last executing test programs: 2m17.660075688s ago: executing program 2 (id=6152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2m17.329047074s ago: executing program 2 (id=6157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20048000) 2m16.989995478s ago: executing program 2 (id=6161): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2m16.564384193s ago: executing program 2 (id=6167): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m16.011168089s ago: executing program 2 (id=6175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) 2m15.174193362s ago: executing program 2 (id=6185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, 0x0, 0x500}, 0x38) 2m14.557966126s ago: executing program 32 (id=6185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, 0x0, 0x500}, 0x38) 4.37252113s ago: executing program 1 (id=7633): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, 0x0) 3.822601845s ago: executing program 1 (id=7641): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3.558920995s ago: executing program 0 (id=7645): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x6, 0x2, 0x0, 0x0, "f7000000000000004000", "da260d69", "0300", "fcff0300", ["50d5c296f03a00", "928e88e214f0e2b6bcb46441", "0cbb0400", "ff81002000008000"]}) 3.453236205s ago: executing program 6 (id=7648): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'cp857'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x31c, &(0x7f0000000940)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x138) 3.408645635s ago: executing program 1 (id=7649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004500)=ANY=[@ANYBLOB="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"], 0x12f4}}, 0x0) 3.274998592s ago: executing program 0 (id=7651): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0x2b, 0x4) 3.212735564s ago: executing program 3 (id=7652): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, 0x0, &(0x7f0000000080)) 3.14504926s ago: executing program 1 (id=7653): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f00000005c0)='//\xf2\x0f\x06\b///o\xdc\xea\x95K\xd6U\xc6\xbdj\xe0P\x96\xea\tfb\"\xa9\xcb\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\x01\x00\x00\x00D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b 7464 [ 856.349010][T20947] erofs (device loop6): bogus lookback distance 1 @ lcn 0 of nid 89 [ 856.380420][T20947] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 0 size 4096 => 2560 [ 856.412114][T20947] erofs (device loop6): read error -117 @ 0 of nid 89 [ 856.474462][ T30] audit: type=1800 audit(1774779780.716:59): pid=20947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6513" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 856.562370][T20951] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 856.714113][T20951] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.6516: bg 0: block 248: padding at end of block bitmap is not set [ 856.801468][T20951] loop3: lost filesystem error report for type 5 error -117 [ 856.804318][T20951] Quota error (device loop3): write_blk: dquota write failed [ 856.818035][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 856.825835][ C0] EXT4-fs (loop3): last error at time 1774779781: ext4_validate_block_bitmap:440 [ 856.925127][T20951] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 856.935188][T20951] EXT4-fs error (device loop3): ext4_acquire_dquot:6999: comm syz.3.6516: Failed to acquire dquot type 1 [ 856.979041][ T6337] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 857.061011][T20951] loop3: lost filesystem error report for type 5 error -117 [ 857.062715][T20951] EXT4-fs (loop3): 1 truncate cleaned up [ 857.150429][T20951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 857.160094][ T6337] usb 6-1: Using ep0 maxpacket: 8 [ 857.202127][T20951] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 857.211232][ T6337] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 857.226700][ T6337] usb 6-1: config 0 has no interface number 0 [ 857.267021][ T6337] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 857.298390][T20951] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 857.310625][ T6337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.362477][ T6337] usb 6-1: config 0 descriptor?? [ 857.377410][T20951] EXT4-fs error (device loop3): ext4_acquire_dquot:6999: comm syz.3.6516: Failed to acquire dquot type 1 [ 857.421882][ T6337] usb-storage 6-1:0.99: USB Mass Storage device detected [ 857.493371][ T6337] usb-storage 6-1:0.99: device ignored [ 857.555505][T20986] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 857.656618][ T6337] usb 6-1: USB disconnect, device number 116 [ 857.763264][ T6191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 857.841765][ T151] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 857.876094][ T151] EXT4-fs error (device loop3): ext4_release_dquot:7035: comm kworker/u8:6: Failed to release dquot type 1 [ 857.929441][ T151] loop3: lost filesystem error report for type 5 error -117 [ 858.287522][T20973] loop1: detected capacity change from 0 to 32768 [ 858.358582][T20973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6520 (20973) [ 858.410951][T12815] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 858.453176][T20973] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 858.507357][T20973] BTRFS info (device loop1): using sha256 checksum algorithm [ 858.615049][T12815] usb 5-1: Using ep0 maxpacket: 32 [ 858.635000][T12815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.647683][T12815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.659795][T12815] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 858.671214][T12815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.681251][T20973] BTRFS info (device loop1): enabling ssd optimizations [ 858.693575][T12815] usb 5-1: config 0 descriptor?? [ 858.706439][T12815] hub 5-1:0.0: USB hub found [ 858.756601][T20973] BTRFS info (device loop1): turning on async discard [ 858.805761][T20973] BTRFS info (device loop1): enabling free space tree [ 858.930454][T12815] hub 5-1:0.0: 1 port detected [ 859.126824][ T6184] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 859.144107][T12815] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 859.188589][T12815] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 859.206022][T21032] QAT: failed to copy from user cfg_data. [ 859.252492][T12815] usbhid 5-1:0.0: can't add hid device: -71 [ 859.291423][T12815] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 859.383651][T12815] usb 5-1: USB disconnect, device number 17 [ 859.527589][T21000] loop0: detected capacity change from 0 to 32768 [ 859.591729][T21000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6530 (21000) [ 859.641731][T21040] loop5: detected capacity change from 0 to 1024 [ 859.681775][T21000] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 859.692080][T21000] BTRFS info (device loop0): using sha256 checksum algorithm [ 859.921883][T21000] BTRFS info (device loop0): enabling ssd optimizations [ 859.940575][T21000] BTRFS info (device loop0): turning on async discard [ 859.956373][T21000] BTRFS info (device loop0): enabling free space tree [ 859.977440][ T12] hfsplus: b-tree write err: -5, ino 25 [ 860.013696][ T12] hfsplus: b-tree write err: -5, ino 4 [ 860.046815][ T12] hfsplus: b-tree write err: -5, ino 2 [ 860.099904][T21059] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6542'. [ 860.186100][T21000] BTRFS info (device loop0): balance: start -f [ 860.212391][T21000] BTRFS info (device loop0): balance: ended with status: 0 [ 860.533686][ T6185] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 861.148491][T21082] hub 8-0:1.0: USB hub found [ 861.186135][T21082] hub 8-0:1.0: 1 port detected [ 861.188493][T21039] loop6: detected capacity change from 0 to 32768 [ 861.354523][T21039] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 861.478758][T21093] loop4: detected capacity change from 0 to 4096 [ 861.492001][T21093] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 861.500460][T21039] XFS (loop6): Ending clean mount [ 861.532554][T21039] XFS (loop6): Quotacheck needed: Please wait. [ 861.772493][T21093] ntfs3(loop4): ino=1a, mi_enum_attr [ 861.779709][T21039] XFS (loop6): Quotacheck: Done. [ 861.819554][T21093] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 861.873994][T21093] ntfs3(loop4): ino=1a, mi_enum_attr [ 861.905727][T21093] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 862.076590][T20014] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 862.419549][T21112] loop5: detected capacity change from 0 to 4096 [ 862.571243][T21119] loop0: detected capacity change from 0 to 16 [ 862.621490][T21119] erofs (device loop0): mounted with root inode @ nid 36. [ 862.704095][T21119] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 862.738903][T21119] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 862.742715][T21112] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 862.755085][T21119] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 862.802527][T21119] erofs (device loop0): read error -117 @ 0 of nid 89 [ 862.869692][ T30] audit: type=1800 audit(1774779786.687:60): pid=21119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6569" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 862.973045][T21112] ntfs3(loop5): ino=21, The size of extended attributes must not exceed 64KiB [ 863.257475][T21131] netlink: 'syz.0.6574': attribute type 1 has an invalid length. [ 863.382546][T21135] loop3: detected capacity change from 0 to 1024 [ 863.443827][T21135] EXT4-fs (loop3): orphan cleanup on readonly fs [ 863.463547][T21135] EXT4-fs (loop3): 1 truncate cleaned up [ 863.483568][T21135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 863.560602][T21141] netlink: 'syz.4.6577': attribute type 1 has an invalid length. [ 863.606543][T21141] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.6577'. [ 863.655064][T21144] netlink: 'syz.0.6579': attribute type 10 has an invalid length. [ 863.680152][ T6191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.779312][T21144] team0: Port device macvlan1 added [ 863.871280][T21149] loop1: detected capacity change from 0 to 1024 [ 863.987155][ T30] audit: type=1800 audit(1774779787.744:61): pid=21149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6581" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 864.124023][T13184] hfsplus: b-tree write err: -5, ino 25 [ 864.167384][T13184] hfsplus: b-tree write err: -5, ino 4 [ 864.181576][T13184] hfsplus: b-tree write err: -5, ino 2 [ 864.214897][T12815] IPVS: starting estimator thread 0... [ 864.247213][T21158] loop0: detected capacity change from 0 to 512 [ 864.312093][T21158] EXT4-fs (loop0): Test dummy encryption mode enabled [ 864.341291][T21161] IPVS: using max 25 ests per chain, 60000 per kthread [ 864.387300][T21158] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 864.484725][T21170] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 864.493189][T21158] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 864.591279][T21158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.800920][T21158] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 864.986901][ T6185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.016128][T21188] netlink: 'syz.6.6598': attribute type 10 has an invalid length. [ 865.045212][T21189] loop4: detected capacity change from 0 to 256 [ 865.098518][T21188] team0: Port device macvlan1 added [ 865.244996][T21195] loop0: detected capacity change from 0 to 1024 [ 865.281452][ T30] audit: type=1800 audit(1774779788.951:62): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6602" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 865.498128][ T3489] hfsplus: b-tree write err: -5, ino 25 [ 865.529312][ T3489] hfsplus: b-tree write err: -5, ino 4 [ 865.537987][ T3489] hfsplus: b-tree write err: -5, ino 2 [ 865.736293][T21210] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 866.074666][T21212] loop0: detected capacity change from 0 to 4096 [ 866.099127][T21222] netlink: 'syz.1.6615': attribute type 1 has an invalid length. [ 866.126426][T21212] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 866.249066][T21212] ntfs3(loop0): ino=1a, mi_enum_attr [ 866.306590][T21212] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 866.461068][T21212] ntfs3(loop0): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 866.980622][T21242] PM: Enabling pm_trace changes system date and time during resume. [ 866.980622][T21242] PM: Correct system time has to be restored manually after resume. [ 867.049214][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6626'. [ 867.465378][T21224] loop5: detected capacity change from 0 to 32768 [ 867.565293][T21224] JBD2: Ignoring recovery information on journal [ 867.670334][T21224] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 867.760562][T21224] OCFS2: ERROR (device loop5): ocfs2_validate_gd_self: Group descriptor #1792 has bad signature [ 867.863617][T21224] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 867.939065][T21224] OCFS2: Returning error to the calling process. [ 867.965640][T21224] (syz.5.6616,21224,0):ocfs2_search_chain:1923 ERROR: status = -5 [ 868.018112][T21275] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 868.170519][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6642'. [ 868.177680][T21224] (syz.5.6616,21224,0):ocfs2_search_chain:2011 ERROR: status = -5 [ 868.183912][T21273] loop6: detected capacity change from 0 to 4096 [ 868.226480][T21224] (syz.5.6616,21224,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -5 [ 868.263420][T21224] (syz.5.6616,21224,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -5 [ 868.271994][T21224] (syz.5.6616,21224,0):ocfs2_claim_new_inode:2392 ERROR: status = -5 [ 868.294885][T21224] (syz.5.6616,21224,0):ocfs2_claim_new_inode:2407 ERROR: status = -5 [ 868.312906][T21273] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 868.314011][T21224] (syz.5.6616,21224,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 868.360103][T21224] (syz.5.6616,21224,0):ocfs2_mknod:389 ERROR: status = -5 [ 868.371182][T21273] ntfs3(loop6): Failed to load $Extend (-22). [ 868.382748][T21273] ntfs3(loop6): Failed to initialize $Extend. [ 868.400419][T21224] (syz.5.6616,21224,0):ocfs2_mknod:506 ERROR: status = -5 [ 868.443888][T21224] (syz.5.6616,21224,0):ocfs2_create:679 ERROR: status = -5 [ 868.808630][ T6198] ocfs2: Unmounting device (7,5) on (node local) [ 868.861104][T21291] syz.6.6646 uses obsolete (PF_INET,SOCK_PACKET) [ 869.310211][T21302] netlink: 'syz.0.6653': attribute type 27 has an invalid length. [ 869.758686][T21279] loop4: detected capacity change from 0 to 40427 [ 869.839133][T21279] F2FS-fs: heap/no_heap options were deprecated [ 869.881821][T21279] F2FS-fs (loop4): build fault injection rate: 19 [ 869.911999][T21279] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 869.961256][T21279] F2FS-fs (loop4): invalid crc value [ 869.966028][T21323] loop6: detected capacity change from 0 to 128 [ 869.968195][T21319] loop1: detected capacity change from 0 to 1764 [ 870.020966][T21279] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x1060 [ 870.056469][T21319] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 870.104881][T21323] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 870.165921][T21323] FAT-fs (loop6): Filesystem has been set read-only [ 870.368499][ T5801] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 870.377795][T21279] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe17/0x1690 [ 870.501904][T21335] loop5: detected capacity change from 0 to 2048 [ 870.502642][T21279] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 870.565691][T21279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 870.578282][T21335] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 870.627987][ T5801] usb 4-1: unable to get BOS descriptor or descriptor too short [ 870.642989][T21341] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 870.652601][ T5801] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 79, changing to 7 [ 870.668479][ T5801] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.686488][ T5801] usb 4-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 870.717339][T21279] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x114c/0x2fd0 [ 870.751662][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.788080][ T5801] usb 4-1: Product: syz [ 870.804504][ T5801] usb 4-1: Manufacturer: syz [ 870.813984][T21335] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 3044605952 [ 870.832837][ T5801] usb 4-1: SerialNumber: syz [ 870.865514][T21335] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 870.996880][T21335] Remounting filesystem read-only [ 871.016417][ T6196] syz-executor: attempt to access beyond end of device [ 871.016417][ T6196] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 871.046317][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 871.046372][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 871.046395][ T6196] Call Trace: [ 871.046407][ T6196] [ 871.046422][ T6196] dump_stack_lvl+0x100/0x190 [ 871.046488][ T6196] f2fs_handle_critical_error+0x5d7/0x970 [ 871.046533][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.046581][ T6196] ? f2fs_build_fault_attr+0x53/0x280 [ 871.046653][ T6196] f2fs_write_end_io+0xc3f/0xf30 [ 871.046704][ T6196] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 871.046758][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.046815][ T6196] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 871.046861][ T6196] bio_endio+0x7a3/0x910 [ 871.046905][ T6196] submit_bio_noacct+0x64c/0x2010 [ 871.046970][ T6196] f2fs_submit_write_bio+0x133/0x350 [ 871.047015][ T6196] __submit_merged_bio+0x331/0x7b0 [ 871.047068][ T6196] __submit_merged_write_cond+0x3fe/0x510 [ 871.047126][ T6196] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 871.047186][ T6196] ? __pfx___might_resched+0x10/0x10 [ 871.047228][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.047283][ T6196] ? folio_clear_dirty_for_io+0x178/0x820 [ 871.047348][ T6196] f2fs_sync_node_pages+0x1620/0x19b0 [ 871.047411][ T6196] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 871.047452][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.047497][ T6196] ? __lock_acquire+0x4a5/0x2630 [ 871.047600][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.047650][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.047696][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.047741][ T6196] ? up_write+0x290/0x4f0 [ 871.047786][ T6196] block_operations+0x932/0xfc0 [ 871.047854][ T6196] ? __pfx_block_operations+0x10/0x10 [ 871.047962][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048012][ T6196] ? ktime_get+0x200/0x300 [ 871.048061][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048109][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048155][ T6196] ? rcu_is_watching+0x12/0xc0 [ 871.048206][ T6196] f2fs_write_checkpoint+0x582/0x5550 [ 871.048280][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048325][ T6196] ? _raw_spin_unlock_irq+0x2e/0x50 [ 871.048378][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048423][ T6196] ? __wait_for_common+0x1f3/0x4c0 [ 871.048481][ T6196] ? __pfx_schedule_timeout+0x10/0x10 [ 871.048538][ T6196] ? __pfx___wait_for_common+0x10/0x10 [ 871.048594][ T6196] ? kasan_quarantine_put+0x104/0x240 [ 871.048641][ T6196] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 871.048695][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048751][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048796][ T6196] ? rcu_is_watching+0x12/0xc0 [ 871.048837][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.048883][ T6196] ? kthread_stop+0x280/0x680 [ 871.048947][ T6196] kill_f2fs_super+0x3e5/0x490 [ 871.049004][ T6196] ? __pfx_kill_f2fs_super+0x10/0x10 [ 871.049082][ T6196] ? lockdep_hardirqs_on+0x78/0x100 [ 871.049140][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.049187][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.049286][ T6196] deactivate_locked_super+0xc1/0x1b0 [ 871.049337][ T6196] deactivate_super+0xe7/0x110 [ 871.049386][ T6196] cleanup_mnt+0x21f/0x450 [ 871.049445][ T6196] task_work_run+0x150/0x240 [ 871.049487][ T6196] ? __pfx_task_work_run+0x10/0x10 [ 871.049526][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.049574][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.049628][ T6196] exit_to_user_mode_loop+0x100/0x4a0 [ 871.049696][ T6196] do_syscall_64+0x67c/0xf80 [ 871.049754][ T6196] ? irqentry_exit+0x138/0x670 [ 871.049817][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.049855][ T6196] RIP: 0033:0x7f2ba159d9d7 [ 871.049885][ T6196] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 871.049923][ T6196] RSP: 002b:00007ffe4fce12d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 871.049960][ T6196] RAX: 0000000000000000 RBX: 00007f2ba1632050 RCX: 00007f2ba159d9d7 [ 871.049985][ T6196] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4fce1390 [ 871.050007][ T6196] RBP: 00007ffe4fce1390 R08: 00007ffe4fce2390 R09: 00000000ffffffff [ 871.050031][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4fce2420 [ 871.050055][ T6196] R13: 00007f2ba1632050 R14: 00000000000cb22f R15: 00007ffe4fce2460 [ 871.050105][ T6196] [ 871.050173][ T6196] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 871.095556][T21335] NILFS (loop5): error -5 truncating bmap (ino=15) [ 871.230702][ T5801] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 871.265693][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 871.265742][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 871.265770][ T6196] Call Trace: [ 871.265782][ T6196] [ 871.265797][ T6196] dump_stack_lvl+0x100/0x190 [ 871.265862][ T6196] f2fs_handle_critical_error+0x5d7/0x970 [ 871.265907][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.265953][ T6196] ? f2fs_build_fault_attr+0x53/0x280 [ 871.266023][ T6196] f2fs_write_end_io+0xc3f/0xf30 [ 871.266074][ T6196] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 871.266125][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.266181][ T6196] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 871.266226][ T6196] bio_endio+0x7a3/0x910 [ 871.266275][ T6196] submit_bio_noacct+0x64c/0x2010 [ 871.266340][ T6196] f2fs_submit_write_bio+0x133/0x350 [ 871.266384][ T6196] __submit_merged_bio+0x331/0x7b0 [ 871.266436][ T6196] __submit_merged_write_cond+0x3fe/0x510 [ 871.266493][ T6196] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 871.266551][ T6196] ? __pfx___might_resched+0x10/0x10 [ 871.266592][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.266637][ T6196] ? folio_clear_dirty_for_io+0x178/0x820 [ 871.266811][ T6196] f2fs_sync_node_pages+0x1620/0x19b0 [ 871.266905][ T6196] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 871.266957][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.267016][ T6196] ? __lock_acquire+0x4a5/0x2630 [ 871.267147][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.267250][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.267312][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.267369][ T6196] ? up_write+0x290/0x4f0 [ 871.267425][ T6196] block_operations+0x932/0xfc0 [ 871.267509][ T6196] ? __pfx_block_operations+0x10/0x10 [ 871.267657][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.267719][ T6196] ? ktime_get+0x200/0x300 [ 871.267780][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.267841][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.267898][ T6196] ? rcu_is_watching+0x12/0xc0 [ 871.267962][ T6196] f2fs_write_checkpoint+0x582/0x5550 [ 871.268045][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.268103][ T6196] ? _raw_spin_unlock_irq+0x2e/0x50 [ 871.268170][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.268234][ T6196] ? __wait_for_common+0x1f3/0x4c0 [ 871.268303][ T6196] ? __pfx_schedule_timeout+0x10/0x10 [ 871.268367][ T6196] ? __pfx___wait_for_common+0x10/0x10 [ 871.268429][ T6196] ? kasan_quarantine_put+0x104/0x240 [ 871.268479][ T6196] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 871.268540][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.268602][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.268651][ T6196] ? rcu_is_watching+0x12/0xc0 [ 871.268695][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.268744][ T6196] ? kthread_stop+0x280/0x680 [ 871.268814][ T6196] kill_f2fs_super+0x3e5/0x490 [ 871.268875][ T6196] ? __pfx_kill_f2fs_super+0x10/0x10 [ 871.268959][ T6196] ? lockdep_hardirqs_on+0x78/0x100 [ 871.269022][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.269073][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.269140][ T6196] deactivate_locked_super+0xc1/0x1b0 [ 871.269195][ T6196] deactivate_super+0xe7/0x110 [ 871.269254][ T6196] cleanup_mnt+0x21f/0x450 [ 871.269318][ T6196] task_work_run+0x150/0x240 [ 871.269360][ T6196] ? __pfx_task_work_run+0x10/0x10 [ 871.269400][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.269448][ T6196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.269503][ T6196] exit_to_user_mode_loop+0x100/0x4a0 [ 871.269570][ T6196] do_syscall_64+0x67c/0xf80 [ 871.269629][ T6196] ? irqentry_exit+0x138/0x670 [ 871.269692][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.269732][ T6196] RIP: 0033:0x7f2ba159d9d7 [ 871.269765][ T6196] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 871.269802][ T6196] RSP: 002b:00007ffe4fce12d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 871.269838][ T6196] RAX: 0000000000000000 RBX: 00007f2ba1632050 RCX: 00007f2ba159d9d7 [ 871.269863][ T6196] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4fce1390 [ 871.269887][ T6196] RBP: 00007ffe4fce1390 R08: 00007ffe4fce2390 R09: 00000000ffffffff [ 871.269912][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4fce2420 [ 871.269936][ T6196] R13: 00007f2ba1632050 R14: 00000000000cb22f R15: 00007ffe4fce2460 [ 871.269988][ T6196] [ 871.279913][ T6196] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 871.416877][ T5801] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 872.011945][ T6198] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 872.023909][ T5801] usb 4-1: can't set first interface for hiFace device. [ 872.043322][T21355] vivid-000: ================= START STATUS ================= [ 872.065414][T21355] vivid-000: Generate PTS: true [ 872.117937][T21355] vivid-000: Generate SCR: true [ 872.131256][ T5801] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 872.154831][T21355] tpg source WxH: 320x180 (Y'CbCr) [ 872.174318][T21355] tpg field: 1 [ 872.184643][T21355] tpg crop: (0,0)/320x180 [ 872.191483][T21355] tpg compose: (0,0)/320x180 [ 872.211882][T21355] tpg colorspace: 8 [ 872.217195][T21355] tpg transfer function: 0/0 [ 872.248883][T21360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.250002][ T5801] usb 4-1: can't set first interface for hiFace device. [ 872.271907][T21355] tpg Y'CbCr encoding: 0/0 [ 872.291492][T21355] tpg quantization: 0/0 [ 872.295990][T21355] tpg RGB range: 0/2 [ 872.309013][ T5801] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 872.319079][T21362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.325624][T21355] vivid-000: ================== END STATUS ================== [ 872.411516][ T5801] usb 4-1: can't set first interface for hiFace device. [ 872.418553][ T5801] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 872.511297][ T5801] usb 4-1: USB disconnect, device number 16 [ 872.778158][ T6158] udevd[6158]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.986210][T21381] netlink: 'syz.5.6689': attribute type 16 has an invalid length. [ 872.994097][T21381] netlink: 'syz.5.6689': attribute type 17 has an invalid length. [ 873.051326][T21381] netlink: 'syz.5.6689': attribute type 27 has an invalid length. [ 873.716707][T21403] loop3: detected capacity change from 0 to 4096 [ 873.755446][T21403] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 873.767783][T21409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 873.775416][T21409] IPv6: NLM_F_CREATE should be set when creating new route [ 873.782743][T21409] IPv6: NLM_F_CREATE should be set when creating new route [ 873.915830][T21403] ntfs3(loop3): ino=19, mi_enum_attr [ 873.921384][T21403] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 874.119183][T21403] ntfs3(loop3): ino=20, mi_enum_attr [ 874.194534][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6708'. [ 874.247038][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6708'. [ 874.824550][ T6337] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 874.953769][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6720'. [ 875.035338][ T6337] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 875.067184][ T6337] usb 6-1: config 0 has no interface number 0 [ 875.091246][ T6337] usb 6-1: config 0 interface 41 has no altsetting 0 [ 875.126360][ T6337] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 875.155348][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.185615][ T6337] usb 6-1: Product: syz [ 875.208970][ T6337] usb 6-1: Manufacturer: syz [ 875.220558][ T6337] usb 6-1: SerialNumber: syz [ 875.276416][ T6337] usb 6-1: config 0 descriptor?? [ 875.745828][ T6337] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 875.769284][T21470] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6733'. [ 875.796951][ T6337] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 875.851210][ T6337] usb 6-1: USB disconnect, device number 117 [ 876.398851][T21492] openvswitch: netlink: Missing key (keys=40, expected=80) [ 876.474609][T21494] loop1: detected capacity change from 0 to 764 [ 876.563888][T21494] Symlink component flag not implemented [ 876.590205][T21494] Symlink component flag not implemented (122) [ 877.275526][ T6307] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 877.463548][ T6307] usb 2-1: Using ep0 maxpacket: 32 [ 877.480475][ T6307] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 877.520614][ T6307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.556949][ T6307] usb 2-1: Product: syz [ 877.561981][ T6307] usb 2-1: Manufacturer: syz [ 877.566909][ T6307] usb 2-1: SerialNumber: syz [ 877.592360][ T6307] usb 2-1: config 0 descriptor?? [ 877.619578][ T6307] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 877.762558][T21537] set match dimension is over the limit! [ 877.856259][ T6307] gspca_sn9c2028: read1 error -71 [ 877.876307][ T6307] gspca_sn9c2028: read1 error -71 [ 877.891267][ T6307] gspca_sn9c2028: read1 error -71 [ 877.901805][ T6307] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 878.018645][ T6307] usb 2-1: USB disconnect, device number 9 [ 878.692142][T21529] loop5: detected capacity change from 0 to 32768 [ 878.709990][T21562] trusted_key: encrypted_key: hex blob is missing [ 878.728101][T21529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6756 (21529) [ 878.747915][ T5801] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 878.809661][T21529] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 878.864133][T21529] BTRFS info (device loop5): using sha256 checksum algorithm [ 878.942309][ T5801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.974219][ T5801] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.996747][T21567] loop6: detected capacity change from 0 to 4096 [ 879.006171][ T5801] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.024986][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.025313][T21529] BTRFS info (device loop5): enabling ssd optimizations [ 879.033153][ T5801] usb 4-1: Product: syz [ 879.033191][ T5801] usb 4-1: Manufacturer: syz [ 879.033226][ T5801] usb 4-1: SerialNumber: syz [ 879.061194][ T5801] cdc_ncm 4-1:1.0: skipping garbage [ 879.066765][T21529] BTRFS info (device loop5): turning on async discard [ 879.073598][T21529] BTRFS info (device loop5): enabling free space tree [ 879.080642][ T5801] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 879.090254][ T5801] cdc_ncm 4-1:1.0: bind() failure [ 879.098203][T21567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.102382][ T5801] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 879.119091][ T5801] cdc_ncm 4-1:1.1: bind() failure [ 879.317129][ T6198] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 879.327558][T21567] Quota error (device loop6): do_check_range: Getting block 256 out of range 1-5 [ 879.391257][T21567] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 879.445255][ T5801] usb 4-1: USB disconnect, device number 17 [ 879.455945][T21567] EXT4-fs error (device loop6): ext4_acquire_dquot:6999: comm syz.6.6773: Failed to acquire dquot type 1 [ 879.790829][T20014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.127185][ T30] audit: type=1326 audit(1774779802.839:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 880.157745][T21606] netlink: 'syz.6.6782': attribute type 30 has an invalid length. [ 880.165665][T21606] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6782'. [ 880.252808][ T30] audit: type=1326 audit(1774779802.839:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 880.335055][ T30] audit: type=1326 audit(1774779802.839:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 880.373728][ T30] audit: type=1326 audit(1774779802.839:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 880.397354][ T30] audit: type=1326 audit(1774779802.876:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 880.420513][ T30] audit: type=1326 audit(1774779802.885:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 880.454331][ T30] audit: type=1326 audit(1774779802.885:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 880.477517][ T30] audit: type=1326 audit(1774779802.885:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515279c799 code=0x7ffc0000 [ 881.438148][T21643] @: renamed from bond_slave_0 (while UP) [ 881.562219][T21644] bond2: option downdelay: invalid value (18446744073709551615) [ 881.570945][T21644] bond2: option downdelay: allowed values 0 - 2147483647 [ 881.591022][T21644] bond2 (unregistering): Released all slaves [ 881.626091][T21603] loop1: detected capacity change from 0 to 32768 [ 881.685047][T21603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6784 (21603) [ 881.754395][T21603] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 881.819619][T21603] BTRFS info (device loop1): using sha256 checksum algorithm [ 882.049761][T21603] BTRFS info (device loop1): rebuilding free space tree [ 882.176578][T21603] BTRFS info (device loop1): enabling ssd optimizations [ 882.197529][T21603] BTRFS info (device loop1): using spread ssd allocation scheme [ 882.205346][T21603] BTRFS info (device loop1): turning on async discard [ 882.282721][T21603] BTRFS info (device loop1): enabling free space tree [ 882.326734][T21603] BTRFS info (device loop1): force clearing of disk cache [ 882.560882][T21680] loop3: detected capacity change from 0 to 256 [ 882.598865][T21640] loop5: detected capacity change from 0 to 32768 [ 882.606852][T21680] exfat: Deprecated parameter 'utf8' [ 882.612238][T21680] exfat: Deprecated parameter 'utf8' [ 882.667859][T21680] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dfeff5, utbl_chksum : 0xe619d30d) [ 882.726125][T21640] [ 882.726125][T21640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 882.726125][T21640] [ 882.786719][T21680] overlay: filesystem on ./file0 not supported [ 882.804659][ T6184] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 883.018704][ T6198] [ 883.018704][ T6198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 883.018704][ T6198] [ 883.044874][ T6198] [ 883.044874][ T6198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 883.044874][ T6198] [ 883.394388][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6820'. [ 883.608181][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 883.664594][ T6219] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 883.742532][T21671] loop0: detected capacity change from 0 to 32768 [ 883.793010][T21671] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6809 (21671) [ 883.856220][ T6219] usb 7-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 883.864845][T21707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6826'. [ 883.909012][T21671] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 883.929682][ T6219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.955405][T21671] BTRFS info (device loop0): using sha256 checksum algorithm [ 884.061702][ T6219] pwc: Logitech/Cisco VT Camera webcam detected. [ 884.235944][T21671] BTRFS info (device loop0): enabling ssd optimizations [ 884.324103][T21671] BTRFS info (device loop0): turning on async discard [ 884.377969][ T6337] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 884.387279][T21671] BTRFS info (device loop0): enabling free space tree [ 884.517663][ T6219] pwc: send_video_command error -71 [ 884.522919][ T6219] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 884.561447][ T6337] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 884.581970][ T6219] Philips webcam 7-1:127.0: probe with driver Philips webcam failed with error -71 [ 884.623182][ T6337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 884.650242][ T6219] usb 7-1: USB disconnect, device number 5 [ 884.673845][ T6337] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 884.717612][ T6337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 884.752768][ T6337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 884.766148][ T6185] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 884.812813][ T6337] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 884.838730][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.879256][ T6337] usb 6-1: Product: syz [ 884.894506][ T6337] usb 6-1: Manufacturer: syz [ 884.908433][ T6337] usb 6-1: SerialNumber: syz [ 884.950839][ T6337] usb 6-1: config 0 descriptor?? [ 884.985871][ T6337] iguanair 6-1:0.0: failed to get version [ 885.030526][ T6337] iguanair 6-1:0.0: probe with driver iguanair failed with error -90 [ 885.382242][ T6337] usb 6-1: USB disconnect, device number 118 [ 886.212078][T14607] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 886.528809][T21786] loop3: detected capacity change from 0 to 256 [ 886.636180][T21786] FAT-fs (loop3): Directory bread(block 64) failed [ 886.674830][T21786] FAT-fs (loop3): Directory bread(block 65) failed [ 886.696337][T21786] FAT-fs (loop3): Directory bread(block 66) failed [ 886.734330][T21786] FAT-fs (loop3): Directory bread(block 67) failed [ 886.773856][T21786] FAT-fs (loop3): Directory bread(block 68) failed [ 886.780793][T21786] FAT-fs (loop3): Directory bread(block 69) failed [ 886.822172][T21796] loop6: detected capacity change from 0 to 2048 [ 886.830513][T21786] FAT-fs (loop3): Directory bread(block 70) failed [ 886.866020][T21786] FAT-fs (loop3): Directory bread(block 71) failed [ 886.894528][T21786] FAT-fs (loop3): Directory bread(block 72) failed [ 886.901358][T21786] FAT-fs (loop3): Directory bread(block 73) failed [ 886.918541][T21796] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 886.966768][T21800] loop5: detected capacity change from 0 to 256 [ 887.006496][T21805] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 887.036364][T21800] exfat: Deprecated parameter 'namecase' [ 887.143722][T21800] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 887.369762][ T6219] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 887.587841][T21818] loop5: detected capacity change from 0 to 128 [ 887.606723][ T6219] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 887.614988][ T6219] usb 4-1: config 5 has no interface number 0 [ 887.654264][T21818] FAT-fs (loop5): Directory bread(block 414) failed [ 887.662689][ T6219] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 887.685547][T21818] FAT-fs (loop5): Directory bread(block 415) failed [ 887.700727][ T6219] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 24242, setting to 64 [ 887.716872][T21818] FAT-fs (loop5): Directory bread(block 416) failed [ 887.743674][T21818] FAT-fs (loop5): Directory bread(block 417) failed [ 887.750480][ T6219] usb 4-1: config 5 interface 123 has no altsetting 0 [ 887.772208][T21818] FAT-fs (loop5): Directory bread(block 418) failed [ 887.786405][ T6219] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 887.818359][T21818] FAT-fs (loop5): Directory bread(block 419) failed [ 887.818472][ T6219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.825034][T21818] FAT-fs (loop5): Directory bread(block 420) failed [ 887.856774][ T6219] usb 4-1: Product: syz [ 887.881051][ T6219] usb 4-1: Manufacturer: syz [ 887.899335][ T6219] usb 4-1: SerialNumber: syz [ 887.927544][T21786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 887.931288][T21818] FAT-fs (loop5): Directory bread(block 421) failed [ 887.953393][T21827] netlink: 'syz.1.6877': attribute type 30 has an invalid length. [ 887.978710][T21827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6877'. [ 888.121417][T21818] FAT-fs (loop5): FAT read failed (blocknr 128) [ 888.190796][ T6219] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 888.217450][T21834] IPv6: sit1: Disabled Multicast RS [ 888.242338][ T6219] usb 4-1: USB disconnect, device number 18 [ 888.288546][ T6470] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 888.473238][T21836] netlink: 'syz.1.6882': attribute type 92 has an invalid length. [ 888.490985][ T6470] usb 1-1: Using ep0 maxpacket: 32 [ 888.540014][ T6470] usb 1-1: unable to get BOS descriptor or descriptor too short [ 888.568916][ T6470] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 888.608729][ T6470] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 888.630534][ T6470] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 888.639660][ T6470] usb 1-1: config 128 has no interface number 0 [ 888.683951][ T6470] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 888.715922][ T6470] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 888.726225][ T6470] usb 1-1: config 128 interface 127 has no altsetting 0 [ 888.783420][ T6470] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 888.802871][ T6470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.844338][ T6470] usb 1-1: Product: syz [ 888.870003][ T6470] usb 1-1: Manufacturer: syz [ 888.886880][ T6470] usb 1-1: SerialNumber: syz [ 888.919212][T21821] loop4: detected capacity change from 0 to 32768 [ 889.010169][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 889.010198][ T30] audit: type=1326 audit(1774779811.167:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.048498][ T30] audit: type=1326 audit(1774779811.195:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.064296][T21821] JBD2: Ignoring recovery information on journal [ 889.071698][ T30] audit: type=1326 audit(1774779811.195:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.071790][ T30] audit: type=1326 audit(1774779811.205:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.071866][ T30] audit: type=1326 audit(1774779811.205:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.071948][ T30] audit: type=1326 audit(1774779811.205:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.072028][ T30] audit: type=1326 audit(1774779811.205:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.072112][ T30] audit: type=1326 audit(1774779811.205:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.072191][ T30] audit: type=1326 audit(1774779811.205:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21849 comm="syz.1.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 889.222236][T21855] loop6: detected capacity change from 0 to 64 [ 889.366837][T21821] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 889.531214][T21821] OCFS2: ERROR (device loop4): ocfs2_validate_gd_self: Group descriptor #1792 has bad signature [ 889.541940][T21862] loop3: detected capacity change from 0 to 64 [ 889.562536][ T6470] usb 1-1: USB disconnect, device number 12 [ 889.571667][T21821] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 889.635026][T21821] OCFS2: Returning error to the calling process. [ 889.664590][T21821] (syz.4.6874,21821,0):ocfs2_search_chain:1923 ERROR: status = -5 [ 889.703672][T21821] (syz.4.6874,21821,0):ocfs2_search_chain:2011 ERROR: status = -5 [ 889.772747][T21821] (syz.4.6874,21821,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -5 [ 889.848634][T21821] (syz.4.6874,21821,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -5 [ 889.857144][T21821] (syz.4.6874,21821,0):ocfs2_claim_new_inode:2392 ERROR: status = -5 [ 889.911886][T21821] (syz.4.6874,21821,1):ocfs2_claim_new_inode:2407 ERROR: status = -5 [ 890.016001][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.035708][T21821] (syz.4.6874,21821,1):ocfs2_mknod_locked:642 ERROR: status = -5 [ 890.094434][T21821] (syz.4.6874,21821,1):ocfs2_mknod:389 ERROR: status = -5 [ 890.101928][T21821] (syz.4.6874,21821,1):ocfs2_mknod:506 ERROR: status = -5 [ 890.196772][T21821] (syz.4.6874,21821,1):ocfs2_create:679 ERROR: status = -5 [ 890.555633][ T6196] ocfs2: Unmounting device (7,4) on (node local) [ 890.653744][T21888] loop1: detected capacity change from 0 to 128 [ 890.738627][T21896] loop6: detected capacity change from 0 to 256 [ 890.782413][T21888] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 890.825679][T21896] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 890.914082][T21888] ext4 filesystem being mounted at /1133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 890.942025][T21900] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6905'. [ 891.120769][ T6184] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 891.495009][T21915] program syz.1.6914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.901870][T21930] loop4: detected capacity change from 0 to 1024 [ 891.971039][T21930] hfsplus: invalid file type 0174377 for inode 21 [ 892.336886][T21940] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 892.671804][T21913] loop0: detected capacity change from 0 to 32768 [ 892.812961][T21913] JBD2: Ignoring recovery information on journal [ 892.848542][T21962] loop5: detected capacity change from 0 to 128 [ 892.915831][T21962] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 892.940608][T21913] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 893.012266][T21962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.108040][T21913] OCFS2: ERROR (device loop0): ocfs2_xattr_find_entry: corrupted xattr entries [ 893.108126][T21913] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 893.187432][T21913] OCFS2: File system is now read-only. [ 893.255815][T21913] (syz.0.6917,21913,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 893.332378][T21913] (syz.0.6917,21913,0):ocfs2_mknod:338 ERROR: status = -117 [ 893.386101][T21913] (syz.0.6917,21913,1):ocfs2_mknod:506 ERROR: status = -117 [ 893.540853][T21977] loop3: detected capacity change from 0 to 1024 [ 893.579105][T21983] loop1: detected capacity change from 0 to 128 [ 893.642349][T21983] EXT4-fs (loop1): Test dummy encryption mode enabled [ 893.700432][T21983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 893.749556][T21986] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 893.784070][T21983] ext4 filesystem being mounted at /1141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.805081][ T6185] ocfs2: Unmounting device (7,0) on (node local) [ 893.960240][T21983] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 893.973467][T13184] hfsplus: b-tree write err: -5, ino 25 [ 893.979332][T13184] hfsplus: b-tree write err: -5, ino 4 [ 894.012862][T13184] hfsplus: b-tree write err: -5, ino 2 [ 894.313874][ T6184] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 894.563826][T22006] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6961'. [ 894.593287][ T6470] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 894.777749][ T6470] usb 6-1: Using ep0 maxpacket: 32 [ 894.790813][ T6470] usb 6-1: unable to get BOS descriptor or descriptor too short [ 894.806144][T22008] set_capacity_and_notify: 1 callbacks suppressed [ 894.806173][T22008] loop3: detected capacity change from 0 to 2048 [ 894.816828][ T6470] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 894.839213][ T6470] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 894.885584][ T6470] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 894.924861][ T6470] usb 6-1: config 128 has no interface number 0 [ 894.931857][T22008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.941378][T22013] loop1: detected capacity change from 0 to 1024 [ 894.959755][ T6470] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 894.995228][ T6470] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 895.028139][ T6470] usb 6-1: config 128 interface 127 has no altsetting 0 [ 895.078637][ T6470] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 895.127582][ T6470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.170480][ T6470] usb 6-1: Product: syz [ 895.181533][ T6470] usb 6-1: Manufacturer: syz [ 895.191076][ T6470] usb 6-1: SerialNumber: syz [ 895.541724][T22028] netlink: 'syz.4.6972': attribute type 1 has an invalid length. [ 895.663689][ T6470] usb 6-1: USB disconnect, device number 119 [ 895.964062][ T6158] udevd[6158]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.144110][T22048] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6982'. [ 896.158002][T22050] loop3: detected capacity change from 0 to 256 [ 896.219824][T22051] loop4: detected capacity change from 0 to 1024 [ 896.818354][T22067] loop1: detected capacity change from 0 to 64 [ 896.854718][T22067] syz.1.6991: attempt to access beyond end of device [ 896.854718][T22067] loop1: rw=8388608, sector=16777216, nr_sectors = 2 limit=64 [ 896.922948][T22067] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 896.985758][T22067] syz.1.6991: attempt to access beyond end of device [ 896.985758][T22067] loop1: rw=8388608, sector=16777216, nr_sectors = 2 limit=64 [ 897.012378][T22067] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 897.284232][T22083] loop4: detected capacity change from 0 to 256 [ 897.367802][T22078] loop0: detected capacity change from 0 to 4096 [ 897.425989][T22078] EXT4-fs (loop0): Test dummy encryption mode enabled [ 897.483319][T22078] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 897.523578][T22078] System zones: 0-5 [ 897.611597][T22078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.895784][T22102] loop6: detected capacity change from 0 to 64 [ 897.954472][ T6185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.219420][T22106] loop3: detected capacity change from 0 to 4096 [ 898.457444][T22106] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 898.493884][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7014'. [ 898.513539][T22115] geneve2: entered promiscuous mode [ 898.525668][T22115] geneve2: entered allmulticast mode [ 898.705923][T22120] netlink: 'syz.0.7016': attribute type 13 has an invalid length. [ 898.747793][T22120] gretap0: refused to change device tx_queue_len [ 898.793481][T22120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 899.463700][T22140] loop1: detected capacity change from 0 to 8 [ 899.589391][T22108] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7011 (22108) [ 899.688699][T22108] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 899.751735][T22108] BTRFS info (device loop4): using sha256 checksum algorithm [ 899.825175][T22150] 5n: entered promiscuous mode [ 899.957973][ T30] audit: type=1326 audit(1774779821.405:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.1.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 900.014097][ T30] audit: type=1326 audit(1774779821.461:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.1.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 900.038509][ T30] audit: type=1326 audit(1774779821.461:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.1.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 900.062831][T22108] BTRFS info (device loop4): enabling ssd optimizations [ 900.070411][T22108] BTRFS info (device loop4): turning on async discard [ 900.083689][T22108] BTRFS info (device loop4): enabling free space tree [ 900.094006][ T30] audit: type=1326 audit(1774779821.461:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.1.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 900.132691][ T30] audit: type=1326 audit(1774779821.461:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.1.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39059c799 code=0x7ffc0000 [ 900.426635][ T6196] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 900.695228][T12815] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 900.948046][T12815] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 900.990517][T12815] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 901.042411][T12815] usb 7-1: config 0 has no interface number 0 [ 901.066197][T12815] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 14385, setting to 64 [ 901.079732][ T6470] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 901.109296][T12815] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.154287][T12815] usb 7-1: config 0 interface 52 has no altsetting 0 [ 901.211687][T12815] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 901.251017][T12815] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 901.259349][T12815] usb 7-1: Manufacturer: syz [ 901.284744][ T6470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 901.298970][ T6470] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 901.319085][T22202] set_capacity_and_notify: 1 callbacks suppressed [ 901.319114][T22202] loop0: detected capacity change from 0 to 4096 [ 901.323516][T12815] usb 7-1: config 0 descriptor?? [ 901.348890][ T6470] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 901.373655][T22202] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 901.379808][ T6470] usb 2-1: config 63 has no interface number 0 [ 901.399860][ T6470] usb 2-1: config 63 interface 66 has no altsetting 0 [ 901.434544][T12815] hub 7-1:0.52: bad descriptor, ignoring hub [ 901.440668][T12815] hub 7-1:0.52: probe with driver hub failed with error -5 [ 901.455710][ T6470] usb 2-1: string descriptor 0 read error: -22 [ 901.464435][ T6470] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 901.486471][ T6470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.547094][ T6470] uvcvideo 2-1:63.66: Found UVC 0.07 device (174f:8acf) [ 901.570334][ T6470] uvcvideo 2-1:63.66: No valid video chain found. [ 901.587361][T22212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7051'. [ 901.651927][T12815] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input53 [ 901.689158][T22202] ntfs3(loop0): ino=19, mi_enum_attr [ 901.736492][T22202] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 901.867077][T22202] ntfs3(loop0): failed to convert "c46c" to macceltic [ 901.883529][T22202] ntfs3(loop0): ino=20, mi_enum_attr [ 901.894109][ T6219] usb 2-1: USB disconnect, device number 10 [ 901.996849][T22218] loop5: detected capacity change from 0 to 1024 [ 902.023072][ T6476] usb 7-1: USB disconnect, device number 6 [ 902.655058][T22231] loop0: detected capacity change from 0 to 256 [ 902.744965][T22238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7064'. [ 902.775933][T22237] loop1: detected capacity change from 0 to 1764 [ 902.782896][T22238] netlink: 15 bytes leftover after parsing attributes in process `syz.6.7064'. [ 902.830900][T22237] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 903.145708][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7068'. [ 903.586966][T22258] loop0: detected capacity change from 0 to 256 [ 903.666521][T22262] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7078'. [ 903.708174][T22262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7078'. [ 903.829562][T22266] loop4: detected capacity change from 0 to 2048 [ 903.858388][T22266] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 903.903821][T22266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.117666][T22277] overlayfs: missing 'lowerdir' [ 904.446175][T22283] loop3: detected capacity change from 0 to 1024 [ 904.543869][T22283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.705754][ T6191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.123211][T22308] loop5: detected capacity change from 0 to 8 [ 905.238704][T22308] SQUASHFS error: zstd decompression error: 10 [ 905.255941][T22312] loop6: detected capacity change from 0 to 2048 [ 905.268078][T22308] SQUASHFS error: zstd decompression failed, data probably corrupt [ 905.287464][T22308] SQUASHFS error: Failed to read block 0x62b: -5 [ 905.304038][T22308] SQUASHFS error: Unable to read metadata cache entry [629] [ 905.337968][T22308] SQUASHFS error: Unable to read directory block [629:ff26] [ 905.350316][T22312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 905.443140][ T30] audit: type=1800 audit(1774779826.542:87): pid=22312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7099" name="file1" dev="loop6" ino=1367 res=0 errno=0 [ 905.592464][ T30] audit: type=1400 audit(1774779826.542:88): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=22317 comm="syz.0.7103" [ 906.005008][T22326] loop0: detected capacity change from 0 to 4096 [ 906.107050][T22326] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 906.172768][T22326] ntfs3(loop0): ino=1a, mi_enum_attr [ 906.196307][T22326] ntfs3(loop0): ino=1a, mi_enum_attr [ 906.214917][T22326] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 906.338016][T22326] ntfs3(loop0): ino=5, "/" indx_read_ra [ 906.363347][T22340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 907.074150][T22359] geneve2: entered promiscuous mode [ 907.118530][T22359] geneve2: entered allmulticast mode [ 908.004501][T22392] binder: 22389:22392 ioctl c018620c 2000000002c0 returned -1 [ 908.497133][T22406] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7146'. [ 908.566674][T22406] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7146'. [ 908.790684][T22378] set_capacity_and_notify: 1 callbacks suppressed [ 908.790714][T22378] loop4: detected capacity change from 0 to 32768 [ 908.838961][T22378] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7135 (22378) [ 908.933925][T22378] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 908.994590][T22378] BTRFS info (device loop4): using sha256 checksum algorithm [ 909.268950][T22378] BTRFS info (device loop4): checking UUID tree [ 909.292502][T22378] BTRFS info (device loop4): allowing degraded mounts [ 909.320982][T22378] BTRFS info (device loop4): enabling free space tree [ 909.327887][T22378] BTRFS info (device loop4): enabling auto defrag [ 909.385411][T22378] BTRFS info (device loop4): force zstd compression, level 3 [ 909.593776][T22378] BTRFS info (device loop4 state M): turning on flush-on-commit [ 909.760169][ T6196] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 909.781655][T22460] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 910.059056][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7168'. [ 910.090379][T22466] openvswitch: netlink: Missing key (keys=40, expected=80) [ 910.585458][T22480] i2c i2c-0: Invalid block write size 58 [ 910.808105][T22486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7176'. [ 910.970350][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.449429][T22463] loop5: detected capacity change from 0 to 32768 [ 911.605564][T22463] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 911.639688][T22482] loop0: detected capacity change from 0 to 32768 [ 911.719601][T22482] JBD2: Ignoring recovery information on journal [ 911.945237][T22463] XFS (loop5): Ending clean mount [ 911.991508][T22482] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 912.015887][T22463] XFS (loop5): Quotacheck needed: Please wait. [ 912.236333][T22463] XFS (loop5): Quotacheck: Done. [ 912.304068][T22482] OCFS2: ERROR (device loop0): ocfs2_validate_gd_self: Group descriptor #1792 has bad signature [ 912.351826][T22482] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 912.406432][T22482] OCFS2: Returning error to the calling process. [ 912.440969][T22482] (syz.0.7175,22482,0):ocfs2_search_chain:1923 ERROR: status = -5 [ 912.469884][T22482] (syz.0.7175,22482,1):ocfs2_search_chain:2011 ERROR: status = -5 [ 912.524561][T22482] (syz.0.7175,22482,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -5 [ 912.550411][T22482] (syz.0.7175,22482,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -5 [ 912.579095][T22482] (syz.0.7175,22482,0):ocfs2_claim_new_inode:2392 ERROR: status = -5 [ 912.587328][T22482] (syz.0.7175,22482,0):ocfs2_claim_new_inode:2407 ERROR: status = -5 [ 912.631742][ T6198] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 912.658542][T22482] (syz.0.7175,22482,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 912.681492][T22538] netlink: 1372 bytes leftover after parsing attributes in process `syz.6.7198'. [ 912.718838][T22482] (syz.0.7175,22482,0):ocfs2_mknod:389 ERROR: status = -5 [ 912.815663][T22482] (syz.0.7175,22482,1):ocfs2_mknod:506 ERROR: status = -5 [ 912.853801][T22482] (syz.0.7175,22482,1):ocfs2_create:679 ERROR: status = -5 [ 913.206379][T22550] loop6: detected capacity change from 0 to 256 [ 913.217967][T22550] exfat: Deprecated parameter 'utf8' [ 913.254135][T22550] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 913.279123][ T6185] ocfs2: Unmounting device (7,0) on (node local) [ 913.484849][T22554] loop3: detected capacity change from 0 to 1764 [ 913.853905][T22562] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 913.998419][T22569] libceph: resolve '00' (ret=-3): failed [ 914.499019][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7224'. [ 914.525681][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7224'. [ 914.576690][T12815] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 914.730332][T22598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7228'. [ 914.795035][T12815] usb 6-1: Using ep0 maxpacket: 32 [ 914.805646][T12815] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 914.821903][ T6476] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 914.843259][T12815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.851392][T12815] usb 6-1: Product: syz [ 914.885020][T12815] usb 6-1: Manufacturer: syz [ 914.895439][T12815] usb 6-1: SerialNumber: syz [ 914.937137][T12815] empeg 6-1:1.0: empeg converter detected [ 914.943664][ T5801] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 915.014753][ T6476] usb 4-1: Using ep0 maxpacket: 32 [ 915.048539][ T6476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.071659][ T6476] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 915.081712][ T6476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.099857][ T6476] usb 4-1: Product: syz [ 915.104117][ T6476] usb 4-1: Manufacturer: syz [ 915.118873][ T6476] usb 4-1: SerialNumber: syz [ 915.135900][ T6476] usb 4-1: config 0 descriptor?? [ 915.143008][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 915.162880][ T5801] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 915.184839][T12815] usb 6-1: empeg converter now attached to ttyUSB0 [ 915.206821][ T5801] usb 1-1: config 179 has no interface number 0 [ 915.213231][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 915.257198][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 915.281609][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 915.334795][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 915.372446][ T5801] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 915.422927][ T6476] ljca 4-1:0.0: bulk endpoints not found [ 915.444246][ T5801] usb 1-1: config 179 interface 65 has no altsetting 0 [ 915.451252][ T5801] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 915.461101][ T6307] usb 6-1: USB disconnect, device number 120 [ 915.473269][ T6476] usb 4-1: USB disconnect, device number 19 [ 915.528469][ T6307] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 915.559218][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.562558][ T6307] empeg 6-1:1.0: device disconnected [ 915.622074][ T5801] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input55 [ 915.938904][ T6476] usb 1-1: USB disconnect, device number 13 [ 916.812213][T22646] bridge2: entered promiscuous mode [ 917.290875][T22666] loop5: detected capacity change from 0 to 1024 [ 917.342505][T22666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.447123][T22676] loop1: detected capacity change from 0 to 8 [ 917.514822][T22666] EXT4-fs warning (device loop5): ext4_rmdir:3182: inode #11: comm syz.5.7262: empty directory 'file1' has too many links (111) [ 917.784002][ T6198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.299324][T22696] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 918.405344][T22675] loop3: detected capacity change from 0 to 32768 [ 918.432041][T22702] loop5: detected capacity change from 0 to 64 [ 918.492919][T22675] JBD2: Ignoring recovery information on journal [ 918.567132][T12815] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 918.594440][T22702] syz.5.7277: attempt to access beyond end of device [ 918.594440][T22702] loop5: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 918.642244][T22675] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 918.669081][T22702] Buffer I/O error on dev loop5, logical block 512, async page read [ 918.707497][T22702] syz.5.7277: attempt to access beyond end of device [ 918.707497][T22702] loop5: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 918.741677][T22702] Buffer I/O error on dev loop5, logical block 56576, async page read [ 918.767500][T22675] OCFS2: ERROR (device loop3): ocfs2_validate_gd_self: Group descriptor #1792 has bad signature [ 918.789908][T22675] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 918.812981][T12815] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 918.834232][T12815] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 918.842017][T22675] OCFS2: Returning error to the calling process. [ 918.895173][T22675] (syz.3.7264,22675,1):ocfs2_search_chain:1923 ERROR: status = -5 [ 918.903953][T12815] usb 5-1: config 0 has no interface number 0 [ 918.910231][T12815] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 14385, setting to 64 [ 918.959523][T22675] (syz.3.7264,22675,0):ocfs2_search_chain:2011 ERROR: status = -5 [ 918.967437][T22675] (syz.3.7264,22675,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -5 [ 918.981461][T12815] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.033591][T12815] usb 5-1: config 0 interface 52 has no altsetting 0 [ 919.061611][T12815] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 919.074969][T22675] (syz.3.7264,22675,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -5 [ 919.094894][T12815] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 919.126811][T12815] usb 5-1: Manufacturer: syz [ 919.139411][T22675] (syz.3.7264,22675,0):ocfs2_claim_new_inode:2392 ERROR: status = -5 [ 919.165354][T22675] (syz.3.7264,22675,0):ocfs2_claim_new_inode:2407 ERROR: status = -5 [ 919.182926][T12815] usb 5-1: config 0 descriptor?? [ 919.199241][T22675] (syz.3.7264,22675,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 919.213239][T12815] hub 5-1:0.52: bad descriptor, ignoring hub [ 919.219988][T12815] hub 5-1:0.52: probe with driver hub failed with error -5 [ 919.228837][T22675] (syz.3.7264,22675,0):ocfs2_mknod:389 ERROR: status = -5 [ 919.239675][T22675] (syz.3.7264,22675,0):ocfs2_mknod:506 ERROR: status = -5 [ 919.251391][T22675] (syz.3.7264,22675,0):ocfs2_create:679 ERROR: status = -5 [ 919.355961][ T6191] ocfs2: Unmounting device (7,3) on (node local) [ 919.447857][T12815] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input56 [ 919.750720][T22730] nbd: couldn't find a device at index 17 [ 919.759309][ T6219] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 919.933756][ T6476] usb 5-1: USB disconnect, device number 18 [ 919.972576][ T6219] usb 1-1: Using ep0 maxpacket: 8 [ 919.998634][ T6219] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 920.019560][ T6219] usb 1-1: config 0 has no interface number 0 [ 920.058722][ T6219] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 920.095846][ T6219] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 920.136308][ T6219] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 920.186323][ T6219] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 920.219365][ T6219] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.255723][ T6219] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 920.305383][ T6219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.313440][ T6219] usb 1-1: Product: syz [ 920.333064][ T6219] usb 1-1: Manufacturer: syz [ 920.346596][ T6219] usb 1-1: SerialNumber: syz [ 920.354682][ T6219] usb 1-1: config 0 descriptor?? [ 920.648491][ T6219] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 920.891475][T22759] loop4: detected capacity change from 0 to 16 [ 920.898502][ T6337] usb 1-1: USB disconnect, device number 14 [ 920.923820][T22759] erofs (device loop4): mounted with root inode @ nid 36. [ 921.020074][T12815] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 921.167857][T22751] loop6: detected capacity change from 0 to 32768 [ 921.181556][T12815] usb 2-1: Using ep0 maxpacket: 8 [ 921.195548][T12815] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 921.204267][T12815] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.205881][T22751] JBD2: Ignoring recovery information on journal [ 921.216746][T12815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.256748][T12815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.284876][T12815] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.309715][T12815] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 921.320159][T12815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.331791][T22751] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 921.379981][T22751] OCFS2: ERROR (device loop6): ocfs2_validate_gd_self: Group descriptor #1792 has bad signature [ 921.391124][T22751] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 921.401953][T22751] OCFS2: Returning error to the calling process. [ 921.408410][T22751] (syz.6.7299,22751,1):ocfs2_search_chain:1923 ERROR: status = -5 [ 921.419683][T22751] (syz.6.7299,22751,1):ocfs2_search_chain:2011 ERROR: status = -5 [ 921.427766][T22751] (syz.6.7299,22751,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -5 [ 921.437250][T22751] (syz.6.7299,22751,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -5 [ 921.445753][T22751] (syz.6.7299,22751,1):ocfs2_claim_new_inode:2392 ERROR: status = -5 [ 921.453973][T22751] (syz.6.7299,22751,1):ocfs2_claim_new_inode:2407 ERROR: status = -5 [ 921.462422][T22751] (syz.6.7299,22751,1):ocfs2_mknod_locked:642 ERROR: status = -5 [ 921.470357][T22751] (syz.6.7299,22751,1):ocfs2_mknod:389 ERROR: status = -5 [ 921.477784][T22751] (syz.6.7299,22751,1):ocfs2_mknod:506 ERROR: status = -5 [ 921.485061][T22751] (syz.6.7299,22751,1):ocfs2_create:679 ERROR: status = -5 [ 921.568823][T20014] ocfs2: Unmounting device (7,6) on (node local) [ 921.795165][T12815] usb 2-1: USB disconnect, device number 11 [ 922.465590][ T30] audit: type=1326 audit(1774779842.470:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22767 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 922.516856][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7308'. [ 922.553534][ T30] audit: type=1326 audit(1774779842.470:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22767 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 922.604186][T22769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7308'. [ 922.625064][ T30] audit: type=1326 audit(1774779842.470:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22767 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 922.751035][ T30] audit: type=1326 audit(1774779842.470:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22767 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 922.804076][T22773] loop0: detected capacity change from 0 to 4096 [ 922.833226][ T30] audit: type=1326 audit(1774779842.470:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22767 comm="syz.3.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 922.857455][T22773] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 922.936890][T22773] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 924.405905][T22833] loop0: detected capacity change from 0 to 64 [ 924.792106][T22845] netlink: 'syz.3.7343': attribute type 21 has an invalid length. [ 924.811351][T22847] loop6: detected capacity change from 0 to 64 [ 924.824341][T22845] IPv6: NLM_F_CREATE should be specified when creating new route [ 924.993133][T22849] loop0: detected capacity change from 0 to 512 [ 925.014408][T22849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 925.088353][T22849] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.7344: iget: bad extended attribute block 3153 [ 925.112610][T22849] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 925.123236][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 925.139179][ C0] EXT4-fs (loop0): initial error at time 1774779844: ext4_orphan_get:1391: inode 11 [ 925.148682][ C0] EXT4-fs (loop0): last error at time 1774779844: ext4_orphan_get:1391: inode 11 [ 925.162078][T22849] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.7344: couldn't read orphan inode 11 (err -117) [ 925.236727][T22849] loop0: lost filesystem error report for type 5 error -117 [ 925.249646][T22849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.481294][T22849] EXT4-fs error (device loop0): ext4_find_dest_de:2049: inode #2: block 13: comm syz.0.7344: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 925.557630][T22813] loop5: detected capacity change from 0 to 40427 [ 925.614590][T22813] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 925.658993][T22813] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 925.728338][T22813] F2FS-fs (loop5): invalid crc value [ 925.856130][ T6185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.231487][T22813] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 926.314291][T22813] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 926.346527][T22813] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 926.539769][T22897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 926.616718][ T30] audit: type=1800 audit(1774779846.353:94): pid=22813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7330" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 926.796046][ T6198] syz-executor: attempt to access beyond end of device [ 926.796046][ T6198] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 926.843883][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 926.843936][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.843959][ T6198] Call Trace: [ 926.843973][ T6198] [ 926.843987][ T6198] dump_stack_lvl+0x100/0x190 [ 926.844053][ T6198] f2fs_handle_critical_error+0x5d7/0x970 [ 926.844099][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.844146][ T6198] ? f2fs_build_fault_attr+0x53/0x280 [ 926.844217][ T6198] f2fs_write_end_io+0xc3f/0xf30 [ 926.844276][ T6198] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 926.844328][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.844384][ T6198] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 926.844430][ T6198] bio_endio+0x7a3/0x910 [ 926.844474][ T6198] submit_bio_noacct+0x64c/0x2010 [ 926.844540][ T6198] f2fs_submit_write_bio+0x133/0x350 [ 926.844584][ T6198] __submit_merged_bio+0x331/0x7b0 [ 926.844636][ T6198] __submit_merged_write_cond+0x3fe/0x510 [ 926.844693][ T6198] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 926.844752][ T6198] ? __pfx___might_resched+0x10/0x10 [ 926.844794][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.844854][ T6198] f2fs_write_cache_pages+0x21c0/0x2720 [ 926.844940][ T6198] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 926.845006][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.845055][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.845103][ T6198] ? find_held_lock+0x2b/0x80 [ 926.845153][ T6198] ? is_bpf_text_address+0x8a/0x1a0 [ 926.845201][ T6198] ? is_bpf_text_address+0x8a/0x1a0 [ 926.845305][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.845396][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.845445][ T6198] ? __mod_zone_page_state+0xe2/0x190 [ 926.845491][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.845538][ T6198] ? rcu_is_watching+0x12/0xc0 [ 926.845591][ T6198] f2fs_write_data_pages+0x799/0x16d0 [ 926.845664][ T6198] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 926.845739][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.845789][ T6198] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 926.845852][ T6198] do_writepages+0x278/0x600 [ 926.845921][ T6198] ? __pfx_do_writepages+0x10/0x10 [ 926.845980][ T6198] ? do_raw_spin_unlock+0x145/0x1e0 [ 926.846024][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.846072][ T6198] ? _raw_spin_unlock+0x28/0x50 [ 926.846134][ T6198] filemap_writeback+0x22d/0x2e0 [ 926.846203][ T6198] ? __pfx_filemap_writeback+0x10/0x10 [ 926.846331][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.846380][ T6198] ? find_held_lock+0x2b/0x80 [ 926.846428][ T6198] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 926.846487][ T6198] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 926.846541][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.846603][ T6198] f2fs_sync_dirty_inodes+0x452/0x990 [ 926.846682][ T6198] block_operations+0x2a6/0xfc0 [ 926.846739][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.846787][ T6198] ? finish_task_switch.isra.0+0x85e/0xb80 [ 926.846848][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.846901][ T6198] ? __pfx_block_operations+0x10/0x10 [ 926.847021][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.847073][ T6198] ? ktime_get+0x200/0x300 [ 926.847125][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.847177][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.847225][ T6198] ? rcu_is_watching+0x12/0xc0 [ 926.847283][ T6198] f2fs_write_checkpoint+0x582/0x5550 [ 926.847353][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.847402][ T6198] ? _raw_spin_unlock_irq+0x2e/0x50 [ 926.847457][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.847506][ T6198] ? __wait_for_common+0x1f3/0x4c0 [ 926.847574][ T6198] ? __pfx_schedule_timeout+0x10/0x10 [ 926.847634][ T6198] ? __pfx___wait_for_common+0x10/0x10 [ 926.847698][ T6198] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 926.847769][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.847816][ T6198] ? rcu_is_watching+0x12/0xc0 [ 926.847859][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.847906][ T6198] ? kthread_stop+0x280/0x680 [ 926.847973][ T6198] kill_f2fs_super+0x3e5/0x490 [ 926.848033][ T6198] ? __pfx_kill_f2fs_super+0x10/0x10 [ 926.848116][ T6198] ? lockdep_hardirqs_on+0x78/0x100 [ 926.848177][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.848225][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.848297][ T6198] deactivate_locked_super+0xc1/0x1b0 [ 926.848350][ T6198] deactivate_super+0xe7/0x110 [ 926.848401][ T6198] cleanup_mnt+0x21f/0x450 [ 926.848463][ T6198] task_work_run+0x150/0x240 [ 926.848506][ T6198] ? __pfx_task_work_run+0x10/0x10 [ 926.848546][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.848596][ T6198] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.848654][ T6198] exit_to_user_mode_loop+0x100/0x4a0 [ 926.848726][ T6198] do_syscall_64+0x67c/0xf80 [ 926.848786][ T6198] ? irqentry_exit+0x138/0x670 [ 926.848850][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.848890][ T6198] RIP: 0033:0x7f515279d9d7 [ 926.848922][ T6198] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 926.848960][ T6198] RSP: 002b:00007fffefd69308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 926.848997][ T6198] RAX: 0000000000000000 RBX: 00007f5152832050 RCX: 00007f515279d9d7 [ 926.849023][ T6198] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffefd693c0 [ 926.849048][ T6198] RBP: 00007fffefd693c0 R08: 00007fffefd6a3c0 R09: 00000000ffffffff [ 926.849074][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffefd6a450 [ 926.849099][ T6198] R13: 00007f5152832050 R14: 00000000000d7e37 R15: 00007fffefd6a490 [ 926.849155][ T6198] [ 926.849170][ T6198] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 927.625881][T22917] netlink: 'syz.3.7369': attribute type 6 has an invalid length. [ 927.663023][T22879] loop4: detected capacity change from 0 to 32768 [ 927.744823][T22879] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 6d74323b-6d13-4e29-a61e-d57ecbff1033 [ 927.794870][T22879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7355 (22879) [ 927.877293][T22925] loop6: detected capacity change from 0 to 512 [ 927.907901][T22879] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 927.957343][T22925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 928.001896][T22879] BTRFS info (device loop4): using crc32c checksum algorithm [ 928.061697][T22925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.075572][T22925] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 928.295434][T22879] BTRFS info (device loop4): turning off barriers [ 928.345728][T22879] BTRFS info (device loop4): enabling free space tree [ 928.393251][T22879] BTRFS info (device loop4): use zstd compression, level 3 [ 928.424730][T20014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.769059][ T6196] BTRFS info (device loop4): last unmount of filesystem 6d74323b-6d13-4e29-a61e-d57ecbff1033 [ 928.837434][ T6476] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 928.857150][T22956] loop5: detected capacity change from 0 to 256 [ 929.013099][ T6476] usb 4-1: Using ep0 maxpacket: 16 [ 929.053158][T22956] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 929.069133][ T6476] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 929.102456][ T6476] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 929.163011][ T6476] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 929.216012][ T6476] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 929.269217][ T6476] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 929.311595][ T6476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.319093][T22921] loop0: detected capacity change from 0 to 32768 [ 929.372294][T22922] loop1: detected capacity change from 0 to 32768 [ 929.387682][ T6476] usb 4-1: config 0 descriptor?? [ 929.499947][T22921] jfs_lookup: iget failed on inum 32 [ 929.524323][T22921] jfs_lookup: iget failed on inum 32 [ 929.544256][T22922] JBD2: Ignoring recovery information on journal [ 929.691194][ T6476] usb 4-1: string descriptor 0 read error: -71 [ 929.722658][ T6476] pxrc 4-1:0.0: Could not find endpoint [ 929.742186][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7380'. [ 929.780281][T22922] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 929.867362][ T6476] usb 4-1: USB disconnect, device number 20 [ 930.063070][T22922] OCFS2: ERROR (device loop1): ocfs2_validate_gd_self: Group descriptor #1792 has bad signature [ 930.122070][T22922] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 930.172937][T22922] OCFS2: Returning error to the calling process. [ 930.206521][T22922] (syz.1.7371,22922,1):ocfs2_search_chain:1923 ERROR: status = -5 [ 930.327398][T22922] (syz.1.7371,22922,1):ocfs2_search_chain:2011 ERROR: status = -5 [ 930.335293][T22922] (syz.1.7371,22922,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -5 [ 930.416342][T22922] (syz.1.7371,22922,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -5 [ 930.502087][T22922] (syz.1.7371,22922,0):ocfs2_claim_new_inode:2392 ERROR: status = -5 [ 930.598785][T22922] (syz.1.7371,22922,0):ocfs2_claim_new_inode:2407 ERROR: status = -5 [ 930.665245][T22922] (syz.1.7371,22922,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 930.711008][T22922] (syz.1.7371,22922,1):ocfs2_mknod:389 ERROR: status = -5 [ 930.796620][T22922] (syz.1.7371,22922,0):ocfs2_mknod:506 ERROR: status = -5 [ 930.827301][T22995] comedi comedi0: dac02: I/O port conflict (0x80,8) [ 930.873607][T22922] (syz.1.7371,22922,1):ocfs2_create:679 ERROR: status = -5 [ 930.991411][T22999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.088409][ T6184] ocfs2: Unmounting device (7,1) on (node local) [ 931.348245][T23004] loop5: detected capacity change from 0 to 1024 [ 931.398526][T23008] netlink: 'syz.0.7396': attribute type 36 has an invalid length. [ 931.498729][T23008] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 931.535861][T23004] hfsplus: b-tree write err: -5, ino 2 [ 931.592054][T23008] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 931.691034][ T12] hfsplus: b-tree write err: -5, ino 25 [ 931.710705][T22988] loop6: detected capacity change from 0 to 32768 [ 931.749284][ T12] hfsplus: b-tree write err: -5, ino 4 [ 931.754990][ T12] hfsplus: b-tree write err: -5, ino 2 [ 931.772342][T22988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7387 (22988) [ 931.834578][ T12] hfsplus: b-tree write err: -5, ino 26 [ 931.941191][T22988] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 932.010361][T22988] BTRFS info (device loop6): using sha256 checksum algorithm [ 932.297276][T22988] BTRFS info (device loop6): enabling ssd optimizations [ 932.366620][T22988] BTRFS info (device loop6): turning on async discard [ 932.378295][T23042] loop3: detected capacity change from 0 to 256 [ 932.398929][T22988] BTRFS info (device loop6): enabling free space tree [ 932.486399][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7405'. [ 932.519272][T23042] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 932.794435][T23054] loop1: detected capacity change from 0 to 128 [ 932.923221][T23054] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 932.949561][T23054] ext4 filesystem being mounted at /1230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 933.026628][T20014] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 933.114283][ T30] audit: type=1326 audit(1774779852.427:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 933.213724][ T30] audit: type=1326 audit(1774779852.427:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 933.362364][ T30] audit: type=1326 audit(1774779852.427:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 933.475291][ T6184] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 933.491749][ T30] audit: type=1326 audit(1774779852.473:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 933.620020][ T30] audit: type=1326 audit(1774779852.473:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 933.751344][ T30] audit: type=1326 audit(1774779852.473:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 933.852467][ T30] audit: type=1326 audit(1774779852.473:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 934.003684][ T30] audit: type=1326 audit(1774779852.473:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23064 comm="syz.3.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa3d459c799 code=0x7ffc0000 [ 934.330413][T23089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 934.500219][T23059] loop5: detected capacity change from 0 to 32768 [ 934.593967][T23095] netlink: 'syz.1.7427': attribute type 21 has an invalid length. [ 934.631805][T23095] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7427'. [ 934.677227][T23059] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 934.690917][T23095] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7427'. [ 934.762085][ T6307] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 934.855969][T23076] loop0: detected capacity change from 0 to 32768 [ 934.935969][ T6307] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 934.947790][T23076] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 934.976217][ T6307] usb 5-1: config 1 has no interface number 0 [ 935.028749][ T6307] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 935.071028][ T6198] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 935.116492][ T6307] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 935.133935][ T6307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.153021][ T6307] usb 5-1: Product: syz [ 935.157258][ T6307] usb 5-1: Manufacturer: syz [ 935.189818][ T6307] usb 5-1: SerialNumber: syz [ 935.310282][T23076] XFS (loop0): Ending clean mount [ 935.347935][T23076] XFS (loop0): Quotacheck needed: Please wait. [ 935.492455][ T6307] usb 5-1: No status endpoint found [ 935.498376][T23076] XFS (loop0): Quotacheck: Done. [ 935.694662][ T6476] usb 5-1: USB disconnect, device number 19 [ 935.874663][ T6185] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 936.319139][T23141] loop1: detected capacity change from 0 to 512 [ 936.403132][T23141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 936.585268][T23141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.631417][T23141] ext4 filesystem being mounted at /1237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 936.858624][ T6184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.145118][T23171] netlink: zone id is out of range [ 937.156995][T23171] netlink: zone id is out of range [ 937.162196][T23171] netlink: get zone limit has 4 unknown bytes [ 937.564456][T23184] loop1: detected capacity change from 0 to 512 [ 937.593997][T23184] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 937.690167][T23184] EXT4-fs (loop1): 1 truncate cleaned up [ 937.743152][T23184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.827506][T23184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.047140][T23197] loop3: detected capacity change from 0 to 1024 [ 938.598389][ T6476] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 938.791379][ T6476] usb 6-1: Using ep0 maxpacket: 16 [ 938.818003][ T6476] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 938.848999][ T6476] usb 6-1: config 0 has no interface number 0 [ 938.874250][ T6476] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 938.905967][ T6476] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 938.966048][ T6476] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 939.000760][ T6476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.033148][ T6476] usb 6-1: Product: syz [ 939.050541][ T6476] usb 6-1: Manufacturer: syz [ 939.055192][ T6476] usb 6-1: SerialNumber: syz [ 939.097092][ T6476] usb 6-1: config 0 descriptor?? [ 939.131286][T23207] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 939.150270][T23207] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 939.169935][T23236] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 939.451198][T23207] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 939.514647][T23207] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 939.766337][ T6476] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 939.828155][ T6476] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 939.862807][ T6476] asix 6-1:0.251: probe with driver asix failed with error -5 [ 939.885797][ T6476] usb 6-1: USB disconnect, device number 121 [ 939.936711][T23261] xt_l2tp: unknown flags: 10 [ 940.401291][T23275] loop1: detected capacity change from 0 to 64 [ 941.422250][T23312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.458526][T23352] loop1: detected capacity change from 0 to 164 [ 943.168118][T23377] kernel profiling enabled (shift: 6) [ 943.395078][T23382] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 943.896526][T23400] xt_bpf: check failed: parse error [ 944.338362][T23372] loop0: detected capacity change from 0 to 32768 [ 944.387474][T23372] (syz.0.7554,23372,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 944.447124][T23372] (syz.0.7554,23372,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 944.578409][T23372] JBD2: Ignoring recovery information on journal [ 944.747702][T23372] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 944.829887][T23419] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 945.006739][T23392] loop3: detected capacity change from 0 to 32768 [ 945.082469][T23392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7564 (23392) [ 945.154243][ T6185] ocfs2: Unmounting device (7,0) on (node local) [ 945.220347][T23392] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 945.256672][T23392] BTRFS info (device loop3): using sha256 checksum algorithm [ 945.531818][T23392] BTRFS info (device loop3): enabling ssd optimizations [ 945.597748][T23392] BTRFS info (device loop3): turning on async discard [ 945.604616][T23392] BTRFS info (device loop3): enabling free space tree [ 945.746069][T23392] BTRFS error: failed to open device for path ~LS(d\w7{X?ͱ"Mx|5|U}F)B _xvljTPIE_F#vI̟C, :]a33:\<jDMjP}믿eĐ:7;c03niS +V:3107Q?/FZ`v/gø2bOJt( [ 945.746069][T23392] K05P2TZ]wJ&Dܛ*Cз+r1Qs w:]BcG-Qΰ`jjautw+ {h9Pn/Y2+)B?ZaEE?}P2Y">|1N with flags 0x1: -2 [ 946.013892][ T6191] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 946.053655][T23461] openvswitch: netlink: IPv6 tunnel dst address is zero [ 946.580947][T23429] loop1: detected capacity change from 0 to 32768 [ 946.634868][T23429] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 946.686049][T23429] JBD2: Ignoring recovery information on journal [ 946.785685][T23478] Cannot find add_set index 4 as target [ 946.881180][T23429] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 947.095120][T23429] ocfs2: Unmounting device (7,1) on (node local) [ 947.458932][ T6337] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 947.684042][ T6337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.733059][ T6337] usb 1-1: config 0 interface 0 has no altsetting 0 [ 947.766264][ T6337] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 947.802299][ T6337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.845013][ T6337] usb 1-1: Product: syz [ 947.862195][ T6337] usb 1-1: Manufacturer: syz [ 947.888473][ T6337] usb 1-1: SerialNumber: syz [ 947.900209][T23508] netlink: 'syz.5.7612': attribute type 3 has an invalid length. [ 947.981987][ T6337] usb 1-1: config 0 descriptor?? [ 948.033112][ T6337] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 948.091269][ T6337] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 948.145369][ T6337] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 948.175961][ T6337] usb 1-1: media controller created [ 948.289009][ T6337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.345603][T23498] syz.6.7607 (23498): drop_caches: 2 [ 948.584665][ T6337] DVB: Unable to find symbol tda10046_attach() [ 948.601690][ T6337] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 948.646045][ T6337] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 948.714864][T23528] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7622'. [ 948.752783][T23528] unsupported nlmsg_type 40 [ 948.761477][ T6476] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 948.895354][ T6337] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 948.933064][ T6337] usb 1-1: USB disconnect, device number 15 [ 948.955482][ T6476] usb 5-1: Using ep0 maxpacket: 16 [ 948.976972][ T6476] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 948.996013][ T6476] usb 5-1: config 0 has no interface number 0 [ 949.031909][ T6476] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 949.046198][ T6476] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 949.084324][ T6476] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 949.110107][ T6476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.137673][ T6476] usb 5-1: Product: syz [ 949.171522][ T6476] usb 5-1: Manufacturer: syz [ 949.182313][ T6476] usb 5-1: SerialNumber: syz [ 949.210841][ T6476] usb 5-1: config 0 descriptor?? [ 949.221372][T23522] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 949.236225][T23522] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 949.491446][T23522] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 949.518935][T23522] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 949.649726][T23553] loop1: detected capacity change from 0 to 128 [ 949.723133][T23553] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 949.779215][ T6476] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 949.804530][ T6476] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 949.830391][ T6476] asix 5-1:0.251: probe with driver asix failed with error -5 [ 949.868190][T23553] ext4 filesystem being mounted at /1268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 949.877881][T23560] dlm: no locking on control device [ 949.902560][ T6476] usb 5-1: USB disconnect, device number 20 [ 950.111517][ T6184] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 950.581842][T23582] loop5: detected capacity change from 0 to 8 [ 950.602421][T23585] loop6: detected capacity change from 0 to 64 [ 950.649196][T23582] SQUASHFS error: Unable to read directory block [1d0:0] [ 950.919495][T23594] CIFS: VFS: Malformed UNC in devname [ 951.131490][T23599] loop4: detected capacity change from 0 to 2048 [ 951.198423][T23599] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 951.275303][T23599] syz.4.7666: attempt to access beyond end of device [ 951.275303][T23599] loop4: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 951.294284][T23610] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 951.338937][T23611] loop1: detected capacity change from 0 to 256 [ 951.485786][T23543] Bluetooth: hci2: command 0x0406 tx timeout [ 951.499182][T23611] FAT-fs (loop1): Directory bread(block 64) failed [ 951.514866][T23599] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=9 [ 951.577966][T23611] FAT-fs (loop1): Directory bread(block 65) failed [ 951.599664][T23599] Remounting filesystem read-only [ 951.634881][T23611] FAT-fs (loop1): Directory bread(block 66) failed [ 951.642058][T23611] FAT-fs (loop1): Directory bread(block 67) failed [ 951.674306][T23611] FAT-fs (loop1): Directory bread(block 68) failed [ 951.695946][T23611] FAT-fs (loop1): Directory bread(block 69) failed [ 951.703096][T23611] FAT-fs (loop1): Directory bread(block 70) failed [ 951.709691][T23611] FAT-fs (loop1): Directory bread(block 71) failed [ 951.718450][T23611] FAT-fs (loop1): Directory bread(block 72) failed [ 951.752905][T23611] FAT-fs (loop1): Directory bread(block 73) failed [ 951.910050][T23611] syz.1.7659: attempt to access beyond end of device [ 951.910050][T23611] loop1: rw=8390659, sector=1224, nr_sectors = 32 limit=256 [ 952.025054][ T6476] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 952.227556][ T6476] usb 1-1: Using ep0 maxpacket: 16 [ 952.245611][ T6476] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 952.270589][ T6476] usb 1-1: config 0 has no interface number 0 [ 952.298453][ T6476] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 952.331756][ T6476] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 952.385126][ T6476] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 952.423785][ T6476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.453885][ T6476] usb 1-1: Product: syz [ 952.472741][ T6476] usb 1-1: Manufacturer: syz [ 952.477407][ T6476] usb 1-1: SerialNumber: syz [ 952.514274][ T6476] usb 1-1: config 0 descriptor?? [ 952.524739][T23618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 952.542820][T23618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 952.716749][ T6470] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 952.813856][T23618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 952.832562][T23618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 952.921142][ T6470] usb 2-1: Using ep0 maxpacket: 16 [ 952.950980][ T6470] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.981948][ T6470] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 953.024746][ T6470] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 953.033898][ T6470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 953.073559][ T6476] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 953.095453][ T6470] usb 2-1: SerialNumber: syz [ 953.118457][ T6476] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 953.146560][ T6470] usb 2-1: 0:2 : does not exist [ 953.173577][ T6476] asix 1-1:0.251: probe with driver asix failed with error -5 [ 953.207498][ T6476] usb 1-1: USB disconnect, device number 16 [ 953.373430][ T6470] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 953.393845][T23632] loop3: detected capacity change from 0 to 32768 [ 953.420099][ T6470] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 953.457393][T23634] loop6: detected capacity change from 0 to 32768 [ 953.459712][T23632] [ 953.459712][T23632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 953.459712][T23632] [ 953.551203][ T6470] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 953.732611][ T6470] usb 2-1: USB disconnect, device number 12 [ 953.750106][ T151] [ 953.750106][ T151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 953.750106][ T151] [ 953.806725][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.822557][ T151] [ 953.822557][ T151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 953.822557][ T151] [ 953.824501][ T6191] [ 953.824501][ T6191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 953.824501][ T6191] [ 953.928267][ T6191] [ 953.928267][ T6191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 953.928267][ T6191] [ 954.003967][ T110] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 954.016132][ T110] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 954.024569][ T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 954.033703][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.043781][ T110] RIP: 0010:write_special_inodes+0x71/0x180 [ 954.049708][ T110] Code: df e8 33 28 65 fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c5 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 df 00 00 00 49 8b 7d 30 2e e8 1b a9 ee 07 48 8d [ 954.069343][ T110] RSP: 0018:ffffc90002d87bc8 EFLAGS: 00010216 [ 954.075431][ T110] RAX: 0000000000000006 RBX: ffff88807a5f6200 RCX: ffffffff83a42496 [ 954.083413][ T110] RDX: ffff88801f3a5b80 RSI: ffffffff83a397ed RDI: 0000000000000030 [ 954.091394][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 954.099422][ T110] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82418060 [ 954.107479][ T110] R13: 0000000000000000 R14: ffff888052f99000 R15: 0000000000000002 [ 954.115456][ T110] FS: 0000000000000000(0000) GS:ffff88812433f000(0000) knlGS:0000000000000000 [ 954.124484][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.131078][ T110] CR2: 00007f030cbe7158 CR3: 0000000020f7d000 CR4: 0000000000350ef0 [ 954.139064][ T110] Call Trace: [ 954.142345][ T110] [ 954.145282][ T110] lmLogSync+0xd2/0x7b0 [ 954.149564][ T110] ? __pfx_lmLogSync+0x10/0x10 [ 954.154452][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.160191][ T110] ? find_held_lock+0x2b/0x80 [ 954.164890][ T110] ? txEnd+0x30b/0x490 [ 954.168995][ T110] jfs_syncpt+0x89/0xa0 [ 954.173180][ T110] txEnd+0x318/0x490 [ 954.177104][ T110] jfs_lazycommit+0x748/0xab0 [ 954.181996][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 954.187223][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.192873][ T110] ? rcu_is_watching+0x12/0xc0 [ 954.197830][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 954.203661][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.209428][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.215115][ T110] ? __kthread_parkme+0x18c/0x230 [ 954.220182][ T110] ? kthread+0x13a/0x450 [ 954.224437][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 954.229683][ T110] kthread+0x370/0x450 [ 954.233863][ T110] ? __pfx_kthread+0x10/0x10 [ 954.238506][ T110] ret_from_fork+0x754/0xd80 [ 954.243125][ T110] ? __pfx_ret_from_fork+0x10/0x10 [ 954.248257][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.254001][ T110] ? __switch_to+0x7b4/0x1120 [ 954.258707][ T110] ? __pfx_kthread+0x10/0x10 [ 954.263512][ T110] ret_from_fork_asm+0x1a/0x30 [ 954.268314][ T110] [ 954.271340][ T110] Modules linked in: [ 954.277076][ T110] ---[ end trace 0000000000000000 ]--- [ 954.439733][T23647] loop5: detected capacity change from 0 to 32768 [ 954.558718][T23651] loop4: detected capacity change from 0 to 32768 [ 954.576223][ T110] RIP: 0010:write_special_inodes+0x71/0x180 [ 954.581679][T23651] BTRFS info: device /dev/loop4 (7:4) using temp-fsid a6bdcc5c-745b-41a4-9905-92b23b241d4d [ 954.582360][ T110] Code: df e8 33 28 65 fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c5 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 df 00 00 00 49 8b 7d 30 2e e8 1b a9 ee 07 48 8d [ 954.595237][T23651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7680 (23651) [ 954.613495][ T110] RSP: 0018:ffffc90002d87bc8 EFLAGS: 00010216 [ 954.632280][ T110] RAX: 0000000000000006 RBX: ffff88807a5f6200 RCX: ffffffff83a42496 [ 954.640368][ T110] RDX: ffff88801f3a5b80 RSI: ffffffff83a397ed RDI: 0000000000000030 [ 954.649203][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 954.657219][ T110] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82418060 [ 954.665662][ T110] R13: 0000000000000000 R14: ffff888052f99000 R15: 0000000000000002 [ 954.667480][T23647] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 954.673734][ T110] FS: 0000000000000000(0000) GS:ffff88812443f000(0000) knlGS:0000000000000000 [ 954.673775][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.698477][ T110] CR2: 00007f2ba1585440 CR3: 0000000026ee3000 CR4: 0000000000350ef0 [ 954.706621][ T110] Kernel panic - not syncing: Fatal exception [ 954.713111][ T110] Kernel Offset: disabled [ 954.717437][ T110] Rebooting in 86400 seconds..