last executing test programs: 3.007929136s ago: executing program 2 (id=983): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)='#', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 2.917835022s ago: executing program 2 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x501, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008080) 2.881221674s ago: executing program 1 (id=986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 2.847469486s ago: executing program 2 (id=987): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 2.751971933s ago: executing program 1 (id=988): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$eJzs3c9vG1UeAPCv7SZN0uz2x+5h28O22lbqQtW4TdQkQr30hIRUQO2BYxUSNypx4ih2ShPlkEoc4I6gEifEoX8Agis9cewVeoIzUgUhJUKikpHHdppfLgbSWMp8PtLUb+ZN/X0v1vdp5o3HE0Bqnar9k4noj4iHEXG4vrp5h1P1l7WVpfHakolq9fqPmWS/1ZWl8eauzf93KCKWI6InIq69GvF2Znvc8sLi1FixWJhrrOcr07P58sLi+VvTY5OFycLM0MjgyOjw8MjopV3r63t3rrzx0S9X3v/sm/vfvZP54kytWf2Nuo392E31rnfF0Q3bDkTE5RcRrANyjf70droh/CW1z+9fEXE6yf/DkUs+TSANqtVq9Wn1YKvq5Sqwb2WTY+BMdiAi6uVsdmCgfgz/7+jLFkvlyrmbpfmZifqx8pHoyt68VSxcaJwrHImuTG39YlJ+tj64ZX0oIjkG/jDXm6wPjJeKE3s71AFbHNqS/09y9fwHUsIpP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5BKb169Wluqa4373yduL8xPlW6fnyiUpwam58cHxktzswOTpdJkcs/O9B+9X7FUmh2Kmfk7+UqhXMmXFxZvTJfmZyo3kvv6bxS69qRXQDuOnnzwKBMRy6/0JktNd6NOrsL+Vq1motP3IAOdkev0AAR0jKk/SC/n+MAOP9G7SU+ritndbwuwN7LPii1THNifzh53/Q/Syvw/pJf5f0gvx/iA+X9In2ynGwB0TH+L53/9Y8Ozuy5ExD8j4ttc18Hms76A/SD7Q6bVPOCZiO7Mr8klgu6IePeT6x/fGatU5i7Wtv+0vr1yr7F9sP2o3bvWfqBdzTxt5jEAkF6rK0vjzWUv4z6+Uj/5qMVdayz1mgONucme5Bpl32pm0zlKy3OWP2n5bkT8J+LJytJ4c2lGqD/vvH7lo281ty3+scZrpv4WSXsPJM9Nj7a/Tv134h/fEP+/G+Kf2IW/C6TBg9r4c2H7+HewkdOxnn+bx5/+XfruRHP8W9s2/mXXx79ci/HvZJsxLuffWm0Z/27EiR3jN+P1JLG2xq+17Wyb8b/+4OeHreqqn9bfZ6f4TbVSvjI9my8vLJ5PfkdusjAzNDI4Mjo8PDJ6KZ/MUeebM9XbPfrf06+e1/++FvF36n/3hja91Gb/f7v35blTz4n//9M7f/7Hdojf1BsRL7cZ/7XPv7/Wqq4Wf6JF/7Mt4mcilmvbhtqMf/3+49fb3BUA2APlhcWpsWKxMKegoKCwXuj0yAS8aM+SvtMtAQAAAAAAAAAAANq1F18n7nQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g98DAAD//3wG2HA=") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x40, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) fadvise64(r0, 0x1fffffe, 0x2, 0x4) 2.462891092s ago: executing program 1 (id=991): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 2.406977366s ago: executing program 3 (id=993): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 2.343886391s ago: executing program 4 (id=994): r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)="91", 0x1, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="a0b59f", 0x3, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="b8e456ceb03ea7234fa98f7689fc37a0bf87413871ca48431d37141464b257ef853e71a4f8fd73211261debceafb6271afc7122e4f5673eb97255591e2917830226650e64453b8f4cb0604f134e003979e798df1fbc21d997188393edd26cb42138365e3e0cbc0a5ca78914e6022c7f7a7d4511f3bc2f5f55557d0f537c68f788b861ce18a6bca26e8296a85c24eb73b53d186d6064764e0af1416d9a2cb13ced93e8945cebd394abff84506e909dd51e5739ebde13a348982947edbf4a33331", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r2, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={'vmac64(aes-fixed-time)\x00'}}) 2.076326838s ago: executing program 4 (id=995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x250, 0x0, 0x6a02000000000000}]}) 1.995839134s ago: executing program 3 (id=996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0xfffe, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private}]}]}, 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1}}], 0x1, 0xc008845) 1.947083018s ago: executing program 3 (id=997): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = epoll_create(0x95) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 1.90874248s ago: executing program 4 (id=998): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) rt_sigaction(0x0, &(0x7f0000000000)={&(0x7f0000000040)="26666e28460e383dae03000000c4a17ded64f99a66410fd82e64d8868cabfb6a26f00994aff700000040cd000f0f27b46544ca0c00", 0x0, 0x0}, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1.882771722s ago: executing program 3 (id=999): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) 1.813618756s ago: executing program 1 (id=1000): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa0080850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_mark_inode_dirty\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.783991349s ago: executing program 3 (id=1001): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000084dff0)='!selinu\x00\x00\x81linux\x00', 0x6e93ebbbcc088c70, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 1.736210832s ago: executing program 4 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}}, 0x0) 1.61718055s ago: executing program 4 (id=1004): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x4, 0x54f9, &(0x7f000000ab40)="$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") r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 1.61246038s ago: executing program 3 (id=1005): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200)={0x0, 0xfb, 0x2d, 0x0, 0x6, "d6a5f6f0b0000000e80c00", "57122f863cea65cfc3c71068965a87667890866ff52f9bbe"}, 0xfe26, 0x2) 1.567988763s ago: executing program 2 (id=1006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r2, 0xa01, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 1.562489074s ago: executing program 0 (id=1007): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES16], 0x2, 0x639, &(0x7f0000001300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x102) 1.453826421s ago: executing program 2 (id=1008): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) 1.273064773s ago: executing program 2 (id=1009): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8}) lstat(&(0x7f0000000000)='./file0\x00', 0x0) 1.146197742s ago: executing program 1 (id=1010): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0xe747}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x2004, @fd_index=0x4, 0x3, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 958.752924ms ago: executing program 0 (id=1011): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xfc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x24044010) 703.826312ms ago: executing program 0 (id=1012): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000008000000f7fffff700"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) 93.868863ms ago: executing program 4 (id=1013): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 80.261794ms ago: executing program 0 (id=1023): setreuid(0x0, 0xee00) setuid(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) 71.537515ms ago: executing program 1 (id=1014): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x9) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "a205f52045385947c9221cf91c5d676e152438"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "dd42a135dc6149b4"}) 28.200737ms ago: executing program 0 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}}, 0x0) 0s ago: executing program 0 (id=1016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000097000040"]) kernel console output (not intermixed with test programs): 00] loop1: detected capacity change from 0 to 2048 [ 57.444574][ T3877] XFS (loop4): Mounting V5 Filesystem [ 57.473366][ T3900] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 57.507489][ T3900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.544191][ T3877] XFS (loop4): Ending clean mount [ 57.555080][ T3877] XFS (loop4): Quotacheck needed: Please wait. [ 57.726592][ T3877] XFS (loop4): Quotacheck: Done. [ 57.839485][ T3573] XFS (loop4): Unmounting Filesystem [ 58.162579][ T3933] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.166350][ T3932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 58.205427][ T3932] tipc: Started in network mode [ 58.210513][ T3932] tipc: Node identity , cluster identity 8 [ 58.454939][ T3922] loop0: detected capacity change from 0 to 32768 [ 58.458080][ T3939] loop1: detected capacity change from 0 to 256 [ 58.495416][ T3938] sctp: [Deprecated]: syz.4.107 (pid 3938) Use of int in maxseg socket option. [ 58.495416][ T3938] Use struct sctp_assoc_value instead [ 58.496112][ T3916] loop2: detected capacity change from 0 to 40427 [ 58.534583][ T3943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 58.558543][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 58.583145][ T3922] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.105 (3922) [ 58.597407][ T3916] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 58.607588][ T3943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.115'. [ 58.617250][ T3916] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 58.694628][ T3922] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 58.708651][ T3939] FAT-fs (loop1): Directory bread(block 64) failed [ 58.715711][ T3939] FAT-fs (loop1): Directory bread(block 65) failed [ 58.723447][ T3922] BTRFS info (device loop0): using free space tree [ 58.730085][ T3939] FAT-fs (loop1): Directory bread(block 66) failed [ 58.730148][ T3939] FAT-fs (loop1): Directory bread(block 67) failed [ 58.730206][ T3939] FAT-fs (loop1): Directory bread(block 68) failed [ 58.730241][ T3939] FAT-fs (loop1): Directory bread(block 69) failed [ 58.751086][ T3916] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.759584][ T3612] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 58.785268][ T3939] FAT-fs (loop1): Directory bread(block 70) failed [ 58.799057][ T3939] FAT-fs (loop1): Directory bread(block 71) failed [ 58.809661][ T3922] BTRFS info (device loop0): has skinny extents [ 58.825368][ T3939] FAT-fs (loop1): Directory bread(block 72) failed [ 58.832320][ T3939] FAT-fs (loop1): Directory bread(block 73) failed [ 58.868614][ T3951] loop4: detected capacity change from 0 to 2048 [ 58.897763][ T3916] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 58.915303][ T3916] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.015314][ T3951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.031622][ T3951] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 59.117206][ T3922] BTRFS info (device loop0): enabling ssd optimizations [ 59.193571][ T3612] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 59.238845][ T3612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.288205][ T3981] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.302941][ T3612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.343871][ T3612] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 59.387500][ T3612] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 59.407174][ T3612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.436285][ T3612] usb 4-1: config 0 descriptor?? [ 59.516234][ T26] audit: type=1326 audit(1726504168.385:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.1.124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95b255def9 code=0x0 [ 59.520748][ T3986] sp0: Synchronizing with TNC [ 59.914080][ T26] audit: type=1326 audit(1726504168.785:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d796e6ef9 code=0x7ffc0000 [ 59.932406][ T4007] loop2: detected capacity change from 0 to 1024 [ 59.949618][ T3612] hid (null): invalid report_size 43000 [ 59.960162][ T3612] hid-generic 0003:057E:2009.0002: invalid report_size 43000 [ 59.989438][ T3612] hid-generic 0003:057E:2009.0002: item 0 4 1 7 parsing failed [ 59.997682][ T3612] hid-generic: probe of 0003:057E:2009.0002 failed with error -22 [ 60.015946][ T26] audit: type=1326 audit(1726504168.785:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d796e6ef9 code=0x7ffc0000 [ 60.066877][ T26] audit: type=1326 audit(1726504168.785:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d796e6f33 code=0x7ffc0000 [ 60.100033][ T26] audit: type=1326 audit(1726504168.795:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d796e59df code=0x7ffc0000 [ 60.122288][ T26] audit: type=1326 audit(1726504168.805:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9d796e6f87 code=0x7ffc0000 [ 60.145292][ T26] audit: type=1326 audit(1726504168.805:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d796e5890 code=0x7ffc0000 [ 60.212512][ T3994] usb 4-1: USB disconnect, device number 3 [ 60.222744][ T26] audit: type=1326 audit(1726504168.805:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d796e6afb code=0x7ffc0000 [ 60.227440][ T4007] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.128: Invalid block bitmap block 0 in block_group 0 [ 60.246520][ T26] audit: type=1326 audit(1726504168.845:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d796e5b8a code=0x7ffc0000 [ 60.281375][ T26] audit: type=1326 audit(1726504168.845:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d796e5b8a code=0x7ffc0000 [ 60.339663][ T4007] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.128: Failed to acquire dquot type 0 [ 60.358974][ T4007] EXT4-fs error (device loop2): ext4_free_blocks:6225: comm syz.2.128: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.407558][ T4007] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.128: Invalid inode bitmap blk 0 in block_group 0 [ 60.422612][ T1243] EXT4-fs error (device loop2): ext4_release_dquot:6219: comm kworker/u4:4: Failed to release dquot type 0 [ 60.455918][ T4029] loop0: detected capacity change from 0 to 1024 [ 60.474060][ T4007] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 60.509178][ T4007] EXT4-fs (loop2): 1 orphan inode deleted [ 60.515051][ T4007] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 60.575895][ T4034] loop1: detected capacity change from 0 to 512 [ 60.612491][ T4036] loop4: detected capacity change from 0 to 128 [ 60.624521][ T4007] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 60.647195][ T4034] EXT4-fs (loop1): Ignoring removed orlov option [ 60.651025][ T4036] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.662970][ T4034] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.670195][ T4036] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 60.743380][ T4007] syz.2.128 (4007) used greatest stack depth: 19328 bytes left [ 60.843043][ T4034] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.138: Attempting to read directory block (0) that is past i_size (256) [ 60.907062][ T4034] EXT4-fs (loop1): Remounting filesystem read-only [ 60.914728][ T4034] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 60.923226][ T4034] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 61.054688][ T4034] EXT4-fs (loop1): shut down requested (2) [ 61.342382][ T4077] loop3: detected capacity change from 0 to 512 [ 61.445884][ T4077] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.157: iget: bogus i_mode (0) [ 61.465279][ T3612] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.569420][ T4077] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.157: couldn't read orphan inode 17 (err -117) [ 61.602821][ T4077] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.675946][ T4086] loop4: detected capacity change from 0 to 128 [ 61.694369][ T4077] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.157: bg 0: block 7: invalid block bitmap [ 61.774775][ T3612] usb 3-1: Using ep0 maxpacket: 8 [ 61.894898][ T4074] loop1: detected capacity change from 0 to 32768 [ 61.910050][ T3612] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 61.945754][ T3612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 61.994474][ T3612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.994634][ T4074] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.155 (4074) [ 62.031071][ T3612] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.071627][ T3612] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.087157][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.143553][ T4074] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 62.187510][ T4074] BTRFS info (device loop1): force zlib compression, level 3 [ 62.219282][ T4074] BTRFS info (device loop1): max_inline at 4096 [ 62.225615][ T4074] BTRFS info (device loop1): using free space tree [ 62.255829][ T4074] BTRFS info (device loop1): has skinny extents [ 62.355370][ T4112] team0: Device ip6_vti0 is of different type [ 62.398935][ T3612] usb 3-1: GET_CAPABILITIES returned 0 [ 62.404467][ T3612] usbtmc 3-1:16.0: can't read capabilities [ 62.468151][ T4088] loop3: detected capacity change from 0 to 32768 [ 62.496053][ T4074] BTRFS info (device loop1): enabling ssd optimizations [ 62.624854][ T4088] JBD2: Ignoring recovery information on journal [ 62.677498][ T4062] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 62.711643][ T4088] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 62.723051][ T3612] usb 3-1: USB disconnect, device number 2 [ 62.946176][ T4143] loop0: detected capacity change from 0 to 128 [ 62.970874][ T4145] capability: warning: `syz.3.162' uses 32-bit capabilities (legacy support in use) [ 63.002285][ T4143] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.039037][ T4143] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 63.218201][ T3575] ocfs2: Unmounting device (7,3) on (node local) [ 63.557402][ T4164] loop0: detected capacity change from 0 to 4096 [ 63.580891][ T4171] netlink: 'syz.3.180': attribute type 3 has an invalid length. [ 63.701519][ T4164] ntfs: volume version 3.1. [ 63.944679][ T4188] loop4: detected capacity change from 0 to 64 [ 63.998609][ T4163] loop1: detected capacity change from 0 to 32768 [ 64.076988][ T4163] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 64.086302][ T4002] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.160451][ T3577] ocfs2: Unmounting device (7,1) on (node local) [ 64.328899][ T4002] usb 3-1: Using ep0 maxpacket: 8 [ 64.444786][ T4199] loop0: detected capacity change from 0 to 256 [ 64.453313][ T4002] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 64.462811][ T4002] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 64.486785][ T4002] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.504484][ T4200] loop1: detected capacity change from 0 to 4096 [ 64.540533][ T4204] loop4: detected capacity change from 0 to 64 [ 64.558847][ T4200] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 64.573566][ T4199] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 64.625009][ T4204] hfs: unable to locate alternate MDB [ 64.649119][ T4204] hfs: continuing without an alternate MDB [ 64.664027][ T4200] ntfs3: loop1: failed to convert "c46c" to macroman [ 64.673121][ T4002] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.685277][ T4002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.706914][ T4002] usb 3-1: Product: syz [ 64.737046][ T4002] usb 3-1: Manufacturer: syz [ 64.753359][ T4002] usb 3-1: SerialNumber: syz [ 64.901727][ T4219] loop3: detected capacity change from 0 to 256 [ 64.975882][ T4219] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 65.263171][ T4241] kvm [4239]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0 [ 65.479140][ T4002] usb 3-1: 0:2 : does not exist [ 65.625386][ T4256] Â: renamed from pim6reg1 [ 65.784277][ T3612] usb 3-1: USB disconnect, device number 3 [ 66.055716][ T4233] loop0: detected capacity change from 0 to 32768 [ 66.185650][ T4233] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.217 (4233) [ 66.258864][ T4233] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 66.288061][ T4233] BTRFS info (device loop0): using free space tree [ 66.298186][ T4233] BTRFS info (device loop0): has skinny extents [ 66.705445][ T4277] loop3: detected capacity change from 0 to 40427 [ 66.753094][ T4271] loop1: detected capacity change from 0 to 40427 [ 66.801482][ T4277] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.861931][ T4271] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 66.875078][ T4271] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.923848][ T4271] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.027721][ T4277] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 67.092617][ T4277] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.184055][ T4271] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 67.210646][ T4271] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 67.220293][ T4277] attempt to access beyond end of device [ 67.220293][ T4277] loop3: rw=2049, want=53256, limit=40427 [ 67.332820][ T3575] attempt to access beyond end of device [ 67.332820][ T3575] loop3: rw=2049, want=45104, limit=40427 [ 67.486601][ T4305] loop4: detected capacity change from 0 to 32768 [ 67.522934][ T4315] loop0: detected capacity change from 0 to 1024 [ 67.587761][ T4293] loop2: detected capacity change from 0 to 32768 [ 67.602991][ T4315] EXT4-fs (loop0): Ignoring removed oldalloc option [ 67.642640][ T4305] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 67.663536][ T4293] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.237 (4293) [ 67.719486][ T4315] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000040000003,noauto_da_alloc,noauto_da_alloc,data_err=ignore,noinit_itable,grpjquota=,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 67.750236][ T4293] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 67.759242][ T4293] BTRFS info (device loop2): disabling tree log [ 67.766045][ T4293] BTRFS info (device loop2): metadata ratio 65537 [ 67.773769][ T4293] BTRFS info (device loop2): metadata ratio 64 [ 67.780043][ T4293] BTRFS info (device loop2): using free space tree [ 67.786793][ T4293] BTRFS info (device loop2): has skinny extents [ 68.113483][ T3573] ocfs2: Unmounting device (7,4) on (node local) [ 68.250378][ T4339] loop0: detected capacity change from 0 to 32768 [ 68.290426][ T4293] BTRFS info (device loop2): enabling ssd optimizations [ 68.485445][ T4342] loop1: detected capacity change from 0 to 32768 [ 68.557800][ T4355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.250'. [ 68.946070][ T4375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'. [ 69.550096][ T4402] loop1: detected capacity change from 0 to 16 [ 69.655414][ T4402] erofs: (device loop1): mounted with root inode @ nid 36. [ 69.771518][ T4402] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 91 of nid 36 [ 69.961254][ T4387] loop0: detected capacity change from 0 to 32768 [ 70.009120][ T4387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.259 (4387) [ 70.258654][ T4387] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 70.288011][ T4387] BTRFS info (device loop0): use zlib compression, level 3 [ 70.302052][ T4417] kvm [4416]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000031 [ 70.332643][ T4387] BTRFS info (device loop0): using free space tree [ 70.376240][ T4387] BTRFS info (device loop0): has skinny extents [ 70.440374][ T4397] loop2: detected capacity change from 0 to 32768 [ 70.601021][ T4404] loop3: detected capacity change from 0 to 32768 [ 70.736601][ T4404] JBD2: Ignoring recovery information on journal [ 70.794948][ T4387] BTRFS info (device loop0): enabling ssd optimizations [ 70.861847][ T4447] program syz.2.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.890206][ T4404] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 71.029602][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 71.029617][ T26] audit: type=1800 audit(1726504435.895:30): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.266" name="file1" dev="loop3" ino=16946 res=0 errno=0 [ 71.044928][ T4445] loop1: detected capacity change from 0 to 4096 [ 71.166005][ T3575] ocfs2: Unmounting device (7,3) on (node local) [ 71.178422][ T4445] ntfs: volume version 3.1. [ 71.355249][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364439][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.430904][ T4456] __sock_release: fasync list not empty! [ 71.687034][ T26] audit: type=1326 audit(1726504436.555:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.1.282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95b255def9 code=0x0 [ 71.689890][ T4465] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 71.742821][ T4432] loop4: detected capacity change from 0 to 32768 [ 71.789651][ T4470] loop2: detected capacity change from 0 to 256 [ 71.904440][ T4475] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 72.022340][ T4432] XFS (loop4): Mounting V5 Filesystem [ 72.078244][ T4482] loop3: detected capacity change from 0 to 512 [ 72.212856][ T4432] XFS (loop4): Ending clean mount [ 72.269221][ T4482] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2931: inode #16: comm syz.3.289: corrupted xattr block 8 [ 72.305878][ T4482] EXT4-fs (loop3): Remounting filesystem read-only [ 72.313977][ T4482] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 72.333485][ T4482] EXT4-fs (loop3): 1 orphan inode deleted [ 72.346192][ T4482] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000003,barrier,delalloc,usrquota,. Quota mode: writeback. [ 72.397189][ T4482] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038 (0x7fffffff) [ 72.541570][ T3573] XFS (loop4): Unmounting Filesystem [ 72.755463][ T26] audit: type=1326 audit(1726504437.615:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.3.295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc21219ef9 code=0x0 [ 72.906410][ T4479] loop0: detected capacity change from 0 to 32768 [ 72.991324][ T4479] JBD2: Ignoring recovery information on journal [ 73.055877][ T4487] loop2: detected capacity change from 0 to 32768 [ 73.213765][ T4479] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 73.229760][ T4487] add_index: next_index = 0. Resetting! [ 73.243628][ T4487] non-latin1 character 0x3ff found in JFS file name [ 73.265486][ T4487] mount with iocharset=utf8 to access [ 73.374121][ T3567] ocfs2: Unmounting device (7,0) on (node local) [ 73.531643][ T4504] loop4: detected capacity change from 0 to 32768 [ 73.570251][ T4504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.292 (4504) [ 73.669350][ T4504] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 73.679517][ T4504] BTRFS info (device loop4): setting nodatacow, compression disabled [ 73.699425][ T4504] BTRFS info (device loop4): turning on flush-on-commit [ 73.706103][ T4515] loop3: detected capacity change from 0 to 2048 [ 73.706816][ T4504] BTRFS info (device loop4): enabling auto defrag [ 73.746756][ T4504] BTRFS info (device loop4): max_inline at 0 [ 73.748924][ T4000] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 73.760511][ T3994] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.763494][ T4504] BTRFS info (device loop4): using free space tree [ 73.783348][ T4504] BTRFS info (device loop4): has skinny extents [ 73.886986][ T4504] BTRFS info (device loop4): enabling ssd optimizations [ 73.887084][ T4515] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.974170][ T154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.995758][ T154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 74.034922][ T154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.034922][ T154] [ 74.048143][ T154] EXT4-fs (loop3): Total free blocks count 0 [ 74.054225][ T154] EXT4-fs (loop3): Free/Dirty block details [ 74.060624][ T154] EXT4-fs (loop3): free_blocks=2415919104 [ 74.066694][ T154] EXT4-fs (loop3): dirty_blocks=16 [ 74.075834][ T154] EXT4-fs (loop3): Block reservation details [ 74.086106][ T154] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 74.123156][ T3994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.135450][ T3994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.147063][ T3994] usb 3-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 74.170488][ T3994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.178874][ T4366] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.192459][ T3994] usb 3-1: config 0 descriptor?? [ 74.339225][ T4000] usb 2-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 74.361986][ T4000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.389941][ T4000] usb 2-1: Product: syz [ 74.394216][ T4000] usb 2-1: Manufacturer: syz [ 74.409978][ T4000] usb 2-1: SerialNumber: syz [ 74.434271][ T4000] usb 2-1: config 0 descriptor?? [ 74.524463][ T4554] loop4: detected capacity change from 0 to 8192 [ 74.559125][ T4366] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 74.568192][ T4366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.590265][ T4554] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 74.605015][ T4366] usb 1-1: config 0 descriptor?? [ 74.611179][ T4554] REISERFS (device loop4): using ordered data mode [ 74.617697][ T4554] reiserfs: using flush barriers [ 74.628286][ T4554] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.649676][ T4554] REISERFS (device loop4): checking transaction log (loop4) [ 74.674300][ T4366] cp210x 1-1:0.0: cp210x converter detected [ 74.716652][ T3994] wacom 0003:056A:012C.0003: hidraw0: USB HID v0.00 Device [HID 056a:012c] on usb-dummy_hcd.2-1/input0 [ 74.765537][ T4554] REISERFS (device loop4): Using tea hash to sort names [ 74.776155][ T4554] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 74.792510][ T4554] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 74.916168][ T3994] usb 3-1: USB disconnect, device number 4 [ 74.929139][ T4000] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in warm state. [ 74.966837][ T4000] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 75.009474][ T4000] dvbdev: DVB: registering new adapter (ASUS My Cinema U3100 Mini DVBT Tuner) [ 75.023123][ T4000] usb 2-1: media controller created [ 75.034842][ T4000] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.098268][ T4000] DVB: Unable to find symbol dib7000p_attach() [ 75.106302][ T4000] dvb-usb: no frontend was attached by 'ASUS My Cinema U3100 Mini DVBT Tuner' [ 75.113912][ T4366] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 75.195495][ T4366] usb 1-1: cp210x converter now attached to ttyUSB0 [ 75.199846][ T4000] rc_core: IR keymap rc-dib0700-rc5 not found [ 75.239971][ T4000] Registered IR keymap rc-empty [ 75.245329][ T4000] dvb-usb: could not initialize remote control. [ 75.280944][ T4000] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully initialized and connected. [ 75.424849][ T4366] usb 1-1: USB disconnect, device number 4 [ 75.443477][ T4366] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 75.476094][ T4559] loop4: detected capacity change from 0 to 32768 [ 75.495839][ T4366] cp210x 1-1:0.0: device disconnected [ 75.622577][ T4585] loop3: detected capacity change from 0 to 8 [ 75.640238][ T4559] XFS (loop4): Mounting V5 Filesystem [ 75.648774][ T4000] usb 2-1: USB disconnect, device number 2 [ 75.699756][ T4000] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully deinitialized and disconnected. [ 75.792536][ T4559] XFS (loop4): Ending clean mount [ 75.866098][ T4594] loop3: detected capacity change from 0 to 128 [ 75.897310][ T3573] XFS (loop4): Unmounting Filesystem [ 75.923779][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.972441][ T4594] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038 (0x7fffffff) [ 76.056315][ T4601] hpfs: bad mount options. [ 76.205876][ T4612] loop2: detected capacity change from 0 to 16 [ 76.264998][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 76.289627][ T4612] erofs: (device loop2): mounted with root inode @ nid 36. [ 76.335842][ T4614] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 76.383382][ T4614] netlink: 'syz.1.329': attribute type 2 has an invalid length. [ 76.466793][ T4618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.472459][ T1303] cfg80211: failed to load regulatory.db [ 76.547927][ T4621] loop2: detected capacity change from 0 to 2048 [ 76.575777][ T4624] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 76.684399][ T4621] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.700260][ T4621] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 77.270746][ T4610] loop0: detected capacity change from 0 to 32768 [ 77.418795][ T4627] loop4: detected capacity change from 0 to 32768 [ 77.468318][ T4610] XFS (loop0): Mounting V5 Filesystem [ 77.496494][ T4622] loop3: detected capacity change from 0 to 40427 [ 77.503408][ T4368] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.514238][ T4627] JBD2: Ignoring recovery information on journal [ 77.525981][ T4637] loop1: detected capacity change from 0 to 32768 [ 77.555942][ T4627] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 77.635404][ T26] audit: type=1800 audit(1726504442.505:33): pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.333" name=01 dev="loop4" ino=17058 res=0 errno=0 [ 77.668303][ T4637] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 77.695723][ T4610] XFS (loop0): Ending clean mount [ 77.709072][ T4622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.731510][ T4610] XFS (loop0): Quotacheck needed: Please wait. [ 77.749483][ T3573] ocfs2: Unmounting device (7,4) on (node local) [ 77.779114][ T4368] usb 3-1: Using ep0 maxpacket: 8 [ 77.784483][ T26] audit: type=1800 audit(1726504442.655:34): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.337" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 77.805119][ T4622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.841310][ T4610] XFS (loop0): Quotacheck: Done. [ 77.878279][ T3577] ocfs2: Unmounting device (7,1) on (node local) [ 77.890696][ T3575] attempt to access beyond end of device [ 77.890696][ T3575] loop3: rw=2049, want=45104, limit=40427 [ 77.989194][ T4368] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.066292][ T3567] XFS (loop0): Unmounting Filesystem [ 78.133880][ T4368] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 78.161323][ T4368] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.177678][ T4368] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.187996][ T4368] usb 3-1: config 1 has no interface number 1 [ 78.194411][ T4368] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 78.222936][ T4664] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 78.232272][ T4368] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.420452][ T4368] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.440223][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.454647][ T4368] usb 3-1: Product: syz [ 78.460266][ T4368] usb 3-1: Manufacturer: syz [ 78.465056][ T4368] usb 3-1: SerialNumber: syz [ 78.511335][ T4676] loop4: detected capacity change from 0 to 64 [ 78.538417][ T4675] netlink: 152 bytes leftover after parsing attributes in process `syz.1.349'. [ 78.570745][ T4675] tc_dump_action: action bad kind [ 78.761190][ T4682] loop1: detected capacity change from 0 to 256 [ 78.847037][ T4368] usb 3-1: USB disconnect, device number 5 [ 78.860251][ T4682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 78.908032][ T3662] udevd[3662]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.084363][ T26] audit: type=1326 audit(1726504443.955:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95b255def9 code=0x0 [ 79.094564][ T4702] loop4: detected capacity change from 0 to 16 [ 79.153245][ T4702] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.211868][ T4707] ptrace attach of "./syz-executor exec"[4708] was attempted by "./syz-executor exec"[4707] [ 79.376210][ T4717] loop2: detected capacity change from 0 to 512 [ 79.418561][ T4720] loop0: detected capacity change from 0 to 128 [ 79.454880][ T4717] EXT4-fs (loop2): filesystem is read-only [ 79.485674][ T4717] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 79.497835][ T4720] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 79.541376][ T4717] EXT4-fs (loop2): filesystem is read-only [ 79.547416][ T4717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.559493][ T4717] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.366: bg 0: block 64: padding at end of block bitmap is not set [ 79.588114][ T4717] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 79.647588][ T4717] EXT4-fs (loop2): 1 orphan inode deleted [ 79.699508][ T4717] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000001000,user_xattr,nombcache,resuid=0x000000000000ee00,data_err=abort,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 80.046855][ T4745] loop1: detected capacity change from 0 to 2048 [ 80.148606][ T4756] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.321251][ T4764] loop4: detected capacity change from 0 to 256 [ 80.396206][ T4764] exfat: Deprecated parameter 'utf8' [ 80.403591][ T4771] loop0: detected capacity change from 0 to 256 [ 80.409894][ T4764] exfat: Deprecated parameter 'utf8' [ 80.409986][ T4764] exfat: Deprecated parameter 'utf8' [ 80.464990][ T1303] Bluetooth: hci4: command 0x0411 tx timeout [ 80.496636][ T4764] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 80.507430][ T4771] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 80.566277][ T4778] loop3: detected capacity change from 0 to 164 [ 80.583818][ T4764] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 80.598196][ T4764] exFAT-fs (loop4): Filesystem has been set read-only [ 80.718833][ T4357] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 80.902518][ T4786] nbd: must specify at least one socket [ 80.978972][ T4357] usb 3-1: Using ep0 maxpacket: 32 [ 81.285632][ T4357] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 81.304893][ T4804] loop3: detected capacity change from 0 to 256 [ 81.324325][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.346380][ T4357] usb 3-1: Product: syz [ 81.361532][ T4357] usb 3-1: Manufacturer: syz [ 81.374520][ T4357] usb 3-1: SerialNumber: syz [ 81.383737][ T4357] usb 3-1: config 0 descriptor?? [ 81.430950][ T4357] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 81.668979][ T4368] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.716722][ T4782] loop0: detected capacity change from 0 to 32768 [ 81.772474][ T4782] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.389 (4782) [ 81.805725][ T4782] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 81.831088][ T4782] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 81.863311][ T4782] BTRFS info (device loop0): use lzo compression, level 0 [ 81.882015][ T4782] BTRFS info (device loop0): using free space tree [ 81.902657][ T4782] BTRFS info (device loop0): has skinny extents [ 81.936118][ T4782] BTRFS info (device loop0): enabling ssd optimizations [ 81.943582][ T4368] usb 5-1: Using ep0 maxpacket: 16 [ 82.002000][ T3994] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.024767][ T26] audit: type=1800 audit(1726504446.895:36): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 82.091226][ T4368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.258866][ T3994] usb 4-1: Using ep0 maxpacket: 16 [ 82.274726][ T4838] loop1: detected capacity change from 0 to 1024 [ 82.299191][ T4357] gspca_ov534_9: reg_w failed -71 [ 82.304420][ T4368] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 82.319275][ T4368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.323266][ T4838] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.349118][ T4368] usb 5-1: Product: syz [ 82.353308][ T4368] usb 5-1: Manufacturer: syz [ 82.357898][ T4368] usb 5-1: SerialNumber: syz [ 82.377225][ T4368] usb 5-1: config 0 descriptor?? [ 82.384640][ T3994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.395948][ T4838] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 82.414936][ T3994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.430925][ T4368] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 82.433657][ T3994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.460612][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,noinit_itable,dioread_nolock,dioread_nolock,bsdgroups,min_batch_time=0x0000000000005c0a,inode_readahead_blks=0x0000000000000001,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 82.483999][ T3994] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.518423][ T4838] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 82.533070][ T3994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.568625][ T3994] usb 4-1: config 0 descriptor?? [ 82.748996][ T4357] gspca_ov534_9: Unknown sensor 0000 [ 82.749080][ T4357] ov534_9: probe of 3-1:0.0 failed with error -22 [ 82.814827][ T4357] usb 3-1: USB disconnect, device number 6 [ 83.071383][ T3994] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 83.078644][ T3994] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 83.087697][ T3994] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 83.109598][ T3994] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 83.125012][ T3994] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 83.150012][ T3994] microsoft 0003:045E:07DA.0004: no inputs found [ 83.157619][ T3994] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 83.169168][ T4002] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.294402][ T4368] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 83.317030][ T4368] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 83.360649][ T4368] usb 5-1: USB disconnect, device number 4 [ 83.367442][ T3994] usb 4-1: USB disconnect, device number 4 [ 83.369635][ T4850] loop2: detected capacity change from 0 to 32768 [ 83.439525][ T4850] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.412 (4850) [ 83.513998][ T4871] netlink: 'syz.1.422': attribute type 7 has an invalid length. [ 83.522209][ T4850] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 83.539622][ T4850] BTRFS info (device loop2): setting nodatacow, compression disabled [ 83.551893][ T4850] BTRFS info (device loop2): enabling auto defrag [ 83.569743][ T4850] BTRFS info (device loop2): max_inline at 0 [ 83.575778][ T4850] BTRFS info (device loop2): using free space tree [ 83.599844][ T4850] BTRFS info (device loop2): has skinny extents [ 83.689112][ T4002] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 83.698322][ T4002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.716696][ T4002] usb 1-1: Product: syz [ 83.721238][ T4002] usb 1-1: Manufacturer: syz [ 83.725849][ T4002] usb 1-1: SerialNumber: syz [ 83.740192][ T4002] usb 1-1: config 0 descriptor?? [ 83.799972][ T4002] ch341 1-1:0.0: ch341-uart converter detected [ 84.047701][ T4904] raw_sendmsg: syz.1.429 forgot to set AF_INET. Fix it! [ 84.396148][ T4917] device dummy0 entered promiscuous mode [ 84.570443][ T4901] loop4: detected capacity change from 0 to 32768 [ 84.605093][ T4901] XFS: noikeep mount option is deprecated. [ 84.610106][ T4923] loop1: detected capacity change from 0 to 128 [ 84.678847][ T4002] usb 1-1: failed to send control message: -71 [ 84.685164][ T4002] ch341-uart: probe of ttyUSB0 failed with error -71 [ 84.702862][ T4002] usb 1-1: USB disconnect, device number 5 [ 84.713358][ T4002] ch341 1-1:0.0: device disconnected [ 84.730700][ T4901] XFS (loop4): Mounting V5 Filesystem [ 84.848984][ T4366] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 84.914236][ T4901] XFS (loop4): Ending clean mount [ 84.936475][ T4901] XFS (loop4): Quotacheck needed: Please wait. [ 85.006017][ T4939] loop1: detected capacity change from 0 to 4096 [ 85.081687][ T4901] XFS (loop4): Quotacheck: Done. [ 85.109854][ T4939] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 85.169639][ T4939] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 85.223522][ T3573] XFS (loop4): Unmounting Filesystem [ 85.239186][ T4366] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 85.251525][ T4366] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 85.263638][ T4366] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 85.274971][ T4366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.349357][ T4919] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.404077][ T4949] loop3: detected capacity change from 0 to 4096 [ 85.453214][ T4954] loop0: detected capacity change from 0 to 128 [ 85.507610][ T4949] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 85.557228][ T4954] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.569029][ T4954] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038 (0x7fffffff) [ 85.605259][ T4949] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 85.611582][ T4958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.447'. [ 85.650876][ T4954] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x0c) [ 85.964879][ T4974] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 86.108325][ T4980] loop4: detected capacity change from 0 to 1024 [ 86.340380][ T4366] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 86.359997][ T4366] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 86.437504][ T4366] usb 3-1: USB disconnect, device number 7 [ 86.458734][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 86.736583][ T4984] loop3: detected capacity change from 0 to 32768 [ 86.826661][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.887383][ T4982] loop1: detected capacity change from 0 to 40427 [ 86.896043][ T4984] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 86.987494][ T4982] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.009015][ T4982] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.086059][ T4982] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.153345][ T3575] ocfs2: Unmounting device (7,3) on (node local) [ 87.307161][ T4982] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.330770][ T4982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.428074][ T26] audit: type=1804 audit(1726504452.295:37): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.456" name="/newroot/119/bus/file0" dev="loop1" ino=10 res=1 errno=0 [ 87.853790][ T5016] loop2: detected capacity change from 0 to 32768 [ 87.968987][ T5016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.472 (5016) [ 87.987834][ T5018] loop4: detected capacity change from 0 to 32768 [ 88.034467][ T5016] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 88.070420][ T5016] BTRFS info (device loop2): use no compression [ 88.091909][ T5018] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.471 (5018) [ 88.097375][ T5016] BTRFS info (device loop2): force zlib compression, level 3 [ 88.125759][ T5020] loop0: detected capacity change from 0 to 32768 [ 88.155556][ T5018] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 88.171470][ T5016] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 88.195671][ T5018] BTRFS info (device loop4): use zlib compression, level 3 [ 88.202392][ T5016] BTRFS info (device loop2): use lzo compression, level 0 [ 88.215282][ T5020] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.474 (5020) [ 88.238791][ T5016] BTRFS info (device loop2): turning on flush-on-commit [ 88.262147][ T5020] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 88.282942][ T5020] BTRFS info (device loop0): turning on flush-on-commit [ 88.284221][ T5018] BTRFS info (device loop4): using free space tree [ 88.299886][ T5016] BTRFS info (device loop2): enabling auto defrag [ 88.306497][ T5016] BTRFS info (device loop2): using free space tree [ 88.323044][ T5018] BTRFS info (device loop4): has skinny extents [ 88.348864][ T5020] BTRFS info (device loop0): turning off barriers [ 88.355607][ T5016] BTRFS info (device loop2): has skinny extents [ 88.386037][ T5020] BTRFS info (device loop0): doing ref verification [ 88.409668][ T5020] BTRFS info (device loop0): force clearing of disk cache [ 88.427310][ T5020] BTRFS info (device loop0): enabling disk space caching [ 88.474780][ T5020] BTRFS info (device loop0): turning on sync discard [ 88.490601][ T5020] BTRFS info (device loop0): using default commit interval 30s [ 88.518972][ T5020] BTRFS info (device loop0): disk space caching is enabled [ 88.530538][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 88.559181][ T5020] BTRFS info (device loop0): has skinny extents [ 88.723890][ T5018] BTRFS info (device loop4): enabling ssd optimizations [ 88.727770][ T5016] BTRFS info (device loop2): enabling ssd optimizations [ 88.951442][ T5020] BTRFS info (device loop0): enabling ssd optimizations [ 88.979276][ T5020] BTRFS info (device loop0): clearing free space tree [ 89.007497][ T5020] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.018454][ T5020] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.574257][ T5122] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.389016][ T5141] loop2: detected capacity change from 0 to 16 [ 90.473620][ T5141] erofs: (device loop2): mounted with root inode @ nid 36. [ 90.523969][ T5141] attempt to access beyond end of device [ 90.523969][ T5141] loop2: rw=0, want=24, limit=16 [ 90.529559][ T5114] loop1: detected capacity change from 0 to 40427 [ 90.586531][ T5125] loop3: detected capacity change from 0 to 32768 [ 90.593887][ T5141] erofs: (device loop2): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 90.606512][ T5141] erofs: (device loop2): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 90.617462][ T5141] erofs: (device loop2): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 90.627265][ T5141] attempt to access beyond end of device [ 90.627265][ T5141] loop2: rw=524288, want=32, limit=16 [ 90.632427][ T5125] XFS: noikeep mount option is deprecated. [ 90.639035][ T5141] attempt to access beyond end of device [ 90.639035][ T5141] loop2: rw=524288, want=24, limit=16 [ 90.660033][ T5114] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 90.678861][ T5114] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.699277][ T5114] F2FS-fs (loop1): invalid crc value [ 90.745648][ T5114] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.812503][ T5125] XFS (loop3): Mounting V5 Filesystem [ 90.857793][ T5136] loop4: detected capacity change from 0 to 32768 [ 90.866055][ T5114] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.873958][ T5114] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.974557][ T3577] attempt to access beyond end of device [ 90.974557][ T3577] loop1: rw=2049, want=45104, limit=40427 [ 91.029527][ T5125] XFS (loop3): Ending clean mount [ 91.038938][ T5136] XFS (loop4): Mounting V5 Filesystem [ 91.056122][ T5125] XFS (loop3): Quotacheck needed: Please wait. [ 91.170507][ T5136] XFS (loop4): Ending clean mount [ 91.268235][ T5125] XFS (loop3): Quotacheck: Done. [ 91.362106][ T3573] XFS (loop4): Unmounting Filesystem [ 91.380493][ T5125] attempt to access beyond end of device [ 91.380493][ T5125] loop3: rw=4096, want=22608914004574208, limit=32768 [ 91.527955][ T3575] XFS (loop3): Unmounting Filesystem [ 91.553221][ T5160] loop0: detected capacity change from 0 to 32768 [ 91.600726][ T5160] XFS: ikeep mount option is deprecated. [ 91.606703][ T5160] XFS: noikeep mount option is deprecated. [ 91.837913][ T5190] tap0: tun_chr_ioctl cmd 35108 [ 91.901643][ T5160] XFS (loop0): Mounting V5 Filesystem [ 92.057083][ T5160] XFS (loop0): Ending clean mount [ 92.065892][ T5160] XFS (loop0): Quotacheck needed: Please wait. [ 92.212059][ T5217] loop4: detected capacity change from 0 to 1024 [ 92.227774][ T5160] XFS (loop0): Quotacheck: Done. [ 92.253871][ T5217] hfsplus: failed to load catalog file [ 92.276974][ T5209] loop1: detected capacity change from 0 to 1764 [ 92.414978][ T3567] XFS (loop0): Unmounting Filesystem [ 92.484062][ T5228] loop2: detected capacity change from 0 to 256 [ 92.572194][ T5228] exfat: Deprecated parameter 'utf8' [ 92.577622][ T5228] exfat: Deprecated parameter 'namecase' [ 92.587036][ T5228] exfat: Deprecated parameter 'namecase' [ 92.602236][ T5228] exfat: Deprecated parameter 'utf8' [ 92.644539][ T5228] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 92.945160][ T5241] netlink: 80 bytes leftover after parsing attributes in process `syz.4.532'. [ 93.035826][ T5246] loop4: detected capacity change from 0 to 128 [ 93.112112][ T5246] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 93.153393][ T5246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.346338][ T5254] loop2: detected capacity change from 0 to 2048 [ 93.384447][ T5224] loop3: detected capacity change from 0 to 32768 [ 93.412926][ T5254] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 93.479689][ T5254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.973631][ T5248] loop0: detected capacity change from 0 to 40427 [ 94.081051][ T5248] F2FS-fs (loop0): invalid crc value [ 94.130546][ T5248] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.264947][ T5248] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.344413][ T5258] loop4: detected capacity change from 0 to 32768 [ 94.395873][ T5258] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.539 (5258) [ 94.426652][ T5248] attempt to access beyond end of device [ 94.426652][ T5248] loop0: rw=2049, want=53488, limit=40427 [ 94.463164][ T5258] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 94.484664][ T5258] BTRFS info (device loop4): setting nodatasum [ 94.509513][ T5258] BTRFS info (device loop4): using free space tree [ 94.516060][ T5258] BTRFS info (device loop4): has skinny extents [ 94.731171][ T5258] BTRFS info (device loop4): enabling ssd optimizations [ 94.850946][ T3580] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.963746][ T5326] loop2: detected capacity change from 0 to 2048 [ 95.163339][ T3580] usb 2-1: Using ep0 maxpacket: 8 [ 95.268135][ T5326] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.279729][ T3580] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.296899][ T3580] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 95.299091][ T5326] ext4 filesystem being mounted at /94/bus supports timestamps until 2038 (0x7fffffff) [ 95.308574][ T3580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.401782][ T3580] usb 2-1: config 0 descriptor?? [ 95.410614][ T5341] sp0: Synchronizing with TNC [ 95.722592][ T3610] usb 2-1: USB disconnect, device number 3 [ 95.731359][ T5359] loop3: detected capacity change from 0 to 128 [ 95.757611][ T5361] loop2: detected capacity change from 0 to 512 [ 95.813873][ T5361] EXT4-fs (loop2): Ignoring removed orlov option [ 95.835534][ T5359] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.836024][ T5361] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.865114][ T5359] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 95.898847][ T4454] Bluetooth: hci4: command 0x0405 tx timeout [ 95.905988][ T5361] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.574: Attempting to read directory block (0) that is past i_size (256) [ 95.925227][ T5367] loop0: detected capacity change from 0 to 8 [ 95.937733][ T3612] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.954616][ T5361] EXT4-fs (loop2): Remounting filesystem read-only [ 95.963453][ T5361] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 95.972482][ T5361] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 96.003654][ T5361] EXT4-fs (loop2): shut down requested (2) [ 96.231292][ T5382] loop0: detected capacity change from 0 to 512 [ 96.348943][ T3612] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.360181][ T3612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.372376][ T5382] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.583: iget: bogus i_mode (0) [ 96.384682][ T3612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.389043][ T5382] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.583: couldn't read orphan inode 17 (err -117) [ 96.395301][ T3612] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.420352][ T5382] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.431181][ T3612] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 96.448789][ T3612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.459184][ T3612] usb 5-1: config 0 descriptor?? [ 96.494105][ T5382] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.583: bg 0: block 7: invalid block bitmap [ 96.526265][ T5390] netlink: 'syz.3.587': attribute type 21 has an invalid length. [ 96.556057][ T5390] netlink: 144 bytes leftover after parsing attributes in process `syz.3.587'. [ 96.715071][ T26] audit: type=1326 audit(1726504717.585:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5395 comm="syz.3.591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc21219ef9 code=0x0 [ 96.751426][ T5376] loop2: detected capacity change from 0 to 32768 [ 96.848978][ T3580] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.865687][ T5376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.579 (5376) [ 96.907379][ T5376] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 96.918004][ T5376] BTRFS info (device loop2): setting nodatacow, compression disabled [ 96.926372][ T5376] BTRFS info (device loop2): turning on flush-on-commit [ 96.933894][ T5376] BTRFS info (device loop2): max_inline at 0 [ 96.939555][ T3612] hid (null): invalid report_size 43000 [ 96.940635][ T5376] BTRFS info (device loop2): enabling auto defrag [ 96.948203][ T3612] hid-generic 0003:057E:2009.0005: invalid report_size 43000 [ 96.954341][ T5376] BTRFS info (device loop2): max_inline at 63 [ 96.966703][ T5376] BTRFS info (device loop2): using free space tree [ 96.973595][ T3612] hid-generic 0003:057E:2009.0005: item 0 4 1 7 parsing failed [ 96.976876][ T5376] BTRFS info (device loop2): has skinny extents [ 96.987396][ T3612] hid-generic: probe of 0003:057E:2009.0005 failed with error -22 [ 97.062581][ T5376] BTRFS info (device loop2): enabling ssd optimizations [ 97.103208][ T5376] BTRFS info (device loop2): device stats zeroed by syz.2.579 (5376) [ 97.119004][ T3580] usb 2-1: Using ep0 maxpacket: 32 [ 97.249127][ T3580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.267769][ T3580] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 97.277596][ T3580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.290815][ T3580] usb 2-1: config 0 descriptor?? [ 97.319518][ T4001] usb 5-1: USB disconnect, device number 5 [ 97.634965][ T5427] loop3: detected capacity change from 0 to 128 [ 97.708289][ T5427] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 97.751061][ T5429] team0: Device ip6_vti0 is of different type [ 97.760560][ T5427] sysv_free_block: trying to free block not in datazone [ 97.776496][ T5423] loop0: detected capacity change from 0 to 32768 [ 97.792552][ T3580] wacom 0003:056A:0000.0006: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 97.835004][ T3580] wacom 0003:056A:0000.0006: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 97.844242][ T3575] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 97.857237][ T3580] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.0006/input/input12 [ 97.895576][ T5423] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.593 (5423) [ 97.971243][ T5423] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 98.019066][ T5423] BTRFS info (device loop0): force zlib compression, level 3 [ 98.026721][ T4356] usb 2-1: USB disconnect, device number 4 [ 98.044301][ T5423] BTRFS info (device loop0): max_inline at 4096 [ 98.052612][ T5443] loop4: detected capacity change from 0 to 128 [ 98.059054][ T5423] BTRFS info (device loop0): using free space tree [ 98.065684][ T5423] BTRFS info (device loop0): has skinny extents [ 98.119604][ T5443] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.131750][ T5443] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038 (0x7fffffff) [ 98.493116][ T5423] BTRFS info (device loop0): enabling ssd optimizations [ 98.510607][ T26] audit: type=1326 audit(1726504719.385:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.4.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f412bc46ef9 code=0x0 [ 98.922678][ T5467] loop3: detected capacity change from 0 to 32768 [ 98.941986][ T5494] netlink: 'syz.2.617': attribute type 3 has an invalid length. [ 98.975987][ T5491] loop1: detected capacity change from 0 to 4111 [ 99.011041][ T5467] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.140785][ T3575] ocfs2: Unmounting device (7,3) on (node local) [ 99.182498][ T5491] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 99.206431][ T5491] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 99.279384][ T5491] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 99.328995][ T5491] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 99.376850][ T5491] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 99.407410][ T5491] ntfs: volume version 3.1. [ 99.415036][ T5491] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 99.438643][ T5491] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 99.487441][ T5491] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 99.513071][ T5513] loop4: detected capacity change from 0 to 256 [ 99.610829][ T5513] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 99.628612][ T5516] loop3: detected capacity change from 0 to 4096 [ 99.640792][ T3612] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.722989][ T5516] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 99.880141][ T5516] ntfs3: loop3: failed to convert "c46c" to macroman [ 99.909378][ T3612] usb 1-1: Using ep0 maxpacket: 8 [ 100.007943][ T5526] loop2: detected capacity change from 0 to 256 [ 100.043140][ T3612] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 100.075782][ T3612] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.103462][ T3612] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.116423][ T3612] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.154885][ T3612] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.163726][ T5526] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 100.164573][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.243926][ T5535] loop4: detected capacity change from 0 to 256 [ 100.456091][ T5541] loop4: detected capacity change from 0 to 164 [ 100.486191][ T5541] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 100.499144][ T3612] usb 1-1: GET_CAPABILITIES returned 0 [ 100.504672][ T3612] usbtmc 1-1:16.0: can't read capabilities [ 100.513466][ T5520] loop1: detected capacity change from 0 to 32768 [ 100.525559][ T5541] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 100.539072][ T3580] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.672216][ T5520] JBD2: Ignoring recovery information on journal [ 100.749088][ T5502] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 100.754200][ T5520] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.763579][ T4356] usb 1-1: USB disconnect, device number 6 [ 100.798832][ T3580] usb 4-1: Using ep0 maxpacket: 8 [ 100.873994][ T3577] ocfs2: Unmounting device (7,1) on (node local) [ 100.969136][ T3580] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 100.988139][ T3580] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 101.007107][ T3580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.105442][ T5539] loop2: detected capacity change from 0 to 40427 [ 101.163188][ T5539] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 101.189189][ T5539] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.209829][ T3580] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.221332][ T3580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.242428][ T5539] F2FS-fs (loop2): invalid crc value [ 101.250996][ T3580] usb 4-1: Product: syz [ 101.259081][ T3580] usb 4-1: Manufacturer: syz [ 101.263744][ T3580] usb 4-1: SerialNumber: syz [ 101.323164][ T5539] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.326987][ T5550] loop4: detected capacity change from 0 to 32768 [ 101.404611][ T5550] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.640 (5550) [ 101.434045][ T5539] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.442471][ T5539] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.649251][ T5564] loop1: detected capacity change from 0 to 32768 [ 101.664658][ T3568] attempt to access beyond end of device [ 101.664658][ T3568] loop2: rw=2049, want=45104, limit=40427 [ 101.678451][ T5550] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 101.694694][ T5550] BTRFS info (device loop4): disabling tree log [ 101.715311][ T5550] BTRFS info (device loop4): metadata ratio 65537 [ 101.722332][ T5550] BTRFS info (device loop4): metadata ratio 64 [ 101.729078][ T5550] BTRFS info (device loop4): using free space tree [ 101.735924][ T5550] BTRFS info (device loop4): has skinny extents [ 101.838329][ T5550] BTRFS info (device loop4): enabling ssd optimizations [ 101.974048][ T4356] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.982187][ T3580] usb 4-1: 0:2 : does not exist [ 102.202093][ T3991] usb 4-1: USB disconnect, device number 5 [ 102.331442][ T5601] loop2: detected capacity change from 0 to 1024 [ 102.361440][ T5601] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 102.407736][ T4356] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 102.435154][ T5601] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000001,discard,i_version,debug_want_extra_isize=0x0000000000000040,jqfmt=vfsold,barrier=0x0000000000000006,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 102.589070][ T4356] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 102.598146][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.610345][ T4356] usb 1-1: Product: syz [ 102.614557][ T4356] usb 1-1: Manufacturer: syz [ 102.620787][ T4356] usb 1-1: SerialNumber: syz [ 102.639768][ T4356] usb 1-1: config 0 descriptor?? [ 103.036781][ T5620] kvm [5618]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000031 [ 103.170398][ T5628] Invalid ELF header magic: != ELF [ 103.270223][ T5630] loop3: detected capacity change from 0 to 4096 [ 103.305589][ T5630] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 103.348912][ T4356] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 103.349562][ T5633] loop2: detected capacity change from 0 to 4096 [ 103.466571][ T5630] ntfs3: Cannot load iocharset cp94./bus [ 103.538362][ T5633] ntfs: volume version 3.1. [ 103.559163][ T4356] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 103.579495][ T5636] program syz.1.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.592585][ T4356] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 103.656130][ T4356] asix: probe of 1-1:0.0 failed with error -71 [ 103.697983][ T4356] usb 1-1: USB disconnect, device number 7 [ 103.702482][ T5640] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.732252][ T5642] loop1: detected capacity change from 0 to 256 [ 103.977085][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 103.977097][ T26] audit: type=1326 audit(1726504980.848:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.3.674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc21219ef9 code=0x0 [ 104.001963][ T5631] loop4: detected capacity change from 0 to 32768 [ 104.036002][ T5652] loop1: detected capacity change from 0 to 512 [ 104.087587][ T5652] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2931: inode #16: comm syz.1.673: corrupted xattr block 8 [ 104.106079][ T5652] EXT4-fs (loop1): Remounting filesystem read-only [ 104.129734][ T5652] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 104.139681][ T5652] EXT4-fs (loop1): 1 orphan inode deleted [ 104.145421][ T5652] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000003,barrier,delalloc,usrquota,. Quota mode: writeback. [ 104.170719][ T5652] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038 (0x7fffffff) [ 104.189986][ T5631] JBD2: Ignoring recovery information on journal [ 104.284013][ T5631] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 104.330121][ T26] audit: type=1800 audit(1726504981.208:42): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.664" name="file1" dev="loop4" ino=16946 res=0 errno=0 [ 104.396089][ T3573] ocfs2: Unmounting device (7,4) on (node local) [ 104.567232][ T5654] loop2: detected capacity change from 0 to 32768 [ 104.616758][ T5668] loop0: detected capacity change from 0 to 4096 [ 104.634873][ T5654] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.675 (5654) [ 104.711272][ T5654] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 104.770383][ T5654] BTRFS info (device loop2): using free space tree [ 104.788778][ T5654] BTRFS info (device loop2): has skinny extents [ 105.157499][ T5714] loop4: detected capacity change from 0 to 128 [ 105.163850][ T5712] loop0: detected capacity change from 0 to 2048 [ 105.165927][ T5654] BTRFS info (device loop2): enabling ssd optimizations [ 105.254002][ T5712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.288777][ T1303] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.558945][ T1303] usb 4-1: Using ep0 maxpacket: 16 [ 105.689000][ T1303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.734564][ T1303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.772145][ T1303] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 105.798393][ T1303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.840143][ T1303] usb 4-1: config 0 descriptor?? [ 105.900075][ T5743] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 106.015299][ T5751] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.147444][ T5758] loop0: detected capacity change from 0 to 128 [ 106.271144][ T5758] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.298821][ T4000] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.321043][ T1303] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 106.360309][ T1303] konepure 0003:1E7D:2DB4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 106.376965][ T5758] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038 (0x7fffffff) [ 106.383600][ T5749] loop2: detected capacity change from 0 to 32768 [ 106.486195][ T5749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.696 (5749) [ 106.520336][ T5775] loop0: detected capacity change from 0 to 512 [ 106.533258][ T5749] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 106.567229][ T5749] BTRFS info (device loop2): setting nodatasum [ 106.586436][ T5749] BTRFS info (device loop2): force zlib compression, level 3 [ 106.606172][ T5749] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 106.623499][ T5775] EXT4-fs (loop0): 1 orphan inode deleted [ 106.639511][ T5775] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 106.669106][ T4000] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.673618][ T5749] BTRFS info (device loop2): use lzo compression, level 0 [ 106.688478][ T4000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.713763][ T5749] BTRFS info (device loop2): turning on flush-on-commit [ 106.714638][ T4000] usb 2-1: config 0 descriptor?? [ 106.726461][ T5775] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038 (0x7fffffff) [ 106.750155][ T5749] BTRFS info (device loop2): enabling auto defrag [ 106.756615][ T5749] BTRFS info (device loop2): using free space tree [ 106.764334][ T4000] cp210x 2-1:0.0: cp210x converter detected [ 106.770321][ T5749] BTRFS info (device loop2): has skinny extents [ 106.858583][ T5749] BTRFS info (device loop2): enabling ssd optimizations [ 107.188957][ T4000] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 107.222949][ T5817] loop4: detected capacity change from 0 to 256 [ 107.231224][ T4000] usb 2-1: cp210x converter now attached to ttyUSB0 [ 107.465775][ T4356] usb 2-1: USB disconnect, device number 5 [ 107.489044][ T4356] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.533048][ T5809] tun0: tun_chr_ioctl cmd 2147767507 [ 107.559096][ T4356] cp210x 2-1:0.0: device disconnected [ 107.738182][ T5834] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 107.954690][ T5844] loop0: detected capacity change from 0 to 2048 [ 107.984062][ T23] usb 4-1: USB disconnect, device number 6 [ 108.053593][ T5844] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.068959][ T5844] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038 (0x7fffffff) [ 108.132130][ T5859] loop3: detected capacity change from 0 to 8192 [ 108.191609][ T5865] netlink: 152 bytes leftover after parsing attributes in process `syz.4.729'. [ 108.208301][ T5859] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 108.221490][ T5865] tc_dump_action: action bad kind [ 108.298355][ T5859] REISERFS (device loop3): using ordered data mode [ 108.383243][ T5859] reiserfs: using flush barriers [ 108.402256][ T5872] loop0: detected capacity change from 0 to 256 [ 108.413181][ T5859] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.479129][ T5859] REISERFS (device loop3): checking transaction log (loop3) [ 108.492205][ T5872] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 108.677475][ T5886] loop2: detected capacity change from 0 to 16 [ 108.756143][ T5886] erofs: (device loop2): mounted with root inode @ nid 36. [ 108.807478][ T5859] REISERFS (device loop3): Using tea hash to sort names [ 108.828228][ T5859] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 108.951867][ T5900] loop4: detected capacity change from 0 to 128 [ 108.970441][ T5859] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 109.003828][ T5900] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 109.149373][ T5862] loop1: detected capacity change from 0 to 32768 [ 109.188062][ T26] audit: type=1326 audit(1726504986.058:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.2.746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d796e6ef9 code=0x0 [ 109.278457][ T5862] XFS (loop1): Mounting V5 Filesystem [ 109.347553][ T5862] XFS (loop1): Ending clean mount [ 109.365099][ T5862] XFS (loop1): Quotacheck needed: Please wait. [ 109.415799][ T5862] XFS (loop1): Quotacheck: Done. [ 109.461697][ T3577] XFS (loop1): Unmounting Filesystem [ 109.644530][ T5926] loop4: detected capacity change from 0 to 2048 [ 109.695897][ T5927] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.985747][ T5942] loop1: detected capacity change from 0 to 164 [ 110.579982][ T5962] loop1: detected capacity change from 0 to 8192 [ 110.604525][ T5964] loop3: detected capacity change from 0 to 4096 [ 110.676445][ T5964] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 110.702175][ T5962] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 110.718813][ T5962] REISERFS (device loop1): using ordered data mode [ 110.731257][ T5962] reiserfs: using flush barriers [ 110.737316][ T5962] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.759003][ T5964] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 110.759327][ T5962] REISERFS (device loop1): checking transaction log (loop1) [ 110.781168][ T5964] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 110.798827][ T5964] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 110.812042][ T5964] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 110.838167][ T5964] ntfs: volume version 3.1. [ 110.845061][ T5964] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 110.886236][ T5964] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 110.898991][ T5966] loop0: detected capacity change from 0 to 32768 [ 110.928461][ T5964] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 110.940060][ T5964] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 110.940129][ T5962] REISERFS (device loop1): Using tea hash to sort names [ 110.969133][ T5962] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 110.998296][ T5962] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 111.052537][ T5945] loop4: detected capacity change from 0 to 40427 [ 111.096482][ T5966] XFS (loop0): Mounting V5 Filesystem [ 111.161671][ T5945] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.298030][ T5966] XFS (loop0): Ending clean mount [ 111.300240][ T5945] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.342299][ T5986] vivid-000: ================= START STATUS ================= [ 111.411359][ T5986] vivid-000: Radio HW Seek Mode: Bounded [ 111.429452][ T5986] vivid-000: Radio Programmable HW Seek: false [ 111.438645][ T5986] vivid-000: RDS Rx I/O Mode: Block I/O [ 111.455271][ T3567] XFS (loop0): Unmounting Filesystem [ 111.460992][ T5986] vivid-000: Generate RBDS Instead of RDS: false [ 111.472088][ T5986] vivid-000: RDS Reception: true [ 111.477075][ T5986] vivid-000: RDS Program Type: 0 inactive [ 111.509234][ T3573] attempt to access beyond end of device [ 111.509234][ T3573] loop4: rw=2049, want=45104, limit=40427 [ 111.525722][ T5986] vivid-000: RDS PS Name: inactive [ 111.531806][ T5986] vivid-000: RDS Radio Text: inactive [ 111.572093][ T5986] vivid-000: RDS Traffic Announcement: false inactive [ 111.588614][ T5986] vivid-000: RDS Traffic Program: false inactive [ 111.641522][ T5986] vivid-000: RDS Music: false inactive [ 111.656804][ T5986] vivid-000: ================== END STATUS ================== [ 111.856915][ T5998] loop2: detected capacity change from 0 to 2048 [ 111.958433][ T5998] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.978214][ T3662] udevd[3662]: incorrect nilfs2 checksum on /dev/loop2 [ 112.045612][ T6005] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.318079][ T6009] loop0: detected capacity change from 0 to 8192 [ 112.343809][ T6011] loop2: detected capacity change from 0 to 4096 [ 112.344807][ T5988] loop1: detected capacity change from 0 to 40427 [ 112.385652][ T6011] NILFS (loop2): invalid segment: Checksum error in segment payload [ 112.395824][ T6011] NILFS (loop2): trying rollback from an earlier position [ 112.403354][ T5988] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 112.413269][ T5988] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.421427][ T6011] NILFS (loop2): recovery complete [ 112.427087][ T6014] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.451610][ T5988] F2FS-fs (loop1): invalid crc value [ 112.478853][ T6009] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 112.488178][ T6009] REISERFS (device loop0): using ordered data mode [ 112.494939][ T6009] reiserfs: using flush barriers [ 112.497113][ T5988] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.501962][ T6009] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.524308][ T6009] REISERFS (device loop0): checking transaction log (loop0) [ 112.588787][ T3992] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.636026][ T5988] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.647575][ T5988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.680739][ T6009] REISERFS (device loop0): Using tea hash to sort names [ 112.695064][ T6009] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 112.709746][ T6009] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 112.763538][ T3577] attempt to access beyond end of device [ 112.763538][ T3577] loop1: rw=2049, want=45104, limit=40427 [ 112.814855][ T6025] loop2: detected capacity change from 0 to 4096 [ 112.880952][ T6025] ntfs: volume version 3.1. [ 112.958994][ T3992] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.993122][ T3992] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.080372][ T3992] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.098721][ T3992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.106856][ T3992] usb 5-1: SerialNumber: syz [ 113.288933][ T3615] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.411328][ T3992] usb 5-1: 0:2 : does not exist [ 113.440792][ T3992] usb 5-1: USB disconnect, device number 6 [ 113.486242][ T3662] udevd[3662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.704067][ T6053] loop2: detected capacity change from 0 to 1024 [ 113.713958][ T6031] loop1: detected capacity change from 0 to 32768 [ 113.720933][ T3615] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.732273][ T3615] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.743059][ T3615] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.752574][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.789377][ T6027] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.835104][ T6031] XFS (loop1): Mounting V5 Filesystem [ 114.030821][ T6073] device dummy0 entered promiscuous mode [ 114.045439][ T6031] XFS (loop1): Ending clean mount [ 114.182903][ T3577] XFS (loop1): Unmounting Filesystem [ 114.393194][ T6068] loop4: detected capacity change from 0 to 32768 [ 114.449633][ T6068] XFS: noikeep mount option is deprecated. [ 114.476452][ T6068] XFS (loop4): Mounting V5 Filesystem [ 114.516656][ T6068] XFS (loop4): Ending clean mount [ 114.524284][ T6068] XFS (loop4): Quotacheck needed: Please wait. [ 114.557227][ T6068] XFS (loop4): Quotacheck: Done. [ 114.600530][ T6068] attempt to access beyond end of device [ 114.600530][ T6068] loop4: rw=4096, want=22608914004574208, limit=32768 [ 114.626209][ T3573] XFS (loop4): Unmounting Filesystem [ 114.645426][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.653082][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.664672][ T4356] usb 1-1: USB disconnect, device number 8 [ 115.125486][ T6087] loop2: detected capacity change from 0 to 40427 [ 115.233095][ T6094] loop4: detected capacity change from 0 to 4096 [ 115.254238][ T6087] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.297120][ T6100] loop0: detected capacity change from 0 to 4096 [ 115.312753][ T6094] __ntfs_error: 19 callbacks suppressed [ 115.312770][ T6094] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 115.333113][ T6094] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 115.335586][ T6087] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 115.349799][ T6094] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 115.356850][ T6087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.367118][ T6094] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.395987][ T6100] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 115.405847][ T6087] attempt to access beyond end of device [ 115.405847][ T6087] loop2: rw=2049, want=53256, limit=40427 [ 115.440156][ T6094] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.449656][ T6100] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 115.462743][ T6094] ntfs: volume version 3.1. [ 115.463519][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.475259][ T6094] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 115.488629][ T6094] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 115.514568][ T3568] attempt to access beyond end of device [ 115.514568][ T3568] loop2: rw=2049, want=45104, limit=40427 [ 115.547309][ T6094] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 115.572257][ T6094] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 115.591479][ T6094] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 115.680042][ T6104] loop0: detected capacity change from 0 to 128 [ 115.789873][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.814'. [ 115.810188][ T6104] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.864656][ T23] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 115.914948][ T23] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 115.927356][ T6104] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038 (0x7fffffff) [ 115.975723][ T23] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 115.998825][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.049071][ T6096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.301911][ T6120] loop3: detected capacity change from 0 to 4096 [ 116.338543][ T6120] ntfs: volume version 3.1. [ 116.384361][ T6119] loop2: detected capacity change from 0 to 8192 [ 116.432839][ T6112] loop4: detected capacity change from 0 to 40427 [ 116.474086][ T6119] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 116.494816][ T6119] REISERFS (device loop2): using ordered data mode [ 116.510731][ T6119] reiserfs: using flush barriers [ 116.526142][ T6112] F2FS-fs (loop4): invalid crc value [ 116.564637][ T6119] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.588313][ T6112] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.641614][ T6122] loop0: detected capacity change from 0 to 32768 [ 116.648090][ T6119] REISERFS (device loop2): checking transaction log (loop2) [ 116.668942][ T6112] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.689533][ T6122] XFS: noikeep mount option is deprecated. [ 116.749036][ T6112] attempt to access beyond end of device [ 116.749036][ T6112] loop4: rw=2049, want=53488, limit=40427 [ 116.767942][ T6122] XFS (loop0): Mounting V5 Filesystem [ 116.785360][ T6119] REISERFS (device loop2): Using tea hash to sort names [ 116.796973][ T6119] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 116.817014][ T6119] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 116.943997][ T6122] XFS (loop0): Ending clean mount [ 116.968952][ T23] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 116.974643][ T6122] XFS (loop0): Quotacheck needed: Please wait. [ 116.993665][ T23] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input16 [ 117.104361][ T23] usb 2-1: USB disconnect, device number 6 [ 117.110596][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 117.153400][ T6138] loop3: detected capacity change from 0 to 128 [ 117.192689][ T6122] XFS (loop0): Quotacheck: Done. [ 117.212525][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.220754][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.239582][ T6122] attempt to access beyond end of device [ 117.239582][ T6122] loop0: rw=4096, want=22608914004574208, limit=32768 [ 117.287323][ T3567] XFS (loop0): Unmounting Filesystem [ 117.448423][ T6138] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.469789][ T6138] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 117.560241][ T6138] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 117.641267][ T6154] loop2: detected capacity change from 0 to 1024 [ 117.927497][ T6159] loop4: detected capacity change from 0 to 8192 [ 118.011018][ T6159] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 118.077576][ T6159] REISERFS (device loop4): using ordered data mode [ 118.134237][ T6174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.837'. [ 118.156258][ T6159] reiserfs: using flush barriers [ 118.186079][ T6159] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.272097][ T6159] REISERFS (device loop4): checking transaction log (loop4) [ 118.295933][ T6179] loop1: detected capacity change from 0 to 256 [ 118.395577][ T6179] exfat: Deprecated parameter 'utf8' [ 118.404298][ T6179] exfat: Deprecated parameter 'utf8' [ 118.419000][ T6179] exfat: Deprecated parameter 'utf8' [ 118.471264][ T6179] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 118.477299][ T6159] REISERFS (device loop4): Using tea hash to sort names [ 118.509092][ T6159] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 118.571620][ T6159] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 118.583606][ T6163] loop3: detected capacity change from 0 to 40427 [ 118.588877][ T4003] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 118.671611][ T6163] F2FS-fs (loop3): invalid crc value [ 118.714634][ T6163] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.834776][ T6190] loop1: detected capacity change from 0 to 1024 [ 118.839191][ T6163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.901658][ T6193] mkiss: ax0: crc mode is auto. [ 118.937390][ T6183] loop0: detected capacity change from 0 to 32768 [ 118.942448][ T6163] attempt to access beyond end of device [ 118.942448][ T6163] loop3: rw=2049, want=53488, limit=40427 [ 118.953138][ T6190] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.844: Invalid block bitmap block 0 in block_group 0 [ 118.977226][ T6190] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.844: Failed to acquire dquot type 0 [ 118.990058][ T4003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.002148][ T6190] EXT4-fs error (device loop1): ext4_free_blocks:6225: comm syz.1.844: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.021278][ T6190] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.844: Invalid inode bitmap blk 0 in block_group 0 [ 119.044277][ T6190] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 119.066691][ T6190] EXT4-fs (loop1): 1 orphan inode deleted [ 119.073255][ T4003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.074639][ T6190] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 119.120850][ T6190] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 119.134583][ T4003] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.144156][ T6190] syz.1.844 (6190) used greatest stack depth: 19024 bytes left [ 119.168774][ T4003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.183012][ T3625] EXT4-fs error (device loop1): ext4_release_dquot:6219: comm kworker/u4:6: Failed to release dquot type 0 [ 119.229682][ T4003] usb 3-1: config 0 descriptor?? [ 119.274370][ T4003] hub 3-1:0.0: USB hub found [ 119.432065][ T6200] loop1: detected capacity change from 0 to 4096 [ 119.464547][ T6200] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 119.483600][ T6200] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 119.488901][ T4003] hub 3-1:0.0: 1 port detected [ 119.495516][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.498349][ T6200] ntfs3: loop1: Failed to load $LogFile. [ 119.789136][ T23] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 119.879119][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.896944][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.919627][ T4003] usb 3-1: USB disconnect, device number 8 [ 119.945358][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.966298][ T6210] loop0: detected capacity change from 0 to 2048 [ 120.058995][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.079852][ T6210] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 120.094889][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.114560][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.116836][ T6210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.151752][ T6208] loop1: detected capacity change from 0 to 40427 [ 120.209577][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.215884][ T6207] loop3: detected capacity change from 0 to 32768 [ 120.228988][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.245638][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.250366][ T6208] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.267461][ T6207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.852 (6207) [ 120.305195][ T6207] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 120.318974][ T6207] BTRFS info (device loop3): setting nodatacow, compression disabled [ 120.327299][ T6207] BTRFS info (device loop3): turning on flush-on-commit [ 120.334773][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.349296][ T6207] BTRFS info (device loop3): enabling auto defrag [ 120.355931][ T6208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.367889][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.393678][ T6207] BTRFS info (device loop3): max_inline at 0 [ 120.413086][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.419801][ T6207] BTRFS info (device loop3): using free space tree [ 120.438901][ T6207] BTRFS info (device loop3): has skinny extents [ 120.499047][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.520860][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.578280][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.601853][ T3577] attempt to access beyond end of device [ 120.601853][ T3577] loop1: rw=2049, want=45104, limit=40427 [ 120.679157][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.694928][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.715843][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.779450][ T6207] BTRFS info (device loop3): enabling ssd optimizations [ 120.809076][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.858274][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.916811][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.959040][ T6217] loop0: detected capacity change from 0 to 32768 [ 121.019198][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.041206][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.093095][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.114791][ T6217] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.233813][ T6231] loop2: detected capacity change from 0 to 40427 [ 121.298949][ T23] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.325163][ T23] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 121.334483][ T23] usb 5-1: Product: syz [ 121.339213][ T23] usb 5-1: Manufacturer: syz [ 121.340017][ T6247] loop1: detected capacity change from 0 to 128 [ 121.344036][ T23] usb 5-1: SerialNumber: syz [ 121.378230][ T23] usb 5-1: config 0 descriptor?? [ 121.385432][ T6231] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.415048][ T6247] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 121.438617][ T23] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 121.544286][ T6231] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.615226][ T6247] sysv_free_block: flc_count > flc_size [ 121.626652][ T6247] sysv_free_block: flc_count > flc_size [ 121.633124][ T3568] attempt to access beyond end of device [ 121.633124][ T3568] loop2: rw=2049, want=45112, limit=40427 [ 121.633306][ T3567] ocfs2: Unmounting device (7,0) on (node local) [ 121.644780][ T6247] sysv_free_block: flc_count > flc_size [ 121.689411][ T6247] sysv_free_block: flc_count > flc_size [ 121.698985][ T6247] sysv_free_block: flc_count > flc_size [ 121.704610][ T6247] sysv_free_block: flc_count > flc_size [ 121.714476][ T6253] device dummy0 entered promiscuous mode [ 121.726640][ T4356] usb 5-1: USB disconnect, device number 7 [ 121.738740][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 121.748485][ T6247] sysv_free_block: flc_count > flc_size [ 121.776781][ T6247] sysv_free_block: flc_count > flc_size [ 121.783345][ T4356] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 121.803525][ T6247] sysv_free_block: flc_count > flc_size [ 121.837315][ T6247] sysv_free_block: flc_count > flc_size [ 121.846454][ T6247] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 122.029917][ T6265] loop0: detected capacity change from 0 to 128 [ 122.073185][ T6269] netlink: 5 bytes leftover after parsing attributes in process `syz.1.866'. [ 122.172949][ T4000] kernel write not supported for file /384/gid_map (pid: 4000 comm: kworker/1:14) [ 122.306399][ T6277] loop3: detected capacity change from 0 to 256 [ 122.629125][ T4356] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.655754][ T6294] tun0: tun_chr_ioctl cmd 1074025694 [ 122.753146][ T6296] loop4: detected capacity change from 0 to 2048 [ 122.807095][ T6301] loop0: detected capacity change from 0 to 256 [ 122.813455][ T6296] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.837176][ T6302] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.838492][ T6296] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 122.878206][ T6296] Remounting filesystem read-only [ 122.889183][ T4356] usb 3-1: Using ep0 maxpacket: 16 [ 122.936753][ T6280] loop1: detected capacity change from 0 to 32768 [ 123.019240][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.048862][ T6280] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 123.060158][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.115126][ T4356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.170050][ T4356] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.244039][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.286664][ T4356] usb 3-1: config 0 descriptor?? [ 123.301590][ T3577] ocfs2: Unmounting device (7,1) on (node local) [ 123.590785][ T6326] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 123.597035][ T6318] loop0: detected capacity change from 0 to 32768 [ 123.714456][ T6318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.886 (6318) [ 123.749713][ T6335] loop1: detected capacity change from 0 to 512 [ 123.776149][ T6318] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.806308][ T4356] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 123.842632][ T6335] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.845701][ T6318] BTRFS info (device loop0): setting nodatacow, compression disabled [ 123.858788][ T6342] loop3: detected capacity change from 0 to 2048 [ 123.865630][ T4356] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 123.888781][ T6335] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.888962][ T4356] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 123.911709][ T6318] BTRFS info (device loop0): enabling auto defrag [ 123.917265][ T6335] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.893: invalid indirect mapped block 4294967295 (level 0) [ 123.928555][ T6318] BTRFS info (device loop0): max_inline at 0 [ 123.941731][ T4356] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 123.943430][ T6335] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.893: invalid indirect mapped block 4294967295 (level 1) [ 123.950013][ T6318] BTRFS info (device loop0): using free space tree [ 123.973543][ T6342] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.989516][ T6335] EXT4-fs (loop1): 1 orphan inode deleted [ 123.995362][ T6335] EXT4-fs (loop1): 1 truncate cleaned up [ 124.015869][ T6342] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,jqfmt=vfsv0,stripe=0x000000000004ffff,usrjquota=,bsdgroups,norecovery,. Quota mode: none. [ 124.020004][ T6335] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,max_batch_time=0x0000000000000001,nolazytime,block_validity,block_validity,init_itable=0x0000000000010000,nolazytime,,errors=continue. Quota mode: none. [ 124.056800][ T4356] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 124.072395][ T6318] BTRFS info (device loop0): has skinny extents [ 124.095437][ T4356] microsoft 0003:045E:07DA.0008: no inputs found [ 124.099059][ T4001] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.101960][ T4356] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 124.115730][ T6335] EXT4-fs (loop1): shut down requested (2) [ 124.122050][ T4356] usb 3-1: USB disconnect, device number 9 [ 124.135931][ T6342] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #15: comm syz.3.897: inline data xattr refers to an external xattr inode [ 124.173645][ T6352] EXT4-fs error (device loop1): ext4_lookup:1856: inode #15: comm syz.1.893: iget: bad extra_isize 46 (inode size 256) [ 124.184590][ T6342] EXT4-fs (loop3): Remounting filesystem read-only [ 124.364784][ T6368] loop1: detected capacity change from 0 to 128 [ 124.388773][ T4001] usb 5-1: Using ep0 maxpacket: 8 [ 124.476810][ T6368] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.509107][ T4001] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=71.e6 [ 124.518554][ T6368] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 124.561586][ T4001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.578234][ T4001] usb 5-1: config 0 descriptor?? [ 124.599904][ T6368] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 124.620023][ T4001] usb 5-1: bad CDC descriptors [ 125.167931][ T3991] usb 5-1: USB disconnect, device number 8 [ 125.245384][ T6394] loop3: detected capacity change from 0 to 1024 [ 125.305080][ T6392] loop2: detected capacity change from 0 to 2048 [ 125.418003][ T6392] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.481248][ T6388] loop1: detected capacity change from 0 to 32768 [ 125.513952][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 125.513966][ T26] audit: type=1800 audit(1726505002.388:67): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.918" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 125.557402][ T6407] loop4: detected capacity change from 0 to 2048 [ 125.568071][ T6388] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.907 (6388) [ 125.654342][ T6407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.665388][ T6388] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 125.671679][ T6411] loop0: detected capacity change from 0 to 128 [ 125.706459][ T6388] BTRFS info (device loop1): force zlib compression, level 3 [ 125.718996][ T6388] BTRFS info (device loop1): force clearing of disk cache [ 125.812934][ T6388] BTRFS info (device loop1): setting nodatasum [ 125.818430][ T6411] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.819380][ T6388] BTRFS info (device loop1): allowing degraded mounts [ 125.819404][ T6388] BTRFS info (device loop1): enabling disk space caching [ 125.819419][ T6388] BTRFS info (device loop1): disk space caching is enabled [ 125.819435][ T6388] BTRFS info (device loop1): has skinny extents [ 125.924814][ T6411] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 126.143382][ T6414] loop3: detected capacity change from 0 to 32768 [ 126.151743][ T6388] BTRFS info (device loop1): clearing free space tree [ 126.158630][ T6388] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.193935][ T6388] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.200221][ T6414] XFS: ikeep mount option is deprecated. [ 126.233035][ T6411] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 126.268604][ T6388] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 126.324828][ T6414] XFS (loop3): Mounting V5 Filesystem [ 126.423119][ T6414] XFS (loop3): Ending clean mount [ 126.430632][ T6414] XFS (loop3): Quotacheck needed: Please wait. [ 126.434397][ T6447] loop2: detected capacity change from 0 to 128 [ 126.481027][ T6421] loop4: detected capacity change from 0 to 32768 [ 126.535652][ T6447] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.568803][ T6414] XFS (loop3): Quotacheck: Done. [ 126.588304][ T6447] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 126.602479][ T6453] loop0: detected capacity change from 0 to 512 [ 126.685080][ T6453] EXT4-fs (loop0): Ignoring removed orlov option [ 126.742558][ T6453] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.841868][ T6453] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.920: Attempting to read directory block (0) that is past i_size (256) [ 126.863034][ T6453] EXT4-fs (loop0): Remounting filesystem read-only [ 126.870250][ T6453] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 126.878436][ T6453] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 126.927934][ T6453] EXT4-fs (loop0): shut down requested (2) [ 126.939949][ T6421] XFS (loop4): Mounting V5 Filesystem [ 126.951917][ T3575] XFS (loop3): Unmounting Filesystem [ 127.101137][ T6421] XFS (loop4): Ending clean mount [ 127.227116][ T6421] XFS (loop4): Quotacheck needed: Please wait. [ 127.233183][ T6465] loop0: detected capacity change from 0 to 1024 [ 127.393055][ T6421] XFS (loop4): Quotacheck: Done. [ 127.419202][ T6471] loop1: detected capacity change from 0 to 2048 [ 127.469022][ T6471] UDF-fs: bad mount option "18446744073709551615ÿÿÿÿ18446744073709551615ÿÿ" or missing value [ 127.518138][ T3573] XFS (loop4): Unmounting Filesystem [ 127.645026][ T6483] mmap: syz.3.925 (6483) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 128.096390][ T6494] loop3: detected capacity change from 0 to 1024 [ 128.206400][ T6494] attempt to access beyond end of device [ 128.206400][ T6494] loop3: rw=0, want=5780, limit=1024 [ 128.256628][ T6494] Buffer I/O error on dev loop3, logical block 2889, async page read [ 128.259215][ T26] audit: type=1804 audit(1726505005.128:68): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.938" name="/newroot/191/bus/file1" dev="loop3" ino=20 res=1 errno=0 [ 128.309023][ T6494] attempt to access beyond end of device [ 128.309023][ T6494] loop3: rw=0, want=5780, limit=1024 [ 128.361194][ T6494] Buffer I/O error on dev loop3, logical block 2889, async page read [ 128.397726][ T6501] hfsplus: can't free extent [ 128.437696][ T26] audit: type=1800 audit(1726505005.308:69): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.938" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 128.583127][ T6481] loop2: detected capacity change from 0 to 32768 [ 128.681867][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 128.691340][ T6481] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.932 (6481) [ 128.776956][ T6481] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 128.804512][ T6481] BTRFS info (device loop2): use zlib compression, level 3 [ 128.831997][ T6481] BTRFS info (device loop2): using free space tree [ 128.869484][ T6481] BTRFS info (device loop2): has skinny extents [ 128.886695][ T6485] loop0: detected capacity change from 0 to 40427 [ 128.953259][ T6524] netlink: 830 bytes leftover after parsing attributes in process `syz.3.949'. [ 128.956802][ T6485] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.013809][ T6524] device bond_slave_0 entered promiscuous mode [ 129.020760][ T6524] device bond_slave_1 entered promiscuous mode [ 129.054233][ T6485] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.093758][ T6485] attempt to access beyond end of device [ 129.093758][ T6485] loop0: rw=1, want=45104, limit=40427 [ 129.250784][ T3567] attempt to access beyond end of device [ 129.250784][ T3567] loop0: rw=2049, want=45112, limit=40427 [ 129.365574][ T6481] BTRFS info (device loop2): enabling ssd optimizations [ 129.578126][ T6571] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.587988][ T6571] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.596766][ T6571] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.605537][ T6571] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.664077][ T6571] device vxlan0 entered promiscuous mode [ 129.707827][ T6573] loop3: detected capacity change from 0 to 4096 [ 129.737557][ T6571] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.746866][ T6571] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.755880][ T6571] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.764851][ T6571] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.877576][ T6573] ntfs: volume version 3.1. [ 130.465481][ T6594] loop1: detected capacity change from 0 to 256 [ 130.541193][ T6594] exfat: Deprecated parameter 'namecase' [ 130.546909][ T6594] exfat: Deprecated parameter 'utf8' [ 130.565978][ T6594] exfat: Deprecated parameter 'namecase' [ 130.587043][ T6594] exfat: Deprecated parameter 'utf8' [ 130.609498][ T3610] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.609632][ T6594] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 130.851575][ T6610] loop2: detected capacity change from 0 to 1024 [ 130.866340][ T6580] loop0: detected capacity change from 0 to 40427 [ 130.879726][ T3610] usb 5-1: Using ep0 maxpacket: 8 [ 130.917674][ T6580] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.004705][ T3625] hfsplus: b-tree write err: -5, ino 4 [ 131.018508][ T6580] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.026461][ T3610] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.063801][ T3610] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.093499][ T3610] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.116184][ T3610] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.132851][ T3610] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.142940][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.163762][ T3567] attempt to access beyond end of device [ 131.163762][ T3567] loop0: rw=2049, want=45104, limit=40427 [ 131.185867][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'. [ 131.208929][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'. [ 131.309072][ T26] audit: type=1326 audit(1726505008.178:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc21219ef9 code=0x7fc00000 [ 131.428845][ T3610] usb 5-1: GET_CAPABILITIES returned 0 [ 131.434532][ T3610] usbtmc 5-1:16.0: can't read capabilities [ 131.641350][ T3610] usb 5-1: USB disconnect, device number 9 [ 131.746007][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.786722][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.796619][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.811846][ T6639] loop1: detected capacity change from 0 to 512 [ 131.820955][ T6636] device bridge_slave_0 left promiscuous mode [ 131.880430][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.901112][ T6639] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 131.953585][ T6622] loop3: detected capacity change from 0 to 40427 [ 131.958339][ T6636] device bridge_slave_1 left promiscuous mode [ 131.967922][ T6639] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038 (0x7fffffff) [ 131.991534][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.039306][ T6636] bond0: (slave bond_slave_0): Releasing backup interface [ 132.049519][ T6622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.101673][ T6622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 132.119468][ T6636] bond0: (slave bond_slave_1): Releasing backup interface [ 132.185131][ T3575] attempt to access beyond end of device [ 132.185131][ T3575] loop3: rw=2049, want=45112, limit=40427 [ 132.253377][ T6636] team0: Port device team_slave_0 removed [ 132.327391][ T6654] loop1: detected capacity change from 0 to 512 [ 132.354672][ T6654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.373054][ T6654] EXT4-fs (loop1): 1 truncate cleaned up [ 132.409678][ T6636] team0: Port device team_slave_1 removed [ 132.415919][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.440605][ T6654] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 132.468037][ T6636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.516040][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.604788][ T6636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.672698][ T6638] netlink: 'syz.2.987': attribute type 10 has an invalid length. [ 132.702347][ T6670] capability: warning: `syz.4.998' uses deprecated v2 capabilities in a way that may be insecure [ 132.703846][ T6638] netlink: 2 bytes leftover after parsing attributes in process `syz.2.987'. [ 132.732599][ T6638] device team0 entered promiscuous mode [ 132.741516][ T6670] program syz.4.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.776077][ T6638] bridge0: port 1(team0) entered blocking state [ 132.787443][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793865][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.833800][ T6674] kernel read not supported for file /!selinu (pid: 6674 comm: syz.3.1001) [ 132.842876][ T6638] bridge0: port 1(team0) entered disabled state [ 132.946781][ T6679] loop1: detected capacity change from 0 to 128 [ 133.048392][ T6688] loop0: detected capacity change from 0 to 1024 [ 133.088145][ T6679] EXT4-fs (loop1): Ignoring removed nobh option [ 133.118439][ T6679] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 133.199903][ T6688] attempt to access beyond end of device [ 133.199903][ T6688] loop0: rw=0, want=5780, limit=1024 [ 133.268627][ T6679] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038 (0x7fffffff) [ 133.279854][ T6688] Buffer I/O error on dev loop0, logical block 2889, async page read [ 133.288172][ T6688] attempt to access beyond end of device [ 133.288172][ T6688] loop0: rw=0, want=5780, limit=1024 [ 133.299849][ T26] audit: type=1804 audit(1726505010.168:71): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1007" name="/newroot/164/bus/file1" dev="loop0" ino=20 res=1 errno=0 [ 133.418817][ T6688] Buffer I/O error on dev loop0, logical block 2889, async page read [ 133.442206][ T6692] hfsplus: can't free extent [ 133.461865][ T26] audit: type=1800 audit(1726505010.338:72): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1007" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 133.715068][ T6696] loop1: detected capacity change from 0 to 8192 [ 133.783660][ T6696] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 133.927971][ T6696] REISERFS (device loop1): using ordered data mode [ 133.974407][ T6696] reiserfs: using flush barriers [ 133.994161][ T6696] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.044729][ T6684] loop4: detected capacity change from 0 to 40427 [ 134.066702][ T6696] REISERFS (device loop1): checking transaction log (loop1) [ 134.117955][ T6683] loop3: detected capacity change from 0 to 32768 [ 134.185368][ T6684] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.188294][ T6694] loop2: detected capacity change from 0 to 32768 [ 134.263660][ T6696] REISERFS (device loop1): Using tea hash to sort names [ 134.265787][ T6694] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1009 (6694) [ 134.271374][ T6696] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 134.325972][ T6684] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.328453][ T6683] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 134.359331][ T6694] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 134.373870][ T6694] BTRFS info (device loop2): using free space tree [ 134.381340][ T6694] BTRFS info (device loop2): has skinny extents [ 134.457817][ T3573] attempt to access beyond end of device [ 134.457817][ T3573] loop4: rw=2049, want=45112, limit=40427 [ 134.569109][ T6683] [ 134.571463][ T6683] ====================================================== [ 134.578476][ T6683] WARNING: possible circular locking dependency detected [ 134.585486][ T6683] 5.15.167-syzkaller #0 Not tainted [ 134.590672][ T6683] ------------------------------------------------------ [ 134.597684][ T6683] syz.3.1005/6683 is trying to acquire lock: [ 134.603651][ T6683] ffff8880608edf48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 134.616871][ T6683] [ 134.616871][ T6683] but task is already holding lock: [ 134.624232][ T6683] ffff8880608e9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 134.633728][ T6683] [ 134.633728][ T6683] which lock already depends on the new lock. [ 134.633728][ T6683] [ 134.644120][ T6683] [ 134.644120][ T6683] the existing dependency chain (in reverse order) is: [ 134.653205][ T6683] [ 134.653205][ T6683] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 134.661008][ T6683] lock_acquire+0x1db/0x4f0 [ 134.666033][ T6683] down_read+0x45/0x2e0 [ 134.670695][ T6683] ocfs2_init_acl+0x398/0x930 [ 134.675914][ T6683] ocfs2_mknod+0x1e8f/0x2cd0 [ 134.681005][ T6683] ocfs2_mkdir+0x194/0x430 [ 134.685923][ T6683] vfs_mkdir+0x3b6/0x590 [ 134.690699][ T6683] do_mkdirat+0x260/0x520 [ 134.695528][ T6683] __x64_sys_mkdirat+0x85/0x90 [ 134.700821][ T6683] do_syscall_64+0x3b/0xb0 [ 134.705746][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.712143][ T6683] [ 134.712143][ T6683] -> #4 (jbd2_handle){++++}-{0:0}: [ 134.719426][ T6683] lock_acquire+0x1db/0x4f0 [ 134.724430][ T6683] start_this_handle+0x12e1/0x1570 [ 134.730046][ T6683] jbd2__journal_start+0x2d1/0x5c0 [ 134.735670][ T6683] jbd2_journal_start+0x25/0x30 [ 134.741025][ T6683] ocfs2_start_trans+0x3c2/0x6f0 [ 134.746465][ T6683] ocfs2_mknod+0x15bb/0x2cd0 [ 134.751556][ T6683] ocfs2_create+0x194/0x430 [ 134.756579][ T6683] path_openat+0x130a/0x2f20 [ 134.761666][ T6683] do_filp_open+0x21c/0x460 [ 134.766670][ T6683] do_sys_openat2+0x13b/0x4f0 [ 134.771848][ T6683] __x64_sys_openat+0x243/0x290 [ 134.777204][ T6683] do_syscall_64+0x3b/0xb0 [ 134.782128][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.788525][ T6683] [ 134.788525][ T6683] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 134.797023][ T6683] lock_acquire+0x1db/0x4f0 [ 134.802045][ T6683] down_read+0x45/0x2e0 [ 134.806720][ T6683] ocfs2_start_trans+0x3b7/0x6f0 [ 134.812185][ T6683] ocfs2_mknod+0x15bb/0x2cd0 [ 134.817299][ T6683] ocfs2_create+0x194/0x430 [ 134.822303][ T6683] path_openat+0x130a/0x2f20 [ 134.827399][ T6683] do_filp_open+0x21c/0x460 [ 134.832497][ T6683] do_sys_openat2+0x13b/0x4f0 [ 134.837704][ T6683] __x64_sys_openat+0x243/0x290 [ 134.843063][ T6683] do_syscall_64+0x3b/0xb0 [ 134.847982][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.854384][ T6683] [ 134.854384][ T6683] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 134.861838][ T6683] lock_acquire+0x1db/0x4f0 [ 134.866858][ T6683] ocfs2_start_trans+0x2b2/0x6f0 [ 134.872316][ T6683] ocfs2_mknod+0x15bb/0x2cd0 [ 134.877406][ T6683] ocfs2_create+0x194/0x430 [ 134.882409][ T6683] path_openat+0x130a/0x2f20 [ 134.887497][ T6683] do_filp_open+0x21c/0x460 [ 134.892500][ T6683] do_sys_openat2+0x13b/0x4f0 [ 134.897676][ T6683] __x64_sys_openat+0x243/0x290 [ 134.903026][ T6683] do_syscall_64+0x3b/0xb0 [ 134.907945][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.914340][ T6683] [ 134.914340][ T6683] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 134.924831][ T6683] lock_acquire+0x1db/0x4f0 [ 134.929837][ T6683] down_write+0x38/0x60 [ 134.934507][ T6683] ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 134.941255][ T6683] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 134.948090][ T6683] ocfs2_mknod+0x1535/0x2cd0 [ 134.953180][ T6683] ocfs2_create+0x194/0x430 [ 134.958181][ T6683] path_openat+0x130a/0x2f20 [ 134.963269][ T6683] do_filp_open+0x21c/0x460 [ 134.968275][ T6683] do_sys_openat2+0x13b/0x4f0 [ 134.973451][ T6683] __x64_sys_openat+0x243/0x290 [ 134.978803][ T6683] do_syscall_64+0x3b/0xb0 [ 134.983726][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.990120][ T6683] [ 134.990120][ T6683] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 135.000615][ T6683] validate_chain+0x1649/0x5930 [ 135.005968][ T6683] __lock_acquire+0x1295/0x1ff0 [ 135.011318][ T6683] lock_acquire+0x1db/0x4f0 [ 135.016319][ T6683] down_write+0x38/0x60 [ 135.020982][ T6683] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 135.027379][ T6683] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 135.034217][ T6683] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 135.040352][ T6683] ocfs2_xattr_set+0xf46/0x1930 [ 135.045718][ T6683] __vfs_setxattr+0x3e7/0x420 [ 135.051262][ T6683] __vfs_setxattr_noperm+0x12a/0x5e0 [ 135.057073][ T6683] vfs_setxattr+0x21d/0x420 [ 135.062089][ T6683] setxattr+0x27e/0x2e0 [ 135.066763][ T6683] path_setxattr+0x1bc/0x2a0 [ 135.071858][ T6683] __x64_sys_setxattr+0xb7/0xd0 [ 135.077220][ T6683] do_syscall_64+0x3b/0xb0 [ 135.082141][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.088549][ T6683] [ 135.088549][ T6683] other info that might help us debug this: [ 135.088549][ T6683] [ 135.098752][ T6683] Chain exists of: [ 135.098752][ T6683] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 135.098752][ T6683] [ 135.114465][ T6683] Possible unsafe locking scenario: [ 135.114465][ T6683] [ 135.121892][ T6683] CPU0 CPU1 [ 135.127241][ T6683] ---- ---- [ 135.132594][ T6683] lock(&oi->ip_xattr_sem); [ 135.137175][ T6683] lock(jbd2_handle); [ 135.143766][ T6683] lock(&oi->ip_xattr_sem); [ 135.150875][ T6683] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 135.158151][ T6683] [ 135.158151][ T6683] *** DEADLOCK *** [ 135.158151][ T6683] [ 135.166279][ T6683] 3 locks held by syz.3.1005/6683: [ 135.171375][ T6683] #0: ffff888079044460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 135.180602][ T6683] #1: ffff8880608e9808 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 135.191113][ T6683] #2: ffff8880608e9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 135.201145][ T6683] [ 135.201145][ T6683] stack backtrace: [ 135.207039][ T6683] CPU: 1 PID: 6683 Comm: syz.3.1005 Not tainted 5.15.167-syzkaller #0 [ 135.215173][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 135.225214][ T6683] Call Trace: [ 135.228503][ T6683] [ 135.231418][ T6683] dump_stack_lvl+0x1e3/0x2d0 [ 135.236087][ T6683] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 135.241704][ T6683] ? print_circular_bug+0x12b/0x1a0 [ 135.246887][ T6683] check_noncircular+0x2f8/0x3b0 [ 135.251954][ T6683] ? add_chain_block+0x850/0x850 [ 135.256875][ T6683] ? lockdep_lock+0x11f/0x2a0 [ 135.261537][ T6683] ? rcu_is_watching+0x11/0xa0 [ 135.266283][ T6683] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.272440][ T6683] validate_chain+0x1649/0x5930 [ 135.277282][ T6683] ? mark_lock+0x98/0x340 [ 135.281692][ T6683] ? reacquire_held_locks+0x660/0x660 [ 135.287081][ T6683] ? ocfs2_get_system_file_inode+0x1e0/0x7b0 [ 135.293090][ T6683] ? __lock_acquire+0x1ff0/0x1ff0 [ 135.298123][ T6683] ? mark_lock+0x98/0x340 [ 135.302455][ T6683] __lock_acquire+0x1295/0x1ff0 [ 135.307302][ T6683] lock_acquire+0x1db/0x4f0 [ 135.311793][ T6683] ? ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 135.317847][ T6683] ? read_lock_is_recursive+0x10/0x10 [ 135.323227][ T6683] ? __might_sleep+0xc0/0xc0 [ 135.327812][ T6683] ? __lock_acquire+0x1295/0x1ff0 [ 135.332844][ T6683] down_write+0x38/0x60 [ 135.336998][ T6683] ? ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 135.343060][ T6683] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 135.348946][ T6683] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 135.354908][ T6683] ? print_irqtrace_events+0x210/0x210 [ 135.360349][ T6683] ? do_raw_spin_unlock+0x137/0x8b0 [ 135.365527][ T6683] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 135.371404][ T6683] ? lockdep_hardirqs_on+0x94/0x130 [ 135.376584][ T6683] ? ocfs2_block_group_search+0x490/0x490 [ 135.382285][ T6683] ? stack_trace_save+0x113/0x1c0 [ 135.387296][ T6683] ? stack_trace_snprint+0xe0/0xe0 [ 135.392396][ T6683] ? stack_depot_save+0x3db/0x440 [ 135.397409][ T6683] ? ____kasan_kmalloc+0xd1/0xf0 [ 135.402327][ T6683] ? ____kasan_kmalloc+0xba/0xf0 [ 135.407245][ T6683] ? kmem_cache_alloc_trace+0x143/0x290 [ 135.412775][ T6683] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 135.419263][ T6683] ? ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 135.425052][ T6683] ? ocfs2_xattr_set+0xf46/0x1930 [ 135.430077][ T6683] ? __vfs_setxattr+0x3e7/0x420 [ 135.434909][ T6683] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 135.440781][ T6683] ? vfs_setxattr+0x21d/0x420 [ 135.445439][ T6683] ? setxattr+0x27e/0x2e0 [ 135.449750][ T6683] ? path_setxattr+0x1bc/0x2a0 [ 135.454500][ T6683] ? __x64_sys_setxattr+0xb7/0xd0 [ 135.459510][ T6683] ? do_syscall_64+0x3b/0xb0 [ 135.464100][ T6683] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.470165][ T6683] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 135.476689][ T6683] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 135.483004][ T6683] ? ocfs2_init_steal_slots+0x150/0x150 [ 135.488531][ T6683] ? ocfs2_xattr_block_set+0x32a0/0x32a0 [ 135.494167][ T6683] ? ocfs2_xattr_set+0xef8/0x1930 [ 135.499178][ T6683] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 135.504793][ T6683] ? ocfs2_prepare_refcount_xattr+0x1220/0x1220 [ 135.511014][ T6683] ? up_write+0x19d/0x580 [ 135.515326][ T6683] ? ocfs2_remove_btree_range+0x18a0/0x18a0 [ 135.521203][ T6683] ? __up_read+0x690/0x690 [ 135.525600][ T6683] ? ocfs2_xattr_ibody_find+0xd0/0x9c0 [ 135.531064][ T6683] ocfs2_xattr_set+0xf46/0x1930 [ 135.535902][ T6683] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 135.541774][ T6683] ? validate_chain+0x112/0x5930 [ 135.546873][ T6683] ? stack_trace_save+0x1c0/0x1c0 [ 135.551885][ T6683] ? reacquire_held_locks+0x660/0x660 [ 135.557245][ T6683] ? unwind_get_return_address+0x49/0x80 [ 135.562882][ T6683] ? __lock_acquire+0x1295/0x1ff0 [ 135.567898][ T6683] ? aa_get_newest_label+0xf9/0x6c0 [ 135.573082][ T6683] ? posix_xattr_acl+0xa5/0xd0 [ 135.577921][ T6683] ? evm_protect_xattr+0x33b/0xa70 [ 135.583024][ T6683] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 135.588463][ T6683] __vfs_setxattr+0x3e7/0x420 [ 135.593141][ T6683] __vfs_setxattr_noperm+0x12a/0x5e0 [ 135.598434][ T6683] vfs_setxattr+0x21d/0x420 [ 135.602938][ T6683] ? xattr_permission+0x4f0/0x4f0 [ 135.607964][ T6683] ? __might_fault+0xb4/0x110 [ 135.612625][ T6683] ? _copy_from_user+0x10f/0x170 [ 135.617543][ T6683] setxattr+0x27e/0x2e0 [ 135.621688][ T6683] ? path_setxattr+0x2a0/0x2a0 [ 135.626441][ T6683] ? preempt_count_add+0x8f/0x180 [ 135.631445][ T6683] ? __mnt_want_write+0x1e6/0x260 [ 135.636452][ T6683] path_setxattr+0x1bc/0x2a0 [ 135.641056][ T6683] ? simple_xattr_list_add+0xf0/0xf0 [ 135.646346][ T6683] ? syscall_enter_from_user_mode+0x2e/0x240 [ 135.652323][ T6683] __x64_sys_setxattr+0xb7/0xd0 [ 135.657163][ T6683] do_syscall_64+0x3b/0xb0 [ 135.661575][ T6683] ? clear_bhb_loop+0x15/0x70 [ 135.666234][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.672111][ T6683] RIP: 0033:0x7efc21219ef9 [ 135.676508][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.696183][ T6683] RSP: 002b:00007efc1f692038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 135.704582][ T6683] RAX: ffffffffffffffda RBX: 00007efc213d1f80 RCX: 00007efc21219ef9 [ 135.712539][ T6683] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000020000000 [ 135.720492][ T6683] RBP: 00007efc2128cb76 R08: 0000000000000000 R09: 0000000000000000 [ 135.728468][ T6683] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 135.736418][ T6683] R13: 0000000000000000 R14: 00007efc213d1f80 R15: 00007ffc44c5c898 [ 135.744379][ T6683] [ 135.879966][ T6694] BTRFS info (device loop2): enabling ssd optimizations [ 135.928555][ T3575] ocfs2: Unmounting device (7,3) on (node local)