop2: detected capacity change from 0 to 512 [ 175.025959][ T7828] EXT4-fs: Ignoring removed bh option [ 175.034647][ T28] audit: type=1326 audit(1751804255.558:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 175.075048][ T7828] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 175.092914][ T28] audit: type=1326 audit(1751804255.558:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc6e78d290 code=0x7ffc0000 [ 175.141022][ T7828] EXT4-fs (loop2): 1 truncate cleaned up [ 175.176428][ T7828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.271925][ T28] audit: type=1326 audit(1751804255.558:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 175.273288][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 175.305861][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.785'. [ 175.315609][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 175.345404][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.785'. [ 175.355146][ T28] audit: type=1326 audit(1751804255.558:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 175.390532][ T28] audit: type=1326 audit(1751804255.558:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 175.523383][ T28] audit: type=1326 audit(1751804255.558:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e78e929 code=0x7ffc0000 [ 175.717940][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.780423][ T7848] netlink: 56 bytes leftover after parsing attributes in process `syz.3.790'. [ 175.834451][ T7848] netlink: 56 bytes leftover after parsing attributes in process `syz.3.790'. [ 175.843908][ T7850] netlink: 56 bytes leftover after parsing attributes in process `syz.3.790'. [ 175.907470][ T7848] netlink: 56 bytes leftover after parsing attributes in process `syz.3.790'. [ 176.007048][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.233660][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 176.246743][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 176.266537][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.290402][ T9] usb 2-1: config 0 descriptor?? [ 176.514671][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 176.536018][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.552306][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.574563][ T9] usb 2-1: media controller created [ 176.641798][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.710409][ T7851] loop0: detected capacity change from 0 to 32768 [ 176.721091][ T9] az6027: usb out operation failed. (-71) [ 176.755347][ T9] az6027: usb out operation failed. (-71) [ 176.805960][ T7851] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.824346][ T9] stb0899_attach: Driver disabled by Kconfig [ 176.835184][ T9] az6027: no front-end attached [ 176.835184][ T9] [ 176.852736][ T9] az6027: usb out operation failed. (-71) [ 176.860145][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 176.869623][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 176.901448][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 176.920010][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 176.942259][ T9] usb 2-1: USB disconnect, device number 9 [ 176.997206][ T7851] XFS (loop0): Ending clean mount [ 177.081416][ T7851] XFS (loop0): Quotacheck needed: Please wait. [ 177.101689][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 177.250522][ T7851] XFS (loop0): Quotacheck: Done. [ 177.435351][ T7878] loop1: detected capacity change from 0 to 1024 [ 177.442937][ T7880] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 177.459446][ T7880] netlink: 'syz.2.798': attribute type 4 has an invalid length. [ 177.484388][ T7880] netlink: 192 bytes leftover after parsing attributes in process `syz.2.798'. [ 177.601010][ T7878] hfsplus: catalog searching failed [ 177.697989][ T5792] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.698909][ T1143] hfsplus: bad catalog file entry [ 177.716008][ T1143] hfsplus: b-tree write err: -5, ino 3 [ 178.352808][ T7895] loop2: detected capacity change from 0 to 8 [ 178.975376][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 179.184538][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 179.199430][ T5878] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.209587][ T5878] usb 3-1: config 0 has no interface number 0 [ 179.234579][ T5878] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.251918][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.263367][ T5878] usb 3-1: Product: syz [ 179.284519][ T5878] usb 3-1: Manufacturer: syz [ 179.289229][ T5878] usb 3-1: SerialNumber: syz [ 179.328822][ T5878] usb 3-1: config 0 descriptor?? [ 179.349289][ T5878] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 179.575322][ T5878] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 179.602199][ T5878] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 179.656159][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.852150][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 179.871633][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.887060][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.909712][ T7927] loop3: detected capacity change from 0 to 512 [ 179.910978][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 179.923521][ T9] pvrusb2: ********** [ 179.928103][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 179.939146][ T9] pvrusb2: Important functionality might not be entirely working. [ 179.947486][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 179.959635][ T9] pvrusb2: ********** [ 180.007962][ T7927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.023674][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.039764][ T5878] usb 3-1: USB disconnect, device number 9 [ 180.055599][ T7927] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.092427][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.119043][ T2322] pvrusb2: Invalid write control endpoint [ 180.132816][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 180.195234][ T5878] quatech2 3-1:0.51: device disconnected [ 180.200135][ T7927] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 10: comm syz.3.821: lblock 15 mapped to illegal pblock 10 (length 19) [ 180.233451][ T7927] EXT4-fs (loop3): Remounting filesystem read-only [ 180.297281][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.310187][ T2322] pvrusb2: Invalid write control endpoint [ 180.330158][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 180.349967][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 180.361228][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 180.374042][ T2322] pvrusb2: Device being rendered inoperable [ 180.390925][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 180.394096][ T9] usb 2-1: USB disconnect, device number 10 [ 180.399462][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 180.427304][ T2322] pvrusb2: Attached sub-driver cx25840 [ 180.440635][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.461490][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 180.821445][ T7943] loop3: detected capacity change from 0 to 128 [ 180.849990][ T7943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 180.859218][ T7943] System zones: 1-3, 19-19, 35-36 [ 180.873920][ T7943] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 180.899145][ T7943] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.950063][ T7943] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 180.989607][ T5794] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.655526][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 182.289586][ T7967] Zero length message leads to an empty skb [ 182.324782][ T5859] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.472372][ T28] audit: type=1326 audit(1751804263.248:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76bb8e929 code=0x7ffc0000 [ 182.525540][ T28] audit: type=1326 audit(1751804263.278:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ff76bb8e929 code=0x7ffc0000 [ 182.550111][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 182.561029][ T28] audit: type=1326 audit(1751804263.278:47): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76bb8e929 code=0x7ffc0000 [ 182.625662][ T5859] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 182.638174][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.649585][ T28] audit: type=1326 audit(1751804263.278:48): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76bb8e929 code=0x7ffc0000 [ 182.682666][ T5859] usb 4-1: Product: syz [ 182.685743][ T28] audit: type=1326 audit(1751804263.278:49): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7ff76bb8e929 code=0x7ffc0000 [ 182.688412][ T5859] usb 4-1: Manufacturer: syz [ 182.744789][ T5859] usb 4-1: SerialNumber: syz [ 182.760897][ T5859] usb 4-1: config 0 descriptor?? [ 182.765032][ T28] audit: type=1326 audit(1751804263.278:50): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76bb8e929 code=0x7ffc0000 [ 182.794950][ T5859] gspca_main: se401-2.14.0 probing 047d:5003 [ 182.802045][ T28] audit: type=1326 audit(1751804263.278:51): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76bb8e929 code=0x7ffc0000 [ 183.139458][ T5878] kernel write not supported for file /input/mouse0 (pid: 5878 comm: kworker/0:7) [ 183.182480][ T5859] gspca_se401: Too many frame sizes [ 183.219366][ T7977] loop2: detected capacity change from 0 to 32768 [ 183.310991][ T7981] loop1: detected capacity change from 0 to 512 [ 183.335958][ T7981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.400040][ T7981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.400169][ T7981] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.472842][ T7981] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.842: corrupted xattr block 19: overlapping e_value [ 183.478454][ T9] usb 4-1: USB disconnect, device number 8 [ 183.634478][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.076051][ T7999] loop1: detected capacity change from 0 to 512 [ 184.114949][ T5859] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 184.149050][ T7999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.848: invalid indirect mapped block 10 (level 1) [ 184.154581][ T7998] loop0: detected capacity change from 0 to 4096 [ 184.205977][ T7999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.848: invalid indirect mapped block 8 (level 1) [ 184.286642][ T7999] EXT4-fs (loop1): 1 truncate cleaned up [ 184.316797][ T7999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.326596][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 184.358882][ T5859] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 184.390640][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.417921][ T5859] usb 3-1: config 0 descriptor?? [ 184.444963][ T5859] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 184.552519][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.778351][ T8010] loop1: detected capacity change from 0 to 128 [ 184.798829][ T8010] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.034372][ T1188] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.224998][ T1188] usb 1-1: Using ep0 maxpacket: 32 [ 185.252201][ T1188] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 185.260988][ T1188] usb 1-1: config 0 has no interface number 0 [ 185.273350][ T8016] loop1: detected capacity change from 0 to 2048 [ 185.280134][ T1188] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.310152][ T5859] gspca_sonixj: reg_r err -71 [ 185.314280][ T1188] usb 1-1: config 0 interface 85 has no altsetting 0 [ 185.324919][ T5859] sonixj: probe of 3-1:0.0 failed with error -71 [ 185.342262][ T5859] usb 3-1: USB disconnect, device number 10 [ 185.372749][ T1188] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 185.402078][ T8016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.425306][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.446487][ T1188] usb 1-1: Product: syz [ 185.451108][ T1188] usb 1-1: Manufacturer: syz [ 185.498198][ T1188] usb 1-1: SerialNumber: syz [ 185.516797][ T1188] usb 1-1: config 0 descriptor?? [ 185.535943][ T8016] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.587380][ T8016] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 185.625210][ T8016] EXT4-fs (loop1): This should not happen!! Data will be lost [ 185.625210][ T8016] [ 185.664669][ T8016] EXT4-fs (loop1): Total free blocks count 0 [ 185.671052][ T8016] EXT4-fs (loop1): Free/Dirty block details [ 185.694793][ T8016] EXT4-fs (loop1): free_blocks=2415919104 [ 185.700744][ T8016] EXT4-fs (loop1): dirty_blocks=16 [ 185.724594][ T8016] EXT4-fs (loop1): Block reservation details [ 185.730898][ T8016] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 185.766094][ T8023] loop3: detected capacity change from 0 to 4096 [ 185.785628][ T8023] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 185.822153][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 185.984747][ T8023] ntfs3: loop3: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 186.117601][ T8027] loop2: detected capacity change from 0 to 164 [ 186.129484][ T12] ntfs3: loop3: ino=1e, failed to parse mft record [ 186.167923][ T8027] Unable to read rock-ridge attributes [ 186.170305][ T1188] appletouch 1-1:0.85: Geyser mode initialized. [ 186.191361][ T1188] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input22 [ 186.261399][ T8027] Unable to read rock-ridge attributes [ 186.467390][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 186.476185][ T5878] usb 1-1: USB disconnect, device number 10 [ 186.534624][ T8034] bond_slave_0: entered promiscuous mode [ 186.541093][ T8034] bond_slave_1: entered promiscuous mode [ 186.549256][ T8034] macsec2: entered allmulticast mode [ 186.556249][ T8034] bond0: entered allmulticast mode [ 186.557711][ T5878] appletouch 1-1:0.85: input: appletouch disconnected [ 186.562350][ T8034] bond_slave_0: entered allmulticast mode [ 186.601774][ T8034] bond_slave_1: entered allmulticast mode [ 186.652156][ T8034] bond0: left allmulticast mode [ 186.663755][ T8034] bond_slave_0: left allmulticast mode [ 186.673263][ T8034] bond_slave_1: left allmulticast mode [ 186.680348][ T8034] bond_slave_0: left promiscuous mode [ 186.686161][ T8034] bond_slave_1: left promiscuous mode [ 186.991891][ T8043] loop3: detected capacity change from 0 to 256 [ 187.066875][ T8043] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 187.113716][ T8043] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 187.185768][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.869'. [ 187.389173][ T8054] loop0: detected capacity change from 0 to 512 [ 187.454007][ T8054] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.872: corrupted in-inode xattr: e_value size too large [ 187.530215][ T8054] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.872: couldn't read orphan inode 15 (err -117) [ 187.552798][ T8054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.752378][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.169066][ T8081] loop0: detected capacity change from 0 to 256 [ 188.186775][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 188.374855][ T8084] netlink: 'syz.0.885': attribute type 11 has an invalid length. [ 188.394108][ T8084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.885'. [ 188.403944][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 188.417287][ T5878] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 188.431797][ T5878] usb 3-1: config 0 has no interface number 0 [ 188.438363][ T5878] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.455862][ T5878] usb 3-1: config 0 interface 85 has no altsetting 0 [ 188.466155][ T5878] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 188.490614][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.504511][ T5878] usb 3-1: Product: syz [ 188.509646][ T5878] usb 3-1: Manufacturer: syz [ 188.534474][ T5878] usb 3-1: SerialNumber: syz [ 188.550764][ T5878] usb 3-1: config 0 descriptor?? [ 189.198844][ T5878] appletouch 3-1:0.85: Geyser mode initialized. [ 189.208397][ T5878] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input23 [ 189.466062][ T1188] usb 3-1: USB disconnect, device number 11 [ 189.502383][ T1188] appletouch 3-1:0.85: input: appletouch disconnected [ 189.677913][ T8094] loop0: detected capacity change from 0 to 32768 [ 189.703011][ T8094] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 189.762038][ T8094] XFS (loop0): Ending clean mount [ 189.798103][ T8094] XFS (loop0): Quotacheck needed: Please wait. [ 189.848426][ T8094] XFS (loop0): Quotacheck: Done. [ 189.885310][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.091465][ T8114] loop2: detected capacity change from 0 to 256 [ 190.104732][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 190.133688][ T23] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.145660][ T5792] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.164849][ T23] usb 2-1: config 0 has no interface number 0 [ 190.185562][ T23] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 190.197541][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.236392][ T23] usb 2-1: Product: syz [ 190.240655][ T23] usb 2-1: Manufacturer: syz [ 190.253262][ T23] usb 2-1: SerialNumber: syz [ 190.293630][ T23] usb 2-1: config 0 descriptor?? [ 190.346873][ T23] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 190.350328][ T8118] loop3: detected capacity change from 0 to 128 [ 190.579567][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 190.663879][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.791527][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 190.992045][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.993508][ T1188] usb 2-1: USB disconnect, device number 11 [ 191.053160][ T1188] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 191.110602][ T1188] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 191.158871][ T1188] quatech2 2-1:0.51: device disconnected [ 191.596925][ T8147] loop0: detected capacity change from 0 to 128 [ 191.653611][ T8147] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 191.904848][ T5878] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.008219][ T8159] loop0: detected capacity change from 0 to 512 [ 192.097681][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 192.134480][ T5878] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.155199][ T8159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.174513][ T5878] usb 2-1: config 0 has no interface number 0 [ 192.205879][ T5878] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.227780][ T8167] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 192.233880][ T8167] ip6erspan0: linktype set to 768 [ 192.240310][ T8159] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.251557][ T5878] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.278804][ T5878] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 192.307904][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.321720][ T8159] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 192.332233][ T5878] usb 2-1: config 0 descriptor?? [ 192.456759][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.646339][ T8173] loop2: detected capacity change from 0 to 4096 [ 192.664868][ T8173] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 192.695000][ T8173] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 192.721052][ T8173] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 192.757633][ T8173] ntfs: volume version 3.1. [ 192.767774][ T5878] hid (null): invalid report_count 1405183649 [ 192.782187][ T8176] loop0: detected capacity change from 0 to 4096 [ 192.820025][ T8176] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 192.985106][ T5878] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000F/input/input24 [ 193.023656][ T1143] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 193.057193][ T5789] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 193.065866][ T8176] ntfs3: loop0: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 193.148100][ T5878] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000F/input/input25 [ 193.252023][ T5878] uclogic 0003:28BD:0071.000F: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 193.298092][ T2955] ntfs3: loop0: ino=1e, failed to parse mft record [ 193.313719][ T5878] usb 2-1: USB disconnect, device number 12 [ 193.519606][ T8179] fido_id[8179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 193.670527][ T28] audit: type=1326 audit(1751804274.438:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.2.927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff76bb8e929 code=0x0 [ 193.761406][ T8187] loop3: detected capacity change from 0 to 512 [ 193.820578][ T8187] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.928: inode #15: comm syz.3.928: iget: illegal inode # [ 193.876973][ T8187] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.928: couldn't read orphan inode 15 (err -117) [ 193.925071][ T8187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.060842][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.197433][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 194.213334][ T8199] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 194.393787][ T8202] loop0: detected capacity change from 0 to 128 [ 194.416479][ T8202] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.452766][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.459808][ T967] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.468196][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.474590][ T8202] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.654988][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 194.667464][ T967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 194.688475][ T967] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 194.701246][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.727545][ T967] usb 4-1: Product: syz [ 194.739547][ T967] usb 4-1: Manufacturer: syz [ 194.760538][ T967] usb 4-1: SerialNumber: syz [ 194.802273][ T967] usb 4-1: config 0 descriptor?? [ 194.821214][ T8200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.851213][ T967] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 194.946676][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 195.275088][ T5878] usb 4-1: USB disconnect, device number 9 [ 195.275424][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 196.229125][ T5793] block nbd0: Receive control failed (result -32) [ 196.235116][ T50] block nbd0: Receive control failed (result -32) [ 196.244283][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.303890][ T8209] loop0: detected capacity change from 0 to 32768 [ 196.380044][ T8209] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 196.390956][ T8209] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 196.452335][ T8209] gfs2: fsid=syz:syz.s: journal 0 mapped with 10 extents in 0ms [ 196.466562][ T8] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 196.510760][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.512149][ T8209] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 196.545975][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.594337][ T8] usb 4-1: Product: syz [ 196.598700][ T8] usb 4-1: Manufacturer: syz [ 196.637906][ T8] usb 4-1: SerialNumber: syz [ 196.674661][ T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.799061][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 196.928467][ T8224] loop1: detected capacity change from 0 to 40427 [ 197.017972][ T8224] F2FS-fs (loop1): invalid crc value [ 197.065635][ T5878] usb 4-1: USB disconnect, device number 10 [ 197.096834][ T8224] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.264986][ T8224] F2FS-fs (loop1): Start checkpoint disabled! [ 197.294799][ T8224] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 197.408464][ T8224] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 197.909418][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 197.922750][ T8] ath9k_htc: Failed to initialize the device [ 197.939217][ T5878] usb 4-1: ath9k_htc: USB layer deinitialized [ 198.314399][ T5878] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 198.408634][ T8256] loop2: detected capacity change from 0 to 256 [ 198.516352][ T5878] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 198.529317][ T5878] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 198.585060][ T5878] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.596866][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.605294][ T5878] usb 4-1: Product: syz [ 198.610343][ T5878] usb 4-1: Manufacturer: syz [ 198.623165][ T5878] usb 4-1: SerialNumber: syz [ 198.643841][ T5878] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 198.851488][ T5878] usb 4-1: USB disconnect, device number 11 [ 199.463383][ T8280] loop2: detected capacity change from 0 to 1024 [ 199.624986][ T8285] loop1: detected capacity change from 0 to 16 [ 199.650261][ T8285] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 199.769804][ T8280] loop2: detected capacity change from 0 to 1024 [ 199.999539][ T12] hfsplus: b-tree write err: -5, ino 4 [ 201.469727][ T8329] tipc: Started in network mode [ 201.480333][ T8329] tipc: Node identity ac14140f, cluster identity 4711 [ 201.516043][ T8329] tipc: New replicast peer: 255.255.255.255 [ 201.552924][ T8329] tipc: Enabled bearer , priority 10 [ 201.649025][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 201.650845][ T5798] Bluetooth: hci3: command 0x0405 tx timeout [ 201.660005][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 201.914887][ T8337] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 201.922372][ T8337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.971322][ T8337] vhci_hcd vhci_hcd.0: Device attached [ 202.244726][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 202.264355][ T5878] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 202.466755][ T8] usb 4-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 202.499878][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.530700][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.548867][ T8362] tap0: tun_chr_ioctl cmd 2180551740 [ 202.574344][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.596262][ T8] usb 4-1: config 0 descriptor?? [ 202.637911][ T23] tipc: Node number set to 2886997007 [ 202.898535][ T8342] usb 39-1: recv xbuf, 0 [ 202.899330][ T9] usb 4-1: USB disconnect, device number 12 [ 202.934968][ T8372] loop2: detected capacity change from 0 to 128 [ 202.939569][ T2955] vhci_hcd: stop threads [ 202.963220][ T8372] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.981926][ T2955] vhci_hcd: release socket [ 202.990037][ T8372] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.019576][ T2955] vhci_hcd: disconnect device [ 203.198884][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.327561][ T8380] loop0: detected capacity change from 0 to 4096 [ 203.438622][ T8385] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.792210][ T8389] loop3: detected capacity change from 0 to 2048 [ 203.863708][ T8392] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.127048][ T8392] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 204.180931][ T8392] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 204.224153][ T8392] Remounting filesystem read-only [ 204.235449][ T1094] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 204.271826][ T1094] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 204.294833][ T8398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1015'. [ 204.300093][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.319214][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.332807][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.349654][ T1094] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 204.356780][ T1094] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 204.372108][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.382319][ T8378] loop1: detected capacity change from 0 to 32768 [ 204.384443][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.407397][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.417064][ T1094] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 204.423913][ T1094] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 204.463215][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.495832][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.505369][ T1094] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.519340][ T8378] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.534890][ T5794] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 204.552521][ T5794] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 204.560957][ T5794] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 204.642636][ T8378] XFS (loop1): Ending clean mount [ 204.649159][ T5794] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 204.663177][ T8413] ax25_connect(): syz.0.1017 uses autobind, please contact jreuter@yaina.de [ 204.704557][ T5794] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 204.719119][ T8378] XFS (loop1): Quotacheck needed: Please wait. [ 204.725059][ T5794] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 204.895382][ T8378] XFS (loop1): Quotacheck: Done. [ 205.155488][ T8418] loop3: detected capacity change from 0 to 2048 [ 205.226586][ T8418] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.392894][ T5790] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.226399][ T8434] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 206.425099][ T8434] bond2: entered promiscuous mode [ 206.436420][ T8434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.874778][ T967] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 207.055820][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 207.069798][ T967] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 207.082081][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.129125][ T967] usb 1-1: config 0 descriptor?? [ 207.138822][ T8451] tipc: Started in network mode [ 207.155992][ T8451] tipc: Node identity ac14140f, cluster identity 4711 [ 207.163292][ T8451] tipc: New replicast peer: 255.255.255.255 [ 207.173488][ T8451] tipc: Enabled bearer , priority 10 [ 207.282378][ T8435] loop1: detected capacity change from 0 to 40427 [ 207.292487][ T8435] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 207.309735][ T8435] F2FS-fs (loop1): Image doesn't support compression [ 207.323156][ T8435] F2FS-fs (loop1): heap/no_heap options were deprecated [ 207.335511][ T8435] F2FS-fs (loop1): Image doesn't support compression [ 207.360355][ T8435] F2FS-fs (loop1): invalid crc value [ 207.375807][ T967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 207.390287][ T8435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.402933][ T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.424578][ T5878] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 207.441582][ T967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 207.475260][ T967] usb 1-1: media controller created [ 207.571917][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.587755][ T8435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.614847][ T967] az6027: usb out operation failed. (-71) [ 207.631099][ T967] az6027: usb out operation failed. (-71) [ 207.643233][ T967] stb0899_attach: Driver disabled by Kconfig [ 207.656885][ T967] az6027: no front-end attached [ 207.656885][ T967] [ 207.657235][ T5878] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 207.675571][ T967] az6027: usb out operation failed. (-71) [ 207.681408][ T967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 207.707875][ T967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 207.712602][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.734449][ T5878] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 207.753732][ T8435] syz.1.1019: attempt to access beyond end of device [ 207.753732][ T8435] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 207.760054][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.793240][ T967] dvb-usb: schedule remote query interval to 400 msecs. [ 207.808899][ T8435] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 207.813554][ T967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 207.876392][ T967] usb 1-1: USB disconnect, device number 11 [ 207.878868][ T5878] usb 4-1: config 0 descriptor?? [ 207.893249][ T8435] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 207.898898][ T8453] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 207.957534][ T967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 208.052858][ T8464] loop2: detected capacity change from 0 to 2048 [ 208.126521][ T8464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.174377][ T8] tipc: Node number set to 2886997007 [ 208.199814][ T8464] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.297218][ T28] audit: type=1800 audit(1751804289.078:53): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1037" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 208.325904][ T8464] fs-verity: sha512 using implementation "sha512-avx2" [ 208.369843][ T8464] fs-verity (loop2, inode 13): Error -22 reading file data [ 208.391777][ T8464] fs-verity (loop2, inode 13): Error -22 building Merkle tree [ 208.401324][ T5878] waltop 0003:172F:0032.0010: unknown main item tag 0x1 [ 208.430307][ T5878] waltop 0003:172F:0032.0010: hidraw0: USB HID v0.04 Device [HID 172f:0032] on usb-dummy_hcd.3-1/input0 [ 208.556852][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.821778][ T5859] usb 4-1: USB disconnect, device number 13 [ 211.546880][ T8539] loop0: detected capacity change from 0 to 8 [ 212.201904][ T8550] loop1: detected capacity change from 0 to 4096 [ 212.232680][ T8550] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 212.690512][ T8563] overlayfs: upper fs does not support tmpfile. [ 212.931616][ T8567] loop0: detected capacity change from 0 to 512 [ 213.031113][ T8567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.041162][ T8535] loop3: detected capacity change from 0 to 32768 [ 213.064885][ T8567] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.166248][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.214291][ T5878] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 213.298538][ T8535] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.454364][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 213.491272][ T5878] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.523749][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.585049][ T5878] usb 2-1: config 0 descriptor?? [ 213.606521][ T8582] loop0: detected capacity change from 0 to 1024 [ 213.755938][ T8535] XFS (loop3): Ending clean mount [ 213.803030][ T8535] XFS (loop3): Quotacheck needed: Please wait. [ 213.833734][ T5878] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 213.865648][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.882289][ T2918] hfsplus: b-tree write err: -5, ino 4 [ 213.896982][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 213.914333][ T5878] usb 2-1: media controller created [ 213.996434][ T8535] XFS (loop3): Quotacheck: Done. [ 213.999612][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.124625][ T5878] az6027: usb out operation failed. (-71) [ 214.135774][ T5878] az6027: usb out operation failed. (-71) [ 214.154359][ T5878] stb0899_attach: Driver disabled by Kconfig [ 214.160438][ T5878] az6027: no front-end attached [ 214.160438][ T5878] [ 214.205155][ T5878] az6027: usb out operation failed. (-71) [ 214.217856][ T5878] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 214.247365][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 214.251145][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.280469][ T8565] loop2: detected capacity change from 0 to 32768 [ 214.300955][ T5878] dvb-usb: schedule remote query interval to 400 msecs. [ 214.337036][ T5878] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 214.353007][ T5878] usb 2-1: USB disconnect, device number 13 [ 214.384489][ T8565] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.516036][ T5878] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 214.654715][ T8565] XFS (loop2): Ending clean mount [ 214.978356][ T5789] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.967479][ T8596] loop0: detected capacity change from 0 to 40427 [ 216.018746][ T8596] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 216.075119][ T8596] F2FS-fs (loop0): invalid crc value [ 216.104368][ T8596] F2FS-fs (loop0): invalid crc value [ 216.109782][ T8596] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 216.682286][ T8625] loop1: detected capacity change from 0 to 16 [ 216.705659][ T8625] erofs: (device loop1): mounted with root inode @ nid 36. [ 217.187982][ T8618] loop2: detected capacity change from 0 to 32768 [ 217.221084][ T8618] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.302830][ T8618] XFS (loop2): Ending clean mount [ 217.315224][ T8618] XFS (loop2): Quotacheck needed: Please wait. [ 217.383732][ T8618] XFS (loop2): Quotacheck: Done. [ 217.460754][ T5789] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.002560][ T8648] loop1: detected capacity change from 0 to 2048 [ 218.036831][ T8648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.078515][ T8638] loop3: detected capacity change from 0 to 32768 [ 218.111719][ T8638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1104 (8638) [ 218.190725][ T8638] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.224455][ T8638] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 218.273632][ T8638] BTRFS info (device loop3): force clearing of disk cache [ 218.300819][ T8638] BTRFS info (device loop3): enabling auto defrag [ 218.318088][ T8638] BTRFS info (device loop3): max_inline at 0 [ 218.338296][ T8638] BTRFS info (device loop3): enabling disk space caching [ 218.355225][ T8638] BTRFS info (device loop3): disk space caching is enabled [ 218.520237][ T8638] BTRFS info (device loop3): enabling ssd optimizations [ 218.578599][ T8638] BTRFS info (device loop3): rebuilding free space tree [ 218.650831][ T8638] BTRFS info (device loop3): disabling free space tree [ 218.661668][ T8646] loop0: detected capacity change from 0 to 32768 [ 218.697701][ T8638] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.732666][ T8638] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.816208][ T8646] JBD2: Ignoring recovery information on journal [ 219.007005][ T8646] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 219.129648][ T5794] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.393354][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 219.555345][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.566046][ T8685] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 219.754254][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 219.817501][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 219.879699][ T8] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 219.904926][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.923904][ T8] usb 3-1: Product: syz [ 219.931200][ T8] usb 3-1: Manufacturer: syz [ 219.941660][ T8] usb 3-1: SerialNumber: syz [ 219.972061][ T8691] loop3: detected capacity change from 0 to 1024 [ 219.986991][ T8] usb 3-1: config 0 descriptor?? [ 220.017945][ T8681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.039437][ T8] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 220.224428][ T967] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 220.427544][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 220.453464][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.497606][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.535177][ T967] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 220.569998][ T5859] usb 3-1: USB disconnect, device number 12 [ 220.570017][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 220.607313][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.643102][ T967] usb 1-1: config 0 descriptor?? [ 221.100638][ T967] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 221.213210][ T8704] loop3: detected capacity change from 0 to 512 [ 221.266272][ T8704] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.301690][ T967] corsair 0003:1B1C:1B02.0011: Read invalid backlight brightness: f7. [ 221.353450][ T8704] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1125: corrupted in-inode xattr: overlapping e_value [ 221.385506][ T8704] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1125: couldn't read orphan inode 15 (err -117) [ 221.400323][ T8704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.515074][ T8711] loop2: detected capacity change from 0 to 512 [ 221.553554][ T8] usb 1-1: USB disconnect, device number 12 [ 221.612815][ T8711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.633357][ T8711] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.645385][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.779124][ T28] audit: type=1800 audit(1751804302.558:54): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1127" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 221.835016][ T28] audit: type=1800 audit(1751804302.588:55): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1127" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 221.875171][ T8716] tun0: tun_chr_ioctl cmd 1074025677 [ 221.911264][ T8716] tun0: linktype set to 270 [ 221.968296][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.659051][ T8733] loop1: detected capacity change from 0 to 4096 [ 222.676360][ T8733] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 222.779161][ T28] audit: type=1800 audit(1751804303.548:56): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1135" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 222.870500][ T28] audit: type=1800 audit(1751804303.598:57): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1135" name="file3" dev="loop1" ino=31 res=0 errno=0 [ 223.226116][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 223.261248][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 223.399937][ T8731] loop0: detected capacity change from 0 to 32768 [ 223.447211][ T8731] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.521997][ T8731] XFS (loop0): Ending clean mount [ 223.533639][ T8758] loop1: detected capacity change from 0 to 512 [ 223.551198][ T8731] XFS (loop0): Quotacheck needed: Please wait. [ 223.596356][ T8758] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.1143: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 223.650345][ T8758] EXT4-fs (loop1): get root inode failed [ 223.656890][ T8758] EXT4-fs (loop1): mount failed [ 223.678656][ T8731] XFS (loop0): Quotacheck: Done. [ 223.682542][ T8764] loop3: detected capacity change from 0 to 1024 [ 223.719182][ T8764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.787310][ T8758] loop1: detected capacity change from 0 to 128 [ 223.816884][ T8758] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.831526][ T5792] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.989269][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.218353][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1152'. [ 224.392191][ T8788] netlink: 'syz.3.1155': attribute type 11 has an invalid length. [ 224.615462][ T8794] loop1: detected capacity change from 0 to 1024 [ 224.653509][ T8796] loop3: detected capacity change from 0 to 164 [ 224.737140][ T8793] hfsplus: invalid extended attribute record [ 224.803640][ T39] hfsplus: b-tree write err: -5, ino 4 [ 225.172588][ T8806] loop1: detected capacity change from 0 to 8192 [ 225.210978][ T8806] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.236465][ T8792] loop0: detected capacity change from 0 to 32768 [ 225.245088][ T8806] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 225.255880][ T8806] REISERFS (device loop1): using ordered data mode [ 225.262880][ T8806] reiserfs: using flush barriers [ 225.282146][ T8806] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.310704][ T8806] REISERFS (device loop1): checking transaction log (loop1) [ 225.327137][ T8811] loop2: detected capacity change from 0 to 64 [ 225.333669][ T8792] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 225.333669][ T8792] [ 225.356960][ T8806] REISERFS (device loop1): Using r5 hash to sort names [ 225.370469][ T39] kworker/u4:2: attempt to access beyond end of device [ 225.370469][ T39] loop0: rw=1, sector=2621792, nr_sectors = 8 limit=32768 [ 225.385629][ T8792] ERROR: (device loop0): remounting filesystem as read-only [ 225.401167][ T8806] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 225.424874][ T112] blkno = 5002c, nblocks = 1 [ 225.429709][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 225.429709][ T112] [ 226.093728][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 226.279781][ T8829] loop2: detected capacity change from 0 to 1024 [ 226.283727][ T8831] loop0: detected capacity change from 0 to 1024 [ 226.305487][ T8829] EXT4-fs: Ignoring removed orlov option [ 226.312706][ T8829] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.337287][ T8831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.339907][ T8829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.394146][ T8831] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1175: reserved inode found cleared - inode=18 [ 226.478071][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.552842][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.652077][ T8842] loop6: detected capacity change from 0 to 64 [ 227.014360][ T5803] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 227.021472][ T5793] Bluetooth: hci4: command 0x1003 tx timeout [ 227.129691][ T8838] loop1: detected capacity change from 0 to 40427 [ 227.149344][ T8838] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 227.157324][ T8838] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 227.181418][ T8838] F2FS-fs (loop1): build fault injection attr: rate: 18446, type: 0x7ffff [ 227.218476][ T8838] F2FS-fs (loop1): invalid crc value [ 227.260673][ T8838] F2FS-fs (loop1): Found nat_bits in checkpoint [ 227.367426][ T8838] F2FS-fs (loop1): Start checkpoint disabled! [ 227.373776][ T8844] loop0: detected capacity change from 0 to 32768 [ 227.389477][ T8838] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 227.397061][ T8838] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 227.442977][ T8844] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 227.511891][ T28] audit: type=1800 audit(1751804308.288:58): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1179" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 227.611443][ T1094] kworker/u4:7: attempt to access beyond end of device [ 227.611443][ T1094] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 227.627630][ T1094] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 227.635472][ T1094] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 227.642527][ T1094] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 227.681050][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 227.683126][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 228.286614][ T8874] loop2: detected capacity change from 0 to 24 [ 228.312740][ T8874] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 228.350224][ T8874] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 228.403199][ T8874] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.711098][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1193'. [ 228.731359][ T8884] loop3: detected capacity change from 0 to 512 [ 228.785458][ T8884] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 228.793688][ T8884] System zones: 0-2, 18-18, 34-34 [ 228.810518][ T8884] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1195: corrupted inode contents [ 228.831574][ T8884] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.1195: mark_inode_dirty error [ 228.856194][ T8884] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1195: corrupted inode contents [ 228.871795][ T8884] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1195: mark_inode_dirty error [ 228.895691][ T8884] Quota error (device loop3): write_blk: dquota write failed [ 228.903704][ T8884] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 228.914601][ T8884] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1195: Failed to acquire dquot type 0 [ 228.955401][ T8884] EXT4-fs (loop3): 1 orphan inode deleted [ 228.972764][ T8884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.984835][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 229.009531][ T8884] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.020629][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 1 [ 229.364334][ T5859] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 229.414299][ T967] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 229.434337][ T5877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 229.546538][ T5859] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 229.555526][ T5859] usb 4-1: config 135 has an invalid descriptor of length 237, skipping remainder of the config [ 229.571404][ T5859] usb 4-1: config 135 has no interface number 0 [ 229.578467][ T5859] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 229.591372][ T5859] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 229.605606][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 229.611859][ T5859] usb 4-1: config 135 interface 230 has no altsetting 0 [ 229.621322][ T967] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 229.633519][ T5859] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 229.644465][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 229.651586][ T967] usb 3-1: config 0 has no interface number 0 [ 229.664298][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.677506][ T5877] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.686416][ T5859] usb 4-1: Product: syz [ 229.690943][ T5877] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.702896][ T5859] usb 4-1: Manufacturer: syz [ 229.707983][ T967] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 229.717735][ T5859] usb 4-1: SerialNumber: syz [ 229.723710][ T5877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.733953][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.744882][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.755000][ T967] usb 3-1: Product: syz [ 229.762254][ T967] usb 3-1: Manufacturer: syz [ 229.767079][ T5877] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.777148][ T967] usb 3-1: SerialNumber: syz [ 229.785411][ T967] usb 3-1: config 0 descriptor?? [ 229.790747][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.815474][ T967] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 229.824837][ T5877] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.834000][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.856275][ T5877] usb 1-1: config 0 descriptor?? [ 229.962118][ T5859] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 229.973865][ T5859] usb 4-1: No valid video chain found. [ 229.983146][ T5859] usb 4-1: USB disconnect, device number 14 [ 230.030236][ T8894] loop2: detected capacity change from 0 to 1024 [ 230.063544][ T967] usb 3-1: qt2_attach - failed to power on unit: -71 [ 230.078949][ T967] quatech2: probe of 3-1:0.51 failed with error -71 [ 230.094995][ T5877] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 230.113856][ T967] usb 3-1: USB disconnect, device number 13 [ 230.313123][ T5859] usb 1-1: USB disconnect, device number 13 [ 230.326674][ T5859] usblp0: removed [ 230.423834][ T8877] syz.1.1191 (8877): drop_caches: 1 [ 230.517480][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.639496][ T8902] tun0: tun_chr_ioctl cmd 1074812118 [ 230.648784][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 231.595765][ T8936] PKCS8: Unsupported PKCS#8 version [ 231.798318][ T8926] loop3: detected capacity change from 0 to 32768 [ 231.823775][ T8926] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.868841][ T28] audit: type=1800 audit(1751804312.648:59): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1214" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 231.964539][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 232.148671][ T8926] syz.3.1214 (8926) used greatest stack depth: 18544 bytes left [ 232.164300][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 232.198637][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 232.216699][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.230913][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.246660][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 232.248276][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.267961][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.276377][ T9] usb 2-1: Product: syz [ 232.280604][ T9] usb 2-1: Manufacturer: syz [ 232.291077][ T9] usb 2-1: SerialNumber: syz [ 232.714785][ T9] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 232.813255][ T8978] loop3: detected capacity change from 0 to 512 [ 232.828494][ T8978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.858475][ T8978] EXT4-fs (loop3): 1 truncate cleaned up [ 232.866912][ T8978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.919699][ T8978] fscrypt (loop3, inode 18): Direct key flag not allowed with different contents and filenames modes [ 232.989856][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.095499][ T8989] loop3: detected capacity change from 0 to 512 [ 233.104039][ T8989] EXT4-fs (loop3): #blocks per group too big: 262144 [ 233.141863][ T9] usb 2-1: USB disconnect, device number 14 [ 233.468130][ T8991] loop2: detected capacity change from 0 to 32768 [ 233.494546][ T8991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1243 (8991) [ 233.513492][ T8991] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.523937][ T8991] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 233.539365][ T8991] BTRFS info (device loop2): using free space tree [ 233.600896][ T8991] BTRFS info (device loop2): enabling ssd optimizations [ 233.608251][ T8991] BTRFS info (device loop2): auto enabling async discard [ 233.848732][ T5789] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.859401][ T967] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 233.938511][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 233.988365][ T9021] macsec0: entered promiscuous mode [ 234.071346][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 234.079598][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.092053][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.114777][ T967] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.144376][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.169099][ T967] usb 4-1: config 0 descriptor?? [ 234.192377][ T967] hub 4-1:0.0: USB hub found [ 234.318481][ T9025] loop1: detected capacity change from 0 to 4096 [ 234.357070][ T9025] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 234.401548][ T967] hub 4-1:0.0: 1 port detected [ 234.823716][ T967] usb 4-1: USB disconnect, device number 15 [ 234.877442][ T9039] loop0: detected capacity change from 0 to 2048 [ 234.912491][ T9039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.820547][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 235.838636][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 236.314414][ T9064] loop1: detected capacity change from 0 to 40427 [ 236.337406][ T9064] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 236.352947][ T9064] F2FS-fs (loop1): Image doesn't support compression [ 236.363225][ T9064] F2FS-fs (loop1): Image doesn't support compression [ 236.385033][ T9064] F2FS-fs (loop1): invalid crc value [ 236.405703][ T9064] F2FS-fs (loop1): Found nat_bits in checkpoint [ 236.467029][ T9064] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 236.570698][ T5790] syz-executor: attempt to access beyond end of device [ 236.570698][ T5790] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.585901][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 236.664344][ T1188] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 236.826682][ T9078] loop3: detected capacity change from 0 to 32768 [ 236.849621][ T9078] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1273 (9078) [ 236.864582][ T1188] usb 1-1: Using ep0 maxpacket: 32 [ 236.885862][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.900112][ T9078] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 236.911491][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.921765][ T9078] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 236.944293][ T1188] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.953420][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.961680][ T9078] BTRFS info (device loop3): force zlib compression, level 3 [ 236.974412][ T9078] BTRFS info (device loop3): force clearing of disk cache [ 236.981637][ T9078] BTRFS info (device loop3): setting nodatasum [ 236.998147][ T9078] BTRFS info (device loop3): doing ref verification [ 237.006540][ T1188] usb 1-1: config 0 descriptor?? [ 237.014706][ T9078] BTRFS info (device loop3): allowing degraded mounts [ 237.023117][ T1188] hub 1-1:0.0: USB hub found [ 237.028288][ T9078] BTRFS info (device loop3): enabling disk space caching [ 237.035894][ T9078] BTRFS info (device loop3): disk space caching is enabled [ 237.143405][ T9078] BTRFS info (device loop3): enabling ssd optimizations [ 237.151047][ T9078] BTRFS info (device loop3): auto enabling async discard [ 237.161490][ T9078] BTRFS info (device loop3): rebuilding free space tree [ 237.184630][ T9078] BTRFS info (device loop3): disabling free space tree [ 237.191691][ T9078] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.201990][ T9078] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.246806][ T1188] hub 1-1:0.0: 1 port detected [ 237.331795][ T28] audit: type=1800 audit(1751804318.108:60): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1273" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 237.443057][ T5794] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 237.588202][ T9108] loop1: detected capacity change from 0 to 128 [ 237.598173][ T9108] EXT4-fs: Ignoring removed oldalloc option [ 237.608151][ T9108] EXT4-fs: inline encryption not supported [ 237.653385][ T9108] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.678132][ T9108] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.710914][ T1188] usb 1-1: USB disconnect, device number 14 [ 237.864494][ T5790] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.993782][ T9118] loop1: detected capacity change from 0 to 256 [ 238.015221][ T9118] exfat: Deprecated parameter 'namecase' [ 238.040660][ T9118] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 238.355543][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 238.532227][ T9142] input: syz1 as /devices/virtual/input/input30 [ 238.568162][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.584285][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 238.596732][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.607172][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 238.623162][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.633015][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.641620][ T9] usb 2-1: Manufacturer: syz [ 238.650497][ T9] usb 2-1: config 0 descriptor?? [ 238.740800][ T9147] loop2: detected capacity change from 0 to 7 [ 238.752200][ T9147] Dev loop2: unable to read RDB block 7 [ 238.758126][ T9147] loop2: unable to read partition table [ 238.764669][ T9147] loop2: partition table beyond EOD, truncated [ 238.770984][ T9147] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.814337][ T967] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.978004][ T9] rc_core: IR keymap rc-hauppauge not found [ 238.985651][ T9] Registered IR keymap rc-empty [ 238.991309][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.014322][ T967] usb 1-1: Using ep0 maxpacket: 8 [ 239.024830][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.048304][ T967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.061993][ T967] usb 1-1: too many configurations: 73, using maximum allowed: 8 [ 239.078935][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 239.079306][ T967] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 239.094511][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 239.124821][ T967] usb 1-1: can't read configurations, error -71 [ 239.126108][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.184489][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.214624][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.264680][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.304930][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.337594][ T28] audit: type=1326 audit(1751804320.118:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30d58e929 code=0x7fc00000 [ 239.374636][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.389887][ T9152] loop2: detected capacity change from 0 to 40427 [ 239.413619][ T9152] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 239.422992][ T9152] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 239.433652][ T9152] F2FS-fs (loop2): build fault injection attr: rate: 18446, type: 0x7ffff [ 239.445167][ T9152] F2FS-fs (loop2): invalid crc value [ 239.445194][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.459929][ T9152] F2FS-fs (loop2): Found nat_bits in checkpoint [ 239.484535][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.524368][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.536713][ T9152] F2FS-fs (loop2): Start checkpoint disabled! [ 239.550620][ T9152] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 239.558144][ T9152] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 239.574582][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.630840][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.650467][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.667368][ T9] usb 2-1: USB disconnect, device number 15 [ 239.721124][ T9160] loop0: detected capacity change from 0 to 512 [ 239.768554][ T9160] EXT4-fs (loop0): #blocks per group too big: 262144 [ 239.841292][ T1094] kworker/u4:7: attempt to access beyond end of device [ 239.841292][ T1094] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 239.855705][ T1094] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.863108][ T1094] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.871097][ T1094] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 240.074341][ T5859] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 240.266481][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 240.287954][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.316652][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.336111][ T9176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1309'. [ 240.355050][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.383883][ T5859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.402242][ T5859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.416591][ T5859] usb 4-1: Manufacturer: syz [ 240.423832][ T5859] usb 4-1: config 0 descriptor?? [ 240.596180][ T9188] loop1: detected capacity change from 0 to 64 [ 240.596191][ T9186] loop0: detected capacity change from 0 to 1024 [ 240.629624][ T28] audit: type=1800 audit(1751804321.408:62): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1314" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 240.677157][ T5859] usb 4-1: USB disconnect, device number 16 [ 240.686823][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 240.710167][ T9190] loop2: detected capacity change from 0 to 2048 [ 240.739813][ T9190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.823913][ T9194] loop0: detected capacity change from 0 to 4096 [ 240.866008][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.030677][ T9219] loop3: detected capacity change from 0 to 32768 [ 242.039120][ T9219] XFS: attr2 mount option is deprecated. [ 242.045593][ T9219] XFS: ikeep mount option is deprecated. [ 242.051668][ T9218] loop0: detected capacity change from 0 to 32768 [ 242.060979][ T9218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1327 (9218) [ 242.068299][ T9219] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.091448][ T9218] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.102726][ T9218] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 242.112049][ T9218] BTRFS info (device loop0): using free space tree [ 242.147342][ T9219] XFS (loop3): Ending clean mount [ 242.157275][ T9219] XFS (loop3): Quotacheck needed: Please wait. [ 242.172177][ T9218] BTRFS info (device loop0): enabling ssd optimizations [ 242.179483][ T9218] BTRFS info (device loop0): auto enabling async discard [ 242.212086][ T9219] XFS (loop3): Quotacheck: Done. [ 242.293766][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.377038][ T5792] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.169455][ T5859] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.293136][ T9254] loop1: detected capacity change from 0 to 32768 [ 243.361548][ T5859] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 243.373016][ T9254] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 243.392380][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.423985][ T5859] usb 3-1: config 0 descriptor?? [ 243.437483][ T9259] loop0: detected capacity change from 0 to 32768 [ 243.448734][ T9259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1331 (9259) [ 243.451358][ T5859] cp210x 3-1:0.0: cp210x converter detected [ 243.475435][ T9252] loop3: detected capacity change from 0 to 32768 [ 243.487201][ T9259] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.489954][ T28] audit: type=1800 audit(1751804324.258:63): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1334" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 243.509508][ T9259] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 243.527450][ T9259] BTRFS info (device loop0): force clearing of disk cache [ 243.534940][ T9259] BTRFS info (device loop0): enabling disk space caching [ 243.542139][ T9259] BTRFS info (device loop0): turning on sync discard [ 243.562339][ T9259] BTRFS info (device loop0): disabling tree log [ 243.583101][ T9259] BTRFS info (device loop0): metadata ratio 5 [ 243.602138][ T9259] BTRFS info (device loop0): disk space caching is enabled [ 243.712525][ T9259] BTRFS info (device loop0): enabling ssd optimizations [ 243.732576][ T9259] BTRFS info (device loop0): rebuilding free space tree [ 243.758196][ T9259] BTRFS info (device loop0): disabling free space tree [ 243.765488][ T9259] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 243.776588][ T9259] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 243.862491][ T5859] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 243.892793][ T9254] syz.1.1334 (9254) used greatest stack depth: 18288 bytes left [ 243.910424][ T5859] usb 3-1: cp210x converter now attached to ttyUSB0 [ 243.958383][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 244.114629][ T5792] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.121745][ T5859] usb 3-1: USB disconnect, device number 14 [ 244.155253][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 244.179309][ T5859] cp210x 3-1:0.0: device disconnected [ 244.684418][ T5879] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 244.794719][ T9284] loop3: detected capacity change from 0 to 32768 [ 244.884558][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 244.891510][ T5879] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 244.902078][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.912883][ T5879] usb 2-1: config 0 descriptor?? [ 244.944294][ T1188] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 245.034462][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.124609][ T1188] usb 1-1: Using ep0 maxpacket: 8 [ 245.133474][ T5879] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 245.144042][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.148644][ T1188] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 245.162912][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.165881][ T5879] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 245.171963][ T1188] usb 1-1: Product: syz [ 245.187809][ T1188] usb 1-1: Manufacturer: syz [ 245.192478][ T1188] usb 1-1: SerialNumber: syz [ 245.194369][ T5879] usb 2-1: media controller created [ 245.209526][ T1188] usb 1-1: config 0 descriptor?? [ 245.219689][ T1188] gspca_main: sq930x-2.14.0 probing 2770:930c [ 245.226488][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 245.241307][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.253432][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.267889][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.274285][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 245.291367][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 245.301824][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.325634][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.334655][ T9288] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 245.341454][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.353661][ T5879] az6027: usb out operation failed. (-71) [ 245.359634][ T9] usb 3-1: Manufacturer: syz [ 245.369665][ T9] usb 3-1: config 0 descriptor?? [ 245.374720][ T5879] az6027: usb out operation failed. (-71) [ 245.374738][ T5879] stb0899_attach: Driver disabled by Kconfig [ 245.374758][ T5879] az6027: no front-end attached [ 245.374758][ T5879] [ 245.375210][ T5879] az6027: usb out operation failed. (-71) [ 245.420544][ T5879] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 245.436159][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 245.473974][ T5879] dvb-usb: schedule remote query interval to 400 msecs. [ 245.482509][ T5879] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 245.497055][ T5879] usb 2-1: USB disconnect, device number 16 [ 245.575496][ T5879] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 245.704902][ T9] rc_core: IR keymap rc-hauppauge not found [ 245.721356][ T9] Registered IR keymap rc-empty [ 245.730212][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 245.764343][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 245.802161][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 245.843806][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 245.878630][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 245.954420][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.004539][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.036352][ T1188] gspca_sq930x: ucbus_write failed -71 [ 246.042092][ T1188] sq930x: probe of 1-1:0.0 failed with error -71 [ 246.054288][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.065172][ T1188] usb 1-1: USB disconnect, device number 17 [ 246.084673][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.122893][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.174343][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.181921][ T9304] loop3: detected capacity change from 0 to 32768 [ 246.216465][ T8] Process accounting resumed [ 246.223967][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.264602][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.306830][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.344493][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.387738][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 246.397705][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 246.416042][ T9] usb 3-1: USB disconnect, device number 15 [ 247.037787][ T9330] loop3: detected capacity change from 0 to 4096 [ 247.091172][ T9330] NILFS (loop3): invalid segment: Checksum error in segment payload [ 247.114369][ T9330] NILFS (loop3): trying rollback from an earlier position [ 247.138224][ T9330] NILFS (loop3): recovery complete [ 247.869587][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 248.074365][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 248.085380][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.091966][ T9357] loop0: detected capacity change from 0 to 2048 [ 248.107222][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.129496][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.148920][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.157275][ T9360] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.179488][ T9] usb 3-1: config 0 descriptor?? [ 248.191414][ T9] hub 3-1:0.0: USB hub found [ 248.212845][ T9357] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 248.243326][ T9357] Remounting filesystem read-only [ 248.262276][ T28] audit: type=1326 audit(1751804329.038:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc6e7858e7 code=0x7ffc0000 [ 248.287692][ T9357] NILFS (loop0): error -2 truncating bmap (ino=16) [ 248.329662][ T9348] loop3: detected capacity change from 0 to 40427 [ 248.340998][ T28] audit: type=1326 audit(1751804329.038:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc6e72ab19 code=0x7ffc0000 [ 248.373358][ T9348] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 248.380927][ T5792] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 248.381004][ T9348] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 248.404618][ T5792] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 248.414391][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 248.426369][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 248.427580][ T28] audit: type=1326 audit(1751804329.068:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc6e7858e7 code=0x7ffc0000 [ 248.456756][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 248.458313][ T28] audit: type=1326 audit(1751804329.078:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc6e72ab19 code=0x7ffc0000 [ 248.473356][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 248.508869][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 248.516318][ T28] audit: type=1326 audit(1751804329.078:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc6e7858e7 code=0x7ffc0000 [ 248.543038][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 248.552739][ T9348] F2FS-fs (loop3): Found nat_bits in checkpoint [ 248.575496][ T5792] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 248.595442][ T5792] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 248.602979][ T5792] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 248.614453][ T28] audit: type=1326 audit(1751804329.078:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc6e72ab19 code=0x7ffc0000 [ 248.645867][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 248.656396][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 248.662471][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 248.674267][ T28] audit: type=1326 audit(1751804329.078:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc6e7858e7 code=0x7ffc0000 [ 248.708617][ T9348] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 248.720296][ T9348] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.739243][ T9] usb 3-1: USB disconnect, device number 16 [ 248.771041][ T28] audit: type=1326 audit(1751804329.078:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc6e72ab19 code=0x7ffc0000 [ 248.825873][ T28] audit: type=1326 audit(1751804329.078:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc6e7858e7 code=0x7ffc0000 [ 248.874509][ T28] audit: type=1326 audit(1751804329.078:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc6e72ab19 code=0x7ffc0000 [ 248.913092][ T5794] syz-executor: attempt to access beyond end of device [ 248.913092][ T5794] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 248.938847][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 248.949681][ T28] audit: type=1326 audit(1751804329.078:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc6e7858e7 code=0x7ffc0000 [ 248.955163][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 248.994933][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.003295][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.047693][ T28] audit: type=1326 audit(1751804329.078:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc6e72ab19 code=0x7ffc0000 [ 249.094357][ T28] audit: type=1326 audit(1751804329.078:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc6e7858e7 code=0x7ffc0000 [ 249.144335][ T28] audit: type=1326 audit(1751804329.078:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc6e72ab19 code=0x7ffc0000 [ 249.298739][ T9381] loop2: detected capacity change from 0 to 512 [ 249.364447][ T9381] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 249.372580][ T9381] System zones: 0-2, 18-18, 34-34 [ 249.383720][ T9381] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1380: corrupted inode contents [ 249.404405][ T9381] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.1380: mark_inode_dirty error [ 249.424113][ T9381] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1380: corrupted inode contents [ 249.437202][ T9381] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1380: mark_inode_dirty error [ 249.460438][ T9381] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1380: Failed to acquire dquot type 0 [ 249.471866][ T5859] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 249.532310][ T9381] EXT4-fs (loop2): 1 orphan inode deleted [ 249.545734][ T9381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.549322][ T39] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 1 [ 249.582400][ T9381] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.646504][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 249.654498][ T5859] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 249.662569][ T5859] usb 2-1: config 0 has no interface number 0 [ 249.679107][ T5859] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.704261][ T5859] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.731048][ T5859] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 249.742175][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 249.750478][ T9376] loop0: detected capacity change from 0 to 32768 [ 249.759836][ T9376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1377 (9376) [ 249.762251][ T5859] usb 2-1: Product: syz [ 249.776997][ T5859] usb 2-1: SerialNumber: syz [ 249.785693][ T5859] usb 2-1: config 0 descriptor?? [ 249.794623][ T5859] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 249.796386][ T9376] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.812184][ T5859] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input34 [ 249.818903][ T9376] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 249.831468][ T9376] BTRFS info (device loop0): setting nodatacow, compression disabled [ 249.840756][ T9376] BTRFS info (device loop0): max_inline at 0 [ 249.849271][ T9376] BTRFS info (device loop0): turning off barriers [ 249.864232][ T9376] BTRFS info (device loop0): force zlib compression, level 3 [ 249.871859][ T9376] BTRFS info (device loop0): doing ref verification [ 249.904296][ T9376] BTRFS info (device loop0): force clearing of disk cache [ 249.912076][ T9376] BTRFS info (device loop0): enabling ssd optimizations [ 249.919314][ T9376] BTRFS info (device loop0): max_inline at 4096 [ 249.927673][ T9376] BTRFS info (device loop0): using free space tree [ 249.944368][ T1188] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 250.029157][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 250.039247][ T9376] BTRFS info (device loop0): auto enabling async discard [ 250.048429][ T9376] BTRFS info (device loop0): rebuilding free space tree [ 250.078060][ T9407] loop3: detected capacity change from 0 to 256 [ 250.126764][ T1188] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 250.140053][ T1188] usb 3-1: config 135 has an invalid descriptor of length 237, skipping remainder of the config [ 250.164398][ T1188] usb 3-1: config 135 has no interface number 0 [ 250.170770][ T1188] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 250.187760][ T1188] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 250.205852][ T1188] usb 3-1: config 135 interface 230 has no altsetting 0 [ 250.231068][ T1188] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 250.238341][ T9409] loop3: detected capacity change from 0 to 4096 [ 250.252039][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.255475][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.263002][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.275301][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.275875][ T1188] usb 3-1: Product: syz [ 250.282512][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.293878][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.296195][ T1188] usb 3-1: Manufacturer: syz [ 250.301109][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.313117][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.316267][ T1188] usb 3-1: SerialNumber: syz [ 250.320373][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.325583][ T9409] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 250.333387][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.348292][ T5879] usb 2-1: USB disconnect, device number 17 [ 250.354591][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.354618][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 250.381182][ T5879] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 250.499515][ T5792] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.602949][ T1188] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 250.617451][ T1188] usb 3-1: No valid video chain found. [ 250.656572][ T1188] usb 3-1: USB disconnect, device number 17 [ 251.100515][ T9418] loop3: detected capacity change from 0 to 512 [ 251.137464][ T9418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.159934][ T9418] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.235049][ T9418] EXT4-fs error (device loop3): __ext4_new_inode:1284: comm syz.3.1388: failed to insert inode 16: doubly allocated? [ 251.253045][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.318449][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.544018][ T9416] loop0: detected capacity change from 0 to 32768 [ 251.667960][ T9416] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 252.131510][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 252.415651][ T9433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1392'. [ 252.499184][ T9424] loop2: detected capacity change from 0 to 40427 [ 252.532711][ T9424] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 252.554901][ T9424] F2FS-fs (loop2): Image doesn't support compression [ 252.561720][ T9424] F2FS-fs (loop2): Image doesn't support compression [ 252.592105][ T9424] F2FS-fs (loop2): invalid crc value [ 252.606327][ T9424] F2FS-fs (loop2): Found nat_bits in checkpoint [ 252.631342][ T9442] loop0: detected capacity change from 0 to 512 [ 252.664428][ T9442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 252.701923][ T9442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.713910][ T9448] loop1: detected capacity change from 0 to 512 [ 252.728360][ T9424] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 252.737530][ T9448] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 252.741512][ T9445] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 252.753982][ T9442] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.786911][ T9448] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1396: iget: bogus i_mode (5) [ 252.810089][ T9448] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1396: couldn't read orphan inode 15 (err -117) [ 252.826143][ T9448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.845720][ T9448] ext2 filesystem being mounted at /351/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.908063][ T9451] EXT4-fs error (device loop0): __ext4_new_inode:1284: comm syz.0.1391: failed to insert inode 16: doubly allocated? [ 252.938541][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.980936][ T5789] syz-executor: attempt to access beyond end of device [ 252.980936][ T5789] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.002147][ T9442] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 253.012455][ T5789] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 253.101947][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.913970][ T9466] loop2: detected capacity change from 0 to 32768 [ 253.949266][ T9466] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 253.983819][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 253.983836][ T28] audit: type=1800 audit(3422338134.761:102): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1401" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 254.076830][ T9468] loop0: detected capacity change from 0 to 40427 [ 254.087769][ T9468] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 254.098359][ T9468] F2FS-fs (loop0): Image doesn't support compression [ 254.107889][ T9468] F2FS-fs (loop0): Image doesn't support compression [ 254.122293][ T9468] F2FS-fs (loop0): invalid crc value [ 254.151760][ T9468] F2FS-fs (loop0): Found nat_bits in checkpoint [ 254.223851][ T9468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 254.350541][ T5792] syz-executor: attempt to access beyond end of device [ 254.350541][ T5792] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.389670][ T5792] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 254.683572][ T5789] ocfs2: Unmounting device (7,2) on (node local) [ 254.924302][ T5859] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.134718][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 255.166644][ T5859] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.188468][ T5859] usb 4-1: config 0 has no interface number 0 [ 255.208130][ T5859] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.243680][ T5859] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.277502][ T5859] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 255.313371][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.360243][ T5859] usb 4-1: config 0 descriptor?? [ 255.888193][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.894874][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.998200][ T5859] uclogic 0003:28BD:0071.0012: pen parameters not found [ 256.009971][ T5859] uclogic 0003:28BD:0071.0012: interface is invalid, ignoring [ 256.022310][ T5859] usb 4-1: USB disconnect, device number 17 [ 256.639921][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 256.705362][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1417'. [ 256.792018][ T9510] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 256.811484][ T9510] syzkaller1: ignored: set checksum enabled [ 257.020273][ T9517] loop2: detected capacity change from 0 to 2048 [ 257.038199][ T9517] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.157233][ T9504] loop3: detected capacity change from 0 to 40427 [ 257.170938][ T9504] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 257.179717][ T9504] F2FS-fs (loop3): Image doesn't support compression [ 257.185325][ T5879] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 257.192942][ T9504] F2FS-fs (loop3): Image doesn't support compression [ 257.204855][ T1188] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 257.215877][ T9504] F2FS-fs (loop3): invalid crc value [ 257.230984][ T9504] F2FS-fs (loop3): Found nat_bits in checkpoint [ 257.281831][ T9504] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.396553][ T1188] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.404355][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 257.410979][ T1188] usb 1-1: config 0 has no interface number 0 [ 257.412221][ T5879] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 257.429286][ T1188] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 257.443706][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.452264][ T1188] usb 1-1: Product: syz [ 257.456554][ T5879] usb 2-1: config 0 has no interface number 0 [ 257.463548][ T1188] usb 1-1: Manufacturer: syz [ 257.468442][ T1188] usb 1-1: SerialNumber: syz [ 257.470625][ T5879] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 257.476772][ T1188] usb 1-1: config 0 descriptor?? [ 257.484809][ T5794] syz-executor: attempt to access beyond end of device [ 257.484809][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.503428][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.507434][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 257.511965][ T5879] usb 2-1: Product: syz [ 257.522673][ T5879] usb 2-1: Manufacturer: syz [ 257.527392][ T5879] usb 2-1: SerialNumber: syz [ 257.546355][ T5879] usb 2-1: config 0 descriptor?? [ 257.554914][ T5879] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 257.711021][ T1188] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 257.729072][ T1188] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.740432][ T1188] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 257.748714][ T1188] usb 1-1: media controller created [ 257.772660][ T5879] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 257.790313][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.805336][ T5879] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 257.934713][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 258.058676][ T9530] loop3: detected capacity change from 0 to 64 [ 258.091358][ T9530] [ 258.093762][ T9530] ====================================================== [ 258.100805][ T9530] WARNING: possible circular locking dependency detected [ 258.107862][ T9530] 6.6.96-syzkaller #0 Not tainted [ 258.112900][ T9530] ------------------------------------------------------ [ 258.119945][ T9530] syz.3.1429/9530 is trying to acquire lock: [ 258.125938][ T9530] ffff888078298df8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 258.136959][ T9530] [ 258.136959][ T9530] but task is already holding lock: [ 258.144359][ T9530] ffff88802c6ea0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 258.153747][ T9530] [ 258.153747][ T9530] which lock already depends on the new lock. [ 258.153747][ T9530] [ 258.164178][ T9530] [ 258.164178][ T9530] the existing dependency chain (in reverse order) is: [ 258.173223][ T9530] [ 258.173223][ T9530] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 258.181196][ T9530] __mutex_lock+0x129/0xcc0 [ 258.186270][ T9530] hfs_find_init+0x15f/0x1d0 [ 258.191428][ T9530] hfs_extend_file+0x2ef/0x1220 [ 258.196833][ T9530] hfs_bmap_reserve+0x107/0x430 [ 258.202235][ T9530] hfs_cat_create+0x1b4/0x620 [ 258.207466][ T9530] hfs_create+0x66/0xd0 [ 258.212200][ T9530] path_openat+0x1277/0x3190 [ 258.217338][ T9530] do_filp_open+0x1c5/0x3d0 [ 258.222403][ T9530] do_sys_openat2+0x12c/0x1c0 [ 258.227644][ T9530] __x64_sys_openat+0x139/0x160 [ 258.233066][ T9530] do_syscall_64+0x55/0xb0 [ 258.238035][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.244476][ T9530] [ 258.244476][ T9530] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 258.253754][ T9530] __lock_acquire+0x2ddb/0x7c80 [ 258.259161][ T9530] lock_acquire+0x197/0x410 [ 258.264222][ T9530] __mutex_lock+0x129/0xcc0 [ 258.269282][ T9530] hfs_extend_file+0xdb/0x1220 [ 258.274603][ T9530] hfs_bmap_reserve+0x107/0x430 [ 258.280452][ T9530] __hfs_ext_write_extent+0x1fa/0x470 [ 258.286393][ T9530] __hfs_ext_cache_extent+0x6b/0x9b0 [ 258.292257][ T9530] hfs_extend_file+0x317/0x1220 [ 258.297668][ T9530] hfs_get_block+0x3d8/0xbd0 [ 258.302814][ T9530] __block_write_begin_int+0x566/0x1ad0 [ 258.308927][ T9530] block_write_begin+0x9a/0x1e0 [ 258.314353][ T9530] cont_write_begin+0x5c8/0x7e0 [ 258.319770][ T9530] hfs_write_begin+0x8b/0xd0 [ 258.324927][ T9530] generic_perform_write+0x2fb/0x5b0 [ 258.330770][ T9530] generic_file_write_iter+0xaf/0x2e0 [ 258.336742][ T9530] vfs_write+0x43b/0x940 [ 258.341577][ T9530] ksys_write+0x147/0x250 [ 258.346480][ T9530] do_syscall_64+0x55/0xb0 [ 258.351449][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.357904][ T9530] [ 258.357904][ T9530] other info that might help us debug this: [ 258.357904][ T9530] [ 258.368175][ T9530] Possible unsafe locking scenario: [ 258.368175][ T9530] [ 258.375658][ T9530] CPU0 CPU1 [ 258.381058][ T9530] ---- ---- [ 258.386579][ T9530] lock(&tree->tree_lock/1); [ 258.391488][ T9530] lock(&HFS_I(tree->inode)->extents_lock); [ 258.400141][ T9530] lock(&tree->tree_lock/1); [ 258.407387][ T9530] lock(&HFS_I(tree->inode)->extents_lock); [ 258.413398][ T9530] [ 258.413398][ T9530] *** DEADLOCK *** [ 258.413398][ T9530] [ 258.421569][ T9530] 5 locks held by syz.3.1429/9530: [ 258.426710][ T9530] #0: ffff888026f36348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.436006][ T9530] #1: ffff88802c6e8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 258.445031][ T9530] #2: ffff88807cf3b6b8 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: generic_file_write_iter+0x83/0x2e0 [ 258.456404][ T9530] #3: ffff88807cf3b4f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 258.467160][ T9530] #4: ffff88802c6ea0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 258.476970][ T9530] [ 258.476970][ T9530] stack backtrace: [ 258.482895][ T9530] CPU: 0 PID: 9530 Comm: syz.3.1429 Not tainted 6.6.96-syzkaller #0 [ 258.490916][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.501021][ T9530] Call Trace: [ 258.504333][ T9530] [ 258.507320][ T9530] dump_stack_lvl+0x16c/0x230 [ 258.512052][ T9530] ? load_image+0x3b0/0x3b0 [ 258.516601][ T9530] ? show_regs_print_info+0x20/0x20 [ 258.521944][ T9530] ? print_circular_bug+0x12b/0x1a0 [ 258.527190][ T9530] check_noncircular+0x2bd/0x3c0 [ 258.532184][ T9530] ? look_up_lock_class+0x75/0x140 [ 258.537333][ T9530] ? print_deadlock_bug+0x5d0/0x5d0 [ 258.542590][ T9530] ? lockdep_lock+0xe0/0x220 [ 258.547252][ T9530] ? check_noncircular+0x175/0x3c0 [ 258.552408][ T9530] ? _find_first_zero_bit+0xd3/0x100 [ 258.557743][ T9530] __lock_acquire+0x2ddb/0x7c80 [ 258.562662][ T9530] ? hlock_conflict+0x5d/0x1f0 [ 258.567482][ T9530] ? verify_lock_unused+0x140/0x140 [ 258.572724][ T9530] ? __bfs+0x2a3/0x5c0 [ 258.576829][ T9530] ? check_path+0x40/0x40 [ 258.581213][ T9530] ? check_path+0x21/0x40 [ 258.585594][ T9530] ? check_noncircular+0x175/0x3c0 [ 258.590777][ T9530] ? look_up_lock_class+0x75/0x140 [ 258.595938][ T9530] lock_acquire+0x197/0x410 [ 258.600495][ T9530] ? hfs_extend_file+0xdb/0x1220 [ 258.605484][ T9530] ? __might_sleep+0xe0/0xe0 [ 258.610117][ T9530] ? __lock_acquire+0x2b6b/0x7c80 [ 258.615188][ T9530] ? read_lock_is_recursive+0x20/0x20 [ 258.620616][ T9530] __mutex_lock+0x129/0xcc0 [ 258.625162][ T9530] ? hfs_extend_file+0xdb/0x1220 [ 258.630148][ T9530] ? hfs_extend_file+0xdb/0x1220 [ 258.635127][ T9530] ? verify_lock_unused+0x140/0x140 [ 258.640361][ T9530] ? mutex_lock_nested+0x20/0x20 [ 258.645351][ T9530] hfs_extend_file+0xdb/0x1220 [ 258.650162][ T9530] ? hfs_get_block+0xbd0/0xbd0 [ 258.654971][ T9530] ? __mutex_trylock_common+0x153/0x250 [ 258.660557][ T9530] ? trace_raw_output_contention_end+0xd0/0xd0 [ 258.666751][ T9530] ? rcu_is_watching+0x15/0xb0 [ 258.671561][ T9530] ? hfs_brec_find+0x18f/0x500 [ 258.676367][ T9530] ? __mutex_lock+0x304/0xcc0 [ 258.681077][ T9530] hfs_bmap_reserve+0x107/0x430 [ 258.685975][ T9530] __hfs_ext_write_extent+0x1fa/0x470 [ 258.691387][ T9530] __hfs_ext_cache_extent+0x6b/0x9b0 [ 258.696705][ T9530] ? hfs_find_init+0x15f/0x1d0 [ 258.701511][ T9530] hfs_extend_file+0x317/0x1220 [ 258.706400][ T9530] ? filemap_get_folios+0xe5/0x7b0 [ 258.711552][ T9530] ? hfs_get_block+0xbd0/0xbd0 [ 258.716360][ T9530] ? find_lock_entries+0xfe0/0xfe0 [ 258.721540][ T9530] ? clean_bdev_aliases+0x55f/0x630 [ 258.726776][ T9530] hfs_get_block+0x3d8/0xbd0 [ 258.731418][ T9530] ? hfs_free_extents+0x430/0x430 [ 258.736484][ T9530] ? _raw_spin_unlock+0x28/0x40 [ 258.741374][ T9530] ? folio_add_lru+0x320/0xd50 [ 258.746182][ T9530] __block_write_begin_int+0x566/0x1ad0 [ 258.751789][ T9530] ? hfs_free_extents+0x430/0x430 [ 258.756851][ T9530] ? folio_zero_new_buffers+0x550/0x550 [ 258.762441][ T9530] ? hfs_free_extents+0x430/0x430 [ 258.767595][ T9530] block_write_begin+0x9a/0x1e0 [ 258.772493][ T9530] ? hfs_free_extents+0x430/0x430 [ 258.777566][ T9530] cont_write_begin+0x5c8/0x7e0 [ 258.782466][ T9530] ? generic_cont_expand_simple+0x200/0x200 [ 258.788390][ T9530] ? fault_in_readable+0xcb/0x160 [ 258.793461][ T9530] ? fault_in_readable+0xd0/0x160 [ 258.798534][ T9530] hfs_write_begin+0x8b/0xd0 [ 258.803191][ T9530] ? hfs_free_extents+0x430/0x430 [ 258.808261][ T9530] generic_perform_write+0x2fb/0x5b0 [ 258.813577][ T9530] ? generic_file_direct_write+0x3e0/0x3e0 [ 258.819430][ T9530] ? __generic_file_write_iter+0xf7/0x230 [ 258.825188][ T9530] ? generic_file_write_iter+0x9b/0x2e0 [ 258.830770][ T9530] generic_file_write_iter+0xaf/0x2e0 [ 258.836200][ T9530] vfs_write+0x43b/0x940 [ 258.840487][ T9530] ? file_end_write+0x250/0x250 [ 258.845383][ T9530] ? __fget_files+0x44a/0x4d0 [ 258.850100][ T9530] ? __fdget_pos+0x2a3/0x330 [ 258.854737][ T9530] ? ksys_write+0x75/0x250 [ 258.859179][ T9530] ksys_write+0x147/0x250 [ 258.863539][ T9530] ? __ia32_sys_read+0x90/0x90 [ 258.868341][ T9530] ? lockdep_hardirqs_on+0x98/0x150 [ 258.873567][ T9530] do_syscall_64+0x55/0xb0 [ 258.878016][ T9530] ? clear_bhb_loop+0x40/0x90 [ 258.882731][ T9530] ? clear_bhb_loop+0x40/0x90 [ 258.887459][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.893394][ T9530] RIP: 0033:0x7fd30d58e929 [ 258.897864][ T9530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.917507][ T9530] RSP: 002b:00007fd30e4c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.925950][ T9530] RAX: ffffffffffffffda RBX: 00007fd30d7b5fa0 RCX: 00007fd30d58e929 [ 258.933957][ T9530] RDX: 000000000000fea7 RSI: 0000200000000040 RDI: 0000000000000004 [ 258.941979][ T9530] RBP: 00007fd30d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.949991][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.957988][ T9530] R13: 0000000000000000 R14: 00007fd30d7b5fa0 R15: 00007fff08212098 [ 258.966014][ T9530] [ 258.973409][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 258.974589][ T1188] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 258.995062][ T5878] usb 2-1: USB disconnect, device number 18 [ 259.004724][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 259.031783][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 259.048311][ T1188] usb 1-1: USB disconnect, device number 18 [ 259.054740][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.063230][ T9] usb 3-1: no configurations [ 259.069331][ T5878] quatech2 2-1:0.51: device disconnected [ 259.076605][ T9] usb 3-1: can't read configurations, error -22