last executing test programs: 59.448068596s ago: executing program 1 (id=255): syz_usb_connect$cdc_ncm(0x6, 0x93, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000002505a1a4400091a45891fe010203010902810002010420040904000001020d0000059ca7d0069fcf134d2e2406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005a607c0ffcb7e392a0424020509058103000258057f0904010000020d00000904010102"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 57.154439756s ago: executing program 1 (id=269): prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xe8\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd current cno (= 3) [ 120.849468][ T5988] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 120.901945][ T5988] Remounting filesystem read-only [ 120.952472][ T5827] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 120.998871][ T24] usb 5-1: USB disconnect, device number 2 [ 121.081417][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28'. [ 121.653282][ T6007] Bluetooth: MGMT ver 1.23 [ 121.689196][ T6005] sp0: Synchronizing with TNC [ 121.745516][ T6002] [U] [ 121.839479][ T6010] loop1: detected capacity change from 0 to 256 [ 122.082126][ T6010] FAT-fs (loop1): Directory bread(block 64) failed [ 122.118895][ T6010] FAT-fs (loop1): Directory bread(block 65) failed [ 122.159000][ T6010] FAT-fs (loop1): Directory bread(block 66) failed [ 122.192993][ T6010] FAT-fs (loop1): Directory bread(block 67) failed [ 122.213135][ T6010] FAT-fs (loop1): Directory bread(block 68) failed [ 122.248287][ T6010] FAT-fs (loop1): Directory bread(block 69) failed [ 122.282527][ T6010] FAT-fs (loop1): Directory bread(block 70) failed [ 122.323017][ T6010] FAT-fs (loop1): Directory bread(block 71) failed [ 122.380519][ T6010] FAT-fs (loop1): Directory bread(block 72) failed [ 122.413382][ T6010] FAT-fs (loop1): Directory bread(block 73) failed [ 122.549979][ T6027] netlink: 'syz.3.42': attribute type 8 has an invalid length. [ 122.591193][ T6027] netlink: 'syz.3.42': attribute type 3 has an invalid length. [ 122.618288][ T6027] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.42'. [ 122.813015][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.003611][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 123.022132][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 123.118859][ T9] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 123.144731][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.183003][ T9] usb 6-1: Product: syz [ 123.206769][ T9] usb 6-1: Manufacturer: syz [ 123.232427][ T9] usb 6-1: SerialNumber: syz [ 123.249980][ T9] usb 6-1: config 0 descriptor?? [ 123.287081][ T6029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 123.292276][ T30] audit: type=1326 audit(1748390506.688:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.0.50" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95ec58e969 code=0x0 [ 123.380358][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.616471][ T9] usb 6-1: USB disconnect, device number 2 [ 123.633297][ T5888] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.768115][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.803117][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 123.828723][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.873891][ T6060] loop3: detected capacity change from 0 to 256 [ 123.878920][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.902043][ T6061] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.902043][ T6061] program syz.1.56 not setting count and/or reply_len properly [ 123.917418][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 123.966949][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.015933][ T6060] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 124.032863][ T5888] usb 5-1: config 0 descriptor?? [ 124.157437][ T6063] loop2: detected capacity change from 0 to 16 [ 124.181202][ T6063] ======================================================= [ 124.181202][ T6063] WARNING: The mand mount option has been deprecated and [ 124.181202][ T6063] and is ignored by this kernel. Remove the mand [ 124.181202][ T6063] option from the mount to silence this warning. [ 124.181202][ T6063] ======================================================= [ 124.308686][ T6063] erofs (device loop2): mounted with root inode @ nid 36. [ 124.346668][ T5838] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 124.367248][ T5838] Bluetooth: hci2: Injecting HCI hardware error event [ 124.376071][ T5838] Bluetooth: hci2: hardware error 0x00 [ 124.540197][ T5888] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 124.548252][ T30] audit: type=1800 audit(1748390507.978:4): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.58" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 124.570456][ T5888] koneplus 0003:1E7D:2D51.0002: unbalanced collection at end of report description [ 124.595013][ T5888] koneplus 0003:1E7D:2D51.0002: parse failed [ 124.604212][ T5888] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -22 [ 124.762093][ T6071] mmap: syz.3.61 (6071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.847695][ T5891] usb 5-1: USB disconnect, device number 3 [ 125.095904][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 125.128502][ T6081] tipc: Enabling of bearer rejected, media not registered [ 125.262303][ T6085] netlink: 96 bytes leftover after parsing attributes in process `syz.5.69'. [ 125.284716][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.69'. [ 125.364334][ T6085] vlan2: entered allmulticast mode [ 125.369689][ T6085] gretap0: entered allmulticast mode [ 125.563082][ T5888] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.733087][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 125.758984][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 125.771182][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 125.780496][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.833454][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.912517][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.971862][ T5888] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 126.002985][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.021009][ T6097] loop0: detected capacity change from 0 to 4096 [ 126.050424][ T5888] usb 3-1: Product: syz [ 126.065542][ T5888] usb 3-1: Manufacturer: syz [ 126.070217][ T5888] usb 3-1: SerialNumber: syz [ 126.088109][ T6104] loop5: detected capacity change from 0 to 64 [ 126.109279][ T6097] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 126.120847][ T5888] usb 3-1: config 0 descriptor?? [ 126.152371][ T6088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.241155][ T6097] ntfs3(loop0): ino=1a, mi_enum_attr [ 126.279033][ T6097] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 126.421833][ T5888] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 126.492635][ T5888] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 126.663097][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 126.803563][ T61] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22. [ 127.106941][ C1] powermate: config urb returned -71 [ 127.112648][ C1] powermate: config urb returned -71 [ 127.118297][ C1] powermate: config urb returned -71 [ 127.124667][ T5888] usb 3-1: USB disconnect, device number 4 [ 127.130541][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 127.873596][ T6136] capability: warning: `syz.1.90' uses 32-bit capabilities (legacy support in use) [ 128.141629][ T6140] loop0: detected capacity change from 0 to 4096 [ 128.166866][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 128.207491][ T6140] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 128.434807][ T6152] loop3: detected capacity change from 0 to 256 [ 128.442216][ T6152] exfat: Deprecated parameter 'utf8' [ 128.455063][ T6140] ntfs3(loop0): ino=19, mi_enum_attr [ 128.460427][ T6140] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 128.482974][ T6152] exfat: Deprecated parameter 'namecase' [ 128.483141][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 128.488686][ T6152] exfat: Deprecated parameter 'utf8' [ 128.619781][ T6152] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 128.643723][ T6140] ntfs3(loop0): failed to convert "c46c" to iso8859-13 [ 128.655193][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 128.693062][ T6140] ntfs3(loop0): ino=20, mi_enum_attr [ 128.723113][ T6153] Zero length message leads to an empty skb [ 129.491912][ T6177] Invalid logical block size (2050) [ 129.540599][ T6178] loop3: detected capacity change from 0 to 512 [ 129.602016][ T6178] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.109: bad orphan inode 15 [ 129.630792][ T6178] ext4_test_bit(bit=14, block=18) = 1 [ 129.649512][ T6178] is_bad_inode(inode)=0 [ 129.683029][ T6178] NEXT_ORPHAN(inode)=1023 [ 129.699885][ T6178] max_ino=32 [ 129.752997][ T6178] i_nlink=0 [ 129.773365][ T6178] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.109: corrupted xattr block 19: bad e_name length [ 129.791453][ T6176] loop4: detected capacity change from 0 to 8192 [ 129.860589][ T6178] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 129.884932][ T6176] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.944244][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 129.979396][ T6178] ext4 filesystem being mounted at /16/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 130.330354][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'. [ 130.540301][ T6198] loop1: detected capacity change from 0 to 512 [ 130.562087][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 130.583508][ T6198] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.653052][ T6198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.785517][ T6198] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.867491][ T6198] EXT4-fs (loop1): 1 truncate cleaned up [ 130.917900][ T6198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.279153][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.364619][ T6212] loop2: detected capacity change from 0 to 1024 [ 131.451650][ T6212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.786530][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.835412][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.952989][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 131.997706][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.037162][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.087830][ T5891] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 132.140429][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.198865][ T5891] usb 6-1: config 0 descriptor?? [ 132.717489][ T5891] ft260 0003:0403:6030.0003: item fetching failed at offset 0/2 [ 132.746975][ T5891] ft260 0003:0403:6030.0003: failed to parse HID [ 132.763035][ T5963] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.764758][ T5891] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -22 [ 132.816904][ T6208] loop4: detected capacity change from 0 to 32768 [ 133.036913][ T5890] usb 6-1: USB disconnect, device number 3 [ 133.571011][ T6244] loop1: detected capacity change from 0 to 4096 [ 133.579893][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.614854][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.660317][ T6244] NILFS (loop1): invalid segment: Checksum error in segment payload [ 133.679604][ T5963] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 133.741364][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.753207][ T6244] NILFS (loop1): trying rollback from an earlier position [ 133.810866][ T5963] usb 3-1: config 0 descriptor?? [ 133.912944][ T6244] NILFS (loop1): recovery complete [ 133.959865][ T6249] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.192083][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.289866][ T5963] razer 0003:1532:010E.0004: ignoring exceeding usage max [ 134.376759][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 134.413390][ T5888] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 134.438431][ T5888] usb 5-1: config 0 has no interface number 0 [ 134.469518][ T5888] usb 5-1: config 0 interface 12 has no altsetting 0 [ 134.478728][ T5963] razer 0003:1532:010E.0004: failed to enable macro keys: -71 [ 134.520967][ T5888] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 134.562375][ T5963] razer 0003:1532:010E.0004: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 134.580476][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.609084][ T5888] usb 5-1: Product: syz [ 134.622978][ T5888] usb 5-1: Manufacturer: syz [ 134.627641][ T5888] usb 5-1: SerialNumber: syz [ 134.652496][ T5963] usb 3-1: USB disconnect, device number 5 [ 134.751929][ T5888] usb 5-1: config 0 descriptor?? [ 134.913939][ T6266] loop5: detected capacity change from 0 to 512 [ 134.974071][ T6266] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.038645][ T6261] fido_id[6261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 135.041765][ T6266] EXT4-fs (loop5): orphan cleanup on readonly fs [ 135.142626][ T6266] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.148: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 135.209004][ T6266] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.148: Bad quota inode: 3, type: 0 [ 135.337868][ T6266] EXT4-fs warning (device loop5): ext4_enable_quotas:7166: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 135.392276][ T6266] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 135.428823][ T5888] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 135.434168][ T6278] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 135.439440][ T6266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.463507][ T5888] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 135.470936][ T5888] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 135.484247][ T5888] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 135.495699][ T6278] netlink: 'syz.0.152': attribute type 2 has an invalid length. [ 135.502424][ T5888] usb 5-1: USB disconnect, device number 4 [ 135.547414][ T6278] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.152'. [ 135.733176][ T5992] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.789553][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.903073][ T5992] usb 2-1: Using ep0 maxpacket: 16 [ 135.941592][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.003069][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.050553][ T5992] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 136.087830][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.155792][ T5992] usb 2-1: config 0 descriptor?? [ 136.163027][ T6292] loop2: detected capacity change from 0 to 1024 [ 136.200047][ T6292] EXT4-fs: Ignoring removed nobh option [ 136.313727][ T6292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.495501][ T6292] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.160: inode #1027213879: comm syz.2.160: iget: illegal inode # [ 136.571911][ T6292] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.160: error while reading EA inode 1027213879 err=-117 [ 136.686792][ T5992] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 136.805398][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.905244][ T5890] usb 2-1: USB disconnect, device number 2 [ 137.099581][ T6309] fido_id[6309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 137.416807][ T6293] loop3: detected capacity change from 0 to 32768 [ 137.489892][ T6293] [ 137.489892][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.489892][ T6293] [ 137.611000][ T6323] loop2: detected capacity change from 0 to 1024 [ 137.674133][ T6323] EXT4-fs: Ignoring removed bh option [ 137.679706][ T6323] EXT4-fs: inline encryption not supported [ 137.761080][ T6326] loop1: detected capacity change from 0 to 256 [ 137.778689][ T6323] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.879513][ T5823] [ 137.879513][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.879513][ T5823] [ 137.880043][ T6323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 137.917906][ T6328] [U] v3f"S/4:XTzWtlW= [ 137.923996][ T6328] [U] J"e:" [ 137.935470][ T6332] loop5: detected capacity change from 0 to 16 [ 137.941716][ T5823] [ 137.941716][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.941716][ T5823] [ 138.010686][ T6326] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 138.021345][ T6332] erofs (device loop5): mounted with root inode @ nid 36. [ 138.111787][ T6323] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.172: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.204315][ T6323] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 138.242388][ T6323] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.172: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.317575][ T6323] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 138.383042][ T6323] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.172: Failed to acquire dquot type 0 [ 138.391116][ T6336] loop3: detected capacity change from 0 to 512 [ 138.459263][ T6323] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 138.528730][ T6323] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.172: mark_inode_dirty error [ 138.563455][ T6336] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 138.573227][ T6323] EXT4-fs warning (device loop2): ext4_evict_inode:261: couldn't mark inode dirty (err -117) [ 138.584122][ T6323] EXT4-fs (loop2): 1 orphan inode deleted [ 138.591963][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.607159][ T36] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.637306][ T6336] EXT4-fs warning (device loop3): ext4_block_to_path:105: block 3279945729 > max in inode 13 [ 138.663446][ T36] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 138.693060][ T6336] EXT4-fs warning (device loop3): ext4_block_to_path:105: block 3279945730 > max in inode 13 [ 138.704662][ T36] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 138.765609][ T6336] EXT4-fs (loop3): 1 truncate cleaned up [ 138.823334][ T6336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.973984][ T6336] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 139.001663][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.063757][ T5963] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.074353][ T5825] EXT4-fs error (device loop2): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.133476][ T5825] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 139.155099][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.186332][ T5825] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 139.261528][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.309446][ T5963] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 139.332241][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 139.372928][ T5963] usb 1-1: Product: syz [ 139.467507][ T5963] usb 1-1: config 0 descriptor?? [ 139.611039][ T6352] loop3: detected capacity change from 0 to 2048 [ 139.664135][ T6333] loop4: detected capacity change from 0 to 32768 [ 139.767753][ T6352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.879797][ T6333] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 139.933622][ T5963] ath6kl: Unsupported hardware version: 0x0 [ 139.961945][ T5963] ath6kl: Failed to init ath6kl core: -22 [ 139.982463][ T5963] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 140.163192][ T6341] loop5: detected capacity change from 0 to 32768 [ 140.193303][ T5888] usb 1-1: USB disconnect, device number 3 [ 140.290288][ T6341] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 140.356982][ T6341] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 140.382045][ T5824] ocfs2: Unmounting device (7,4) on (node local) [ 140.433904][ T6370] loop2: detected capacity change from 0 to 512 [ 140.524614][ T6370] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.550449][ T6374] loop1: detected capacity change from 0 to 128 [ 140.577736][ T6370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0102] [ 140.623190][ T6370] System zones: 1-12 [ 140.627536][ T6370] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.696496][ T6370] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.191: invalid indirect mapped block 12 (level 1) [ 140.807551][ T5839] ocfs2: Unmounting device (7,5) on (node local) [ 140.893071][ T6370] EXT4-fs (loop2): Remounting filesystem read-only [ 141.017423][ T6370] EXT4-fs (loop2): 1 truncate cleaned up [ 141.099370][ T6370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 141.313491][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.476327][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 141.493590][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 141.553305][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 141.589266][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 141.674070][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 141.704101][ T5891] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 141.713589][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.721929][ T5891] usb 5-1: Product: syz [ 141.745250][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.203'. [ 141.763043][ T5891] usb 5-1: Manufacturer: syz [ 141.777944][ T5891] usb 5-1: SerialNumber: syz [ 141.826007][ T5891] usb 5-1: config 0 descriptor?? [ 141.959828][ T6392] vxcan3: entered promiscuous mode [ 142.103316][ T6400] loop3: detected capacity change from 0 to 4096 [ 142.111970][ T5891] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 142.142597][ T5891] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 142.158965][ T6400] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 142.220638][ T5891] usb 5-1: USB disconnect, device number 5 [ 142.286738][ T6402] loop5: detected capacity change from 0 to 1024 [ 142.347338][ T6400] ntfs3(loop3): ino=1a, mi_enum_attr [ 142.347548][ T6402] EXT4-fs: Ignoring removed nobh option [ 142.368144][ T6400] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 142.415277][ T6400] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 142.415976][ T6402] EXT4-fs: Ignoring removed bh option [ 142.510391][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.524327][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.557044][ T6402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.631656][ T6400] [syz.3.205/6400] FS: loop3 File: /cpuacct.usage_percpu_user would truncate fibmap result [ 142.727704][ T6411] loop0: detected capacity change from 0 to 1024 [ 142.797476][ T6402] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4112: comm syz.5.206: Allocating blocks 257-513 which overlap fs metadata [ 142.875517][ T6413] loop2: detected capacity change from 0 to 1024 [ 142.884959][ T6411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.914492][ T6411] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.086558][ T6420] syz.2.211: attempt to access beyond end of device [ 143.086558][ T6420] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 143.173115][ T6420] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 143.182069][ T6420] hfsplus: unable to mark blocks free: error -5 [ 143.267764][ T6420] hfsplus: can't free extent [ 143.362148][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.411442][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.640879][ T6428] ALSA: mixer_oss: invalid index 40000 [ 143.672851][ T6426] loop3: detected capacity change from 0 to 4096 [ 143.882800][ T6435] loop0: detected capacity change from 0 to 2048 [ 143.926919][ T6435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.992987][ T6434] loop5: detected capacity change from 0 to 4096 [ 144.012006][ T6435] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 144.058894][ T6438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.118414][ T6450] loop5: detected capacity change from 0 to 4096 [ 145.228555][ T6450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.385579][ T6450] fs-verity: sha256 using implementation "sha256-x86_64" [ 145.486307][ T6454] loop2: detected capacity change from 0 to 4096 [ 145.494953][ T6450] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file! [ 145.755235][ T6436] loop1: detected capacity change from 0 to 32768 [ 145.836330][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.907720][ T6461] loop3: detected capacity change from 0 to 4096 [ 145.945891][ T6436] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 146.044015][ T6454] ntfs3(loop2): ino=5, "/" indx_read [ 146.069623][ T6454] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 146.395710][ T6470] ntfs3(loop3): failed to convert "256c" to koi8-ru [ 146.537713][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.233'. [ 146.605206][ T5827] ocfs2: Unmounting device (7,1) on (node local) [ 146.624756][ T6445] loop0: detected capacity change from 0 to 40427 [ 147.231859][ T6492] loop5: detected capacity change from 0 to 512 [ 147.409687][ T6492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.506110][ T6492] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.527576][ T6445] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.533207][ T6500] loop2: detected capacity change from 0 to 164 [ 147.674314][ T6500] ISOFS: unable to read i-node block [ 147.723082][ T6500] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 147.737245][ T6492] EXT4-fs error (device loop5): ext4_get_parent:1835: inode #11: comm syz.5.239: bad parent inode number: 1 [ 148.132765][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.309577][ T6512] loop3: detected capacity change from 0 to 1024 [ 148.451123][ T6512] hfsplus: bad catalog entry type [ 148.478060][ T6515] warning: `syz.1.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.756250][ T997] hfsplus: b-tree write err: -5, ino 4 [ 149.130435][ T6526] tipc: Failed to obtain node identity [ 149.168948][ T6526] tipc: Enabling of bearer rejected, failed to enable media [ 149.763017][ T5963] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.955300][ T5963] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.965259][ T5963] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 150.007323][ T5963] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 150.099249][ T5963] usb 2-1: config 220 has no interface number 2 [ 150.133198][ T5963] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.211719][ T5963] usb 2-1: config 220 interface 0 has no altsetting 0 [ 150.267585][ T5963] usb 2-1: config 220 interface 76 has no altsetting 0 [ 150.300536][ T5963] usb 2-1: config 220 interface 1 has no altsetting 0 [ 150.356212][ T5963] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 150.386352][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.416221][ T5963] usb 2-1: Product: syz [ 150.420473][ T5963] usb 2-1: Manufacturer: syz [ 150.443130][ T5963] usb 2-1: SerialNumber: syz [ 150.581281][ T6522] loop4: detected capacity change from 0 to 32768 [ 150.693636][ T6522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.250 (6522) [ 150.733603][ T5963] usb 2-1: selecting invalid altsetting 0 [ 150.768370][ T5963] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 150.805900][ T5963] usb 2-1: No valid video chain found. [ 150.884047][ T6522] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.907833][ T5963] usb 2-1: selecting invalid altsetting 0 [ 150.933858][ T5963] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 150.953025][ T6522] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 150.997438][ T5963] usb 2-1: USB disconnect, device number 3 [ 151.004359][ T6522] BTRFS info (device loop4): using free-space-tree [ 151.078185][ T6566] loop2: detected capacity change from 0 to 4096 [ 151.084856][ T5888] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.334073][ T5888] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 151.370126][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.493012][ T5888] usb 4-1: config 0 descriptor?? [ 151.845786][ T6522] BTRFS info (device loop4): balance: start -susage=6..0 [ 151.853034][ T30] audit: type=1326 audit(1748390535.268:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185ab8e969 code=0x7ffc0000 [ 151.853116][ T30] audit: type=1326 audit(1748390535.268:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185ab8e969 code=0x7ffc0000 [ 151.867289][ T30] audit: type=1326 audit(1748390535.288:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f185ab8d2d0 code=0x7ffc0000 [ 151.969605][ T6522] BTRFS info (device loop4): balance: ended with status: 0 [ 151.997832][ T5888] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 152.035928][ T5888] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 152.072787][ T5888] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 152.084517][ T6596] loop5: detected capacity change from 0 to 64 [ 152.111702][ T5888] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 152.132993][ T5888] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 152.141879][ T5888] creative-sb0540 0003:041E:3100.0006: No inputs registered, leaving [ 152.162481][ T30] audit: type=1326 audit(1748390535.288:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185ab8e969 code=0x7ffc0000 [ 152.270191][ T5888] creative-sb0540 0003:041E:3100.0006: hidraw0: USB HID v1.01 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 152.312315][ T30] audit: type=1326 audit(1748390535.288:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185ab8e969 code=0x7ffc0000 [ 152.386868][ T5888] usb 4-1: USB disconnect, device number 2 [ 152.403149][ T6596] hfs: walked past end of dir [ 152.524557][ T5824] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.906663][ T6602] fido_id[6602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 152.932735][ T6609] loop1: detected capacity change from 0 to 256 [ 153.189300][ T6616] loop3: detected capacity change from 0 to 16 [ 153.254533][ T6616] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 153.330444][ T6616] erofs (device loop3): mounted with root inode @ nid 36. [ 153.797962][ T6628] netlink: 'syz.0.284': attribute type 3 has an invalid length. [ 154.497649][ T6646] loop2: detected capacity change from 0 to 512 [ 154.575035][ T6646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.685173][ T6646] EXT4-fs warning (device loop2): ext4_begin_enable_verity:134: inode #15: comm syz.2.291: verity is only allowed on extent-based files [ 154.721957][ T6657] loop5: detected capacity change from 0 to 512 [ 154.824108][ T6657] EXT4-fs: Ignoring removed oldalloc option [ 154.842705][ T6657] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.896198][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.959298][ T6657] EXT4-fs (loop5): 1 truncate cleaned up [ 155.056919][ T6657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.207568][ T6657] EXT4-fs error (device loop5): mb_free_blocks:1945: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 155.314418][ T6668] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:298: inode #15: comm syz.5.296: verity file has no extents [ 155.349220][ T6665] loop3: detected capacity change from 0 to 2048 [ 155.377267][ T6657] EXT4-fs (loop5): Remounting filesystem read-only [ 155.413990][ T6665] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 155.434181][ T6629] loop1: detected capacity change from 0 to 32768 [ 155.452997][ T6668] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 155.477646][ T6670] loop4: detected capacity change from 0 to 64 [ 155.504252][ T6665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.595568][ T6629] read_mapping_page failed! [ 155.630262][ T6629] ERROR: (device loop1): txAbort: [ 155.630262][ T6629] [ 155.681382][ T6665] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 155.693026][ T6629] ERROR: (device loop1): remounting filesystem as read-only [ 155.874823][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.482054][ T6690] netlink: 'syz.3.310': attribute type 4 has an invalid length. [ 156.500182][ T6690] netlink: 17 bytes leftover after parsing attributes in process `syz.3.310'. [ 157.038802][ T6679] loop0: detected capacity change from 0 to 32768 [ 157.080156][ T6679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.304 (6679) [ 157.188538][ T6701] loop2: detected capacity change from 0 to 256 [ 157.193009][ T6679] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.243198][ T6679] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 157.287457][ T6679] BTRFS info (device loop0): using free-space-tree [ 157.354583][ T6682] loop4: detected capacity change from 0 to 32768 [ 157.364396][ T6701] FAT-fs (loop2): Directory bread(block 64) failed [ 157.398484][ T6701] FAT-fs (loop2): Directory bread(block 65) failed [ 157.398635][ T6701] FAT-fs (loop2): Directory bread(block 66) failed [ 157.398676][ T6701] FAT-fs (loop2): Directory bread(block 67) failed [ 157.398783][ T6701] FAT-fs (loop2): Directory bread(block 68) failed [ 157.398823][ T6701] FAT-fs (loop2): Directory bread(block 69) failed [ 157.398924][ T6701] FAT-fs (loop2): Directory bread(block 70) failed [ 157.398964][ T6701] FAT-fs (loop2): Directory bread(block 71) failed [ 157.399067][ T6701] FAT-fs (loop2): Directory bread(block 72) failed [ 157.399107][ T6701] FAT-fs (loop2): Directory bread(block 73) failed [ 157.536769][ T6682] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.800831][ T6682] XFS (loop4): Ending clean mount [ 158.043122][ T6679] BTRFS info (device loop0): device stats zeroed by syz.0.304 (6679) [ 158.260576][ T5824] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.277246][ T30] audit: type=1326 audit(1748390541.698:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 158.361760][ T30] audit: type=1326 audit(1748390541.698:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 158.365228][ T5826] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.431345][ T6736] loop3: detected capacity change from 0 to 256 [ 158.461337][ T30] audit: type=1326 audit(1748390541.728:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 158.553202][ T30] audit: type=1326 audit(1748390541.728:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 158.589906][ T6695] loop5: detected capacity change from 0 to 32768 [ 158.652388][ T30] audit: type=1326 audit(1748390541.738:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 158.694676][ T6736] FAT-fs (loop3): Directory bread(block 64) failed [ 158.713053][ T30] audit: type=1326 audit(1748390541.758:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 158.757624][ T6736] FAT-fs (loop3): Directory bread(block 65) failed [ 158.833487][ T6736] FAT-fs (loop3): Directory bread(block 66) failed [ 158.840097][ T6736] FAT-fs (loop3): Directory bread(block 67) failed [ 158.883004][ T30] audit: type=1326 audit(1748390541.758:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 158.916073][ T6736] FAT-fs (loop3): Directory bread(block 68) failed [ 158.940797][ T6736] FAT-fs (loop3): Directory bread(block 69) failed [ 158.996116][ T6736] FAT-fs (loop3): Directory bread(block 70) failed [ 159.002791][ T6736] FAT-fs (loop3): Directory bread(block 71) failed [ 159.019011][ T30] audit: type=1326 audit(1748390541.758:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2ad8e969 code=0x7ffc0000 [ 159.079319][ T6736] FAT-fs (loop3): Directory bread(block 72) failed [ 159.133149][ T6736] FAT-fs (loop3): Directory bread(block 73) failed [ 159.560479][ T6745] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 159.787277][ T30] audit: type=1800 audit(1748390543.208:18): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.326" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 160.191210][ T6756] loop3: detected capacity change from 0 to 256 [ 160.215639][ T6756] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.256962][ T6756] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 160.385162][ T6756] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 160.420294][ T5191] udevd[5191]: worker [5977] terminated by signal 33 (Unknown signal 33) [ 160.468197][ T5191] udevd[5191]: worker [5977] failed while handling '/devices/virtual/block/loop3' [ 160.562419][ T5888] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 160.626478][ T5888] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 160.694878][ T5888] hid-generic 0000:0003:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.730406][ T5963] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.906523][ T5963] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 160.932979][ T5963] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 160.955755][ T6772] fido_id[6772]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.991029][ T5963] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 161.027727][ T5963] usb 6-1: config 220 has no interface number 2 [ 161.047605][ T5963] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 161.096720][ T5963] usb 6-1: config 220 interface 0 has no altsetting 0 [ 161.127504][ T5963] usb 6-1: config 220 interface 76 has no altsetting 0 [ 161.151038][ T5963] usb 6-1: config 220 interface 1 has no altsetting 0 [ 161.180266][ T5963] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 161.197387][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.216907][ T5963] usb 6-1: Product: syz [ 161.225944][ T5963] usb 6-1: Manufacturer: syz [ 161.236046][ T5963] usb 6-1: SerialNumber: syz [ 161.496403][ T5963] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 161.523786][ T5963] usb 6-1: No valid video chain found. [ 161.529387][ T5963] usb 6-1: selecting invalid altsetting 0 [ 161.625254][ T5963] usb 6-1: selecting invalid altsetting 0 [ 161.650628][ T5963] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 161.694148][ T5963] usb 6-1: USB disconnect, device number 4 [ 162.030333][ T6770] loop4: detected capacity change from 0 to 40427 [ 162.088794][ T6770] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3fffff [ 162.113014][ T6770] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2 [ 162.120958][ T6770] F2FS-fs (loop4): Image doesn't support compression [ 162.181829][ T6770] F2FS-fs (loop4): Image doesn't support compression [ 162.252387][ T6770] F2FS-fs (loop4): invalid crc value [ 162.715796][ T6770] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.895561][ T3072] IPVS: starting estimator thread 0... [ 162.914918][ T6770] syz.4.335: attempt to access beyond end of device [ 162.914918][ T6770] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 163.013819][ T6817] IPVS: using max 22 ests per chain, 52800 per kthread [ 163.034096][ T6819] loop0: detected capacity change from 0 to 1024 [ 163.077227][ T6819] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 163.206702][ T6819] hfsplus: bad catalog entry type [ 163.398402][ T6825] loop2: detected capacity change from 0 to 4096 [ 163.848875][ T6825] EXT4-fs (loop2): Test dummy encryption mode enabled [ 163.930278][ T6825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.056142][ T6838] loop5: detected capacity change from 0 to 2048 [ 164.073097][ T6825] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.080051][ T6838] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 164.159868][ T6838] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.277189][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.193688][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 165.222399][ T6865] loop0: detected capacity change from 0 to 1024 [ 165.263991][ T6870] loop4: detected capacity change from 0 to 128 [ 165.306532][ T6870] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.350912][ T6846] loop3: detected capacity change from 0 to 32768 [ 165.384425][ T6870] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.412201][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 165.413767][ T5888] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 165.468025][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 165.510570][ T9] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 165.531397][ T6846] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 165.532473][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.550451][ T9] usb 6-1: Product: syz [ 165.554729][ T9] usb 6-1: Manufacturer: syz [ 165.560938][ T9] usb 6-1: SerialNumber: syz [ 165.569101][ T9] usb 6-1: config 0 descriptor?? [ 165.584349][ T6865] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 165.605000][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.631071][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 165.642457][ T6865] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 165.652518][ T9] usb 6-1: setting power ON [ 165.678035][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.679612][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 165.702840][ T5824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.723007][ T5888] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 165.760513][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.792060][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.817079][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 165.836386][ T13] hfsplus: b-tree write err: -5, ino 4 [ 165.843965][ T6860] dvb-usb: bulk message failed: -22 (3/0) [ 165.849944][ T6860] usb 6-1: gpio_write failed. [ 165.860987][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 165.886265][ T9] usb 6-1: media controller created [ 165.896249][ T5888] usb 3-1: config 0 descriptor?? [ 165.935847][ T6860] dvb-usb: bulk message failed: -22 (5/0) [ 166.030973][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.207326][ T9] usb 6-1: selecting invalid altsetting 6 [ 166.243825][ T9] usb 6-1: digital interface selection failed (-22) [ 166.289746][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 166.349721][ T9] usb 6-1: setting power OFF [ 166.356137][ T5888] glorious 0003:258A:0036.0008: item fetching failed at offset 0/2 [ 166.373267][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 166.412258][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 166.422533][ T5888] glorious 0003:258A:0036.0008: probe with driver glorious failed with error -22 [ 166.467882][ T9] (NULL device *): no alternate interface [ 166.639600][ T5888] usb 3-1: USB disconnect, device number 6 [ 166.754283][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 166.855304][ T9] usb 6-1: USB disconnect, device number 5 [ 166.877177][ T6895] loop3: detected capacity change from 0 to 128 [ 166.927611][ T6898] loop4: detected capacity change from 0 to 1024 [ 167.672989][ T3072] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.744038][ T6912] loop0: detected capacity change from 0 to 4096 [ 167.873889][ T3072] usb 4-1: Using ep0 maxpacket: 32 [ 167.882685][ T3072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.903662][ T3072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.923384][ T6918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.393'. [ 167.943307][ T3072] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.952495][ T3072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.988989][ T6912] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 168.015834][ T3072] usb 4-1: config 0 descriptor?? [ 168.039888][ T6921] 9p: Unknown access argument 18446744073709551615: -34 [ 168.063777][ T3072] hub 4-1:0.0: USB hub found [ 168.091746][ T6912] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 168.300495][ T3072] hub 4-1:0.0: 1 port detected [ 168.510278][ T3072] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 168.535985][ T3072] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 168.603287][ T3072] usbhid 4-1:0.0: can't add hid device: -71 [ 168.609367][ T3072] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 168.702995][ T3072] usb 4-1: USB disconnect, device number 3 [ 168.886814][ T6937] loop4: detected capacity change from 0 to 256 [ 168.993070][ T5963] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.172659][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 169.202550][ T5963] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 169.236565][ T5963] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 169.275011][ T5963] usb 3-1: Product: syz [ 169.284057][ T5963] usb 3-1: Manufacturer: syz [ 169.288788][ T5963] usb 3-1: SerialNumber: syz [ 169.322632][ T5963] usb 3-1: config 0 descriptor?? [ 169.353524][ T5963] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 169.395731][ T6948] netlink: 56 bytes leftover after parsing attributes in process `syz.3.407'. [ 169.984472][ T5963] gspca_zc3xx: reg_w_i err -71 [ 169.991177][ T5963] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 170.021869][ T5963] usb 3-1: USB disconnect, device number 7 [ 170.289696][ T6942] loop0: detected capacity change from 0 to 32768 [ 170.409892][ T6942] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 170.665601][ T6966] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 170.775575][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 171.357879][ T6983] loop0: detected capacity change from 0 to 512 [ 171.489269][ T6983] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 171.492124][ T5963] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.718521][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 171.750990][ T5963] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 171.789650][ T6991] loop2: detected capacity change from 0 to 512 [ 171.791448][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.823853][ T5963] usb 4-1: config 0 descriptor?? [ 171.829238][ T5963] gspca_main: sunplus-2.14.0 probing 041e:400b [ 172.029726][ T6991] EXT4-fs (loop2): 1 orphan inode deleted [ 172.032248][ T6991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.045292][ T4251] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 172.045438][ T4251] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 172.089551][ T6991] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.203132][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 172.205627][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 172.207742][ T6991] EXT4-fs warning (device loop2): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed [ 172.219469][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.238180][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 172.239161][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.265574][ T5963] gspca_sunplus: reg_w_riv err -71 [ 172.265676][ T5963] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 172.268951][ T5963] usb 4-1: USB disconnect, device number 4 [ 172.614867][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.866918][ T7008] aaaaaaaaa: renamed from lo (while UP) [ 173.198432][ T7015] loop4: detected capacity change from 0 to 256 [ 173.214471][ T7015] exfat: Deprecated parameter 'namecase' [ 173.284248][ T7015] exfat: Deprecated parameter 'namecase' [ 173.402267][ T7015] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 173.559727][ T7000] chnl_net:caif_netlink_parms(): no params data found [ 173.960211][ T5891] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 174.171458][ T5891] usb 6-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 174.232982][ T5891] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.272974][ T5831] Bluetooth: hci6: command tx timeout [ 174.277842][ T5891] usb 6-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 174.341731][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 174.358992][ T7037] loop2: detected capacity change from 0 to 8192 [ 174.385189][ T7037] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.387145][ T7042] Invalid logical block size (2050) [ 174.403845][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.411275][ T5891] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 174.443187][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.450599][ T7000] bridge_slave_0: entered allmulticast mode [ 174.457118][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.478963][ T7000] bridge_slave_0: entered promiscuous mode [ 174.488504][ T5891] usb 6-1: config 0 descriptor?? [ 174.508924][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.535747][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.546492][ T7000] bridge_slave_1: entered allmulticast mode [ 174.591570][ T7000] bridge_slave_1: entered promiscuous mode [ 174.995475][ T5891] pantherlord 0003:0810:0001.0009: hidraw0: USB HID v8.00 Device [HID 0810:0001] on usb-dummy_hcd.5-1/input0 [ 175.032980][ T5891] pantherlord 0003:0810:0001.0009: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 175.097099][ T7046] loop2: detected capacity change from 0 to 4096 [ 175.141490][ T7046] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 175.236327][ T3072] usb 6-1: USB disconnect, device number 6 [ 175.375930][ T7049] fido_id[7049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 175.394996][ T7046] ntfs3(loop2): ino=1a, mi_enum_attr [ 175.395067][ T7046] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 175.395894][ T7046] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 175.576150][ T7000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.580268][ T7000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.893794][ T7000] team0: Port device team_slave_0 added [ 175.950164][ T7000] team0: Port device team_slave_1 added [ 176.119104][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 176.285380][ T7064] loop4: detected capacity change from 0 to 1024 [ 176.315294][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.322308][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.348285][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.371258][ T7000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.382813][ T5831] Bluetooth: hci6: command tx timeout [ 176.418003][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.446327][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.472303][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.480095][ T7000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.520924][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.879397][ T7075] loop2: detected capacity change from 0 to 1024 [ 176.922520][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.963412][ T7000] hsr_slave_0: entered promiscuous mode [ 176.975505][ T7075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.035904][ T7000] hsr_slave_1: entered promiscuous mode [ 177.102652][ T7000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.133664][ T7000] Cannot create hsr debugfs directory [ 177.574899][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.909937][ T7084] loop4: detected capacity change from 0 to 4096 [ 177.952610][ T7089] loop3: detected capacity change from 0 to 512 [ 178.033947][ T7089] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.120794][ T7089] EXT4-fs (loop3): orphan cleanup on readonly fs [ 178.180947][ T7089] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.465: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 178.209768][ T7092] netlink: 192 bytes leftover after parsing attributes in process `syz.0.467'. [ 178.237596][ T7000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.274008][ T7089] EXT4-fs error (device loop3): ext4_quota_enable:7128: comm syz.3.465: Bad quota inode: 3, type: 0 [ 178.293207][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 178.349915][ T7000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.357477][ T7089] EXT4-fs warning (device loop3): ext4_enable_quotas:7166: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 178.406995][ T7089] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 178.424286][ T5831] Bluetooth: hci6: command tx timeout [ 178.446887][ T7072] loop5: detected capacity change from 0 to 32768 [ 178.450490][ T7000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.506056][ T7072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.457 (7072) [ 178.562723][ T7089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.583792][ T7072] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.610758][ T7072] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 178.659378][ T7000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.682949][ T7072] BTRFS info (device loop5): using free-space-tree [ 178.918518][ T7115] loop4: detected capacity change from 0 to 512 [ 178.926965][ T7115] EXT4-fs: Ignoring removed orlov option [ 178.932667][ T7115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.969863][ T7115] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.014100][ T7115] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #12: comm syz.4.472: corrupted in-inode xattr: invalid ea_ino [ 179.055134][ T7115] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.472: couldn't read orphan inode 12 (err -117) [ 179.089904][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.102008][ T7115] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.325368][ T7115] EXT4-fs error (device loop4): htree_dirblock_to_tree:1053: inode #2: comm syz.4.472: Directory hole found for htree leaf block 0 [ 179.360211][ T7000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.685010][ T5824] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 179.739706][ T7122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.739833][ T5839] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.125084][ T7000] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.186761][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.194022][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.504724][ T5831] Bluetooth: hci6: command tx timeout [ 180.554202][ T7122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.692560][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.699976][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.863037][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 181.041795][ T7122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.083154][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 181.090710][ T5887] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.122404][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.161019][ T5887] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 181.190864][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.240852][ T5887] usb 6-1: config 0 descriptor?? [ 181.439130][ T7131] loop2: detected capacity change from 0 to 32768 [ 181.575454][ T7122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.613005][ T7131] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 181.725494][ T5887] logitech 0003:046D:C623.000A: item fetching failed at offset 5/7 [ 181.784431][ T5887] logitech 0003:046D:C623.000A: parse failed [ 181.811009][ T5887] logitech 0003:046D:C623.000A: probe with driver logitech failed with error -22 [ 181.942002][ T5887] usb 6-1: USB disconnect, device number 7 [ 181.979551][ T5825] ocfs2: Unmounting device (7,2) on (node local) [ 182.211088][ T7122] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.466919][ T7122] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.526595][ T7122] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.533916][ T7140] loop3: detected capacity change from 0 to 40427 [ 182.601681][ T7140] F2FS-fs (loop3): invalid crc value [ 182.645748][ T7122] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.663083][ T5963] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.730953][ T7162] loop2: detected capacity change from 0 to 8 [ 182.799873][ T7000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.826366][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 182.854053][ T5963] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.882472][ T7162] SQUASHFS error: Failed to read block 0x2d7: -5 [ 182.896036][ T5963] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.920931][ T7162] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 182.955656][ T5963] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.004481][ T5963] usb 5-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 183.077062][ T5963] usb 5-1: config 7 interface 0 has no altsetting 0 [ 183.106843][ T7140] F2FS-fs (loop3): Start checkpoint disabled! [ 183.107452][ T5963] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 183.122778][ T3072] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 183.161240][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.190655][ T7140] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 183.308631][ T3072] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 183.318025][ T3072] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 183.363767][ T3072] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 183.390601][ T3072] usb 6-1: config 3 has no interface number 0 [ 183.413010][ T3072] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 183.472010][ T3072] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.523938][ T3072] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 183.553920][ T3072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.589537][ T3072] usb 6-1: Product: syz [ 183.593377][ T5914] kworker/u8:8: attempt to access beyond end of device [ 183.593377][ T5914] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.612957][ T3072] usb 6-1: Manufacturer: syz [ 183.624916][ T3072] usb 6-1: SerialNumber: syz [ 183.648185][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: kworker/u8:8 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 183.648249][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.648274][ T5914] Workqueue: writeback wb_workfn (flush-7:3) [ 183.648332][ T5914] Call Trace: [ 183.648345][ T5914] [ 183.648359][ T5914] dump_stack_lvl+0x16c/0x1f0 [ 183.648420][ T5914] f2fs_handle_critical_error+0x621/0x9f0 [ 183.648472][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.648519][ T5914] ? __asan_memset+0x23/0x50 [ 183.648565][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.648623][ T5914] f2fs_write_end_io+0x73b/0xb60 [ 183.648674][ T5914] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 183.648727][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.648784][ T5914] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 183.648829][ T5914] bio_endio+0x70d/0x850 [ 183.648879][ T5914] submit_bio_noacct+0x56d/0x1eb0 [ 183.648946][ T5914] __submit_merged_bio+0x33c/0x770 [ 183.648996][ T5914] __submit_merged_write_cond+0x319/0x3f0 [ 183.649054][ T5914] f2fs_write_cache_pages+0x2139/0x2680 [ 183.649131][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649176][ T5914] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 183.649233][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649277][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649320][ T5914] ? find_held_lock+0x2b/0x80 [ 183.649359][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649407][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649455][ T5914] ? do_raw_spin_unlock+0x172/0x230 [ 183.649529][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649573][ T5914] ? f2fs_available_free_memory+0x279/0xa30 [ 183.649701][ T5914] ? __lock_acquire+0x1053/0x1c90 [ 183.649754][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649805][ T5914] f2fs_write_data_pages+0x4ad/0xd90 [ 183.649866][ T5914] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.649931][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.649974][ T5914] ? __lock_acquire+0xb8a/0x1c90 [ 183.650031][ T5914] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.650089][ T5914] do_writepages+0x27a/0x600 [ 183.650143][ T5914] ? __pfx_do_writepages+0x10/0x10 [ 183.650187][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.650232][ T5914] ? reacquire_held_locks+0xcd/0x1f0 [ 183.650283][ T5914] ? writeback_sb_inodes+0x3a4/0xf90 [ 183.650332][ T5914] __writeback_single_inode+0x160/0xfb0 [ 183.650380][ T5914] ? __pfx___writeback_single_inode+0x10/0x10 [ 183.650422][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.650474][ T5914] ? do_raw_spin_unlock+0x172/0x230 [ 183.650535][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.650586][ T5914] writeback_sb_inodes+0x601/0xf90 [ 183.650648][ T5914] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 183.650691][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.650735][ T5914] ? mark_held_locks+0x49/0x80 [ 183.650843][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.650887][ T5914] ? rcu_is_watching+0x12/0xc0 [ 183.650925][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.650970][ T5914] ? queue_io+0x3f6/0x520 [ 183.651014][ T5914] wb_writeback+0x419/0xb70 [ 183.651067][ T5914] ? __pfx_wb_writeback+0x10/0x10 [ 183.651106][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651164][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651208][ T5914] ? mark_held_locks+0x49/0x80 [ 183.651265][ T5914] wb_workfn+0x14d/0xbe0 [ 183.651314][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651358][ T5914] ? try_to_wake_up+0x157/0x1680 [ 183.651397][ T5914] ? __pfx_wb_workfn+0x10/0x10 [ 183.651449][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651499][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651549][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651594][ T5914] ? rcu_is_watching+0x12/0xc0 [ 183.651639][ T5914] process_one_work+0x9cf/0x1b70 [ 183.651714][ T5914] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 183.651757][ T5914] ? __pfx_process_one_work+0x10/0x10 [ 183.651817][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651874][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.651919][ T5914] ? assign_work+0x1a0/0x250 [ 183.651979][ T5914] worker_thread+0x6c8/0xf10 [ 183.652048][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.652094][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.652138][ T5914] ? __kthread_parkme+0x19e/0x250 [ 183.652182][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.652230][ T5914] ? __pfx_worker_thread+0x10/0x10 [ 183.652290][ T5914] kthread+0x3c5/0x780 [ 183.652346][ T5914] ? __pfx_kthread+0x10/0x10 [ 183.652403][ T5914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.652457][ T5914] ? rcu_is_watching+0x12/0xc0 [ 183.652502][ T5914] ? __pfx_kthread+0x10/0x10 [ 183.652558][ T5914] ret_from_fork+0x5d7/0x6f0 [ 183.652607][ T5914] ? __pfx_kthread+0x10/0x10 [ 183.652664][ T5914] ret_from_fork_asm+0x1a/0x30 [ 183.652727][ T5914] [ 183.712743][ T5963] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.000B/input/input7 [ 183.715287][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.733969][ T5914] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 184.201128][ T7164] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 184.327638][ T5963] kye 0003:0458:5010.000B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 184.437096][ T5963] usb 5-1: USB disconnect, device number 6 [ 184.571608][ T3072] usb-storage 6-1:3.20: USB Mass Storage device detected [ 184.640871][ T3072] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 184.763303][ T3072] scsi host1: usb-storage 6-1:3.20 [ 184.896993][ T7000] veth0_vlan: entered promiscuous mode [ 184.899613][ T7183] fido_id[7183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 184.997273][ T7000] veth1_vlan: entered promiscuous mode [ 185.033122][ T3072] usb 6-1: USB disconnect, device number 8 [ 185.211579][ T7000] veth0_macvtap: entered promiscuous mode [ 185.320522][ T7000] veth1_macvtap: entered promiscuous mode [ 185.505749][ T7000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.567817][ T7000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.658060][ T7000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.699131][ T7000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.744313][ T7000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.793841][ T7000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.184458][ T5890] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 186.207454][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.254779][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.295207][ T7209] loop3: detected capacity change from 0 to 512 [ 186.398177][ T5890] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 186.412492][ T7211] loop0: detected capacity change from 0 to 512 [ 186.443879][ T5890] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 186.497433][ T7209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.512325][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.544331][ T5890] usb 3-1: Product: syz [ 186.545783][ T7209] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.548557][ T5890] usb 3-1: Manufacturer: syz [ 186.580099][ T5890] usb 3-1: SerialNumber: syz [ 186.584419][ T7211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.627505][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.632571][ T7211] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.682970][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.855887][ T5890] usb 3-1: selecting invalid altsetting 1 [ 186.877485][ T7211] EXT4-fs error (device loop0): ext4_get_first_dir_block:3534: inode #12: block 32: comm syz.0.504: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 186.976003][ T7211] EXT4-fs (loop0): Remounting filesystem read-only [ 187.056025][ T5890] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 187.056157][ T5890] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 187.096363][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.230502][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.243997][ T7227] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 187.250778][ T7227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.339900][ T3072] usb 3-1: USB disconnect, device number 8 [ 187.373613][ T7227] vhci_hcd vhci_hcd.0: Device attached [ 187.383698][ T7225] bridge1: entered promiscuous mode [ 187.395407][ T7225] bridge1: entered allmulticast mode [ 187.466046][ T7225] team0: Port device bridge1 added [ 187.593701][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 187.613083][ T5886] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 187.627403][ T7236] loop5: detected capacity change from 0 to 1024 [ 187.790837][ T24] usb 7-1: config 0 has no interfaces? [ 187.806764][ T24] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 187.850539][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.876302][ T24] usb 7-1: config 0 descriptor?? [ 187.926349][ T997] hfsplus: b-tree write err: -5, ino 4 [ 188.252550][ T5887] usb 7-1: USB disconnect, device number 2 [ 188.253633][ T7228] vhci_hcd: cannot find a urb of seqnum 2571884352 max seqnum 1 [ 188.337806][ T7252] netlink: 'syz.0.517': attribute type 2 has an invalid length. [ 188.347178][ T7251] loop5: detected capacity change from 0 to 1024 [ 188.353909][ T36] vhci_hcd: stop threads [ 188.365075][ T36] vhci_hcd: release socket [ 188.385531][ T7252] netlink: 'syz.0.517': attribute type 2 has an invalid length. [ 188.409717][ T36] vhci_hcd: disconnect device [ 189.020154][ T7263] loop5: detected capacity change from 0 to 1024 [ 189.177393][ T7268] loop4: detected capacity change from 0 to 512 [ 189.275220][ T7268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.293822][ T7268] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.374516][ T7271] sp0: Synchronizing with TNC [ 189.406617][ T7270] [U] [ 189.493590][ T30] audit: type=1800 audit(1748390572.918:19): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.524" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 189.732056][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.043301][ T5992] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.106415][ T7283] loop2: detected capacity change from 0 to 4096 [ 190.177110][ T7283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.233859][ T5992] usb 6-1: config 0 interface 0 has no altsetting 0 [ 190.273886][ T5992] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 190.290806][ T7255] loop3: detected capacity change from 0 to 40427 [ 190.300938][ T7255] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 190.309677][ T7255] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 190.324243][ T7287] loop6: detected capacity change from 0 to 4096 [ 190.331611][ T7255] F2FS-fs (loop3): build fault injection attr: rate: 18446, type: 0x3fffff [ 190.337362][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.386579][ T7283] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 190.404526][ T7255] F2FS-fs (loop3): invalid crc value [ 190.415023][ T5992] usb 6-1: config 0 descriptor?? [ 190.431301][ T7291] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.432831][ T5992] usb-storage 6-1:0.0: USB Mass Storage device detected [ 190.494718][ T5992] usb-storage 6-1:0.0: This device (090a,1200,2487 S 01 P 21) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-syzkaller-02443-g015a99fa7665) [ 190.494718][ T5992] Please send a copy of this message to and [ 190.522786][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.689400][ T5992] usb 6-1: USB disconnect, device number 9 [ 190.896967][ T7255] F2FS-fs (loop3): Start checkpoint disabled! [ 190.965214][ T7255] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 190.972458][ T7255] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 191.266081][ T7302] loop4: detected capacity change from 0 to 512 [ 191.294395][ T7302] EXT4-fs: Ignoring removed nobh option [ 191.314139][ T36] kworker/u8:2: attempt to access beyond end of device [ 191.314139][ T36] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.338117][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 191.338169][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.338193][ T36] Workqueue: writeback wb_workfn (flush-7:3) [ 191.338251][ T36] Call Trace: [ 191.338263][ T36] [ 191.338277][ T36] dump_stack_lvl+0x16c/0x1f0 [ 191.338338][ T36] f2fs_handle_critical_error+0x621/0x9f0 [ 191.338379][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.338423][ T36] ? __asan_memset+0x23/0x50 [ 191.338493][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.338549][ T36] f2fs_write_end_io+0x73b/0xb60 [ 191.338599][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 191.338651][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.338706][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 191.338750][ T36] bio_endio+0x70d/0x850 [ 191.338801][ T36] submit_bio_noacct+0x56d/0x1eb0 [ 191.338873][ T36] __submit_merged_bio+0x33c/0x770 [ 191.338926][ T36] __submit_merged_write_cond+0x319/0x3f0 [ 191.338987][ T36] f2fs_write_cache_pages+0x2139/0x2680 [ 191.339070][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339117][ T36] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 191.339178][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339223][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339267][ T36] ? find_held_lock+0x2b/0x80 [ 191.339308][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339359][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339402][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 191.339490][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339535][ T36] ? f2fs_available_free_memory+0x279/0xa30 [ 191.339671][ T36] ? __lock_acquire+0xb8a/0x1c90 [ 191.339723][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339774][ T36] f2fs_write_data_pages+0x4ad/0xd90 [ 191.339834][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.339898][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.339939][ T36] ? __lock_acquire+0xb8a/0x1c90 [ 191.339990][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.340044][ T36] do_writepages+0x27a/0x600 [ 191.340098][ T36] ? __pfx_do_writepages+0x10/0x10 [ 191.340141][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.340184][ T36] ? reacquire_held_locks+0xcd/0x1f0 [ 191.340231][ T36] ? writeback_sb_inodes+0x3a4/0xf90 [ 191.340280][ T36] __writeback_single_inode+0x160/0xfb0 [ 191.340325][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 191.340364][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.340406][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 191.340468][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.340519][ T36] writeback_sb_inodes+0x601/0xf90 [ 191.340586][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.340629][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.340674][ T36] ? mark_held_locks+0x49/0x80 [ 191.340794][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.340839][ T36] ? rcu_is_watching+0x12/0xc0 [ 191.340877][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.340922][ T36] ? queue_io+0x3f6/0x520 [ 191.340964][ T36] wb_writeback+0x419/0xb70 [ 191.341019][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 191.341059][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341119][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341164][ T36] ? mark_held_locks+0x49/0x80 [ 191.341223][ T36] wb_workfn+0x14d/0xbe0 [ 191.341273][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341318][ T36] ? try_to_wake_up+0x157/0x1680 [ 191.341357][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 191.341406][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341464][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341517][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341562][ T36] ? rcu_is_watching+0x12/0xc0 [ 191.341609][ T36] process_one_work+0x9cf/0x1b70 [ 191.341693][ T36] ? __pfx_process_one_work+0x10/0x10 [ 191.341754][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341813][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.341858][ T36] ? assign_work+0x1a0/0x250 [ 191.341920][ T36] worker_thread+0x6c8/0xf10 [ 191.341992][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.342039][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.342084][ T36] ? __kthread_parkme+0x19e/0x250 [ 191.342129][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.342178][ T36] ? __pfx_worker_thread+0x10/0x10 [ 191.342238][ T36] kthread+0x3c5/0x780 [ 191.342295][ T36] ? __pfx_kthread+0x10/0x10 [ 191.342353][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.342397][ T36] ? rcu_is_watching+0x12/0xc0 [ 191.342435][ T36] ? __pfx_kthread+0x10/0x10 [ 191.342500][ T36] ret_from_fork+0x5d7/0x6f0 [ 191.342548][ T36] ? __pfx_kthread+0x10/0x10 [ 191.342604][ T36] ret_from_fork_asm+0x1a/0x30 [ 191.342668][ T36] [ 191.342681][ T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 191.729393][ T7308] capability: warning: `syz.5.539' uses deprecated v2 capabilities in a way that may be insecure [ 191.782252][ T7302] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 191.893527][ T7302] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.536: invalid indirect mapped block 2683928664 (level 1) [ 191.919935][ T7302] EXT4-fs (loop4): 1 truncate cleaned up [ 191.927821][ T7302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.996326][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.540'. [ 192.012730][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.540'. [ 192.279968][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.774579][ T5886] vhci_hcd: vhci_device speed not set [ 193.122997][ T7330] syz.4.548 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.301022][ T7328] loop3: detected capacity change from 0 to 32768 [ 194.339112][ T7355] openvswitch: netlink: Message has 16 unknown bytes. [ 194.400244][ T7355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.420481][ T7328] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 194.455785][ T7328] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.521129][ T7363] loop0: detected capacity change from 0 to 512 [ 194.571588][ T7363] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.632794][ T7328] XFS (loop3): Ending clean mount [ 194.661186][ T7363] EXT4-fs (loop0): 1 truncate cleaned up [ 194.727682][ T7328] XFS (loop3): Quotacheck needed: Please wait. [ 194.768693][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.918975][ T7343] loop4: detected capacity change from 0 to 32768 [ 195.023658][ T7372] EXT4-fs error (device loop0): ext4_generic_delete_entry:2669: inode #2: block 13: comm syz.0.561: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 195.062483][ T7369] loop5: detected capacity change from 0 to 32768 [ 195.075766][ T7369] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.562 (7369) [ 195.100744][ T7343] JBD2: Ignoring recovery information on journal [ 195.106742][ T7372] EXT4-fs error (device loop0) in ext4_delete_entry:2741: Corrupt filesystem [ 195.124529][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 195.172341][ T7369] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.182795][ T7369] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 195.239417][ T7328] XFS (loop3): Quotacheck: Done. [ 195.289115][ T7343] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 195.303129][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 195.336430][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.356796][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 195.372205][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 195.384496][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.405825][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 195.415592][ T9] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 195.424420][ T9] usb 7-1: Product: syz [ 195.428790][ T9] usb 7-1: Manufacturer: syz [ 195.433913][ T9] usb 7-1: SerialNumber: syz [ 195.452596][ T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input8 [ 195.482261][ T997] BTRFS error (device loop5): bad fsid on logical 5267456 mirror 1 [ 195.533462][ T7369] BTRFS warning (device loop5): failed to read fs tree: -5 [ 195.643129][ T7369] BTRFS error (device loop5): open_ctree failed: -5 [ 195.857072][ T5824] ocfs2: Unmounting device (7,4) on (node local) [ 195.970884][ T3072] usb 7-1: USB disconnect, device number 3 [ 195.971007][ C0] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 196.111615][ T7395] option changes via remount are deprecated (pid=7394 comm=syz.5.566) [ 196.175734][ T3072] appletouch 7-1:1.0: input: appletouch disconnected [ 196.500966][ T5823] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.246609][ T7409] loop4: detected capacity change from 0 to 512 [ 197.296341][ T7410] loop0: detected capacity change from 0 to 512 [ 197.313706][ T7409] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 197.393918][ T7410] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.572: iget: bogus i_mode (0) [ 197.435465][ T7410] EXT4-fs (loop0): Remounting filesystem read-only [ 197.444675][ T7410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.564644][ T24] hid-generic 0000:0000:0000.000C: item fetching failed at offset 0/1 [ 197.591322][ T24] hid-generic 0000:0000:0000.000C: probe with driver hid-generic failed with error -22 [ 197.636408][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.928250][ T7428] loop0: detected capacity change from 0 to 512 [ 197.983405][ T7428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.129892][ T7428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.223077][ T7428] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.295730][ T7436] loop5: detected capacity change from 0 to 256 [ 198.414599][ T7436] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 198.524680][ T7436] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 198.557364][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.131269][ T7434] loop3: detected capacity change from 0 to 32768 [ 199.225263][ T7434] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.443414][ T7434] XFS (loop3): Ending clean mount [ 199.534021][ T7424] loop6: detected capacity change from 0 to 32768 [ 199.596088][ T7462] loop0: detected capacity change from 0 to 64 [ 199.615079][ T7424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.579 (7424) [ 199.696560][ T7424] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.696665][ T7424] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 199.696716][ T7424] BTRFS info (device loop6): using free-space-tree [ 199.808188][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.996250][ T7424] BTRFS info (device loop6): rebuilding free space tree [ 200.336142][ T7472] loop5: detected capacity change from 0 to 8192 [ 200.367723][ T7472] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.699904][ T7000] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.771310][ T7486] loop0: detected capacity change from 0 to 40427 [ 201.789128][ T7486] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 201.840959][ T7502] loop6: detected capacity change from 0 to 4096 [ 201.841431][ T7486] F2FS-fs (loop0): heap/no_heap options were deprecated [ 201.892412][ T7486] F2FS-fs (loop0): Image doesn't support compression [ 201.902470][ T7486] F2FS-fs (loop0): invalid crc value [ 201.925264][ T7502] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 201.985604][ T30] audit: type=1800 audit(1748390585.408:20): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.603" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 202.092760][ T7510] loop5: detected capacity change from 0 to 512 [ 202.169952][ T7510] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 202.259536][ T7510] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.604: attempt to clear invalid blocks 2 len 1 [ 202.286144][ T7502] ntfs3(loop6): failed to convert "c46c" to cp861 [ 202.359202][ T7510] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 202.362960][ T7502] ntfs3(loop6): ino=20, mi_enum_attr [ 202.403340][ T7510] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.604: invalid indirect mapped block 1819239214 (level 0) [ 202.465185][ T7502] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 202.470588][ T7517] loop4: detected capacity change from 0 to 1024 [ 202.477832][ T7486] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.486207][ T7510] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.604: invalid indirect mapped block 1819239214 (level 1) [ 202.559302][ T7510] EXT4-fs (loop5): 1 truncate cleaned up [ 202.568871][ T7517] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 202.616383][ T7510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.708070][ T7517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.773739][ T5826] syz-executor: attempt to access beyond end of device [ 202.773739][ T5826] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.790069][ T7510] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 202.874752][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 202.874806][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.874828][ T5826] Call Trace: [ 202.874840][ T5826] [ 202.874854][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 202.874920][ T5826] f2fs_handle_critical_error+0x621/0x9f0 [ 202.874963][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.875009][ T5826] ? __asan_memset+0x23/0x50 [ 202.875056][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.875114][ T5826] f2fs_write_end_io+0x73b/0xb60 [ 202.875166][ T5826] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 202.875228][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.875286][ T5826] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 202.875332][ T5826] bio_endio+0x70d/0x850 [ 202.875384][ T5826] submit_bio_noacct+0x56d/0x1eb0 [ 202.875456][ T5826] __submit_merged_bio+0x33c/0x770 [ 202.875515][ T5826] __submit_merged_write_cond+0x319/0x3f0 [ 202.875576][ T5826] f2fs_write_cache_pages+0x2139/0x2680 [ 202.875659][ T5826] ? __lock_acquire+0x622/0x1c90 [ 202.875711][ T5826] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 202.875777][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.875826][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.875874][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.875919][ T5826] ? rcu_is_watching+0x12/0xc0 [ 202.875956][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.876027][ T5826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 202.876145][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.876195][ T5826] ? add_lock_to_list+0x9d/0x130 [ 202.876244][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.876298][ T5826] f2fs_write_data_pages+0x4ad/0xd90 [ 202.876364][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 202.876432][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.876485][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.876531][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 202.876589][ T5826] do_writepages+0x27a/0x600 [ 202.876646][ T5826] ? __pfx_do_writepages+0x10/0x10 [ 202.876690][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 202.876751][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.876796][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 202.876852][ T5826] filemap_fdatawrite_wbc+0x104/0x160 [ 202.876901][ T5826] ? __pfx_stack_trace_save+0x10/0x10 [ 202.876944][ T5826] __filemap_fdatawrite_range+0xb2/0xf0 [ 202.877006][ T5826] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 202.877134][ T5826] ? find_held_lock+0x2b/0x80 [ 202.877173][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.877226][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 202.877286][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.877339][ T5826] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 202.877421][ T5826] block_operations+0x2a3/0xfd0 [ 202.877491][ T5826] ? __pfx_block_operations+0x10/0x10 [ 202.877545][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.877656][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.877698][ T5826] ? down_write+0x14d/0x200 [ 202.877733][ T5826] ? __pfx_down_write+0x10/0x10 [ 202.877770][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.877814][ T5826] ? rcu_is_watching+0x12/0xc0 [ 202.877861][ T5826] f2fs_write_checkpoint+0x2b8/0x4780 [ 202.877925][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.877970][ T5826] ? kfree+0x2b4/0x4d0 [ 202.878011][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.878055][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.878108][ T5826] ? f2fs_stop_gc_thread+0x79/0xd0 [ 202.878170][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.878237][ T5826] kill_f2fs_super+0x3c2/0x470 [ 202.878293][ T5826] ? __pfx_kill_f2fs_super+0x10/0x10 [ 202.878343][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.878420][ T5826] deactivate_locked_super+0xc1/0x1a0 [ 202.878472][ T5826] deactivate_super+0xde/0x100 [ 202.878522][ T5826] cleanup_mnt+0x225/0x450 [ 202.878578][ T5826] task_work_run+0x150/0x240 [ 202.878641][ T5826] ? __pfx_task_work_run+0x10/0x10 [ 202.878697][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.878747][ T5826] ? __pfx___x64_sys_umount+0x10/0x10 [ 202.878815][ T5826] exit_to_user_mode_loop+0xeb/0x110 [ 202.878878][ T5826] do_syscall_64+0x3f6/0x4c0 [ 202.878942][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.878980][ T5826] RIP: 0033:0x7f95ec58fc97 [ 202.879010][ T5826] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 202.879046][ T5826] RSP: 002b:00007ffe83a152f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 202.879080][ T5826] RAX: 0000000000000000 RBX: 00007f95ec61089d RCX: 00007f95ec58fc97 [ 202.879103][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe83a153b0 [ 202.879124][ T5826] RBP: 00007ffe83a153b0 R08: 0000000000000000 R09: 0000000000000000 [ 202.879146][ T5826] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe83a16440 [ 202.879169][ T5826] R13: 00007f95ec61089d R14: 0000000000031750 R15: 00007ffe83a16480 [ 202.879227][ T5826] [ 202.882505][ T7517] process 'syz.4.606' launched './file1' with NULL argv: empty string added [ 202.903061][ T5826] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 203.041963][ T7525] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.606: missing EA_INODE flag [ 203.458727][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.572263][ T7525] EXT4-fs (loop4): Remounting filesystem read-only [ 203.619497][ T30] audit: type=1800 audit(1748390587.038:21): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.606" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 203.676672][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 203.778883][ T7536] loop3: detected capacity change from 0 to 128 [ 203.803553][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.842953][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 203.852408][ T7536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 203.903605][ T24] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 203.914836][ T24] usb 7-1: config 0 has no interface number 0 [ 203.922592][ T24] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.950258][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.963013][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.976639][ T7536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.997087][ T24] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.035376][ T24] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 204.053150][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 204.081108][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.128473][ T30] audit: type=1800 audit(1748390587.548:22): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="bus" dev="loop3" ino=125 res=0 errno=0 [ 204.129911][ T24] usb 7-1: config 0 descriptor?? [ 204.192599][ T7540] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 204.262310][ T9] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.301943][ T9] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 204.341501][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.380060][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 204.394845][ T7542] loop3: detected capacity change from 0 to 512 [ 204.434775][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.456912][ T7542] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 204.484977][ T9] usb 6-1: config 0 descriptor?? [ 204.513418][ T7538] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 204.563722][ T7542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 204.657866][ T7542] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.616: corrupted in-inode xattr: e_value size too large [ 204.721513][ T7542] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.616: couldn't read orphan inode 15 (err -117) [ 204.760353][ T7542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.946166][ T5886] usb 7-1: USB disconnect, device number 4 [ 204.979566][ T9] logitech 0003:046D:C24F.000E: unbalanced collection at end of report description [ 205.011307][ T9] logitech 0003:046D:C24F.000E: parse failed [ 205.028165][ T9] logitech 0003:046D:C24F.000E: probe with driver logitech failed with error -22 [ 205.110470][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.247932][ T9] usb 6-1: USB disconnect, device number 10 [ 206.113419][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.148039][ T7548] loop4: detected capacity change from 0 to 32768 [ 206.157811][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.166561][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.176135][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.184447][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.375188][ T7573] loop0: detected capacity change from 0 to 256 [ 206.438910][ T7573] exfat: Deprecated parameter 'utf8' [ 206.473598][ T7573] exfat: Deprecated parameter 'utf8' [ 206.613744][ T7573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 206.726729][ T30] audit: type=1326 audit(1748390590.138:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.3.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179238e969 code=0x0 [ 206.856024][ T30] audit: type=1800 audit(1748390590.148:24): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.628" name="file2" dev="loop0" ino=1048693 res=0 errno=0 [ 206.888014][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 206.986106][ T7562] loop6: detected capacity change from 0 to 32768 [ 207.010519][ T7582] [U] M٭Q& K4 [ 207.016608][ T7582] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 207.072987][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 207.081369][ T7562] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 207.085097][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.129848][ T7562] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 207.173471][ T24] usb 6-1: config 0 has no interface number 0 [ 207.197390][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 207.212659][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.243819][ T30] audit: type=1800 audit(1748390590.658:25): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.624" name="file1" dev="loop6" ino=17059 res=0 errno=0 [ 207.286110][ T24] usb 6-1: Product: syz [ 207.290364][ T24] usb 6-1: Manufacturer: syz [ 207.298216][ T7565] chnl_net:caif_netlink_parms(): no params data found [ 207.312922][ T24] usb 6-1: SerialNumber: syz [ 207.366125][ T24] usb 6-1: config 0 descriptor?? [ 207.386236][ T7000] ocfs2: Unmounting device (7,6) on (node local) [ 207.410933][ T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 207.463035][ T24] usb 6-1: selecting invalid altsetting 1 [ 207.471585][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 207.521883][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.533609][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 207.542297][ T24] usb 6-1: media controller created [ 207.608666][ T7576] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 207.681286][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.774304][ T24] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 207.774437][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 207.774893][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 207.963944][ T24] usb 6-1: USB disconnect, device number 11 [ 208.209304][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.234933][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.264768][ T5838] Bluetooth: hci7: command tx timeout [ 208.269388][ T7565] bridge_slave_0: entered allmulticast mode [ 208.277003][ T5827] jfs_flush_journal: synclist not empty [ 208.282800][ T5827] metapage: ffff88807ee8b8b8: 00001000 00000000 00000024 00000000 [ 208.343359][ T5827] metapage: ffff88807ee8b8c8: 54d58228 ffff8880 54d58228 ffff8880 [ 208.351280][ T5827] metapage: ffff88807ee8b8d8: 00000004 00000000 00000000 00000000 [ 208.361582][ T7565] bridge_slave_0: entered promiscuous mode [ 208.383955][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.391195][ T5827] metapage: ffff88807ee8b8e8: 33edb000 ffff8880 0000001c 00000000 [ 208.399519][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 208.420429][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.428903][ T5827] metapage: ffff88807ee8b8f8: 00000000 dead4ead ffffffff 00000000 [ 208.440856][ T7565] bridge_slave_1: entered allmulticast mode [ 208.447088][ T5827] metapage: ffff88807ee8b908: ffffffff ffffffff 9ac56120 ffffffff [ 208.467315][ T7565] bridge_slave_1: entered promiscuous mode [ 208.473415][ T5827] metapage: ffff88807ee8b918: 95b5d910 ffffffff 00000000 00000000 [ 208.503274][ T5827] metapage: ffff88807ee8b928: 8bcd79a0 ffffffff 00000300 00000000 [ 208.510626][ T7604] vivid-000: disconnect [ 208.524274][ T5827] metapage: ffff88807ee8b938: 7ee8b938 ffff8880 7ee8b938 ffff8880 [ 208.532165][ T5827] metapage: ffff88807ee8b948: 00cfb6c0 ffffea00 52b56000 ffff8880 [ 208.535756][ T7603] vivid-000: reconnect [ 208.557367][ T5827] metapage: ffff88807ee8b958: 00001000 00000170 00000000 00000000 [ 208.573101][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 208.588573][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.603095][ T5827] metapage: ffff88807ee8b968: 54d58000 ffff8880 [ 208.614969][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 208.621725][ T5827] page: ffffea0000cfb6c0: 00fff2800000403c ffffea0000d09588 [ 208.630268][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 208.643705][ T5827] page: ffffea0000cfb6d0: ffffea0001e92988 0000000000000000 [ 208.654473][ T7565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.677982][ T5827] page: ffffea0000cfb6e0: 000000000000001c ffff88807ee8b8b8 [ 208.685838][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.695064][ T5827] page: ffffea0000cfb6f0: 00000001ffffffff ffff88807917a000 [ 208.706842][ T7565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.728670][ T9] usb 4-1: config 0 descriptor?? [ 208.748407][ T5827] read_mapping_page failed! [ 208.771095][ T5827] diWriteSpecial: failed to read aggregate inode extent! [ 208.813120][ T5827] read_mapping_page failed! [ 208.832991][ T5824] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 208.845205][ T5824] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 208.853635][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 208.865485][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.875563][ T5824] RIP: 0010:write_special_inodes+0xa9/0x170 [ 208.881494][ T5824] Code: 2e e8 5b c7 2f 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 23 c7 2f 08 48 8d [ 208.901129][ T5824] RSP: 0018:ffffc9000405fbe8 EFLAGS: 00010216 [ 208.907219][ T5824] RAX: 0000000000000006 RBX: ffff888035bc0e00 RCX: ffffffff81f190ee [ 208.915208][ T5824] RDX: 0000000000000000 RSI: ffffffff81f190a1 RDI: 0000000000000030 [ 208.923197][ T5824] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 208.931188][ T5824] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81f258a0 [ 208.939174][ T5824] R13: 0000000000000000 R14: ffff888054d58000 R15: 1ffff1100a9ab045 [ 208.947250][ T5824] FS: 000055557e689500(0000) GS:ffff8881249aa000(0000) knlGS:0000000000000000 [ 208.956199][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.962795][ T5824] CR2: 00007ff9209fb900 CR3: 000000005c4da000 CR4: 0000000000350ef0 [ 208.970784][ T5824] Call Trace: [ 208.974069][ T5824] [ 208.977017][ T5824] jfs_flush_journal+0x475/0xa60 [ 208.982098][ T5824] ? __pfx_jfs_flush_journal+0x10/0x10 [ 208.987606][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.993277][ T5824] ? hook_sb_delete+0xad/0xbd0 [ 208.998080][ T5824] ? __pfx_dquot_disable+0x10/0x10 [ 209.003237][ T5824] ? __pfx_hook_sb_delete+0x10/0x10 [ 209.008475][ T5824] jfs_umount+0x17a/0x440 [ 209.012827][ T5824] jfs_put_super+0x88/0x1d0 [ 209.017371][ T5824] ? __pfx_jfs_put_super+0x10/0x10 [ 209.022534][ T5824] generic_shutdown_super+0x156/0x390 [ 209.027948][ T5824] kill_block_super+0x3b/0x90 [ 209.032650][ T5824] deactivate_locked_super+0xc1/0x1a0 [ 209.038053][ T5824] deactivate_super+0xde/0x100 [ 209.042845][ T5824] cleanup_mnt+0x225/0x450 [ 209.047360][ T5824] task_work_run+0x150/0x240 [ 209.052023][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 209.057183][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.062851][ T5824] ? __pfx___x64_sys_umount+0x10/0x10 [ 209.068277][ T5824] exit_to_user_mode_loop+0xeb/0x110 [ 209.073609][ T5824] do_syscall_64+0x3f6/0x4c0 [ 209.078253][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.084175][ T5824] RIP: 0033:0x7fcb4c98fc97 [ 209.088609][ T5824] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 209.108261][ T5824] RSP: 002b:00007ffd664ccac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 209.116707][ T5824] RAX: 0000000000000000 RBX: 00007fcb4ca1089d RCX: 00007fcb4c98fc97 [ 209.124694][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd664ccb80 [ 209.132679][ T5824] RBP: 00007ffd664ccb80 R08: 0000000000000000 R09: 0000000000000000 [ 209.140683][ T5824] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd664cdc10 [ 209.148685][ T5824] R13: 00007fcb4ca1089d R14: 0000000000032596 R15: 00007ffd664cdc50 [ 209.156693][ T5824] [ 209.159730][ T5824] Modules linked in: [ 209.166061][ T5824] ---[ end trace 0000000000000000 ]--- [ 209.177811][ T5827] diWriteSpecial: failed to read aggregate inode extent! [ 209.192144][ T5824] RIP: 0010:write_special_inodes+0xa9/0x170 [ 209.198905][ T5824] Code: 2e e8 5b c7 2f 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 23 c7 2f 08 48 8d [ 209.239502][ T7612] loop6: detected capacity change from 0 to 2048 [ 209.250109][ T5824] RSP: 0018:ffffc9000405fbe8 EFLAGS: 00010216 [ 209.257256][ T5824] RAX: 0000000000000006 RBX: ffff888035bc0e00 RCX: ffffffff81f190ee [ 209.265524][ T5824] RDX: 0000000000000000 RSI: ffffffff81f190a1 RDI: 0000000000000030 [ 209.273728][ T5824] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 209.281852][ T5824] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81f258a0 [ 209.292369][ T5824] R13: 0000000000000000 R14: ffff888054d58000 R15: 1ffff1100a9ab045 [ 209.300465][ T5824] FS: 000055557e689500(0000) GS:ffff888124aaa000(0000) knlGS:0000000000000000 [ 209.309598][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.346299][ T7610] loop5: detected capacity change from 0 to 4096 [ 209.374237][ T7612] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 209.414434][ T7612] UDF-fs: unknown compression code (0) [ 209.431244][ T7565] team0: Port device team_slave_0 added [ 209.456260][ T7565] team0: Port device team_slave_1 added [ 209.476642][ T5824] CR2: 00007ff0d81ffe00 CR3: 000000005c4da000 CR4: 0000000000350ef0 [ 209.508919][ T5824] Kernel panic - not syncing: Fatal exception [ 209.515305][ T5824] Kernel Offset: disabled [ 209.519681][ T5824] Rebooting in 86400 seconds..