last executing test programs: 3.605251947s ago: executing program 0 (id=1061): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 3.429349157s ago: executing program 0 (id=1064): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) 3.273300323s ago: executing program 0 (id=1067): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000006600)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f0000000340)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) 1.950559944s ago: executing program 0 (id=1083): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 1.717272903s ago: executing program 2 (id=1086): unshare(0x22020600) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f0000000300)) 1.717001413s ago: executing program 1 (id=1087): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0) 1.646498834s ago: executing program 3 (id=1088): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 1.464634505s ago: executing program 1 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 1.464362585s ago: executing program 2 (id=1090): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 1.464122745s ago: executing program 3 (id=1091): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "ff25f9", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x4e23, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x0, "758941", 0xe0, "2c8fa7"}}}}}}}, 0x0) 1.344195485s ago: executing program 1 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ocfs2(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x7, 0x4459, &(0x7f000000c3c0)="$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") 1.31859686s ago: executing program 0 (id=1093): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000032c000e800c00028005000100210000000600034000030000140001"], 0x90}}, 0x0) 1.1966754s ago: executing program 2 (id=1094): syz_io_uring_setup(0x23f, &(0x7f00000000c0)={0x0, 0x100c48a, 0x800, 0x5, 0x403b3}, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 1.156027267s ago: executing program 3 (id=1095): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380)=0x8) 1.047878395s ago: executing program 0 (id=1096): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x5, 0x6010fdb000000000, 0x9}) 852.100187ms ago: executing program 3 (id=1097): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 796.851367ms ago: executing program 2 (id=1098): setregid(0xffffffffffffffff, 0xee00) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) 677.751176ms ago: executing program 1 (id=1099): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(r0, 0x0, &(0x7f00000001c0)) 620.665896ms ago: executing program 3 (id=1100): rseq(&(0x7f0000001100)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 563.087206ms ago: executing program 2 (id=1101): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$FUSE(r0, &(0x7f0000001b00)={0x2020}, 0x21) 366.263659ms ago: executing program 3 (id=1102): syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000011, &(0x7f0000000180)={[{@pquota}, {@bsdgroups}, {@nogrpid}, {@noquota}, {@pquota}, {@bsdgroups}, {@inode32}, {@bsdgroups}]}, 0xff, 0x983c, &(0x7f0000012fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/40, 0x28) 292.663341ms ago: executing program 2 (id=1103): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 284.747892ms ago: executing program 1 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x8e}]}}]}, 0x40}}, 0x4000010) 0s ago: executing program 1 (id=1105): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect$midi(0x6, 0x31, &(0x7f00000000c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf7, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x10, 0x8, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x89, 0x9, {0x4}}}]}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) kernel console output (not intermixed with test programs): failed [ 111.719053][ T5830] microsoft 0003:045E:009D.0001: parse failed [ 111.735803][ T5830] microsoft: probe of 0003:045E:009D.0001 failed with error -22 [ 111.877914][ T27] usb 4-1: USB disconnect, device number 3 [ 111.909910][ T6250] loop0: detected capacity change from 0 to 256 [ 112.033869][ T6250] FAT-fs (loop0): Directory bread(block 64) failed [ 112.050342][ T6250] FAT-fs (loop0): Directory bread(block 65) failed [ 112.073534][ T6250] FAT-fs (loop0): Directory bread(block 66) failed [ 112.090714][ T6250] FAT-fs (loop0): Directory bread(block 67) failed [ 112.121760][ T6250] FAT-fs (loop0): Directory bread(block 68) failed [ 112.137158][ T6250] FAT-fs (loop0): Directory bread(block 69) failed [ 112.152667][ T6250] FAT-fs (loop0): Directory bread(block 70) failed [ 112.160786][ T6250] FAT-fs (loop0): Directory bread(block 71) failed [ 112.173317][ T6250] FAT-fs (loop0): Directory bread(block 72) failed [ 112.179964][ T6250] FAT-fs (loop0): Directory bread(block 73) failed [ 112.187698][ T6252] loop1: detected capacity change from 0 to 4096 [ 112.335352][ T6252] ntfs: volume version 3.1. [ 112.616149][ T6256] netlink: 'syz.3.173': attribute type 27 has an invalid length. [ 112.773177][ T6248] loop2: detected capacity change from 0 to 32768 [ 112.833846][ T6248] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.917170][ T6271] loop1: detected capacity change from 0 to 1764 [ 113.086056][ T6248] XFS (loop2): Ending clean mount [ 113.119083][ T5830] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.159059][ T6248] XFS (loop2): Quotacheck needed: Please wait. [ 113.202157][ T6276] can0: slcan on ptm0. [ 113.238726][ T6248] XFS (loop2): Quotacheck: Done. [ 113.349131][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 113.378880][ T5830] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 113.403905][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.412047][ T5830] usb 1-1: Product: syz [ 113.432076][ T28] audit: type=1400 audit(1776124288.565:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=6278 comm="syz.1.180" [ 113.437846][ T5830] usb 1-1: Manufacturer: syz [ 113.482156][ T5830] usb 1-1: SerialNumber: syz [ 113.504226][ T6273] can0 (unregistered): slcan off ptm0. [ 113.522595][ T5830] usb 1-1: config 0 descriptor?? [ 113.581548][ T5830] dw2102: su3000_identify_state [ 113.591901][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.600901][ T5830] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 113.610801][ T5830] dw2102: su3000_power_ctrl: 1, initialized 0 [ 113.628728][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 113.676154][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.705075][ T5830] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 113.715238][ T5830] usb 1-1: media controller created [ 113.721145][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 113.728889][ T5830] dw2102: i2c transfer failed. [ 113.735360][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 113.741282][ T5830] dw2102: i2c transfer failed. [ 113.754500][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 113.760423][ T5830] dw2102: i2c transfer failed. [ 113.765935][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 113.801243][ T5830] dw2102: i2c transfer failed. [ 113.818859][ T6265] dvb-usb: bulk message failed: -22 (4/0) [ 113.851407][ T6265] dw2102: i2c transfer failed. [ 113.893915][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 113.900012][ T5830] dw2102: i2c transfer failed. [ 113.932190][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 113.980577][ T5830] dw2102: i2c transfer failed. [ 114.003663][ T5830] dvb-usb: MAC address: 02:02:02:02:02:02 [ 114.152178][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.278145][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 114.305365][ T5830] dw2102: command 0x0e transfer failed. [ 114.311572][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 114.321524][ T5830] dw2102: command 0x0e transfer failed. [ 114.517409][ T6299] loop3: detected capacity change from 0 to 4096 [ 114.651996][ T6307] loop0: detected capacity change from 0 to 1024 [ 114.668300][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 114.674280][ T5830] dw2102: command 0x0e transfer failed. [ 114.679894][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 114.686520][ T5830] dw2102: command 0x0e transfer failed. [ 114.692133][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 114.698372][ T5830] dw2102: command 0x51 transfer failed. [ 114.945933][ T5830] DVB: Unable to find symbol ds3000_attach() [ 114.952125][ T5830] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 115.017156][ T49] hfsplus: b-tree write err: -5, ino 25 [ 115.037044][ T49] hfsplus: b-tree write err: -5, ino 4 [ 115.093190][ T49] hfsplus: b-tree write err: -5, ino 2 [ 115.124276][ T49] hfsplus: b-tree write err: -5, ino 17 [ 115.321665][ T5830] rc_core: IR keymap rc-su3000 not found [ 115.342991][ T5830] Registered IR keymap rc-empty [ 115.350275][ T5830] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 115.427589][ T5830] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 115.505791][ T6323] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 115.530795][ T5830] dvb-usb: schedule remote query interval to 150 msecs. [ 115.583029][ T5830] dw2102: su3000_power_ctrl: 0, initialized 1 [ 115.589229][ T5830] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 115.643943][ T5830] usb 1-1: USB disconnect, device number 3 [ 115.807776][ T6330] loop3: detected capacity change from 0 to 256 [ 115.830410][ T6330] exfat: Deprecated parameter 'utf8' [ 115.857568][ T6330] exfat: Deprecated parameter 'utf8' [ 115.870205][ T6304] loop2: detected capacity change from 0 to 32768 [ 115.909013][ T5830] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 116.035006][ T6304] jfs_lookup: dtSearch returned -5 [ 116.042645][ T6330] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 116.277889][ T28] audit: type=1800 audit(1776124291.415:3): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name="file1" dev="loop3" ino=1048638 res=0 errno=0 [ 116.607343][ T6347] loop0: detected capacity change from 0 to 256 [ 116.684641][ T6347] exfat: Deprecated parameter 'utf8' [ 116.690234][ T6347] exfat: Deprecated parameter 'namecase' [ 116.711893][ T6351] loop3: detected capacity change from 0 to 256 [ 116.756033][ T6351] exfat: Deprecated parameter 'utf8' [ 116.810628][ T6347] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 116.857465][ T6351] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 116.926571][ T6355] loop1: detected capacity change from 0 to 2048 [ 116.964366][ T6355] EXT4-fs: Ignoring removed i_version option [ 117.104715][ T6355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.150263][ T6355] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.483385][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.809682][ T6381] loop2: detected capacity change from 0 to 164 [ 117.843962][ T6381] ISOFS: unable to read i-node block [ 117.867691][ T6381] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 118.240956][ T6391] loop3: detected capacity change from 0 to 256 [ 118.278362][ T6391] exfat: Deprecated parameter 'namecase' [ 118.294270][ T6391] exfat: Deprecated parameter 'namecase' [ 118.321170][ T6391] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 118.950131][ T6405] loop0: detected capacity change from 0 to 8192 [ 118.992813][ T6405] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 119.027567][ T6405] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 119.037263][ T6405] REISERFS (device loop0): using ordered data mode [ 119.044027][ T6405] reiserfs: using flush barriers [ 119.052441][ T6405] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.069581][ T6405] REISERFS (device loop0): checking transaction log (loop0) [ 119.336432][ T6405] REISERFS (device loop0): Using tea hash to sort names [ 119.363546][ T6417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.363723][ T6405] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 119.452986][ T6405] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 119.760562][ T5772] Bluetooth: hci1: Malformed LE Event: 0x1d [ 120.005968][ T6409] loop2: detected capacity change from 0 to 40427 [ 120.073270][ T6409] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 120.133680][ T6409] F2FS-fs (loop2): invalid crc value [ 120.164744][ T6409] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.360424][ T6409] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.415207][ T6437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.239'. [ 120.461197][ T6437] netlink: 'syz.1.239': attribute type 6 has an invalid length. [ 120.489199][ T28] audit: type=1800 audit(1776124295.625:4): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.228" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 120.519785][ T6437] netlink: 'syz.1.239': attribute type 5 has an invalid length. [ 120.543912][ T6437] netlink: 'syz.1.239': attribute type 4 has an invalid length. [ 120.563734][ T6409] syz.2.228: attempt to access beyond end of device [ 120.563734][ T6409] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 120.642472][ T6421] loop3: detected capacity change from 0 to 32768 [ 120.692124][ T6421] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 120.719766][ T6421] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 120.721829][ T5767] syz-executor: attempt to access beyond end of device [ 120.721829][ T5767] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 120.777807][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.820513][ T6421] XFS (loop3): Ending clean mount [ 120.900270][ T6421] XFS (loop3): Quotacheck needed: Please wait. [ 120.989352][ T1313] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2e5/0x11d0, inode 0x1684 dinode [ 121.037716][ T1313] XFS (loop3): Unmount and run xfs_repair [ 121.046445][ T1313] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 121.055615][ T1313] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 121.068836][ T1313] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 121.079424][ T1313] 00000020: 34 f7 58 68 a1 1e 07 ee 34 f7 58 68 a1 1e 07 ee 4.Xh....4.Xh.... [ 121.088378][ T1313] 00000030: 34 f7 58 68 a1 1e 07 ee 00 00 00 00 00 00 04 1a 4.Xh............ [ 121.097311][ T1313] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 121.123287][ T1313] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 c2 72 3d 69 .............r=i [ 121.132324][ T1313] 00000060: ff ff ff ff cf 80 b3 ab 00 00 00 00 00 00 00 05 ................ [ 121.142441][ T1313] 00000070: 00 00 00 01 00 00 00 40 00 00 00 00 00 00 00 08 .......@........ [ 121.192072][ T6421] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 121.308278][ T5766] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 121.362311][ T6434] loop0: detected capacity change from 0 to 32768 [ 121.527446][ T6434] JBD2: Ignoring recovery information on journal [ 121.679490][ T6434] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.840276][ T6457] loop3: detected capacity change from 0 to 4096 [ 121.995038][ T6457] ntfs: volume version 3.1. [ 122.074300][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 122.082738][ T6463] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 122.381371][ T6470] loop1: detected capacity change from 0 to 16 [ 122.479718][ T6470] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.587260][ T6475] loop0: detected capacity change from 0 to 256 [ 123.268457][ T6495] loop2: detected capacity change from 0 to 4096 [ 123.298832][ T6495] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 123.399556][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'. [ 123.425231][ T6495] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 123.443300][ T6499] Zero length message leads to an empty skb [ 123.555899][ T6501] loop3: detected capacity change from 0 to 256 [ 123.577657][ T6501] exfat: Deprecated parameter 'namecase' [ 123.593201][ T6501] exfat: Deprecated parameter 'namecase' [ 123.646833][ T6501] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 124.087002][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 124.137802][ T6513] bond_slave_0: entered promiscuous mode [ 124.144103][ T6513] bond_slave_1: entered promiscuous mode [ 124.185815][ T6513] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 124.208914][ T6513] bond_slave_0: left promiscuous mode [ 124.214565][ T6513] bond_slave_1: left promiscuous mode [ 124.285208][ T6518] loop2: detected capacity change from 0 to 2048 [ 124.333626][ T6518] NILFS (loop2): couldn't find nilfs on the device [ 124.350983][ T6520] loop0: detected capacity change from 0 to 2048 [ 124.412584][ T6520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.452110][ T6334] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.632374][ T28] audit: type=1800 audit(1776124299.765:5): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.270" name="file1" dev="loop0" ino=1368 res=0 errno=0 [ 125.151344][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 125.213026][ T6535] delete_channel: no stack [ 125.708617][ T6554] loop3: detected capacity change from 0 to 8192 [ 125.754853][ T6554] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.825328][ T6554] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 125.895036][ T6554] REISERFS (device loop3): using journaled data mode [ 125.901859][ T6554] reiserfs: using flush barriers [ 125.964179][ T6554] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.013585][ T6554] REISERFS (device loop3): checking transaction log (loop3) [ 126.044935][ T6554] REISERFS (device loop3): Using r5 hash to sort names [ 126.052278][ T6554] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.126467][ T6554] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 126.242726][ T6565] wireguard0: entered promiscuous mode [ 126.251513][ T6556] loop0: detected capacity change from 0 to 32768 [ 126.266412][ T6556] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.284 (6556) [ 126.280625][ T6565] wireguard0: entered allmulticast mode [ 126.301692][ T6556] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 126.312289][ T6556] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 126.322758][ T6556] BTRFS info (device loop0): using free space tree [ 126.636205][ T6556] BTRFS info (device loop0): enabling ssd optimizations [ 126.648037][ T6556] BTRFS info (device loop0): auto enabling async discard [ 126.826536][ T5769] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 127.083080][ T5805] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.311611][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 127.344718][ T5805] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 127.353161][ T5805] usb 4-1: config 0 has no interface number 0 [ 127.366699][ T5805] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.382957][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.401270][ T5805] usb 4-1: Product: syz [ 127.411399][ T5805] usb 4-1: Manufacturer: syz [ 127.416299][ T5805] usb 4-1: SerialNumber: syz [ 127.433966][ T5805] usb 4-1: config 0 descriptor?? [ 127.445214][ T5805] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 127.672603][ T5805] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 127.716362][ T5805] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 127.751464][ T6592] loop2: detected capacity change from 0 to 40427 [ 127.801577][ T6592] F2FS-fs (loop2): invalid crc value [ 127.877000][ T6592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.082341][ T6592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.223774][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.229521][ T5830] usb 4-1: USB disconnect, device number 4 [ 128.268297][ T6601] loop0: detected capacity change from 0 to 32768 [ 128.279712][ T5830] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.325964][ T5830] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.374859][ T6601] syz.0.298: attempt to access beyond end of device [ 128.374859][ T6601] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 128.400514][ T5830] quatech2 4-1:0.51: device disconnected [ 128.403214][ T6601] metapage_write_end_io: I/O error [ 128.449061][ T112] blkno = 8ed2c, nblocks = 1 [ 128.454283][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 128.454283][ T112] [ 128.465489][ T6601] blkno = 8ed2c, nblocks = 1 [ 128.470162][ T6601] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 128.470162][ T6601] [ 128.500337][ T112] ERROR: (device loop0): remounting filesystem as read-only [ 128.525953][ T6601] ERROR: (device loop0): remounting filesystem as read-only [ 128.586092][ T6601] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 128.586092][ T6601] [ 128.628007][ T6601] jfs_mkdir: dtSearch returned -5 [ 128.685163][ T5769] syz-executor: attempt to access beyond end of device [ 128.685163][ T5769] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 128.722976][ T5769] metapage_write_end_io: I/O error [ 128.731228][ T5769] JFS: metapage_get_blocks failed [ 128.763898][ T5769] JFS: metapage_get_blocks failed [ 128.769071][ T5769] JFS: metapage_get_blocks failed [ 128.784694][ T5769] JFS: metapage_get_blocks failed [ 129.613140][ T6622] netlink: 44 bytes leftover after parsing attributes in process `syz.1.306'. [ 129.776693][ T6628] loop3: detected capacity change from 0 to 1764 [ 129.805651][ T6631] loop1: detected capacity change from 0 to 256 [ 129.844225][ T6628] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 131.165339][ T6642] loop2: detected capacity change from 0 to 40427 [ 131.181034][ T6642] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 131.190505][ T6642] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 131.210188][ T6642] F2FS-fs (loop2): build fault injection attr: rate: 2, type: 0x7ffff [ 131.229120][ T6642] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 131.249034][ T6642] F2FS-fs (loop2): invalid crc value [ 131.277071][ T6642] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.326789][ T5830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.385692][ T6642] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 131.395760][ T6642] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.422992][ T5805] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.457375][ T6642] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 131.475056][ T6642] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 131.537886][ T5830] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.560659][ T5830] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.595455][ T5830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.617682][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 131.651843][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.654585][ T5772] Bluetooth: hci2: unknown advertising packet type: 0x69 [ 131.660086][ T5772] Bluetooth: hci2: Dropping invalid advertising data [ 131.676379][ T5772] Bluetooth: hci2: Malformed LE Event: 0x02 [ 131.687978][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 131.694861][ T5805] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 131.724908][ T5830] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.743216][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.751392][ T5830] usb 4-1: Product: syz [ 131.755911][ T5830] usb 4-1: Manufacturer: syz [ 131.771888][ T5805] usb 1-1: can't read configurations, error -71 [ 131.779732][ T5830] cdc_wdm 4-1:1.0: skipping garbage [ 131.794277][ T5830] cdc_wdm 4-1:1.0: skipping garbage [ 131.809530][ T5830] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 131.815911][ T5830] cdc_wdm 4-1:1.0: Unknown control protocol [ 132.032039][ T23] usb 4-1: USB disconnect, device number 5 [ 133.057887][ T6683] loop1: detected capacity change from 0 to 40427 [ 133.081181][ T6683] F2FS-fs (loop1): invalid crc value [ 133.115075][ T6683] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.228815][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238299][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318288][ T6683] F2FS-fs (loop1): Start checkpoint disabled! [ 133.392644][ T6683] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 133.584915][ T6692] loop3: detected capacity change from 0 to 32768 [ 133.634971][ T6692] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.337 (6692) [ 133.712424][ T6692] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 133.751759][ T6692] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 133.784950][ T6692] BTRFS info (device loop3): using free space tree [ 134.009334][ T6692] BTRFS info (device loop3): enabling ssd optimizations [ 134.067596][ T6692] BTRFS info (device loop3): auto enabling async discard [ 134.469025][ T5766] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.790948][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 134.824136][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 134.848248][ T6334] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (6334) [ 134.849260][ T6745] loop1: detected capacity change from 0 to 1024 [ 134.862839][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 134.878580][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 134.917650][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 134.931626][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 134.936706][ T6745] EXT4-fs: Ignoring removed bh option [ 134.953984][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 134.970550][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 135.002225][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 135.043710][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 135.079577][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 135.089532][ T6745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.103219][ T23] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 135.142106][ T23] hid-generic 0103:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 135.277395][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.557122][ T6752] fido_id[6752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.013948][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.048872][ T6740] loop2: detected capacity change from 0 to 40427 [ 136.093999][ T6740] F2FS-fs (loop2): invalid crc value [ 136.131710][ T6740] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.216332][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 136.241769][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.278310][ T6740] F2FS-fs (loop2): Start checkpoint disabled! [ 136.284454][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.284489][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.284511][ T5830] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.284533][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.295784][ T5830] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.295814][ T5830] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.295833][ T5830] usb 4-1: Manufacturer: syz [ 136.348887][ T5830] usb 4-1: config 0 descriptor?? [ 136.435632][ T6740] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 136.743698][ T5830] rc_core: IR keymap rc-hauppauge not found [ 136.752018][ T12] kworker/u4:1: attempt to access beyond end of device [ 136.752018][ T12] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 136.754741][ T5830] Registered IR keymap rc-empty [ 136.778753][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.783969][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.796610][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.807525][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.833106][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.874495][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.881533][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.894212][ T5830] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 136.919048][ T5830] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 136.958055][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.980682][ T6787] [U] VÔ3žÂFÙŸ"SÇÁ/ÉÊ4:ĂXTZ“WĄT‘’LW”«= [ 136.994653][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.004270][ T6784] [U] J"—E:ÀÆ" [ 137.043113][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.083177][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.135164][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.183152][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.233206][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.287509][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.333179][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.383361][ T5830] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.426241][ T5830] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 137.466024][ T5830] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.498505][ T5830] usb 4-1: USB disconnect, device number 6 [ 137.539562][ T6796] loop0: detected capacity change from 0 to 256 [ 137.580382][ T6796] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.613109][ T1188] IPVS: starting estimator thread 0... [ 138.724023][ T6822] IPVS: using max 20 ests per chain, 48000 per kthread [ 139.180038][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 139.924232][ T6840] loop2: detected capacity change from 0 to 32768 [ 139.963930][ T6840] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.393 (6840) [ 140.015532][ T6867] loop0: detected capacity change from 0 to 64 [ 140.058662][ T6840] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.099413][ T6840] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 140.137340][ T6840] BTRFS info (device loop2): setting nodatacow, compression disabled [ 140.159267][ T6840] BTRFS info (device loop2): setting datasum, datacow enabled [ 140.195007][ T6840] BTRFS info (device loop2): force clearing of disk cache [ 140.231549][ T6840] BTRFS info (device loop2): enabling ssd optimizations [ 140.257545][ T6840] BTRFS info (device loop2): using spread ssd allocation scheme [ 140.303597][ T6840] BTRFS info (device loop2): turning on sync discard [ 140.310693][ T6840] BTRFS info (device loop2): enabling disk space caching [ 140.363055][ T6840] BTRFS info (device loop2): enabling auto defrag [ 140.369644][ T6840] BTRFS info (device loop2): turning off barriers [ 140.410383][ T6840] BTRFS info (device loop2): not using ssd optimizations [ 140.423841][ T6840] BTRFS info (device loop2): not using spread ssd allocation scheme [ 140.428638][ T6875] capability: warning: `syz.1.410' uses deprecated v2 capabilities in a way that may be insecure [ 140.432001][ T6840] BTRFS info (device loop2): disk space caching is enabled [ 140.643398][ T6840] BTRFS info (device loop2): rebuilding free space tree [ 140.787916][ T6899] loop1: detected capacity change from 0 to 16 [ 140.825903][ T6899] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.840162][ T6840] BTRFS info (device loop2): disabling free space tree [ 140.876920][ T6840] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.914155][ T6840] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.989328][ T6899] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 141.049852][ T6899] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 141.068103][ T6899] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 141.174517][ T28] audit: type=1800 audit(1776124316.315:6): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.393" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 141.292294][ T5767] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.742220][ T6916] netlink: 'syz.3.424': attribute type 21 has an invalid length. [ 141.992597][ T6924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'. [ 142.112608][ T6923] loop3: detected capacity change from 0 to 4096 [ 142.144344][ T6923] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 142.220030][ T6932] loop1: detected capacity change from 0 to 512 [ 142.249326][ T6923] ntfs: volume version 3.1. [ 142.255648][ T6932] EXT4-fs: Ignoring removed orlov option [ 142.299479][ T6932] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 142.349900][ T6936] loop0: detected capacity change from 0 to 256 [ 142.359021][ T6932] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 142.368423][ T6932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.375273][ T6932] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 142.385177][ T6932] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 142.406403][ T6932] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 142.416466][ T6932] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.430: bg 0: block 40: padding at end of block bitmap is not set [ 142.438004][ T6923] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 142.468138][ T6932] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 142.495458][ T6932] EXT4-fs (loop1): 1 truncate cleaned up [ 142.525015][ T6932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.541451][ T6923] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 142.611678][ T6923] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to map page. [ 142.652972][ T6923] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 142.736940][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.070775][ T6946] netlink: 'syz.0.435': attribute type 3 has an invalid length. [ 143.179210][ T6948] loop2: detected capacity change from 0 to 16 [ 143.214070][ T6948] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 143.266591][ T6952] mmap: syz.3.439 (6952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.367771][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 143.407085][ T6955] IPVS: Error joining to the multicast group [ 143.501146][ T6959] loop2: detected capacity change from 0 to 512 [ 143.834006][ T6962] loop0: detected capacity change from 0 to 4096 [ 143.857957][ T6962] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 143.926689][ T6962] ntfs3: loop0: It is recommened to use chkdsk. [ 144.164443][ T6962] ntfs3: loop0: failed to convert "076c" to cp857 [ 144.187249][ T6962] ntfs3: loop0: ino=5, "/" directory corrupted [ 144.412981][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.470717][ T6981] loop1: detected capacity change from 0 to 64 [ 144.528253][ T6979] loop0: detected capacity change from 0 to 8192 [ 144.566493][ T6979] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.580562][ T6979] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 144.591287][ T6979] REISERFS (device loop0): using ordered data mode [ 144.598338][ T6979] reiserfs: using flush barriers [ 144.613216][ T6979] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.629883][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 144.644758][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.660664][ T6979] REISERFS (device loop0): checking transaction log (loop0) [ 144.669139][ T23] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.686735][ T23] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.697386][ T23] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.719888][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.729761][ T23] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 144.739880][ T5768] hfs: node 4:3 still has 2 user(s)! [ 144.757291][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.778978][ T23] usb 4-1: config 0 descriptor?? [ 144.918055][ T6988] loop2: detected capacity change from 0 to 512 [ 144.940825][ T6988] EXT4-fs: Ignoring removed bh option [ 144.963275][ T6988] EXT4-fs: inline encryption not supported [ 145.006453][ T6988] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.019520][ T6979] REISERFS (device loop0): Using tea hash to sort names [ 145.029324][ T6979] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 145.102635][ T6988] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 145.129542][ T6988] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.457: bg 0: block 248: padding at end of block bitmap is not set [ 145.154482][ T6988] Quota error (device loop2): write_blk: dquota write failed [ 145.173201][ T6988] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 145.203881][ T6988] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.457: Failed to acquire dquot type 1 [ 145.262023][ T23] corsair-cpro 0003:1B1C:0C10.0003: unbalanced delimiter at end of report description [ 145.292823][ T23] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -22 [ 145.302504][ T6988] EXT4-fs (loop2): 1 truncate cleaned up [ 145.338995][ T6988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 145.468146][ T6988] syz.2.457 (6988) used greatest stack depth: 20336 bytes left [ 145.519243][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 145.548527][ T27] usb 4-1: USB disconnect, device number 7 [ 145.685804][ T6998] loop1: detected capacity change from 0 to 1024 [ 145.774184][ T6998] hfsplus: bad catalog entry type [ 145.893175][ T1080] hfsplus: b-tree write err: -5, ino 25 [ 145.899386][ T1080] hfsplus: b-tree write err: -5, ino 4 [ 145.914294][ T1080] hfsplus: b-tree write err: -5, ino 2 [ 146.139378][ T7011] loop0: detected capacity change from 0 to 64 [ 146.275148][ T7011] hfs: bad catalog entry type 65409 [ 146.622611][ T7027] loop1: detected capacity change from 0 to 64 [ 147.297066][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 147.342812][ T7049] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.484'. [ 147.382964][ T7049] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 147.391947][ T7049] openvswitch: netlink: Message has 1 unknown bytes. [ 147.416829][ T7029] loop3: detected capacity change from 0 to 32768 [ 147.440953][ T7029] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.475 (7029) [ 147.490824][ T7029] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.514391][ T7029] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 147.544079][ T7029] BTRFS info (device loop3): setting nodatacow, compression disabled [ 147.574318][ T7029] BTRFS info (device loop3): setting datasum, datacow enabled [ 147.581904][ T7029] BTRFS info (device loop3): force clearing of disk cache [ 147.622970][ T7029] BTRFS info (device loop3): enabling ssd optimizations [ 147.630055][ T7029] BTRFS info (device loop3): using spread ssd allocation scheme [ 147.698927][ T7029] BTRFS info (device loop3): turning on sync discard [ 147.719350][ T7029] BTRFS info (device loop3): enabling disk space caching [ 147.732970][ T7029] BTRFS info (device loop3): enabling auto defrag [ 147.749960][ T7029] BTRFS info (device loop3): turning off barriers [ 147.772966][ T7029] BTRFS info (device loop3): not using ssd optimizations [ 147.814460][ T7029] BTRFS info (device loop3): not using spread ssd allocation scheme [ 147.822725][ T7029] BTRFS info (device loop3): disk space caching is enabled [ 147.988168][ T7068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.055186][ T7068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.074836][ T7029] BTRFS info (device loop3): rebuilding free space tree [ 148.099160][ T7068] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.128943][ T7029] BTRFS info (device loop3): disabling free space tree [ 148.146519][ T7029] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.171615][ T7029] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.184412][ T7084] set_capacity_and_notify: 1 callbacks suppressed [ 148.184426][ T7084] loop1: detected capacity change from 0 to 1024 [ 148.274546][ T7084] hfsplus: gid requires an argument [ 148.302688][ T7084] hfsplus: unable to parse mount options [ 148.316719][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.350602][ T28] audit: type=1800 audit(1776124323.485:7): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.475" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 148.494934][ T5766] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.696773][ T6334] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (6334) [ 148.882270][ T7090] loop2: detected capacity change from 0 to 4096 [ 150.113419][ T7110] loop2: detected capacity change from 0 to 8192 [ 150.169915][ T7110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.194426][ T7110] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 150.264173][ T7110] REISERFS (device loop2): using ordered data mode [ 150.300102][ T7110] reiserfs: using flush barriers [ 150.316183][ T7110] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.337596][ T7110] REISERFS (device loop2): checking transaction log (loop2) [ 150.468863][ T7110] REISERFS (device loop2): Using tea hash to sort names [ 150.482040][ T7110] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 150.780210][ T7113] comedi comedi2: reset error (fatal) [ 151.040548][ T7117] loop0: detected capacity change from 0 to 32768 [ 151.080051][ T7117] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 151.250950][ T6334] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 151.722862][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 151.884018][ T7150] loop3: detected capacity change from 0 to 1024 [ 151.929159][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.104975][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.335801][ T7167] loop1: detected capacity change from 0 to 256 [ 152.368864][ T7167] exfat: Deprecated parameter 'utf8' [ 152.382843][ T7167] exfat: Deprecated parameter 'namecase' [ 152.416292][ T7167] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 152.603943][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.803786][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 152.815138][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.843135][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.862975][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.892998][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.912496][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.935496][ T27] usb 3-1: config 0 descriptor?? [ 152.942855][ T7183] warning: `syz.3.537' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.090649][ T7185] tipc: Started in network mode [ 153.098337][ T7185] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 153.115731][ T7185] tipc: Enabling of bearer rejected, failed to enable media [ 153.253696][ T7187] loop3: detected capacity change from 0 to 256 [ 153.276022][ T7187] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 153.386496][ T27] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 153.421784][ T27] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 153.453030][ T27] microsoft 0003:045E:07DA.0004: no inputs found [ 153.465304][ T27] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 153.533823][ T7181] loop1: detected capacity change from 0 to 40427 [ 153.568574][ T7181] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 153.595007][ T7181] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.632299][ T7193] loop3: detected capacity change from 0 to 512 [ 153.643826][ T7181] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.671345][ T5830] usb 3-1: USB disconnect, device number 3 [ 153.690166][ T7193] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.541: iget: bad extra_isize 50264 (inode size 256) [ 153.766586][ T7193] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.541: couldn't read orphan inode 15 (err -117) [ 153.810260][ T7181] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 153.819188][ T7181] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.829406][ T7193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.883016][ T7193] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.541: Directory hole found for htree leaf block 0 [ 153.913629][ T5768] syz-executor: attempt to access beyond end of device [ 153.913629][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.963817][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 154.045087][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.453431][ T5805] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.655698][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 154.683401][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57465, setting to 1024 [ 154.743681][ T5805] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 154.762940][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 154.771133][ T5805] usb 4-1: Product: syz [ 154.787894][ T5805] usb 4-1: config 0 descriptor?? [ 154.838918][ T7212] loop2: detected capacity change from 0 to 2048 [ 154.877095][ T7212] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 154.898159][ T7212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.253575][ T5805] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 155.260463][ T5805] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 155.298706][ T5805] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 155.315575][ T5805] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 155.332760][ T5805] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 155.371853][ T5805] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.3-1/input0 [ 155.519039][ T5805] usb 4-1: USB disconnect, device number 8 [ 155.652035][ T7214] loop1: detected capacity change from 0 to 32768 [ 155.708794][ T7226] fido_id[7226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 155.778503][ T7229] loop0: detected capacity change from 0 to 1024 [ 155.786919][ T7229] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.795855][ T7214] JBD2: Ignoring recovery information on journal [ 155.803403][ T7229] EXT4-fs: Ignoring removed oldalloc option [ 155.888663][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.891686][ T7214] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.956322][ T7229] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.124473][ T7229] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.556: bg 0: block 112: padding at end of block bitmap is not set [ 156.230172][ T7229] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 156.248445][ T7229] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.248445][ T7229] [ 156.259296][ T7229] EXT4-fs (loop0): Total free blocks count 0 [ 156.268832][ T7229] EXT4-fs (loop0): Free/Dirty block details [ 156.275826][ T7229] EXT4-fs (loop0): free_blocks=0 [ 156.280968][ T7229] EXT4-fs (loop0): dirty_blocks=64 [ 156.286317][ T7229] EXT4-fs (loop0): Block reservation details [ 156.292363][ T7229] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 156.308815][ T7214] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 156.354617][ T7214] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 156.381482][ T7214] OCFS2: File system is now read-only. [ 156.426893][ T7214] (syz.1.550,7214,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 156.442652][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.461110][ T7214] (syz.1.550,7214,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 156.495706][ T7214] (syz.1.550,7214,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 156.523001][ T7214] (syz.1.550,7214,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 156.531186][ T7214] (syz.1.550,7214,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 156.590128][ T7214] (syz.1.550,7214,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 156.603256][ T7214] (syz.1.550,7214,0):ocfs2_mknod:385 ERROR: status = -30 [ 156.628417][ T7214] (syz.1.550,7214,0):ocfs2_mknod:502 ERROR: status = -30 [ 156.675548][ T7214] (syz.1.550,7214,1):ocfs2_create:676 ERROR: status = -30 [ 156.704938][ T7245] dvmrp12: entered allmulticast mode [ 156.729501][ T7214] syz.1.550 (7214) used greatest stack depth: 18768 bytes left [ 156.760450][ T7244] dvmrp12: left allmulticast mode [ 156.805386][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 157.056103][ T7255] loop1: detected capacity change from 0 to 512 [ 157.118279][ T7255] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 157.186836][ T7257] loop3: detected capacity change from 0 to 2048 [ 157.259608][ T7257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.307110][ T7259] tipc: Started in network mode [ 157.312176][ T7259] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 157.339707][ T28] audit: type=1800 audit(1776124332.475:8): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.567" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 157.361824][ T7259] tipc: Enabling of bearer rejected, failed to enable media [ 157.798133][ T7272] loop0: detected capacity change from 0 to 64 [ 157.879353][ T7272] syz.0.575: attempt to access beyond end of device [ 157.879353][ T7272] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 157.917927][ T7272] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 158.064706][ T7274] loop2: detected capacity change from 0 to 4096 [ 158.101941][ T7274] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 158.148012][ T7274] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 158.195325][ T7274] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 158.247676][ T7274] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 158.285825][ T7274] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 158.327961][ T7282] loop3: detected capacity change from 0 to 512 [ 158.328279][ T7274] ntfs: volume version 3.1. [ 158.354083][ T7282] ext4: Unknown parameter 'permit_directio' [ 158.380387][ T7274] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 158.427609][ T7274] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 158.466258][ T7274] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 158.497032][ T7274] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 158.681896][ T7288] ptrace attach of "./syz-executor exec"[5766] was attempted by " Àÿ Đÿ đ„ Àÿ Àÿ Đÿ àÿ đÿ °ÿ Àÿ ÿÿÿÿ  "[7288] [ 158.730016][ T7290] loop1: detected capacity change from 0 to 512 [ 158.773889][ T7290] EXT4-fs: Ignoring removed nobh option [ 158.881952][ T7290] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 158.936822][ T7290] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 158.984219][ T7290] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.583: inode has both inline data and extents flags [ 159.051414][ T7290] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.583: couldn't read orphan inode 13 (err -117) [ 159.090550][ T7290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.107096][ T7300] loop2: detected capacity change from 0 to 164 [ 159.121789][ T7290] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 159.202228][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.709402][ T7312] loop2: detected capacity change from 0 to 4096 [ 159.801319][ T7312] ntfs: volume version 3.1. [ 159.882747][ T7304] loop0: detected capacity change from 0 to 32768 [ 159.975763][ T7304] ERROR: (device loop0): diWrite: ixpxd invalid [ 159.975763][ T7304] [ 159.992793][ T7304] ERROR: (device loop0): remounting filesystem as read-only [ 160.013016][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 160.023148][ T7304] ERROR: (device loop0): txCommit: [ 160.023148][ T7304] [ 160.196757][ T7318] netlink: 'syz.3.596': attribute type 2 has an invalid length. [ 160.223722][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 160.241883][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.273002][ T27] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.307313][ T27] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.348246][ T27] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.401717][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.423143][ T27] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 160.450317][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.470224][ T27] usb 2-1: config 0 descriptor?? [ 160.640185][ T7322] loop0: detected capacity change from 0 to 1024 [ 160.666439][ T7322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.764928][ T7322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.919599][ T27] corsair-cpro 0003:1B1C:0C10.0006: unbalanced delimiter at end of report description [ 160.946446][ T27] corsair-cpro: probe of 0003:1B1C:0C10.0006 failed with error -22 [ 160.992198][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.048702][ T7316] loop2: detected capacity change from 0 to 40427 [ 161.100818][ T7316] F2FS-fs (loop2): invalid crc value [ 161.160181][ T7316] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.197135][ T5805] usb 2-1: USB disconnect, device number 4 [ 161.328187][ T7316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.369510][ T7338] loop0: detected capacity change from 0 to 64 [ 161.534041][ T5767] syz-executor: attempt to access beyond end of device [ 161.534041][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.573343][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.737420][ T7342] loop0: detected capacity change from 0 to 4096 [ 161.814552][ T7342] ntfs: volume version 3.1. [ 162.043152][ T7348] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 162.523013][ T27] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 162.726455][ T27] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.746295][ T27] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.773444][ T27] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.773462][ T5830] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.797063][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 162.813048][ T27] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 162.841769][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.861572][ T27] usb 4-1: config 0 descriptor?? [ 162.985704][ T7356] loop0: detected capacity change from 0 to 32768 [ 163.041936][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.068733][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.099507][ T7356] find_entry called with index = 0 [ 163.106552][ T5830] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 163.120393][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.147864][ T5830] usb 2-1: config 0 descriptor?? [ 163.148174][ T7356] read_mapping_page failed! [ 163.151387][ T7356] ERROR: (device loop0): txCommit: [ 163.151387][ T7356] [ 163.324675][ T27] holtek 0003:1241:5015.0007: unknown main item tag 0x4 [ 163.331745][ T27] holtek 0003:1241:5015.0007: unknown main item tag 0x3 [ 163.343151][ T27] holtek 0003:1241:5015.0007: item fetching failed at offset 4/5 [ 163.373927][ T27] holtek 0003:1241:5015.0007: parse failed [ 163.379914][ T27] holtek: probe of 0003:1241:5015.0007 failed with error -22 [ 163.570222][ T5830] arvo 0003:1E7D:30D4.0008: item fetching failed at offset 5/7 [ 163.596464][ T27] usb 4-1: USB disconnect, device number 9 [ 163.617374][ T5830] arvo 0003:1E7D:30D4.0008: parse failed [ 163.640328][ T5830] arvo: probe of 0003:1E7D:30D4.0008 failed with error -22 [ 163.781729][ T23] usb 2-1: USB disconnect, device number 5 [ 163.879297][ T7384] batadv0: entered promiscuous mode [ 163.895062][ T7384] batadv0: left promiscuous mode [ 164.060027][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 164.253825][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 164.253842][ T28] audit: type=1326 audit(1776124339.385:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.310669][ T28] audit: type=1326 audit(1776124339.395:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.353391][ T28] audit: type=1326 audit(1776124339.395:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.446073][ T28] audit: type=1326 audit(1776124339.395:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.512520][ T7398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.512616][ T28] audit: type=1326 audit(1776124339.395:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.512664][ T28] audit: type=1326 audit(1776124339.435:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.613027][ T28] audit: type=1326 audit(1776124339.435:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.624101][ T7398] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.693716][ T28] audit: type=1326 audit(1776124339.435:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.803839][ T28] audit: type=1326 audit(1776124339.435:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f143f19c819 code=0x7ffc0000 [ 164.835260][ T7398] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.864670][ T7407] loop3: detected capacity change from 0 to 128 [ 164.884529][ T7398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.925261][ T7398] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.970878][ T7398] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 165.058599][ T7398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.093920][ T7398] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 165.122313][ T7398] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 165.168807][ T7398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.190314][ T7398] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.229582][ T7398] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.407203][ T7419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.639'. [ 165.749948][ T7427] loop3: detected capacity change from 0 to 64 [ 166.383060][ T7441] netlink: 'syz.2.650': attribute type 3 has an invalid length. [ 166.593926][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.903150][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.073105][ T5772] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.223021][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.301660][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 167.783235][ T5805] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.003697][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 168.015047][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.063265][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.085419][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.113790][ T5805] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.143084][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.176601][ T5805] usb 3-1: config 0 descriptor?? [ 168.317317][ T7489] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.424254][ T7481] loop3: detected capacity change from 0 to 32768 [ 168.457156][ T7481] (syz.3.670,7481,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.499057][ T7481] (syz.3.670,7481,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.594370][ T5805] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 168.620368][ T7481] JBD2: Ignoring recovery information on journal [ 168.629797][ T5805] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 168.663102][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.711152][ T7492] loop1: detected capacity change from 0 to 1024 [ 168.719382][ T5805] microsoft 0003:045E:07DA.0009: no inputs found [ 168.753238][ T5805] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 168.774635][ T7481] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 168.820034][ T5805] usb 3-1: USB disconnect, device number 4 [ 168.947047][ T7493] fido_id[7493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 168.984257][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.034396][ T7485] loop0: detected capacity change from 0 to 40427 [ 169.062641][ T7485] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 169.082842][ T7485] F2FS-fs (loop0): invalid crc value [ 169.117172][ T7496] loop1: detected capacity change from 0 to 512 [ 169.136758][ T7485] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.143285][ T5772] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.204903][ T7485] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.235552][ T7496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.284222][ T7496] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.676: invalid indirect mapped block 4294967295 (level 1) [ 169.303254][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.310106][ T7496] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.676: invalid indirect mapped block 4294967295 (level 1) [ 169.331285][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 169.423432][ T5769] syz-executor: attempt to access beyond end of device [ 169.423432][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.467726][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 169.470805][ T7496] EXT4-fs (loop1): 2 truncates cleaned up [ 169.492714][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.652525][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.039242][ T7511] loop3: detected capacity change from 0 to 4096 [ 170.123405][ T7516] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.223479][ T7511] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean [ 170.743059][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.803029][ T5830] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 170.985342][ T5830] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 171.014102][ T5830] usb 4-1: config 0 has no interface number 0 [ 171.044339][ T5830] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 171.063114][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.063195][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.081851][ T5830] usb 4-1: Product: syz [ 171.091930][ T5830] usb 4-1: Manufacturer: syz [ 171.102059][ T5830] usb 4-1: SerialNumber: syz [ 171.131150][ T5830] usb 4-1: config 0 descriptor?? [ 171.223315][ T5772] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.383071][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.509589][ T7537] loop0: detected capacity change from 0 to 32768 [ 171.583593][ T7537] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.724439][ T7560] loop2: detected capacity change from 0 to 4096 [ 171.738815][ T7537] XFS (loop0): Ending clean mount [ 171.785739][ T5830] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 171.816197][ T5830] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 171.831369][ T5830] asix: probe of 4-1:0.251 failed with error -71 [ 171.901332][ T5830] usb 4-1: USB disconnect, device number 10 [ 171.985654][ T7560] ntfs3: loop2: failed to convert "0000" to iso8859-9 [ 172.008790][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.031335][ T7560] ntfs3: loop2: failed to convert name for inode 1e. [ 172.242504][ T7563] Bluetooth: MGMT ver 1.22 [ 172.973126][ T7588] netlink: 64 bytes leftover after parsing attributes in process `syz.2.710'. [ 173.157270][ T7597] loop3: detected capacity change from 0 to 64 [ 173.396495][ T7603] ip6gretap0: entered promiscuous mode [ 173.402701][ T7603] macsec1: entered promiscuous mode [ 173.452681][ T7603] macsec1: entered allmulticast mode [ 173.462919][ T7603] ip6gretap0: entered allmulticast mode [ 173.465062][ T1188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.498700][ T7603] ip6gretap0: left allmulticast mode [ 173.516872][ T7603] ip6gretap0: left promiscuous mode [ 173.673229][ T1188] usb 1-1: Using ep0 maxpacket: 16 [ 173.683578][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.712979][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.743041][ T1188] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 173.778065][ T5756] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.790690][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.813211][ T1188] usb 1-1: config 0 descriptor?? [ 173.941497][ T5805] IPVS: starting estimator thread 0... [ 173.973041][ T5756] usb 3-1: Using ep0 maxpacket: 32 [ 173.981394][ T5756] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 173.991489][ T5756] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 174.000875][ T5756] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 174.016393][ T5756] usb 3-1: config 1 has no interface number 0 [ 174.043050][ T5756] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.043212][ T7616] IPVS: using max 20 ests per chain, 48000 per kthread [ 174.056256][ T5756] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 174.075240][ T5756] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.085009][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.129024][ T5756] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 174.203685][ T7620] loop1: detected capacity change from 0 to 256 [ 174.254934][ T1188] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 174.277290][ T7620] FAT-fs (loop1): Directory bread(block 64) failed [ 174.290345][ T7620] FAT-fs (loop1): Directory bread(block 65) failed [ 174.301241][ T7620] FAT-fs (loop1): Directory bread(block 66) failed [ 174.308285][ T7620] FAT-fs (loop1): Directory bread(block 67) failed [ 174.315764][ T7620] FAT-fs (loop1): Directory bread(block 68) failed [ 174.322561][ T7620] FAT-fs (loop1): Directory bread(block 69) failed [ 174.339959][ T5756] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 174.348125][ T7620] FAT-fs (loop1): Directory bread(block 70) failed [ 174.360946][ T7620] FAT-fs (loop1): Directory bread(block 71) failed [ 174.389382][ T7620] FAT-fs (loop1): Directory bread(block 72) failed [ 174.411211][ T7620] FAT-fs (loop1): Directory bread(block 73) failed [ 174.457000][ T5756] usb 1-1: USB disconnect, device number 6 [ 174.488142][ T7621] fido_id[7621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 174.758654][ T5756] usb 3-1: USB disconnect, device number 5 [ 174.775445][ T5756] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 174.943368][ T1188] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.127565][ T7631] loop0: detected capacity change from 0 to 164 [ 175.145999][ T1188] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.170290][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.205552][ T1188] usb 2-1: config 0 descriptor?? [ 175.215433][ T1188] cp210x 2-1:0.0: cp210x converter detected [ 175.522537][ T7627] loop3: detected capacity change from 0 to 40427 [ 175.563195][ T7627] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 175.572966][ T7627] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 175.592667][ T7627] F2FS-fs (loop3): invalid crc value [ 175.605380][ T7627] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.739799][ T7627] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 175.750057][ T7627] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.798428][ T7641] loop2: detected capacity change from 0 to 1024 [ 175.832168][ T1188] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 175.858223][ T1188] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 175.893522][ T1188] usb 2-1: cp210x converter now attached to ttyUSB0 [ 175.915423][ T5766] syz-executor: attempt to access beyond end of device [ 175.915423][ T5766] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.953145][ T1188] usb 2-1: USB disconnect, device number 6 [ 175.979319][ T5766] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 175.988485][ T1188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 176.005315][ T1188] cp210x 2-1:0.0: device disconnected [ 176.188091][ T7633] loop0: detected capacity change from 0 to 40427 [ 176.218269][ T7633] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 176.246701][ T7633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 176.280581][ T7633] F2FS-fs (loop0): invalid crc value [ 176.609736][ T7652] loop2: detected capacity change from 0 to 256 [ 176.631590][ T7633] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 176.657133][ T7654] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 176.657133][ T7654] The task syz.1.737 (7654) triggered the difference, watch for misbehavior. [ 176.676221][ T7633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.697775][ T7652] FAT-fs (loop2): Directory bread(block 64) failed [ 176.720735][ T7652] FAT-fs (loop2): Directory bread(block 65) failed [ 176.742383][ T7652] FAT-fs (loop2): Directory bread(block 66) failed [ 176.769780][ T7652] FAT-fs (loop2): Directory bread(block 67) failed [ 176.790469][ T7652] FAT-fs (loop2): Directory bread(block 68) failed [ 176.816461][ T7652] FAT-fs (loop2): Directory bread(block 69) failed [ 176.842340][ T7652] FAT-fs (loop2): Directory bread(block 70) failed [ 176.852552][ T5769] syz-executor: attempt to access beyond end of device [ 176.852552][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.873118][ T7652] FAT-fs (loop2): Directory bread(block 71) failed [ 176.880176][ T7652] FAT-fs (loop2): Directory bread(block 72) failed [ 176.890172][ T7652] FAT-fs (loop2): Directory bread(block 73) failed [ 176.897637][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.353283][ T7658] loop3: detected capacity change from 0 to 4096 [ 177.364928][ T7660] loop2: detected capacity change from 0 to 4096 [ 177.379202][ T7660] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 177.783367][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.991200][ T5772] Bluetooth: hci3: failed to read key size for handle 0 [ 178.000095][ T5772] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 178.007474][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 178.021482][ T27] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.035036][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.041730][ T27] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 178.051639][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.063548][ T27] usb 1-1: config 0 descriptor?? [ 178.275759][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 178.499031][ T27] waltop 0003:172F:0037.000B: unknown main item tag 0x2 [ 178.521584][ T27] waltop 0003:172F:0037.000B: unknown main item tag 0x0 [ 178.532758][ T27] waltop 0003:172F:0037.000B: unexpected long global item [ 178.554014][ T27] waltop: probe of 0003:172F:0037.000B failed with error -22 [ 178.697903][ T27] usb 1-1: USB disconnect, device number 7 [ 178.870520][ T7698] vlan2: entered allmulticast mode [ 178.879411][ T7698] team0: entered allmulticast mode [ 178.888247][ T7698] team_slave_0: entered allmulticast mode [ 178.899018][ T7698] team_slave_1: entered allmulticast mode [ 179.081709][ T7688] loop3: detected capacity change from 0 to 32768 [ 179.140437][ T7688] read_mapping_page failed! [ 179.170054][ T7688] ERROR: (device loop3): txCommit: [ 179.170054][ T7688] [ 179.534270][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 179.740765][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.767096][ T8] usb 2-1: config 0 has no interface number 0 [ 179.794700][ T8] usb 2-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30 [ 179.810965][ T7724] loop3: detected capacity change from 0 to 256 [ 179.822550][ T8] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 179.868679][ T8] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 179.878206][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.897961][ T8] usb 2-1: config 0 descriptor?? [ 179.906702][ T7724] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 180.023092][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.126395][ T8] usb 2-1: string descriptor 0 read error: -71 [ 180.158271][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 180.281359][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.295835][ T8] snd-usb-audio: probe of 2-1:0.1 failed with error -2 [ 180.348725][ T8] usb 2-1: USB disconnect, device number 7 [ 180.501061][ T7739] loop0: detected capacity change from 0 to 4096 [ 180.524679][ T7739] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 180.622777][ T7739] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 180.682672][ T49] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 180.700372][ T5769] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 180.723747][ T5769] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 180.763449][ T5769] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 180.792254][ T11] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 180.849533][ T28] audit: type=1326 audit(1776124355.975:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 180.923110][ T28] audit: type=1326 audit(1776124355.975:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 180.985389][ T28] audit: type=1326 audit(1776124355.975:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.036506][ T28] audit: type=1326 audit(1776124355.975:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.084127][ T28] audit: type=1326 audit(1776124355.975:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.135814][ T28] audit: type=1326 audit(1776124355.975:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.185312][ T28] audit: type=1326 audit(1776124355.975:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.237844][ T28] audit: type=1326 audit(1776124355.975:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.262696][ T7741] loop3: detected capacity change from 0 to 32768 [ 181.298304][ T7741] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.313177][ T28] audit: type=1326 audit(1776124355.975:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.341675][ T7741] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 181.355764][ T7741] BTRFS info (device loop3): enabling auto defrag [ 181.373317][ T7741] BTRFS info (device loop3): use no compression [ 181.379812][ T28] audit: type=1326 audit(1776124355.975:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ff00000 [ 181.404451][ T7741] BTRFS info (device loop3): max_inline at 4096 [ 181.410876][ T7741] BTRFS info (device loop3): using free space tree [ 181.626858][ T7741] BTRFS info (device loop3): enabling ssd optimizations [ 181.673297][ T7741] BTRFS info (device loop3): auto enabling async discard [ 181.870382][ T7749] loop0: detected capacity change from 0 to 40427 [ 181.916210][ T7775] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 181.953334][ T7749] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 181.961367][ T7749] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.027989][ T7749] F2FS-fs (loop0): invalid crc value [ 182.107236][ T7749] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.214917][ T5766] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.322263][ T7749] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 182.339985][ T7749] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.506509][ T6334] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (6334) [ 183.239853][ T7804] loop1: detected capacity change from 0 to 764 [ 183.549382][ T7812] loop0: detected capacity change from 0 to 128 [ 183.584501][ T7813] loop1: detected capacity change from 0 to 2048 [ 183.645228][ T7812] qnx6: unable to set blocksize [ 183.660043][ T7813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.029832][ T7801] loop3: detected capacity change from 0 to 32768 [ 184.043870][ T7801] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.800 (7801) [ 184.079059][ T7801] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 184.121610][ T7801] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 184.165904][ T7801] BTRFS info (device loop3): using free space tree [ 184.246133][ T7801] BTRFS info (device loop3): enabling ssd optimizations [ 184.283119][ T7801] BTRFS info (device loop3): auto enabling async discard [ 184.635705][ T5766] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.038114][ T7857] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 185.038114][ T7857] program syz.0.819 not setting count and/or reply_len properly [ 185.249562][ T7823] loop2: detected capacity change from 0 to 32768 [ 185.433394][ T7863] netlink: 13 bytes leftover after parsing attributes in process `syz.3.821'. [ 185.606097][ T7849] loop1: detected capacity change from 0 to 32768 [ 185.651992][ T7849] blkno = 8ed2c, nblocks = 1 [ 185.657492][ T7849] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 185.657492][ T7849] [ 185.694832][ T7849] ERROR: (device loop1): remounting filesystem as read-only [ 185.702315][ T7849] ialloc: diAlloc returned -17! [ 186.269418][ T7870] tmpfs: Cannot change global quota limit on remount [ 186.269529][ T7861] loop0: detected capacity change from 0 to 32768 [ 186.368421][ T7861] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.399940][ T7883] loop3: detected capacity change from 0 to 128 [ 186.515595][ T7861] XFS (loop0): Ending clean mount [ 186.615597][ T7861] XFS (loop0): Quotacheck needed: Please wait. [ 186.749434][ T7861] XFS (loop0): Quotacheck: Done. [ 186.837280][ T7896] loop1: detected capacity change from 0 to 128 [ 186.902762][ T7896] EXT4-fs (loop1): Test dummy encryption mode enabled [ 186.950053][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.959287][ T7896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 187.016449][ T7896] System zones: 1-3, 19-19, 35-36 [ 187.062348][ T7896] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 187.106678][ T7901] loop3: detected capacity change from 0 to 8 [ 187.113494][ T7896] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.169654][ T7901] SQUASHFS error: lzo decompression failed, data probably corrupt [ 187.190565][ T7896] EXT4-fs: user quota file already specified [ 187.207836][ T7901] SQUASHFS error: Failed to read block 0x91: -5 [ 187.230292][ T7901] SQUASHFS error: Unable to read metadata cache entry [8f] [ 187.258384][ T7901] SQUASHFS error: Unable to read inode 0x7 [ 187.320881][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.665712][ T7908] loop1: detected capacity change from 0 to 64 [ 188.304181][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 188.304198][ T28] audit: type=1326 audit(1776124363.445:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ffc0000 [ 188.368026][ T28] audit: type=1326 audit(1776124363.445:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ffc0000 [ 188.417992][ T28] audit: type=1326 audit(1776124363.445:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ffc0000 [ 188.461316][ T7901] loop3: detected capacity change from 0 to 32768 [ 188.483243][ T7901] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.834 (7901) [ 188.503018][ T28] audit: type=1326 audit(1776124363.445:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ebd9c819 code=0x7ffc0000 [ 188.545316][ T7901] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 188.571930][ T7901] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 188.590117][ T28] audit: type=1326 audit(1776124363.495:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f68ebd9c819 code=0x7ffc0000 [ 188.636826][ T7901] BTRFS info (device loop3): force zlib compression, level 3 [ 188.644810][ T7901] BTRFS info (device loop3): force clearing of disk cache [ 188.662286][ T28] audit: type=1326 audit(1776124363.505:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68ebd5d04e code=0x7ffc0000 [ 188.692782][ T7901] BTRFS info (device loop3): setting nodatasum [ 188.699290][ T7901] BTRFS info (device loop3): allowing degraded mounts [ 188.723012][ T7901] BTRFS info (device loop3): enabling disk space caching [ 188.735522][ T28] audit: type=1326 audit(1776124363.545:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68ebd5d04e code=0x7ffc0000 [ 188.762999][ T7901] BTRFS info (device loop3): disk space caching is enabled [ 188.830608][ T28] audit: type=1326 audit(1776124363.555:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68ebd5d04e code=0x7ffc0000 [ 188.863201][ T28] audit: type=1326 audit(1776124363.555:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68ebd5d04e code=0x7ffc0000 [ 188.950631][ T28] audit: type=1326 audit(1776124363.575:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68ebd5d04e code=0x7ffc0000 [ 188.980120][ T7910] loop0: detected capacity change from 0 to 32768 [ 189.014190][ T7910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.838 (7910) [ 189.096612][ T7910] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.189386][ T7910] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 189.202956][ T7901] BTRFS info (device loop3): auto enabling async discard [ 189.243181][ T7910] BTRFS info (device loop0): max_inline at 6 [ 189.254614][ T7901] BTRFS info (device loop3): rebuilding free space tree [ 189.292379][ T7910] BTRFS info (device loop0): enabling disk space caching [ 189.323200][ T7901] BTRFS info (device loop3): disabling free space tree [ 189.331117][ T7901] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.351787][ T7910] BTRFS info (device loop0): turning off barriers [ 189.361468][ T7901] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.377499][ T7910] BTRFS info (device loop0): disabling tree log [ 189.404505][ T7910] BTRFS info (device loop0): force clearing of disk cache [ 189.433169][ T7910] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 189.471418][ T7901] BTRFS warning (device loop3): can't set the compat_ro:1 feature bit while mounted [ 189.489860][ T7910] BTRFS info (device loop0): force lzo compression, level 0 [ 189.513613][ T7910] BTRFS info (device loop0): enabling tree log [ 189.532298][ T7910] BTRFS info (device loop0): max_inline at 0 [ 189.559565][ T7910] BTRFS info (device loop0): disk space caching is enabled [ 189.600952][ T5766] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 189.752573][ T6334] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (6334) [ 189.867013][ T7953] loop1: detected capacity change from 0 to 512 [ 189.884061][ T7910] BTRFS info (device loop0): enabling ssd optimizations [ 189.908345][ T7910] BTRFS info (device loop0): rebuilding free space tree [ 189.939640][ T7953] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.844: inode has both inline data and extents flags [ 189.979296][ T7910] BTRFS info (device loop0): disabling free space tree [ 190.017485][ T7910] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.036943][ T7953] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.844: couldn't read orphan inode 15 (err -117) [ 190.077438][ T7910] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.129715][ T7953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.339926][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.483654][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.051584][ T7974] loop3: detected capacity change from 0 to 32768 [ 192.109654][ T7974] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 192.455019][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 193.000975][ T8006] loop1: detected capacity change from 0 to 1024 [ 193.088930][ T8006] hfsplus: bad catalog entry type [ 193.245289][ T49] hfsplus: b-tree write err: -5, ino 25 [ 193.261425][ T49] hfsplus: b-tree write err: -5, ino 4 [ 193.301932][ T49] hfsplus: b-tree write err: -5, ino 2 [ 193.619798][ T8008] loop1: detected capacity change from 0 to 4096 [ 193.648405][ T8008] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 193.725453][ T7999] loop3: detected capacity change from 0 to 40427 [ 193.738674][ T7999] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 193.749120][ T7999] F2FS-fs (loop3): invalid crc value [ 193.792535][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.801005][ T7999] F2FS-fs (loop3): Found nat_bits in checkpoint [ 193.967701][ T7999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.988915][ T8008] overlayfs: upper fs does not support tmpfile. [ 194.019947][ T8008] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 194.082185][ T8004] loop0: detected capacity change from 0 to 32768 [ 194.309028][ T27] IPVS: starting estimator thread 0... [ 194.403042][ T8014] IPVS: using max 18 ests per chain, 43200 per kthread [ 194.688987][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.696559][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.424353][ T8034] loop1: detected capacity change from 0 to 4096 [ 195.550732][ T8038] netlink: 'syz.0.879': attribute type 8 has an invalid length. [ 195.605887][ T8034] ntfs3: loop1: failed to convert "0000" to iso8859-6 [ 195.631712][ T8034] ntfs3: loop1: failed to convert "0030" to iso8859-6 [ 195.680196][ T8034] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 195.714633][ T8034] ntfs3: loop1: failed to convert name for inode 1e. [ 195.721526][ T8034] ntfs3: loop1: failed to convert "0032" to iso8859-6 [ 195.746971][ T8034] ntfs3: loop1: failed to convert "0033" to iso8859-6 [ 195.761360][ T8040] loop0: detected capacity change from 0 to 512 [ 195.852086][ T8040] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 195.909137][ T8040] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.957061][ T8040] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #4: comm syz.0.880: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 196.007559][ T8040] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.880: Bad quota inode: 4, type: 1 [ 196.044391][ T8040] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.093183][ T8040] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 196.118059][ T7894] Set syz1 is full, maxelem 65536 reached [ 196.129762][ T8040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.223697][ T8040] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 196.281854][ T8040] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #4: comm syz.0.880: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 196.328936][ T8040] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.880: Bad quota inode: 4, type: 1 [ 196.368046][ T8040] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.423144][ T8031] loop3: detected capacity change from 0 to 40427 [ 196.451227][ T8031] F2FS-fs (loop3): invalid crc value [ 196.459399][ T8031] F2FS-fs (loop3): Found nat_bits in checkpoint [ 196.584857][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.598679][ T8031] F2FS-fs (loop3): Start checkpoint disabled! [ 196.610887][ T8051] loop2: detected capacity change from 0 to 4096 [ 196.625229][ T8051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.684060][ T8031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 196.749057][ T8051] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 196.891897][ T8051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.954457][ T8062] loop1: detected capacity change from 0 to 256 [ 197.091506][ T8062] FAT-fs (loop1): Directory bread(block 64) failed [ 197.109209][ T8062] FAT-fs (loop1): Directory bread(block 65) failed [ 197.144910][ T8062] FAT-fs (loop1): Directory bread(block 66) failed [ 197.169903][ T8062] FAT-fs (loop1): Directory bread(block 67) failed [ 197.187380][ T8062] FAT-fs (loop1): Directory bread(block 68) failed [ 197.208317][ T8062] FAT-fs (loop1): Directory bread(block 69) failed [ 197.242631][ T12] kworker/u4:1: attempt to access beyond end of device [ 197.242631][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 197.274585][ T8062] FAT-fs (loop1): Directory bread(block 70) failed [ 197.281222][ T8062] FAT-fs (loop1): Directory bread(block 71) failed [ 197.297902][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 197.320437][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 197.333124][ T8062] FAT-fs (loop1): Directory bread(block 72) failed [ 197.378811][ T8062] FAT-fs (loop1): Directory bread(block 73) failed [ 197.486180][ T8068] loop0: detected capacity change from 0 to 64 [ 197.556196][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.845660][ T8072] loop1: detected capacity change from 0 to 2048 [ 197.899466][ T8074] loop2: detected capacity change from 0 to 2048 [ 197.911943][ T8072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.970049][ T8074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.040889][ T8074] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.218611][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.269451][ T5830] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 198.467452][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 198.488694][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.502159][ T8088] batadv0: entered promiscuous mode [ 198.520528][ T8088] macvtap1: entered promiscuous mode [ 198.526732][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.537003][ T8088] macvtap1: entered allmulticast mode [ 198.545452][ T5830] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 198.554805][ T8088] batadv0: entered allmulticast mode [ 198.561989][ T8088] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 198.569788][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.596755][ T8088] batadv0: left allmulticast mode [ 198.602110][ T8088] batadv0: left promiscuous mode [ 198.609939][ T8092] loop2: detected capacity change from 0 to 64 [ 198.612815][ T5830] usb 1-1: config 0 descriptor?? [ 198.864536][ T8096] Bluetooth: MGMT ver 1.22 [ 199.019813][ T8098] loop2: detected capacity change from 0 to 2048 [ 199.071491][ T5830] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 199.104140][ T8098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.241051][ T5830] corsair 0003:1B1C:1B02.000C: Failed to get K90 initial state (error -71). [ 199.325211][ T5830] usb 1-1: USB disconnect, device number 8 [ 199.389886][ T8103] fido_id[8103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 199.916064][ T8100] loop1: detected capacity change from 0 to 32768 [ 199.933984][ T8100] XFS: attr2 mount option is deprecated. [ 200.014648][ T8100] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.028039][ T8117] ALSA: mixer_oss: invalid OSS volume 'GAIĆ' [ 200.115106][ T8110] loop3: detected capacity change from 0 to 32768 [ 200.141808][ T8100] XFS (loop1): Ending clean mount [ 200.178455][ T8100] XFS (loop1): Quotacheck needed: Please wait. [ 200.214448][ T8110] ERROR: (device loop3): dtSearch: stack overrun! [ 200.214448][ T8110] [ 200.258566][ T8110] ERROR: (device loop3): remounting filesystem as read-only [ 200.283227][ T8110] btstack dump: [ 200.322247][ T8110] bn = 0, index = 0 [ 200.342599][ T8100] XFS (loop1): Quotacheck: Done. [ 200.344207][ T8110] bn = 72c, index = 96 [ 200.352018][ T8110] bn = 0, index = 0 [ 200.362950][ T8110] bn = 72c, index = 96 [ 200.393078][ T8110] bn = 0, index = 0 [ 200.413126][ T8110] bn = 72c, index = 96 [ 200.428249][ T8110] bn = 0, index = 0 [ 200.453038][ T8110] bn = 0, index = 0 [ 200.593634][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.683589][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 200.727865][ T8134] team0: Device vlan2 is already an upper device of the team interface [ 200.948936][ T8138] loop0: detected capacity change from 0 to 8 [ 201.175508][ T8142] loop2: detected capacity change from 0 to 512 [ 201.239208][ T8142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.309986][ T8142] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.357084][ T8147] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 93 vs 96 free clusters [ 201.427729][ T8142] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.923: corrupted inode contents [ 201.454478][ T8147] EXT4-fs (loop2): Remounting filesystem read-only [ 201.479955][ T8142] EXT4-fs (loop2): Remounting filesystem read-only [ 201.595324][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.623272][ T1313] __quota_error: 83 callbacks suppressed [ 201.623289][ T1313] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 201.817736][ T8154] loop3: detected capacity change from 0 to 256 [ 201.848429][ T8154] exfat: Deprecated parameter 'utf8' [ 201.897173][ T8154] exfat: Deprecated parameter 'utf8' [ 201.927990][ T8154] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 202.364315][ T8] kernel write not supported for file /amidi2 (pid: 8 comm: kworker/0:0) [ 202.564877][ T8171] set_capacity_and_notify: 1 callbacks suppressed [ 202.564895][ T8171] loop3: detected capacity change from 0 to 1024 [ 202.620321][ T8171] EXT4-fs: Ignoring removed orlov option [ 202.655402][ T8171] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 202.710574][ T8171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.944255][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.521400][ T8202] loop2: detected capacity change from 0 to 512 [ 203.649331][ T8202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.677033][ T8189] loop1: detected capacity change from 0 to 32768 [ 203.701803][ T8189] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 203.747384][ T8202] ext4 filesystem being mounted at /226/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.837741][ T8202] EXT4-fs error (device loop2): ext4_get_first_dir_block:3584: inode #12: comm syz.2.947: Attempting to read directory block (0) that is past i_size (3) [ 203.926353][ T8208] loop3: detected capacity change from 0 to 128 [ 203.969343][ T5759] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 203.989263][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.087674][ T8208] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 204.148469][ T8208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.188276][ T8196] loop0: detected capacity change from 0 to 32768 [ 204.271875][ T8196] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.411686][ T8196] XFS (loop0): Ending clean mount [ 204.449242][ T5805] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 204.479718][ T5805] XFS (loop0): Unmount and run xfs_repair [ 204.507533][ T5805] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 204.522626][ T5805] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 204.532535][ T5805] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 204.546610][ T5805] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 204.556753][ T5805] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 204.566315][ T5805] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 204.590864][ T5805] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.608538][ T5805] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 204.628162][ T5805] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.642357][ T8196] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 204.659888][ T8196] XFS (loop0): Failed to initialize disk quotas. [ 204.751550][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.163560][ T8230] loop3: detected capacity change from 0 to 1024 [ 205.191784][ T8230] EXT4-fs: Ignoring removed bh option [ 205.247364][ T8230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.254575][ T8234] loop0: detected capacity change from 0 to 1024 [ 205.415197][ T8242] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 205.474879][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.719428][ T8248] tipc: Enabling of bearer rejected, failed to enable media [ 205.804372][ T8252] loop0: detected capacity change from 0 to 512 [ 205.830039][ T8252] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.965: invalid block [ 205.962249][ T8252] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.965: invalid indirect mapped block 10 (level 1) [ 206.048432][ T8252] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.965: invalid indirect mapped block 8 (level 1) [ 206.101297][ T8252] EXT4-fs (loop0): 1 truncate cleaned up [ 206.148356][ T8252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.314707][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.699470][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 207.143281][ T5805] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 207.204404][ T8297] loop2: detected capacity change from 0 to 512 [ 207.235614][ T8297] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 207.277144][ T8297] EXT4-fs (loop2): invalid journal inode [ 207.293283][ T8297] EXT4-fs (loop2): can't get journal size [ 207.340399][ T8297] EXT4-fs (loop2): 1 truncate cleaned up [ 207.353137][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 207.358703][ T8297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.364769][ T8301] loop0: detected capacity change from 0 to 4096 [ 207.384780][ T5805] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.394901][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.403354][ T5805] usb 2-1: Product: syz [ 207.407936][ T5805] usb 2-1: Manufacturer: syz [ 207.412933][ T5805] usb 2-1: SerialNumber: syz [ 207.428997][ T8297] EXT4-fs warning (device loop2): ext4_group_extend:1892: will only finish group (8193 blocks, 7937 new) [ 207.444881][ T8297] EXT4-fs warning (device loop2): ext4_group_extend:1897: can't read last block, resize aborted [ 207.456834][ T5805] usb 2-1: config 0 descriptor?? [ 207.471362][ T8301] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 207.545766][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.663906][ T8301] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 207.685554][ T5805] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.097525][ T5805] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 208.118055][ T5805] usb 2-1: USB disconnect, device number 8 [ 208.148682][ T8299] loop3: detected capacity change from 0 to 32768 [ 208.283856][ T8316] loop0: detected capacity change from 0 to 64 [ 208.322515][ T8316] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 209.002217][ T8331] loop3: detected capacity change from 0 to 512 [ 209.076739][ T8331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 209.089507][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.115620][ T8331] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.180011][ T8315] loop2: detected capacity change from 0 to 40427 [ 209.202047][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1002'. [ 209.219377][ T8315] F2FS-fs (loop2): invalid crc value [ 209.234142][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 209.249096][ T8315] F2FS-fs (loop2): Found nat_bits in checkpoint [ 209.284995][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 209.329890][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.352992][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 209.400433][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 209.431146][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.432546][ T8315] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 209.463798][ T8] usb 2-1: Product: syz [ 209.468228][ T8] usb 2-1: Manufacturer: syz [ 209.501434][ T8] usb 2-1: SerialNumber: syz [ 209.508211][ T8344] loop3: detected capacity change from 0 to 512 [ 209.537277][ T8] usb 2-1: config 0 descriptor?? [ 209.590767][ T8] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 209.597780][ T8344] EXT4-fs (loop3): 1 truncate cleaned up [ 209.597935][ T8] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 209.634319][ T8344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.729414][ T5767] syz-executor: attempt to access beyond end of device [ 209.729414][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.744228][ T8] mcba_usb: probe of 2-1:0.0 failed with error -90 [ 209.779890][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 209.802304][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.813811][ T8] usb 2-1: USB disconnect, device number 9 [ 209.904701][ T8348] loop0: detected capacity change from 0 to 164 [ 209.942203][ T8348] Unable to read rock-ridge attributes [ 209.973833][ T8348] Unable to read rock-ridge attributes [ 210.834946][ T8367] loop1: detected capacity change from 0 to 1024 [ 211.160357][ T49] hfsplus: b-tree write err: -5, ino 25 [ 211.166747][ T49] hfsplus: b-tree write err: -5, ino 4 [ 211.172606][ T49] hfsplus: b-tree write err: -5, ino 2 [ 211.364090][ T28] audit: type=1326 audit(1776124386.505:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3579c819 code=0x7ffc0000 [ 211.433012][ T28] audit: type=1326 audit(1776124386.525:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3579c819 code=0x7ffc0000 [ 211.434553][ T8381] process 'syz.1.1017' launched './file0' with NULL argv: empty string added [ 211.503134][ T28] audit: type=1326 audit(1776124386.535:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9f3579c819 code=0x7ffc0000 [ 211.602334][ T28] audit: type=1326 audit(1776124386.555:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3579c819 code=0x7ffc0000 [ 211.669574][ T28] audit: type=1326 audit(1776124386.565:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9f3579c819 code=0x7ffc0000 [ 211.759197][ T8389] loop2: detected capacity change from 0 to 512 [ 211.795902][ T28] audit: type=1326 audit(1776124386.565:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3579c819 code=0x7ffc0000 [ 211.824439][ T28] audit: type=1326 audit(1776124386.565:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3579c819 code=0x7ffc0000 [ 211.900974][ T8389] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 211.923963][ T8389] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.1024: corrupted in-inode xattr: e_value size too large [ 212.024434][ T8389] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1024: couldn't read orphan inode 15 (err -117) [ 212.066214][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 212.076589][ T8389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.206666][ T8397] loop1: detected capacity change from 0 to 4096 [ 212.239768][ T8397] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 212.283096][ T8397] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 212.305931][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.368374][ T8397] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 212.385616][ T8397] ntfs: volume version 3.1. [ 212.692999][ T5805] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.848641][ T8410] vivid-007: ================= START STATUS ================= [ 212.868413][ T8410] vivid-007: Enable Output Cropping: true grabbed [ 212.878815][ T8410] vivid-007: Enable Output Composing: true grabbed [ 212.885885][ T8410] vivid-007: Enable Output Scaler: true grabbed [ 212.892449][ T8410] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 212.900071][ T5805] usb 1-1: Using ep0 maxpacket: 16 [ 212.922488][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.938330][ T8410] vivid-007: Transmit Mode: HDMI grabbed [ 212.949030][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.960778][ T8410] vivid-007: Display Present: true inactive [ 212.974362][ T8410] vivid-007: Hotplug Present: 0x00000001 [ 212.981830][ T5805] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 212.996518][ T8410] vivid-007: RxSense Present: 0x00000001 [ 213.009144][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.018882][ T8410] vivid-007: EDID Present: 0x00000001 [ 213.031128][ T8410] vivid-007: ================== END STATUS ================== [ 213.063799][ T5805] usb 1-1: config 0 descriptor?? [ 213.180846][ T8415] loop2: detected capacity change from 0 to 512 [ 213.228228][ T8415] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.280967][ T8415] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1035: bad orphan inode 131083 [ 213.311251][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.325817][ T8418] loop1: detected capacity change from 0 to 512 [ 213.348253][ T8418] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.487068][ T5805] bigben 0003:146B:0902.000D: unexpected rdesc, please submit for review [ 213.528505][ T5805] bigben 0003:146B:0902.000D: unknown main item tag 0x0 [ 213.529339][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.550140][ T5805] bigben 0003:146B:0902.000D: unknown main item tag 0x0 [ 213.574412][ T5805] bigben 0003:146B:0902.000D: unknown main item tag 0x0 [ 213.592946][ T5805] bigben 0003:146B:0902.000D: unknown main item tag 0x0 [ 213.600310][ T5805] bigben 0003:146B:0902.000D: item fetching failed at offset 4/5 [ 213.639132][ T5805] bigben 0003:146B:0902.000D: parse failed [ 213.647892][ T5805] bigben: probe of 0003:146B:0902.000D failed with error -22 [ 213.692824][ T1188] usb 1-1: USB disconnect, device number 9 [ 213.770331][ T8422] loop2: detected capacity change from 0 to 512 [ 213.790313][ T8422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.810449][ T8422] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1037: invalid indirect mapped block 9 (level 0) [ 213.840272][ T8422] EXT4-fs (loop2): 1 truncate cleaned up [ 213.885250][ T8422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.014992][ T8422] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.037358][ T8422] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 214.124075][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.358523][ T8431] batadv0: entered promiscuous mode [ 214.384424][ T8431] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 214.419970][ T8431] batadv0: left promiscuous mode [ 214.932984][ T5756] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.129190][ T5756] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 215.151740][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.168705][ T5756] usb 4-1: Product: syz [ 215.186038][ T5756] usb 4-1: Manufacturer: syz [ 215.196313][ T5756] usb 4-1: SerialNumber: syz [ 215.220078][ T5756] usb 4-1: config 0 descriptor?? [ 215.247448][ T5756] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 215.689581][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 215.860038][ T5756] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 215.886327][ T5756] sq905c: probe of 4-1:0.0 failed with error -71 [ 215.900416][ T5756] usb 4-1: USB disconnect, device number 11 [ 216.518098][ T8489] loop3: detected capacity change from 0 to 1024 [ 216.667907][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 216.667924][ T28] audit: type=1800 audit(1776124391.805:208): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1069" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 216.732656][ T8495] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 216.772092][ T8495] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 216.931876][ T8497] loop1: detected capacity change from 0 to 64 [ 216.987209][ T8500] loop2: detected capacity change from 0 to 64 [ 217.278226][ T8505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1077'. [ 217.296703][ T8485] loop0: detected capacity change from 0 to 32768 [ 217.348843][ T8485] [ 217.348843][ T8485] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.348843][ T8485] [ 217.435220][ T8485] read_mapping_page failed! [ 217.440493][ T8485] ERROR: (device loop0): txCommit: [ 217.440493][ T8485] [ 217.615706][ T5769] [ 217.615706][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.615706][ T5769] [ 217.660984][ T5769] [ 217.660984][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.660984][ T5769] [ 217.758812][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 217.803086][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1085'. [ 218.209050][ T8533] dccp_invalid_packet: P.Data Offset(4) too small [ 218.628391][ T8538] loop1: detected capacity change from 0 to 32768 [ 218.662991][ T8538] JBD2: Ignoring recovery information on journal [ 218.671342][ T8538] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 218.680243][ T8538] JBD2: bad block at offset 32 [ 218.724978][ T8538] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 218.955179][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 219.594138][ T5805] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.623026][ T8545] loop0: detected capacity change from 0 to 32768 [ 219.655556][ T8545] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1096 (8545) [ 219.693635][ T8545] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 219.706469][ T8545] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 219.717208][ T8545] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 219.729201][ T8545] BTRFS info (device loop0): use zstd compression, level 3 [ 219.737562][ T8545] BTRFS info (device loop0): using free space tree [ 219.796976][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 219.805909][ T8545] BTRFS info (device loop0): enabling ssd optimizations [ 219.810667][ T5805] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 219.823043][ T8545] BTRFS info (device loop0): auto enabling async discard [ 219.844206][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.896028][ T5805] usb 3-1: config 0 descriptor?? [ 219.940453][ T5805] as10x_usb: device has been detected [ 219.946501][ T5808] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 219.978201][ T5805] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 220.046708][ T5805] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 220.068987][ T8559] loop3: detected capacity change from 0 to 32768 [ 220.108334][ T8561] ------------[ cut here ]------------ [ 220.113957][ T8561] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 220.116645][ T5769] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 220.128911][ T8561] WARNING: CPU: 1 PID: 8561 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 220.142588][ T8561] Modules linked in: [ 220.146635][ T8561] CPU: 1 PID: 8561 Comm: syz.2.1103 Not tainted syzkaller #0 [ 220.154235][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.164454][ T8561] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 220.169930][ T8561] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 44 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb d2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 220.191260][ T8561] RSP: 0018:ffffc900197e7aa0 EFLAGS: 00010246 [ 220.197876][ T8561] RAX: 4b0c7193e0d1e900 RBX: ffff88807f924ce0 RCX: 0000000000080000 [ 220.206117][ T8561] RDX: ffffc9000d23b000 RSI: 0000000000002d7f RDI: 0000000000002d80 [ 220.214201][ T8561] RBP: ffffc900197e7bf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 220.222343][ T8561] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 220.230420][ T8561] R13: 1ffff920032fcf64 R14: dffffc0000000000 R15: 0000000000000000 [ 220.238550][ T8561] FS: 00007f9f366f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 220.247627][ T8561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.254570][ T8561] CR2: 0000563c678635f8 CR3: 000000002e547000 CR4: 00000000003506e0 [ 220.262617][ T8561] Call Trace: [ 220.272637][ T8561] [ 220.278685][ T8561] ? trace_contention_end+0x39/0xe0 [ 220.284107][ T8561] ? __mutex_lock+0x315/0xcc0 [ 220.288866][ T8561] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 220.294812][ T8561] ? mutex_lock_nested+0x20/0x20 [ 220.299851][ T8561] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 220.305619][ T8561] ? dmx_section_feed_start_filtering+0x55/0x690 [ 220.312036][ T8561] ? mutex_lock_nested+0x20/0x20 [ 220.317349][ T8561] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 220.323449][ T8561] ? lock_chain_count+0x20/0x20 [ 220.328485][ T8561] ? _raw_spin_lock_irq+0xbb/0xf0 [ 220.333827][ T8561] as102_dvb_dmx_start_feed+0x70/0x280 [ 220.339661][ T8561] dmx_section_feed_start_filtering+0x4f5/0x690 [ 220.346269][ T8561] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 220.351985][ T8561] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 220.357559][ T8561] dvb_demux_do_ioctl+0x467/0x530 [ 220.362659][ T8561] dvb_usercopy+0x195/0x2b0 [ 220.367315][ T8561] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 220.372995][ T8561] ? dvb_generic_ioctl+0xb0/0xb0 [ 220.379100][ T8561] ? dvb_demux_poll+0x220/0x220 [ 220.384179][ T8561] dvb_demux_ioctl+0x29/0x30 [ 220.388846][ T8561] __se_sys_ioctl+0xfd/0x170 [ 220.393555][ T8561] do_syscall_64+0x55/0xa0 [ 220.398042][ T8561] ? clear_bhb_loop+0x40/0x90 [ 220.403167][ T8561] ? clear_bhb_loop+0x40/0x90 [ 220.408030][ T8561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.414116][ T8561] RIP: 0033:0x7f9f3579c819 [ 220.418601][ T8561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.439106][ T8561] RSP: 002b:00007f9f366f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.447669][ T8561] RAX: ffffffffffffffda RBX: 00007f9f35a15fa0 RCX: 00007f9f3579c819 [ 220.455956][ T8561] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 220.464074][ T8561] RBP: 00007f9f35832c91 R08: 0000000000000000 R09: 0000000000000000 [ 220.472533][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.481715][ T8561] R13: 00007f9f35a16038 R14: 00007f9f35a15fa0 R15: 00007fff79552c78 [ 220.489943][ T8561] [ 220.493133][ T8561] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.500514][ T8561] CPU: 1 PID: 8561 Comm: syz.2.1103 Not tainted syzkaller #0 [ 220.504661][ T8559] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.516818][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.527109][ T8561] Call Trace: [ 220.530444][ T8561] [ 220.533499][ T8561] dump_stack_lvl+0x18c/0x250 [ 220.538333][ T8561] ? show_regs_print_info+0x20/0x20 [ 220.543947][ T8561] ? load_image+0x420/0x420 [ 220.548526][ T8561] panic+0x2dc/0x730 [ 220.552566][ T8561] ? bpf_jit_dump+0xd0/0xd0 [ 220.557115][ T8561] __warn+0x2e0/0x470 [ 220.561129][ T8561] ? __mutex_lock+0xb85/0xcc0 [ 220.565833][ T8561] ? __mutex_lock+0xb85/0xcc0 [ 220.570589][ T8561] report_bug+0x2be/0x4f0 [ 220.575033][ T8561] ? __mutex_lock+0xb85/0xcc0 [ 220.579735][ T8561] ? __mutex_lock+0xb85/0xcc0 [ 220.584703][ T8561] ? __mutex_lock+0xb87/0xcc0 [ 220.589418][ T8561] handle_bug+0xcf/0x120 [ 220.593716][ T8561] exc_invalid_op+0x1a/0x50 [ 220.598258][ T8561] asm_exc_invalid_op+0x1a/0x20 [ 220.603259][ T8561] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 220.608821][ T8561] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 44 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb d2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 220.629088][ T8561] RSP: 0018:ffffc900197e7aa0 EFLAGS: 00010246 [ 220.635212][ T8561] RAX: 4b0c7193e0d1e900 RBX: ffff88807f924ce0 RCX: 0000000000080000 [ 220.643307][ T8561] RDX: ffffc9000d23b000 RSI: 0000000000002d7f RDI: 0000000000002d80 [ 220.651426][ T8561] RBP: ffffc900197e7bf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 220.659429][ T8561] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 220.667428][ T8561] R13: 1ffff920032fcf64 R14: dffffc0000000000 R15: 0000000000000000 [ 220.675536][ T8561] ? trace_contention_end+0x39/0xe0 [ 220.680797][ T8561] ? __mutex_lock+0x315/0xcc0 [ 220.685724][ T8561] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 220.691558][ T8561] ? mutex_lock_nested+0x20/0x20 [ 220.696551][ T8561] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 220.702335][ T8561] ? dmx_section_feed_start_filtering+0x55/0x690 [ 220.708720][ T8561] ? mutex_lock_nested+0x20/0x20 [ 220.713700][ T8561] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 220.719914][ T8561] ? lock_chain_count+0x20/0x20 [ 220.724819][ T8561] ? _raw_spin_lock_irq+0xbb/0xf0 [ 220.729901][ T8561] as102_dvb_dmx_start_feed+0x70/0x280 [ 220.735492][ T8561] dmx_section_feed_start_filtering+0x4f5/0x690 [ 220.741786][ T8561] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 220.747532][ T8561] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 220.753037][ T8561] dvb_demux_do_ioctl+0x467/0x530 [ 220.758163][ T8561] dvb_usercopy+0x195/0x2b0 [ 220.762716][ T8561] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 220.768426][ T8561] ? dvb_generic_ioctl+0xb0/0xb0 [ 220.773511][ T8561] ? dvb_demux_poll+0x220/0x220 [ 220.778500][ T8561] dvb_demux_ioctl+0x29/0x30 [ 220.783408][ T8561] __se_sys_ioctl+0xfd/0x170 [ 220.788382][ T8561] do_syscall_64+0x55/0xa0 [ 220.792934][ T8561] ? clear_bhb_loop+0x40/0x90 [ 220.797671][ T8561] ? clear_bhb_loop+0x40/0x90 [ 220.802490][ T8561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.808432][ T8561] RIP: 0033:0x7f9f3579c819 [ 220.812985][ T8561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.833164][ T8561] RSP: 002b:00007f9f366f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.841850][ T8561] RAX: ffffffffffffffda RBX: 00007f9f35a15fa0 RCX: 00007f9f3579c819 [ 220.849884][ T8561] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 220.858073][ T8561] RBP: 00007f9f35832c91 R08: 0000000000000000 R09: 0000000000000000 [ 220.866262][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.874383][ T8561] R13: 00007f9f35a16038 R14: 00007f9f35a15fa0 R15: 00007fff79552c78 [ 220.882410][ T8561] [ 220.886042][ T8561] Kernel Offset: disabled [ 220.890392][ T8561] Rebooting in 86400 seconds..