last executing test programs: 3.280490927s ago: executing program 4 (id=814): unshare(0x8020400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xe07c1000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000004c0)=0x6, 0x4) 3.208496757s ago: executing program 4 (id=815): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f0000000200)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 3.146074498s ago: executing program 4 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000000010904000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000140000000000800034000000000080002"], 0x5c}}, 0x0) 3.019376899s ago: executing program 4 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1e0001"], 0x38}}, 0x0) 2.726318141s ago: executing program 0 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12000000000000}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 2.708211171s ago: executing program 3 (id=825): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0x8979) mkdir(&(0x7f00000000c0)='./file0\x00', 0x114) 2.636278201s ago: executing program 4 (id=826): syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000480), 0xfd, 0x448, &(0x7f0000000d00)="$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") syz_mount_image$gfs2(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x8c9b, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES8], 0x0, 0x12760, &(0x7f0000002bc0)="$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") lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001a80)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000240)={0x5, 0x700, 0x0, 0x6, 0x3, 0x400000000400, 0x7, 0x8000000000000000, 0x1}) 2.489050142s ago: executing program 0 (id=827): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r1, 0x609, 0xe, 0x0, &(0x7f0000000b40)="dd80000000000002000400000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.431176103s ago: executing program 3 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x8020600) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 2.208453685s ago: executing program 3 (id=829): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.3989044s ago: executing program 4 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 1.358738601s ago: executing program 3 (id=842): io_setup(0x4, &(0x7f0000010440)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x0, 0x0, 0x4}]) 1.35811283s ago: executing program 0 (id=843): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001040)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001200)={r1, 0x9}, 0x8) 1.168473682s ago: executing program 0 (id=846): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)) 1.109533752s ago: executing program 0 (id=850): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) 1.048412343s ago: executing program 3 (id=851): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000005a00)='./file1\x00', 0x1a0cc10, &(0x7f0000006080)=ANY=[@ANYBLOB="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", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae590c000000d46fe9ae1e8a141739e9717566c21648e8f4e95e9ce126eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587eb6c11457973c0dd3e81487e464b9536ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b3020000000000000013b9869f98de6e27d28126d9a4988919"], 0x1, 0x559b, &(0x7f0000000400)="$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") r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x2, 0x400015, 0x17, "9e959ff9ffffffffffffff6c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ee68d347f41be5a08", [0xf22, 0x7]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 1.042257413s ago: executing program 1 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="4dcdc7d96a760000002100050000000000060000", 0x14, 0x2000, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 980.936343ms ago: executing program 0 (id=854): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f00000002c0)={0x20, 0x9, 0x2, "449b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 884.472304ms ago: executing program 1 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 875.008624ms ago: executing program 1 (id=856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x2, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0x7, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x8}]}}) 707.201255ms ago: executing program 1 (id=858): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 608.435726ms ago: executing program 1 (id=859): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x5c}}, 0x0) 556.450787ms ago: executing program 1 (id=860): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 412.820267ms ago: executing program 2 (id=861): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x24020400) recvmsg$can_j1939(r0, 0x0, 0x2000) 232.505509ms ago: executing program 2 (id=862): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffa}, 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 201.600329ms ago: executing program 2 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0) 142.377299ms ago: executing program 2 (id=864): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x10012, r0, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x1, 0x5, 0x1000}], 0x1, &(0x7f0000000180)) 89.16855ms ago: executing program 2 (id=866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000300)={0x6}, 0x1) 88.36652ms ago: executing program 3 (id=867): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f00000002c0)) 0s ago: executing program 2 (id=868): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4004f506, 0x0) kernel console output (not intermixed with test programs): tag 0x0 [ 60.414925][ T4240] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 60.422359][ T4240] hid-generic 0003:045E:05DA.0001: unbalanced collection at end of report description [ 60.447372][ T4240] hid-generic: probe of 0003:045E:05DA.0001 failed with error -22 [ 60.535790][ T4240] usb 2-1: USB disconnect, device number 2 [ 60.647611][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input5 [ 60.686796][ T4379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 60.713997][ T4379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 60.723461][ T4208] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.772386][ T23] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 60.866328][ T23] usb 5-1: USB disconnect, device number 2 [ 60.960195][ T4383] loop2: detected capacity change from 0 to 2048 [ 60.994053][ T4375] loop0: detected capacity change from 0 to 32768 [ 61.024667][ T4208] usb 4-1: Using ep0 maxpacket: 32 [ 61.042810][ T4375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.59 (4375) [ 61.068373][ T4383] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.148786][ T4387] loop1: detected capacity change from 0 to 1024 [ 61.204541][ T4208] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 61.213740][ T4208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.223620][ T4208] usb 4-1: config 0 descriptor?? [ 61.237089][ T4375] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 61.306662][ T4208] gspca_main: sq930x-2.14.0 probing 041e:403c [ 61.313386][ T4375] BTRFS info (device loop0): using free space tree [ 61.343775][ T9] hfsplus: b-tree write err: -5, ino 4 [ 61.351912][ T4375] BTRFS info (device loop0): has skinny extents [ 61.632753][ T4405] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 61.639557][ T4405] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.746879][ T4405] vhci_hcd vhci_hcd.0: Device attached [ 61.777495][ T4375] BTRFS info (device loop0): enabling ssd optimizations [ 61.955517][ T13] vhci_hcd: vhci_device speed not set [ 62.038037][ T13] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 62.055777][ T4168] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 62.204545][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 62.214449][ T4208] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 62.295003][ T4208] sq930x: probe of 4-1:0.0 failed with error -71 [ 62.327416][ T4208] usb 4-1: USB disconnect, device number 2 [ 62.401921][ T4397] loop1: detected capacity change from 0 to 32768 [ 62.472135][ T4397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.66 (4397) [ 62.499739][ T4168] usb 5-1: config 0 has no interfaces? [ 62.506574][ T4168] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.516414][ T4168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.560487][ T4168] usb 5-1: config 0 descriptor?? [ 62.577457][ T4397] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 62.603812][ T4397] BTRFS info (device loop1): setting nodatacow, compression disabled [ 62.624617][ T4397] BTRFS info (device loop1): enabling auto defrag [ 62.625703][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.631103][ T4397] BTRFS info (device loop1): max_inline at 0 [ 62.665305][ T4397] BTRFS info (device loop1): using free space tree [ 62.671850][ T4397] BTRFS info (device loop1): has skinny extents [ 62.704634][ T23] usb 3-1: no configurations [ 62.709264][ T23] usb 3-1: can't read configurations, error -22 [ 62.833439][ T4168] usb 5-1: USB disconnect, device number 3 [ 62.852799][ T4406] vhci_hcd: connection closed [ 62.856190][ T9] vhci_hcd: stop threads [ 62.887335][ T9] vhci_hcd: release socket [ 62.893122][ T9] vhci_hcd: disconnect device [ 62.917077][ T13] vhci_hcd: vhci_device speed not set [ 63.091873][ T4397] syz.1.66 (4397) used greatest stack depth: 19864 bytes left [ 63.298786][ T4471] capability: warning: `syz.2.79' uses 32-bit capabilities (legacy support in use) [ 63.883473][ T4499] loop1: detected capacity change from 0 to 64 [ 64.082577][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 64.277159][ T4516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 64.283697][ T4516] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.307074][ T4516] vhci_hcd vhci_hcd.0: Device attached [ 64.375313][ T4527] loop0: detected capacity change from 0 to 512 [ 64.451490][ T4527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.502892][ T4527] EXT4-fs (loop0): 1 orphan inode deleted [ 64.509072][ T4157] vhci_hcd: vhci_device speed not set [ 64.541798][ T4527] EXT4-fs (loop0): 1 truncate cleaned up [ 64.584288][ T4527] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 64.594730][ T4157] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 64.612884][ T23] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 64.962345][ T4557] loop2: detected capacity change from 0 to 4096 [ 65.029859][ T23] usb 2-1: config 0 has no interfaces? [ 65.040156][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.073096][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.074830][ T4558] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.129784][ T23] usb 2-1: config 0 descriptor?? [ 65.224647][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.409364][ T4208] usb 2-1: USB disconnect, device number 3 [ 65.422149][ T4517] vhci_hcd: connection closed [ 65.434851][ T4232] vhci_hcd: stop threads [ 65.474744][ T4232] vhci_hcd: release socket [ 65.474870][ T4157] vhci_hcd: vhci_device speed not set [ 65.490568][ T4232] vhci_hcd: disconnect device [ 65.518308][ T4572] loop2: detected capacity change from 0 to 1764 [ 65.552418][ T4574] loop4: detected capacity change from 0 to 2048 [ 65.574668][ T4157] usb 35-1: device descriptor read/64, error -71 [ 65.680009][ T4574] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.774541][ T4157] vhci_hcd: vhci_device speed not set [ 65.834636][ T13] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=9d.13 [ 65.873951][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.902682][ T13] usb 4-1: Product: syz [ 65.922324][ T13] usb 4-1: Manufacturer: syz [ 65.967933][ T13] usb 4-1: SerialNumber: syz [ 65.985337][ T13] usb 4-1: config 0 descriptor?? [ 66.046833][ T13] ttusbir 4-1:0.0: cannot find expected altsetting [ 66.102857][ T4581] loop0: detected capacity change from 0 to 8192 [ 66.174199][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 66.254320][ T4581] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 66.284781][ T4581] REISERFS (device loop0): using ordered data mode [ 66.291862][ T4581] reiserfs: using flush barriers [ 66.301694][ T4208] usb 4-1: USB disconnect, device number 3 [ 66.314515][ T4581] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.412729][ T4581] REISERFS (device loop0): checking transaction log (loop0) [ 66.478966][ T4603] loop1: detected capacity change from 0 to 512 [ 66.622616][ T4581] REISERFS (device loop0): Using tea hash to sort names [ 66.651726][ T4581] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 66.832203][ T4613] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 66.852703][ T4603] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.870496][ T4603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e02c, mo2=0002] [ 66.911774][ T4603] System zones: 1-12 [ 66.935621][ T4603] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.131: invalid indirect mapped block 1819239214 (level 1) [ 66.957813][ T4597] loop2: detected capacity change from 0 to 32768 [ 66.981354][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 66.990330][ T4603] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.131: bg 0: block 361: padding at end of block bitmap is not set [ 67.011719][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 67.018639][ T4603] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 67.031382][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 67.040168][ T4603] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.131: attempt to clear invalid blocks 33619980 len 1 [ 67.058627][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 67.078400][ T4597] XFS (loop2): Mounting V5 Filesystem [ 67.096181][ T4603] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.131: invalid indirect mapped block 1819239214 (level 0) [ 67.127818][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 67.136370][ T4603] EXT4-fs (loop1): 1 truncate cleaned up [ 67.142271][ T4603] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,resgid=0x0000000000000000,errors=remount-ro,test_dummy_encryption,. Quota mode: none. [ 67.177250][ T4603] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.131: Directory hole found for htree index block 0 [ 67.210006][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 67.240019][ T4603] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.131: Directory hole found for htree index block 0 [ 67.254283][ T4597] XFS (loop2): Ending clean mount [ 67.266620][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 67.435666][ T4179] XFS (loop2): Unmounting Filesystem [ 67.463908][ T4639] netlink: 'syz.0.145': attribute type 15 has an invalid length. [ 67.565978][ T4645] loop0: detected capacity change from 0 to 8 [ 67.712964][ T4649] netlink: 'syz.1.149': attribute type 15 has an invalid length. [ 67.906520][ T4659] loop4: detected capacity change from 0 to 512 [ 67.980884][ T4659] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.034991][ T4659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e02c, mo2=0002] [ 68.081238][ T4672] netlink: 'syz.2.158': attribute type 25 has an invalid length. [ 68.089626][ T4659] System zones: 1-12 [ 68.092566][ T4672] netlink: 'syz.2.158': attribute type 8 has an invalid length. [ 68.112952][ T4659] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.153: invalid indirect mapped block 1819239214 (level 1) [ 68.249219][ T4659] EXT4-fs (loop4): Remounting filesystem read-only [ 68.271979][ T4659] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.153: bg 0: block 361: padding at end of block bitmap is not set [ 68.399262][ T4683] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.425233][ T4659] EXT4-fs (loop4): Remounting filesystem read-only [ 68.461941][ T4659] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 68.521807][ T4659] EXT4-fs (loop4): Remounting filesystem read-only [ 68.574223][ T4659] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.153: attempt to clear invalid blocks 33619980 len 1 [ 68.623234][ T4688] netem: change failed [ 68.652416][ T4689] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 68.669260][ T4659] EXT4-fs (loop4): Remounting filesystem read-only [ 68.699222][ T4659] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.153: invalid indirect mapped block 1819239214 (level 0) [ 68.813099][ T4659] EXT4-fs (loop4): Remounting filesystem read-only [ 68.861257][ T4659] EXT4-fs (loop4): 1 truncate cleaned up [ 68.894886][ T4659] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,resgid=0x0000000000000000,errors=remount-ro,test_dummy_encryption,. Quota mode: none. [ 68.921436][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 68.979523][ T4681] loop1: detected capacity change from 0 to 131072 [ 69.004549][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 69.022826][ T4693] syz.3.169 (4693) used greatest stack depth: 19832 bytes left [ 69.044621][ T4659] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.153: Directory hole found for htree index block 0 [ 69.068213][ T150] block nbd0: Attempted send on invalid socket [ 69.075880][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.076746][ T4659] EXT4-fs (loop4): Remounting filesystem read-only [ 69.103992][ T1091] block nbd0: Attempted send on invalid socket [ 69.110258][ T1091] blk_update_request: I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.122022][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 69.151537][ T4681] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.175450][ T150] block nbd0: Attempted send on invalid socket [ 69.182003][ T150] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.201797][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 69.211312][ T4705] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.153: Directory hole found for htree index block 0 [ 69.224007][ T4697] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 69.225440][ T4705] EXT4-fs (loop4): Remounting filesystem read-only [ 69.231654][ T4697] UDF-fs: Scanning with blocksize 512 failed [ 69.244258][ T4681] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.245287][ T150] block nbd0: Attempted send on invalid socket [ 69.260740][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.273882][ T1091] block nbd0: Attempted send on invalid socket [ 69.280224][ T1091] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.291711][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 69.308828][ T150] block nbd0: Attempted send on invalid socket [ 69.315128][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.372027][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 69.398638][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 69.428841][ T4697] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 69.495857][ T4697] UDF-fs: Scanning with blocksize 1024 failed [ 69.529746][ T1091] block nbd0: Attempted send on invalid socket [ 69.536421][ T1091] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.550675][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 69.551344][ T1091] block nbd0: Attempted send on invalid socket [ 69.566716][ T1091] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.578498][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 69.595812][ T150] block nbd0: Attempted send on invalid socket [ 69.603776][ T150] blk_update_request: I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.625216][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 69.633308][ T4714] loop3: detected capacity change from 0 to 1024 [ 69.642463][ T4697] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 69.651093][ T4697] UDF-fs: Scanning with blocksize 2048 failed [ 69.658050][ T150] block nbd0: Attempted send on invalid socket [ 69.664895][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.676846][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 69.686987][ T4697] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 69.696878][ T4697] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 69.704949][ T4697] UDF-fs: Scanning with blocksize 4096 failed [ 69.711131][ T4697] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 69.795278][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 69.881908][ T4714] EXT4-fs error (device loop3): __ext4_get_inode_loc:4320: comm syz.3.176: Invalid inode table block 0 in block_group 0 [ 69.909828][ T4714] EXT4-fs (loop3): get root inode failed [ 69.915615][ T26] audit: type=1326 audit(1732691405.859:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.4.181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce40a2b809 code=0x0 [ 69.944592][ T4714] EXT4-fs (loop3): mount failed [ 70.009765][ T4732] loop0: detected capacity change from 0 to 128 [ 70.088184][ T4732] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.096692][ T4735] loop2: detected capacity change from 0 to 64 [ 70.108133][ T4732] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.154834][ T4732] fscrypt (loop0, inode 12): Unsupported encryption flags (0x23) [ 70.395191][ T4744] loop0: detected capacity change from 0 to 512 [ 70.471620][ T4744] EXT4-fs (loop0): Test dummy encryption mode enabled [ 70.512594][ T4744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e02c, mo2=0002] [ 70.526458][ T4744] System zones: 1-12 [ 70.538713][ T4744] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.189: invalid indirect mapped block 1819239214 (level 1) [ 70.564874][ T4744] EXT4-fs (loop0): Remounting filesystem read-only [ 70.574946][ T4744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.189: bg 0: block 361: padding at end of block bitmap is not set [ 70.648345][ T4744] EXT4-fs (loop0): Remounting filesystem read-only [ 70.686892][ T4744] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 70.721396][ T4744] EXT4-fs (loop0): Remounting filesystem read-only [ 70.735780][ T4744] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.189: attempt to clear invalid blocks 33619980 len 1 [ 70.768529][ T4744] EXT4-fs (loop0): Remounting filesystem read-only [ 70.796461][ T4744] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.189: invalid indirect mapped block 1819239214 (level 0) [ 70.814246][ T4744] EXT4-fs (loop0): Remounting filesystem read-only [ 70.823321][ T4744] EXT4-fs (loop0): 1 truncate cleaned up [ 70.830314][ T4742] loop2: detected capacity change from 0 to 40427 [ 70.832907][ T4744] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,resgid=0x0000000000000000,errors=remount-ro,test_dummy_encryption,. Quota mode: none. [ 70.904623][ T4742] F2FS-fs (loop2): invalid crc value [ 70.913121][ T4744] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.189: Directory hole found for htree index block 0 [ 70.937826][ T4744] EXT4-fs (loop0): Remounting filesystem read-only [ 70.959726][ T4744] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.189: Directory hole found for htree index block 0 [ 70.980910][ T4742] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.991151][ T4744] EXT4-fs (loop0): Remounting filesystem read-only [ 71.145062][ T4742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.188990][ T4758] loop0: detected capacity change from 0 to 128 [ 71.261978][ T4179] attempt to access beyond end of device [ 71.261978][ T4179] loop2: rw=2049, want=45104, limit=40427 [ 71.330911][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.338352][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.380080][ T4758] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.390876][ T4764] loop4: detected capacity change from 0 to 1024 [ 71.430706][ T4758] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.458649][ T4768] loop3: detected capacity change from 0 to 8192 [ 71.478054][ T4758] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x18) [ 71.517927][ T4768] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 71.573431][ T4768] REISERFS (device loop3): using ordered data mode [ 71.597932][ T4774] device syz_tun entered promiscuous mode [ 71.634701][ T4768] reiserfs: using flush barriers [ 71.643458][ T4768] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.678749][ T4768] REISERFS (device loop3): checking transaction log (loop3) [ 71.698355][ T4774] device syz_tun left promiscuous mode [ 71.964493][ T26] audit: type=1800 audit(1732691407.909:4): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.203" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 72.030159][ T4768] REISERFS (device loop3): Using tea hash to sort names [ 72.046149][ T4768] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 72.854240][ T4829] loop3: detected capacity change from 0 to 64 [ 72.916222][ T4831] loop2: detected capacity change from 0 to 512 [ 73.026903][ T4831] EXT4-fs (loop2): 1 orphan inode deleted [ 73.032671][ T4831] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 73.056762][ T4831] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.152746][ T4833] loop1: detected capacity change from 0 to 8192 [ 73.259211][ T4833] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 73.274998][ T4833] REISERFS (device loop1): using ordered data mode [ 73.281520][ T4833] reiserfs: using flush barriers [ 73.324539][ T4833] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.385338][ T4833] REISERFS (device loop1): checking transaction log (loop1) [ 73.476354][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.509211][ T4809] loop0: detected capacity change from 0 to 32768 [ 73.660151][ T4833] REISERFS (device loop1): Using tea hash to sort names [ 73.674966][ T4833] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 73.774499][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 73.895587][ T7] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 73.903609][ T7] usb 4-1: config 0 has no interface number 0 [ 73.930268][ T7] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 73.974471][ T7] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.154774][ T7] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 74.163968][ T7] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 74.204416][ T7] usb 4-1: Product: syz [ 74.208664][ T7] usb 4-1: SerialNumber: syz [ 74.225316][ T7] usb 4-1: config 0 descriptor?? [ 74.276466][ T7] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 74.290871][ T7] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 74.408574][ T4861] loop2: detected capacity change from 0 to 256 [ 74.506961][ T7] usb 4-1: USB disconnect, device number 4 [ 74.515941][ T4861] exfat: Deprecated parameter 'namecase' [ 74.534804][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.542581][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 74.579103][ T7] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 74.589177][ T4861] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 74.879662][ T4874] loop1: detected capacity change from 0 to 4096 [ 75.088082][ T4866] loop4: detected capacity change from 0 to 32768 [ 75.207136][ T4881] loop2: detected capacity change from 0 to 1024 [ 75.303066][ T4866] XFS (loop4): Mounting V5 Filesystem [ 75.524797][ T4866] XFS (loop4): Ending clean mount [ 75.543080][ T4866] XFS (loop4): Quotacheck needed: Please wait. [ 75.649763][ T4866] XFS (loop4): Quotacheck: Done. [ 75.825617][ T4910] loop0: detected capacity change from 0 to 512 [ 75.839396][ T4175] XFS (loop4): Unmounting Filesystem [ 75.913305][ T4910] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 75.944596][ T4910] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.959997][ T4910] EXT4-fs (loop0): shut down requested (2) [ 76.141217][ T4920] netlink: 'syz.1.257': attribute type 25 has an invalid length. [ 76.151843][ T4920] netlink: 'syz.1.257': attribute type 8 has an invalid length. [ 76.311278][ T4923] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 76.406823][ T4240] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.427176][ T4240] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.439708][ T1323] cfg80211: failed to load regulatory.db [ 76.582356][ T4936] loop0: detected capacity change from 0 to 128 [ 76.656297][ T4936] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.695689][ T4936] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.816246][ T4946] device bridge_slave_1 left promiscuous mode [ 76.845094][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.863566][ T4936] fscrypt (loop0, inode 12): Unsupported encryption modes (contents 1, filenames 10) [ 76.909261][ T4428] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 76.935655][ T4946] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 77.019585][ T4948] capability: warning: `syz.4.271' uses deprecated v2 capabilities in a way that may be insecure [ 77.194678][ T4428] usb 4-1: Using ep0 maxpacket: 8 [ 77.295133][ T4963] netlink: 'syz.0.276': attribute type 3 has an invalid length. [ 77.344749][ T4428] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.380004][ T4428] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.385777][ T4968] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 77.411270][ T4968] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.277'. [ 77.420874][ T4428] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.447632][ T4926] loop2: detected capacity change from 0 to 40427 [ 77.464479][ T4428] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.495878][ T4428] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.505016][ T4926] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 77.512678][ T4926] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 77.520514][ T4970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 77.522202][ T4428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.561893][ T4926] F2FS-fs (loop2): invalid crc value [ 77.582777][ T4926] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.695174][ T4975] loop0: detected capacity change from 0 to 512 [ 77.700368][ T4926] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 77.742182][ T4926] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.747544][ T4960] loop1: detected capacity change from 0 to 32768 [ 77.772403][ T4975] EXT4-fs (loop0): Test dummy encryption mode enabled [ 77.789962][ T4975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.819020][ T4960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.275 (4960) [ 77.834584][ T4428] usb 4-1: GET_CAPABILITIES returned 0 [ 77.840094][ T4428] usbtmc 4-1:16.0: can't read capabilities [ 77.873295][ T4926] attempt to access beyond end of device [ 77.873295][ T4926] loop2: rw=2049, want=53256, limit=40427 [ 77.906630][ T4960] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 77.923546][ T4975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 77.937987][ T4975] System zones: 1-12 [ 77.942836][ T4960] BTRFS info (device loop1): using free space tree [ 77.951160][ T4975] EXT4-fs (loop0): 1 truncate cleaned up [ 77.959797][ T4960] BTRFS info (device loop1): has skinny extents [ 78.035718][ T4975] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,test_dummy_encryption,debug,nobarrier,quota,,errors=continue. Quota mode: writeback. [ 78.060160][ T4206] usb 4-1: USB disconnect, device number 5 [ 78.085673][ T4179] attempt to access beyond end of device [ 78.085673][ T4179] loop2: rw=2049, want=45104, limit=40427 [ 78.147662][ T4985] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 78.317898][ T4975] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 78.510027][ T4960] BTRFS info (device loop1): enabling ssd optimizations [ 78.659424][ T5013] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 78.698625][ T5013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.733773][ T5017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 78.874147][ T5019] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.893651][ T9] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 79.224341][ T5031] loop3: detected capacity change from 0 to 64 [ 79.326295][ T5031] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 79.812502][ T5051] loop4: detected capacity change from 0 to 1024 [ 79.813980][ T5041] loop1: detected capacity change from 0 to 8192 [ 79.925644][ T5041] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 79.951721][ T5051] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 79.964549][ T5041] REISERFS (device loop1): using ordered data mode [ 79.996204][ T5051] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.4.302: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 80.014959][ T5041] reiserfs: using flush barriers [ 80.022734][ T5041] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.040710][ T5041] REISERFS (device loop1): checking transaction log (loop1) [ 80.150616][ T5041] REISERFS (device loop1): Using tea hash to sort names [ 80.164641][ T5051] EXT4-fs (loop4): Remounting filesystem read-only [ 80.171178][ T5051] EXT4-fs error (device loop4) in ext4_delete_inline_entry:1782: Corrupt filesystem [ 80.185077][ T5041] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 80.234252][ T5051] EXT4-fs (loop4): Remounting filesystem read-only [ 80.240707][ T5060] loop3: detected capacity change from 0 to 128 [ 80.253009][ T5025] loop2: detected capacity change from 0 to 32768 [ 80.559856][ T5047] loop0: detected capacity change from 0 to 32768 [ 80.647929][ T5047] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 scanned by syz.0.301 (5047) [ 80.786469][ T5047] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 80.850807][ T5073] loop1: detected capacity change from 0 to 1024 [ 80.869260][ T5047] BTRFS info (device loop0): using free space tree [ 80.916106][ T5047] BTRFS info (device loop0): has skinny extents [ 80.987867][ T5085] loop2: detected capacity change from 0 to 256 [ 81.063775][ T5073] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.072904][ T5073] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.081343][ T5073] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.089180][ T5073] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.098204][ T5073] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.106225][ T5073] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.159900][ T4216] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.211259][ T4216] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.225352][ T5047] BTRFS info (device loop0): enabling ssd optimizations [ 81.334431][ T4431] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.724859][ T5124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 81.779983][ T4431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.791894][ T4431] usb 5-1: config 0 has no interfaces? [ 81.874464][ T4431] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 81.883528][ T4431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.939125][ T4431] usb 5-1: config 0 descriptor?? [ 82.114018][ T5143] loop1: detected capacity change from 0 to 256 [ 82.125739][ T5139] loop2: detected capacity change from 0 to 2048 [ 82.132522][ T5105] loop3: detected capacity change from 0 to 32768 [ 82.160268][ T5143] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xa154a131, utbl_chksum : 0xe619d30d) [ 82.182306][ T5139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.272288][ T5105] XFS (loop3): Mounting V5 Filesystem [ 82.304684][ T4431] usb 5-1: string descriptor 0 read error: -71 [ 82.312390][ T4431] usb 5-1: USB disconnect, device number 4 [ 82.344676][ T5127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.412034][ T5105] XFS (loop3): Ending clean mount [ 82.493589][ T4167] XFS (loop3): Unmounting Filesystem [ 82.609722][ T5158] netlink: 'syz.2.334': attribute type 9 has an invalid length. [ 82.700475][ T5159] loop1: detected capacity change from 0 to 4096 [ 82.718612][ T5127] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 82.735950][ T5127] usb 1-1: config 0 has no interface number 0 [ 82.743378][ T5127] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.762506][ T5127] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.773624][ T5127] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 82.775345][ T5163] program syz.2.336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.788323][ T5127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.810245][ T5159] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 82.822715][ T5127] usb 1-1: config 0 descriptor?? [ 82.864305][ T5159] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 82.883187][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 83.225542][ T5178] loop1: detected capacity change from 0 to 512 [ 83.357800][ T5127] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 83.372705][ T5178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.340: inode #1: comm syz.1.340: iget: illegal inode # [ 83.375082][ T5127] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 83.414517][ T5127] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 83.422759][ T5127] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 83.443017][ T5127] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 83.463264][ T5127] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 83.473392][ T5127] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 83.492799][ T5178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.340: error while reading EA inode 1 err=-117 [ 83.507700][ T5127] logitech-djreceiver 0003:046D:C71B.0004: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 83.538225][ T5178] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.577603][ T5178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.340: inode #1: comm syz.1.340: iget: illegal inode # [ 83.592770][ T4207] usb 1-1: USB disconnect, device number 2 [ 83.624577][ T5178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.340: error while reading EA inode 1 err=-117 [ 83.661717][ T5178] EXT4-fs (loop1): 1 orphan inode deleted [ 83.671704][ T5178] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 83.704546][ T4428] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.793101][ T5193] loop3: detected capacity change from 0 to 64 [ 83.809343][ T5170] loop2: detected capacity change from 0 to 40427 [ 83.866562][ T5170] F2FS-fs (loop2): invalid crc value [ 83.925423][ T5170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.044844][ T5170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.123317][ T5200] o2cb: This node has not been configured. [ 84.145716][ T4428] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 84.153878][ T4428] usb 5-1: config 0 has no interface number 0 [ 84.167014][ T5200] o2cb: Cluster check failed. Fix errors before retrying. [ 84.178782][ T4179] attempt to access beyond end of device [ 84.178782][ T4179] loop2: rw=2049, want=45104, limit=40427 [ 84.184963][ T5200] (syz.3.350,5200,0):user_dlm_register:675 ERROR: status = -22 [ 84.203379][ T5202] loop1: detected capacity change from 0 to 1024 [ 84.215106][ T5200] (syz.3.350,5200,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "bus" [ 84.299519][ T5202] hfsplus: bad catalog entry type [ 84.344711][ T4428] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=ef.dd [ 84.369324][ T4428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.404666][ T4428] usb 5-1: Product: syz [ 84.414995][ T4428] usb 5-1: Manufacturer: syz [ 84.420026][ T4428] usb 5-1: SerialNumber: syz [ 84.439720][ T4428] usb 5-1: config 0 descriptor?? [ 84.478604][ T9] hfsplus: b-tree write err: -5, ino 4 [ 84.517152][ T4428] kalmia: probe of 5-1:0.19 failed with error -22 [ 84.545635][ T4428] option 5-1:0.19: GSM modem (1-port) converter detected [ 84.802269][ T5222] loop0: detected capacity change from 0 to 64 [ 84.897348][ T5127] usb 5-1: USB disconnect, device number 5 [ 84.909897][ T5127] option 5-1:0.19: device disconnected [ 84.997539][ T5222] hfs: request for non-existent node 131072 in B*Tree [ 85.039717][ T5222] hfs: request for non-existent node 131072 in B*Tree [ 85.550531][ T5245] loop4: detected capacity change from 0 to 1024 [ 85.672228][ T5219] loop3: detected capacity change from 0 to 40427 [ 85.739627][ T5219] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 85.759697][ T5219] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.801652][ T5245] hfsplus: catalog searching failed [ 85.843251][ T5219] F2FS-fs (loop3): invalid crc value [ 85.910604][ T4795] hfsplus: b-tree write err: -5, ino 4 [ 85.941605][ T5219] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.960873][ T5233] loop2: detected capacity change from 0 to 32768 [ 86.056100][ T5233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.363 (5233) [ 86.178192][ T5233] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 86.189455][ T5219] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.209698][ T5219] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.227253][ T5233] BTRFS info (device loop2): using free space tree [ 86.267940][ T5233] BTRFS info (device loop2): has skinny extents [ 86.401462][ T5238] loop0: detected capacity change from 0 to 32768 [ 86.407950][ T4167] attempt to access beyond end of device [ 86.407950][ T4167] loop3: rw=2049, want=45112, limit=40427 [ 86.529243][ T5233] BTRFS info (device loop2): enabling ssd optimizations [ 86.574616][ T4207] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.599773][ T5238] XFS (loop0): Mounting V5 Filesystem [ 86.825437][ T4207] usb 2-1: Using ep0 maxpacket: 32 [ 86.834786][ T5310] mmap: syz.4.376 (5310) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 86.906715][ T5238] XFS (loop0): Ending clean mount [ 86.919117][ T5238] XFS (loop0): Quotacheck needed: Please wait. [ 86.990552][ T4207] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.022264][ T5238] XFS (loop0): Quotacheck: Done. [ 87.093177][ T4207] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 87.116698][ T4207] usb 2-1: config 127 has no interface number 0 [ 87.122990][ T4207] usb 2-1: config 127 interface 25 has no altsetting 0 [ 87.139932][ T5313] loop4: detected capacity change from 0 to 4096 [ 87.154775][ T4174] XFS (loop0): Unmounting Filesystem [ 87.232259][ T5313] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 87.305411][ T4207] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 87.305973][ T5313] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 87.321703][ T4207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.374631][ T4207] usb 2-1: Product: syz [ 87.379052][ T4207] usb 2-1: Manufacturer: syz [ 87.392260][ T5320] loop2: detected capacity change from 0 to 24 [ 87.417246][ T4207] usb 2-1: SerialNumber: syz [ 87.437726][ T5320] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 87.467343][ T5320] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 87.638475][ T5330] loop0: detected capacity change from 0 to 1024 [ 87.668236][ T26] audit: type=1800 audit(1732691423.619:5): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.383" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 87.725938][ T4207] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 87.811614][ T5340] loop2: detected capacity change from 0 to 512 [ 87.873758][ T5340] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 87.947875][ T5117] kernel write not supported for file /video4 (pid: 5117 comm: kworker/1:9) [ 88.101185][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 88.216053][ T4207] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 88.285848][ T4207] usb 2-1: device reset changed ep0 maxpacket size! [ 88.315144][ T4207] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 88.382742][ T4207] usb 2-1: USB disconnect, device number 4 [ 88.569251][ T5346] loop0: detected capacity change from 0 to 32768 [ 88.575502][ T4207] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.657195][ T5352] loop4: detected capacity change from 0 to 32768 [ 88.670101][ T5346] XFS (loop0): Mounting V5 Filesystem [ 88.676442][ T5117] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.710310][ T5352] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.395 (5352) [ 88.730611][ T5352] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 88.747721][ T5352] BTRFS info (device loop4): setting nodatasum [ 88.767446][ T5346] XFS (loop0): Ending clean mount [ 88.782282][ T5340] loop2: detected capacity change from 0 to 32768 [ 88.788954][ T5352] BTRFS info (device loop4): using free space tree [ 88.802084][ T5346] XFS (loop0): Quotacheck needed: Please wait. [ 88.808553][ T5352] BTRFS info (device loop4): has skinny extents [ 88.824477][ T4207] usb 2-1: Using ep0 maxpacket: 16 [ 88.863731][ T5346] XFS (loop0): Quotacheck: Done. [ 88.914150][ T5340] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 88.927588][ T5340] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 88.944881][ T4207] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.966909][ T5352] BTRFS info (device loop4): enabling ssd optimizations [ 88.999989][ T4174] XFS (loop0): Unmounting Filesystem [ 89.007984][ T4207] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 89.017474][ T4207] usb 2-1: can't read configurations, error -71 [ 89.035358][ T26] audit: type=1800 audit(1732691424.979:6): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.395" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 89.035693][ T5117] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 89.064894][ T5117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.077871][ T5117] usb 4-1: config 0 descriptor?? [ 89.082158][ T5340] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 89.126459][ T5117] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 89.146907][ T4208] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 89.174442][ T4208] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 89.338994][ T4208] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 164ms [ 89.400805][ T4208] gfs2: fsid=syz:syz.0: jid=0: Done [ 89.432440][ T5340] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 89.518604][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 89.604860][ T5395] loop4: detected capacity change from 0 to 736 [ 89.698110][ T5401] loop0: detected capacity change from 0 to 256 [ 89.748937][ T5400] loop1: detected capacity change from 0 to 1024 [ 89.824556][ T5400] EXT4-fs (loop1): Ignoring removed orlov option [ 89.888676][ T5400] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,bsddf,barrier=0x0000000000000000,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,delalloc,,errors=continue. Quota mode: none. [ 90.014628][ T5117] gspca_cpia1: usb_control_msg 02, error -71 [ 90.085508][ T5117] gspca_cpia1: usb_control_msg 05, error -71 [ 90.105812][ T5117] gspca_cpia1: usb_control_msg 04, error -71 [ 90.111901][ T5117] cpia1: probe of 4-1:0.0 failed with error -71 [ 90.150040][ T5117] usb 4-1: USB disconnect, device number 6 [ 90.348503][ T5423] loop0: detected capacity change from 0 to 1024 [ 90.465309][ T5427] loop4: detected capacity change from 0 to 256 [ 90.477634][ T5423] hfsplus: bad catalog folder thread [ 90.496072][ T5412] loop1: detected capacity change from 0 to 32768 [ 90.818759][ T5412] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.059987][ T4166] ocfs2: Unmounting device (7,1) on (node local) [ 91.095077][ T5441] loop3: detected capacity change from 0 to 32768 [ 91.137737][ T5441] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.421 (5441) [ 91.202334][ T5441] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 91.224509][ T5441] BTRFS info (device loop3): using free space tree [ 91.231065][ T5441] BTRFS info (device loop3): has skinny extents [ 91.307953][ T5455] loop1: detected capacity change from 0 to 256 [ 91.351494][ T5455] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2da6ec10, utbl_chksum : 0xe619d30d) [ 91.377539][ T5444] loop0: detected capacity change from 0 to 32768 [ 91.470677][ T5441] BTRFS info (device loop3): enabling ssd optimizations [ 91.530036][ T5441] BTRFS info (device loop3): Snapshot src from another FS [ 91.712699][ T5474] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 91.758961][ T5474] syzkaller0: linktype set to 805 [ 91.913130][ T5478] loop0: detected capacity change from 0 to 512 [ 91.969772][ T5477] loop4: detected capacity change from 0 to 4096 [ 92.008527][ T5478] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 92.045591][ T5478] UDF-fs: Scanning with blocksize 512 failed [ 92.089347][ T5481] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.102089][ T5478] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 92.140530][ T5478] UDF-fs: Scanning with blocksize 1024 failed [ 92.159351][ T5478] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 92.186115][ T5478] UDF-fs: Scanning with blocksize 2048 failed [ 92.212436][ T5478] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 92.270466][ T5478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.680257][ T5503] loop4: detected capacity change from 0 to 2048 [ 92.724467][ T1107] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.791534][ T5503] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.857272][ T5488] loop1: detected capacity change from 0 to 40427 [ 92.892629][ T5504] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.907042][ T5488] F2FS-fs (loop1): invalid crc value [ 92.921619][ T5488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.995629][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 93.044162][ T5499] loop0: detected capacity change from 0 to 32768 [ 93.063635][ T5488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.100439][ T5511] loop4: detected capacity change from 0 to 64 [ 93.130570][ T5499] XFS (loop0): Mounting V5 Filesystem [ 93.155507][ T1107] usb 4-1: config 0 has no interfaces? [ 93.161250][ T1107] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.170990][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.190913][ T1107] usb 4-1: config 0 descriptor?? [ 93.233868][ T5499] XFS (loop0): Ending clean mount [ 93.251234][ T5511] overlayfs: upper fs needs to support d_type. [ 93.290663][ T4174] XFS (loop0): Unmounting Filesystem [ 93.406687][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.442'. [ 93.413073][ T5511] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.415975][ T5521] Zero length message leads to an empty skb [ 93.441766][ T5511] overlayfs: failed to set xattr on upper [ 93.461567][ T5511] overlayfs: ...falling back to index=off,metacopy=off. [ 93.482508][ T1107] usb 4-1: USB disconnect, device number 7 [ 93.503350][ T4795] attempt to access beyond end of device [ 93.503350][ T4795] loop4: rw=1, want=268435470, limit=64 [ 93.528760][ T4795] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 93.576581][ T4175] Trying to free block not in datazone [ 93.701905][ T5525] loop4: detected capacity change from 0 to 128 [ 93.751005][ T5525] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 93.777757][ T5525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.825713][ T4208] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.859104][ T5533] loop0: detected capacity change from 0 to 512 [ 93.900740][ T5533] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 93.922567][ T5533] print_req_error: 2 callbacks suppressed [ 93.922582][ T5533] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.929280][ T5535] loop4: detected capacity change from 0 to 1024 [ 93.940321][ T5533] EXT4-fs (loop0): couldn't read superblock of external journal [ 93.977153][ T5535] EXT4-fs (loop4): Ignoring removed nobh option [ 94.014543][ T5535] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.449: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.075484][ T5535] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.449: couldn't read orphan inode 11 (err -117) [ 94.089275][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 94.154572][ T5541] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 94.192002][ T5535] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.449: Invalid block bitmap block 0 in block_group 0 [ 94.197821][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.218143][ T5535] Quota error (device loop4): write_blk: dquota write failed [ 94.228862][ T5535] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 94.229810][ T5541] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 94.240129][ T5535] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.449: Failed to acquire dquot type 0 [ 94.264755][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 94.264823][ T4208] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.356203][ T4208] usb 2-1: config 174 has an invalid interface number: 153 but max is 0 [ 94.370651][ T4208] usb 2-1: config 174 has no interface number 0 [ 94.377267][ T4208] usb 2-1: config 174 interface 153 has no altsetting 0 [ 94.388271][ T4795] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 94.403808][ T4795] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:8: Failed to release dquot type 0 [ 94.564918][ T4208] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a [ 94.578718][ T4208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.611995][ T4208] usb 2-1: Product: syz [ 94.630852][ T4208] usb 2-1: Manufacturer: syz [ 94.637757][ T4208] usb 2-1: SerialNumber: syz [ 94.784762][ T5569] ipt_CLUSTERIP: Please specify destination IP [ 94.966392][ T5583] loop4: detected capacity change from 0 to 256 [ 94.975736][ T4208] sierra 2-1:174.153: Sierra USB modem converter detected [ 95.016480][ T4208] usb 2-1: USB disconnect, device number 7 [ 95.024997][ T4208] sierra 2-1:174.153: device disconnected [ 95.054602][ T5391] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 95.304546][ T5391] usb 4-1: Using ep0 maxpacket: 16 [ 95.425002][ T5391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.604816][ T5391] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.623558][ T5391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.642010][ T5391] usb 4-1: Product: syz [ 95.651932][ T5391] usb 4-1: Manufacturer: syz [ 95.662247][ T5391] usb 4-1: SerialNumber: syz [ 95.675425][ T5391] usb 4-1: config 0 descriptor?? [ 95.701462][ T5591] loop1: detected capacity change from 0 to 4096 [ 95.725972][ T5391] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.735757][ T5391] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 95.816392][ T5591] ntfs: volume version 3.1. [ 96.035397][ T5598] loop1: detected capacity change from 0 to 512 [ 96.081419][ T5598] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 96.081419][ T5598] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.081419][ T5598] [ 96.137766][ T5598] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 96.172809][ T5598] EXT4-fs (loop1): 1 truncate cleaned up [ 96.222976][ T5598] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,jqfmt=vfsv1,usrjquota="oldalloc,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 96.262712][ T5603] loop4: detected capacity change from 0 to 64 [ 96.355812][ T5598] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 4: comm syz.1.475: lblock 0 mapped to illegal pblock 4 (length 1) [ 96.370029][ T5391] em28xx 4-1:0.0: chip ID is em28178 [ 96.599451][ T5611] loop1: detected capacity change from 0 to 4096 [ 96.627517][ T5609] loop0: detected capacity change from 0 to 4096 [ 96.639337][ T5616] loop4: detected capacity change from 0 to 512 [ 96.668939][ T5609] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 96.698379][ T5611] NILFS (loop1): invalid segment: Checksum error in segment payload [ 96.708661][ T5611] NILFS (loop1): trying rollback from an earlier position [ 96.731724][ T5616] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 96.743201][ T5611] NILFS (loop1): recovery complete [ 96.749036][ T5391] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 96.754641][ T5616] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.781663][ T5619] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.783729][ T5609] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 96.810617][ T5391] em28xx 4-1:0.0: board has no eeprom [ 96.880435][ T5616] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.484: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 96.964482][ T5391] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.972524][ T5391] em28xx 4-1:0.0: dvb set to bulk mode. [ 96.983212][ T4207] em28xx 4-1:0.0: Binding DVB extension [ 96.995058][ T5391] usb 4-1: USB disconnect, device number 8 [ 97.009709][ T5391] em28xx 4-1:0.0: Disconnecting em28xx [ 97.024451][ T5616] EXT4-fs (loop4): Remounting filesystem read-only [ 97.084187][ T4207] em28xx 4-1:0.0: Registering input extension [ 97.224591][ T4207] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 97.231134][ T4207] Registered IR keymap rc-empty [ 97.241596][ T5623] loop0: detected capacity change from 0 to 4096 [ 97.252847][ T5628] loop3: detected capacity change from 0 to 2048 [ 97.267321][ T4207] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 97.311777][ T4207] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 97.384969][ T4207] em28xx 4-1:0.0: Input extension successfully initialized [ 97.392535][ T5391] em28xx 4-1:0.0: Closing input extension [ 97.500427][ T5623] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 97.523590][ T5628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.538874][ T5391] em28xx 4-1:0.0: Freeing device [ 97.544504][ T4208] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.576569][ T5623] ntfs3: loop0: Failed to load $Extend. [ 97.773661][ T5632] syz.1.489 (5632): drop_caches: 2 [ 97.928888][ T5645] loop3: detected capacity change from 0 to 256 [ 97.955093][ T4208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.977529][ T4208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.994458][ T4208] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 98.013859][ T4208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.036547][ T4208] usb 5-1: config 0 descriptor?? [ 98.071805][ T5648] loop0: detected capacity change from 0 to 8192 [ 98.090408][ T5649] loop1: detected capacity change from 0 to 8192 [ 98.138752][ T5648] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 98.150812][ T5648] REISERFS (device loop0): using ordered data mode [ 98.159659][ T5648] reiserfs: using flush barriers [ 98.176447][ T5648] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.215074][ T5648] REISERFS (device loop0): checking transaction log (loop0) [ 98.224494][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.232810][ T5649] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 98.255763][ T5648] REISERFS (device loop0): Using r5 hash to sort names [ 98.262931][ T5648] REISERFS (device loop0): using 3.5.x disk format [ 98.264605][ T5649] REISERFS (device loop1): using ordered data mode [ 98.308746][ T5649] reiserfs: using flush barriers [ 98.329358][ T5648] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 98.338711][ T5649] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.339073][ T5649] REISERFS (device loop1): checking transaction log (loop1) [ 98.340710][ T5655] loop3: detected capacity change from 0 to 512 [ 98.379385][ T5649] REISERFS (device loop1): Using rupasov hash to sort names [ 98.387165][ T5649] REISERFS (device loop1): using 3.5.x disk format [ 98.393905][ T5649] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.412381][ T5649] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.434777][ T5649] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.445917][ T5655] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 98.453311][ T5655] UDF-fs: Scanning with blocksize 512 failed [ 98.467622][ T5655] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 98.471061][ T5649] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 98.476670][ T5655] UDF-fs: Scanning with blocksize 1024 failed [ 98.491874][ T5655] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 98.500027][ T5655] UDF-fs: Scanning with blocksize 2048 failed [ 98.510083][ T5655] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 98.510290][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 98.522962][ T5655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.577430][ T4208] steelseries_srws1 0003:1038:1410.0005: unknown main item tag 0x0 [ 98.588352][ T4208] steelseries_srws1 0003:1038:1410.0005: unknown main item tag 0x0 [ 98.619140][ T4208] steelseries_srws1 0003:1038:1410.0005: not enough fields in HID_OUTPUT_REPORT 0 [ 98.678789][ T5657] 8021q: VLANs not supported on lo [ 98.684743][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.712779][ T1107] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 98.728743][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.739976][ T1107] usb 3-1: config 0 descriptor?? [ 98.761821][ T5659] loop0: detected capacity change from 0 to 512 [ 98.790679][ T4208] usb 5-1: USB disconnect, device number 6 [ 98.855703][ T5659] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 98.883867][ T5665] loop3: detected capacity change from 0 to 8192 [ 98.910126][ T5659] EXT4-fs (loop0): 1 truncate cleaned up [ 98.922744][ T5659] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 98.987438][ T5665] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 98.997381][ T5665] REISERFS (device loop3): using ordered data mode [ 99.004538][ T5665] reiserfs: using flush barriers [ 99.012938][ T5665] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.052947][ T5665] REISERFS (device loop3): checking transaction log (loop3) [ 99.217359][ T1107] pantherlord 0003:0810:0002.0006: unknown main item tag 0x0 [ 99.262207][ T1107] pantherlord 0003:0810:0002.0006: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 99.296224][ T5665] REISERFS (device loop3): Using tea hash to sort names [ 99.314845][ T5665] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 99.320879][ T1107] pantherlord 0003:0810:0002.0006: no output reports found [ 99.359384][ T5665] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 99.408017][ T5684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.512'. [ 99.422628][ T5688] loop1: detected capacity change from 0 to 16 [ 99.447933][ T1107] usb 3-1: USB disconnect, device number 4 [ 99.518053][ T5688] erofs: (device loop1): mounted with root inode @ nid 36. [ 99.523276][ T5692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 99.593656][ T5694] loop4: detected capacity change from 0 to 512 [ 99.651423][ T5694] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 99.654467][ T5391] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.670344][ T5694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 99.679175][ T5694] System zones: 1-12 [ 99.684186][ T5694] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.691042][ T5694] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.517: Inode bitmap for bg 0 marked uninitialized [ 99.731812][ T5694] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.795796][ T5694] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 5: comm syz.4.517: lblock 0 mapped to illegal pblock 5 (length 1) [ 99.827764][ T5694] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.517: error -117 reading directory block [ 99.891653][ T5703] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 5: comm syz.4.517: lblock 0 mapped to illegal pblock 5 (length 1) [ 99.934727][ T5391] usb 1-1: Using ep0 maxpacket: 32 [ 99.963207][ T5703] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.517: error -117 reading directory block [ 100.025995][ T5711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'. [ 100.059617][ T5391] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.080132][ T5391] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 100.114638][ T5391] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 100.162962][ T5391] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.186035][ T5391] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 100.199918][ T5717] loop3: detected capacity change from 0 to 2048 [ 100.210161][ T5391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.239628][ T5391] usb 1-1: config 0 descriptor?? [ 100.305175][ T5721] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.446820][ T5708] loop1: detected capacity change from 0 to 32768 [ 100.462956][ T5723] loop4: detected capacity change from 0 to 4096 [ 100.495912][ T5708] XFS (loop1): Mounting V5 Filesystem [ 100.528975][ T5723] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 100.542614][ T5708] XFS (loop1): Ending clean mount [ 100.635288][ T4166] XFS (loop1): Unmounting Filesystem [ 100.727574][ T5117] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.735686][ T5391] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 100.944674][ T5391] hid-thrustmaster 0003:044F:B65D.0007: setup data couldn't be sent [ 100.964437][ C1] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71 [ 100.976732][ T5391] usb 1-1: USB disconnect, device number 3 [ 100.985693][ T5117] usb 3-1: Using ep0 maxpacket: 8 [ 101.104829][ T5117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.133014][ T5117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.157698][ T5117] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.204457][ T5117] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.231846][ T5117] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.242852][ T5117] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 101.404726][ T5117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.423894][ T5117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.442546][ T5117] usb 3-1: Product: syz [ 101.453059][ T5117] usb 3-1: Manufacturer: syz [ 101.483562][ T5755] loop3: detected capacity change from 0 to 64 [ 101.490249][ T5117] usb 3-1: SerialNumber: syz [ 101.583883][ T5757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.538'. [ 101.605830][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 101.634650][ T5750] loop4: detected capacity change from 0 to 32768 [ 101.699074][ T5750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.535 (5750) [ 101.712177][ T4167] hfs: node 4:3 still has 1 user(s)! [ 101.782038][ T5750] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 101.804986][ T5117] cdc_ncm 3-1:1.0: bind() failure [ 101.834536][ T5750] BTRFS info (device loop4): use no compression [ 101.881320][ T5117] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 101.890152][ T5750] BTRFS info (device loop4): force zlib compression, level 3 [ 101.898567][ T5117] cdc_ncm 3-1:1.1: bind() failure [ 101.911621][ T5750] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 101.929474][ T5751] loop1: detected capacity change from 0 to 40427 [ 101.939276][ T5117] usb 3-1: USB disconnect, device number 5 [ 101.978964][ T5750] BTRFS info (device loop4): use lzo compression, level 0 [ 101.996565][ T5750] BTRFS info (device loop4): turning on flush-on-commit [ 102.018421][ T5750] BTRFS info (device loop4): enabling auto defrag [ 102.046396][ T5751] F2FS-fs (loop1): invalid crc value [ 102.066971][ T5750] BTRFS info (device loop4): using free space tree [ 102.078454][ T5751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.082192][ T5750] BTRFS info (device loop4): has skinny extents [ 102.102058][ T4169] Bluetooth: hci4: link tx timeout [ 102.107805][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.119920][ T4169] Bluetooth: hci4: link tx timeout [ 102.125916][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.133666][ T4169] Bluetooth: hci4: link tx timeout [ 102.139370][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.155543][ T4169] Bluetooth: hci4: link tx timeout [ 102.160709][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.215133][ T5751] F2FS-fs (loop1): Start checkpoint disabled! [ 102.233827][ T5751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 102.418597][ T5750] BTRFS info (device loop4): enabling ssd optimizations [ 102.420778][ T5800] loop0: detected capacity change from 0 to 1024 [ 102.463227][ T5808] loop3: detected capacity change from 0 to 512 [ 102.533793][ T5808] EXT4-fs (loop3): first meta block group too large: 16711680 (group descriptor block count 1) [ 102.535458][ T4232] attempt to access beyond end of device [ 102.535458][ T4232] loop1: rw=2049, want=40984, limit=40427 [ 102.820416][ T5800] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,bsddf,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 102.872012][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 103.178292][ T4169] Bluetooth: hci4: link tx timeout [ 103.183505][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.192346][ T4169] Bluetooth: hci4: link tx timeout [ 103.197566][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.212898][ T4169] Bluetooth: hci4: link tx timeout [ 103.218131][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.226143][ T4169] Bluetooth: hci4: link tx timeout [ 103.231264][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.239300][ T4169] Bluetooth: hci4: link tx timeout [ 103.244534][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.565386][ T5827] loop3: detected capacity change from 0 to 32768 [ 103.644637][ T5121] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.644697][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.665813][ T5846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 103.884477][ T5121] usb 5-1: Using ep0 maxpacket: 16 [ 103.924526][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 103.935761][ T5827] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.560 (5827) [ 103.983143][ T5827] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 104.003430][ T5827] BTRFS info (device loop3): enabling auto defrag [ 104.010748][ T5121] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 104.017663][ T5852] loop2: detected capacity change from 0 to 1024 [ 104.025771][ T5121] usb 5-1: config 0 has no interface number 0 [ 104.038716][ T5827] BTRFS info (device loop3): max_inline at 0 [ 104.053385][ T5121] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 104.064081][ T5827] BTRFS info (device loop3): enabling ssd optimizations [ 104.077406][ T7] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 104.084020][ T5827] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 104.093500][ T7] usb 1-1: config 0 has no interface number 0 [ 104.095441][ T5121] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 104.124819][ T5827] BTRFS info (device loop3): use lzo compression, level 0 [ 104.143750][ T5827] BTRFS info (device loop3): using free space tree [ 104.162580][ T5827] BTRFS info (device loop3): has skinny extents [ 104.203050][ T5850] loop1: detected capacity change from 0 to 40427 [ 104.210113][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 104.266554][ T26] audit: type=1800 audit(1732691440.219:7): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.560" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 104.294619][ T5121] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 104.303918][ T5121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.318241][ T5121] usb 5-1: Product: syz [ 104.321327][ T5850] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 104.322462][ T5121] usb 5-1: Manufacturer: syz [ 104.335606][ T7] usb 1-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=bb.fc [ 104.339008][ T5121] usb 5-1: SerialNumber: syz [ 104.365731][ T5121] usb 5-1: config 0 descriptor?? [ 104.373275][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.389597][ T5850] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.394753][ T5836] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.409915][ T5836] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.412857][ T7] usb 1-1: Product: syz [ 104.489515][ T5850] F2FS-fs (loop1): invalid crc value [ 104.502607][ T7] usb 1-1: Manufacturer: syz [ 104.541449][ T7] usb 1-1: SerialNumber: syz [ 104.573400][ T7] usb 1-1: config 0 descriptor?? [ 104.585146][ T5850] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.657657][ T7] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 104.658082][ T5836] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.703623][ T5836] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.791183][ T5850] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 104.799560][ T5850] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.944522][ T5874] loop2: detected capacity change from 0 to 40427 [ 104.972879][ T5874] F2FS-fs (loop2): invalid crc value [ 105.017810][ T5874] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.037238][ T1425] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 105.064495][ T1425] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 105.130116][ T5874] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.150680][ T5874] F2FS-fs (loop2): access invalid blkaddr:2816 [ 105.159653][ T5874] CPU: 1 PID: 5874 Comm: syz.2.571 Not tainted 5.15.173-syzkaller #0 [ 105.167751][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.177834][ T5874] Call Trace: [ 105.181127][ T5874] [ 105.184073][ T5874] dump_stack_lvl+0x1e3/0x2d0 [ 105.188770][ T5874] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 105.194428][ T5874] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 105.200272][ T5874] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 105.205690][ T5874] f2fs_map_blocks+0x159a/0x3720 [ 105.210676][ T5874] ? f2fs_force_buffered_io+0x630/0x630 [ 105.216262][ T5874] f2fs_mpage_readpages+0xe98/0x27c0 [ 105.221595][ T5874] ? dquot_release_reservation_block+0x90/0x90 [ 105.227790][ T5874] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 105.234081][ T5874] ? f2fs_readahead+0x16e/0x310 [ 105.238935][ T5874] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 105.244652][ T5874] read_pages+0x159/0x8e0 [ 105.248975][ T5874] ? page_cache_ra_unbounded+0x930/0x930 [ 105.254599][ T5874] ? add_to_page_cache_locked+0x40/0x40 [ 105.260140][ T5874] ? down_read+0x1b3/0x2e0 [ 105.264560][ T5874] page_cache_ra_unbounded+0x7b0/0x930 [ 105.270073][ T5874] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 105.276604][ T5874] ? blk_cgroup_congested+0x30c/0x390 [ 105.281990][ T5874] f2fs_readdir+0x546/0xef0 [ 105.286507][ T5874] ? f2fs_fill_dentries+0xd60/0xd60 [ 105.291811][ T5874] ? f2fs_fill_dentries+0xd60/0xd60 [ 105.297012][ T5874] ? iterate_dir+0x10a/0x570 [ 105.301616][ T5874] ? fsnotify_perm+0x442/0x590 [ 105.306376][ T5874] iterate_dir+0x224/0x570 [ 105.310783][ T5874] ? f2fs_fill_dentries+0xd60/0xd60 [ 105.315981][ T5874] __se_sys_getdents64+0x209/0x4f0 [ 105.321106][ T5874] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 105.327105][ T5874] ? __x64_sys_getdents64+0x80/0x80 [ 105.332290][ T5874] ? filldir+0x720/0x720 [ 105.336522][ T5874] ? syscall_enter_from_user_mode+0x2e/0x240 [ 105.342491][ T5874] ? lockdep_hardirqs_on+0x94/0x130 [ 105.347678][ T5874] ? syscall_enter_from_user_mode+0x2e/0x240 [ 105.353673][ T5874] do_syscall_64+0x3b/0xb0 [ 105.358075][ T5874] ? clear_bhb_loop+0x15/0x70 [ 105.362742][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.368631][ T5874] RIP: 0033:0x7f68080ee809 [ 105.373062][ T5874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.392654][ T5874] RSP: 002b:00007f6805f64058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 105.401062][ T5874] RAX: ffffffffffffffda RBX: 00007f68082b3fa0 RCX: 00007f68080ee809 [ 105.409025][ T5874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 105.416988][ T5874] RBP: 00007f680816193e R08: 0000000000000000 R09: 0000000000000000 [ 105.424965][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.432923][ T5874] R13: 0000000000000000 R14: 00007f68082b3fa0 R15: 00007ffca9d441f8 [ 105.440892][ T5874] [ 105.446472][ T5121] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 105.459246][ T5121] asix: probe of 5-1:0.251 failed with error -524 [ 105.469199][ T5874] F2FS-fs (loop2): access invalid blkaddr:2816 [ 105.483232][ T5874] CPU: 1 PID: 5874 Comm: syz.2.571 Not tainted 5.15.173-syzkaller #0 [ 105.491334][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.501397][ T5874] Call Trace: [ 105.504677][ T5874] [ 105.507595][ T5874] dump_stack_lvl+0x1e3/0x2d0 [ 105.512261][ T5874] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 105.517885][ T5874] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 105.523710][ T5874] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 105.529078][ T5874] f2fs_map_blocks+0x159a/0x3720 [ 105.534019][ T5874] ? f2fs_force_buffered_io+0x630/0x630 [ 105.534759][ T7] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 105.539564][ T5874] ? unlock_page+0x188/0x200 [ 105.539630][ T5874] f2fs_mpage_readpages+0xe98/0x27c0 [ 105.551591][ T7] gspca_pac7302: probe of 1-1:0.93 failed with error -71 [ 105.556233][ T5874] ? dquot_release_reservation_block+0x90/0x90 [ 105.556288][ T5874] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 105.575555][ T5874] ? f2fs_readahead+0x16e/0x310 [ 105.580440][ T5874] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 105.582079][ T7] usb 1-1: USB disconnect, device number 4 [ 105.586201][ T5874] read_pages+0x159/0x8e0 [ 105.586234][ T5874] ? page_cache_ra_unbounded+0x930/0x930 [ 105.586256][ T5874] ? add_to_page_cache_locked+0x40/0x40 [ 105.586278][ T5874] ? down_read+0x1b3/0x2e0 [ 105.586299][ T5874] page_cache_ra_unbounded+0x7b0/0x930 [ 105.586330][ T5874] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 105.586349][ T5874] ? blk_cgroup_congested+0x30c/0x390 [ 105.586400][ T5874] f2fs_readdir+0x546/0xef0 [ 105.586437][ T5874] ? f2fs_fill_dentries+0xd60/0xd60 [ 105.586467][ T5874] ? f2fs_fill_dentries+0xd60/0xd60 [ 105.586485][ T5874] ? iterate_dir+0x10a/0x570 [ 105.586503][ T5874] ? fsnotify_perm+0x442/0x590 [ 105.653655][ T5874] iterate_dir+0x224/0x570 [ 105.658065][ T5874] ? f2fs_fill_dentries+0xd60/0xd60 [ 105.663253][ T5874] __se_sys_getdents64+0x209/0x4f0 [ 105.668353][ T5874] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 105.674320][ T5874] ? __x64_sys_getdents64+0x80/0x80 [ 105.679521][ T5874] ? filldir+0x720/0x720 [ 105.683750][ T5874] ? syscall_enter_from_user_mode+0x2e/0x240 [ 105.689725][ T5874] ? lockdep_hardirqs_on+0x94/0x130 [ 105.694930][ T5874] ? syscall_enter_from_user_mode+0x2e/0x240 [ 105.700900][ T5874] do_syscall_64+0x3b/0xb0 [ 105.705320][ T5874] ? clear_bhb_loop+0x15/0x70 [ 105.709989][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.715876][ T5874] RIP: 0033:0x7f68080ee809 [ 105.720276][ T5874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.739871][ T5874] RSP: 002b:00007f6805f64058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 105.748293][ T5874] RAX: ffffffffffffffda RBX: 00007f68082b3fa0 RCX: 00007f68080ee809 [ 105.756251][ T5874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 105.764210][ T5874] RBP: 00007f680816193e R08: 0000000000000000 R09: 0000000000000000 [ 105.772167][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.780132][ T5874] R13: 0000000000000000 R14: 00007f68082b3fa0 R15: 00007ffca9d441f8 [ 105.788119][ T5874] [ 105.805335][ T5122] usb 5-1: USB disconnect, device number 7 [ 105.834785][ T5874] attempt to access beyond end of device [ 105.834785][ T5874] loop2: rw=0, want=45072, limit=40427 [ 105.869840][ T4179] attempt to access beyond end of device [ 105.869840][ T4179] loop2: rw=2049, want=45104, limit=40427 [ 106.231917][ T5893] loop0: detected capacity change from 0 to 4096 [ 106.297823][ T5893] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 106.411182][ T4169] Bluetooth: hci4: link tx timeout [ 106.416366][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.437182][ T4169] Bluetooth: hci4: link tx timeout [ 106.442326][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.451878][ T4169] Bluetooth: hci4: link tx timeout [ 106.457130][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.465071][ T4169] Bluetooth: hci4: link tx timeout [ 106.470198][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.609777][ T5889] loop3: detected capacity change from 0 to 32768 [ 106.637524][ T1091] nbd_handle_cmd: 2 callbacks suppressed [ 106.637544][ T1091] block nbd4: Attempted send on invalid socket [ 106.654475][ T1091] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.677591][ T150] block nbd4: Attempted send on invalid socket [ 106.683772][ T150] blk_update_request: I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.700274][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.750765][ T150] block nbd4: Attempted send on invalid socket [ 106.758052][ T150] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.779199][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.801184][ T5889] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 106.801184][ T5889] [ 106.816827][ T5889] ERROR: (device loop3): remounting filesystem as read-only [ 106.824343][ T5889] xtLookup: xtSearch returned -5 [ 106.829520][ T5889] add_index: get/read_metapage failed! [ 106.834882][ T5914] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.836589][ T5889] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 106.836589][ T5889] [ 106.853454][ T5889] xtLookup: xtSearch returned -5 [ 106.858677][ T5889] free_index: error reading directory table [ 106.870380][ T5889] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 106.870380][ T5889] [ 106.882786][ T5889] xtLookup: xtSearch returned -5 [ 106.888056][ T5889] free_index: error reading directory table [ 106.894179][ T5889] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 106.894179][ T5889] [ 106.904565][ T5914] UDF-fs: Scanning with blocksize 512 failed [ 106.905262][ T1091] block nbd4: Attempted send on invalid socket [ 106.911358][ T5889] xtLookup: xtSearch returned -5 [ 106.917026][ T1091] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.922831][ T5889] free_index: error reading directory table [ 106.946535][ T150] block nbd4: Attempted send on invalid socket [ 106.952763][ T150] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.964861][ T5889] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 106.964861][ T5889] [ 106.975009][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.975276][ T150] block nbd4: Attempted send on invalid socket [ 106.990920][ T150] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.024945][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 107.050493][ T5889] xtLookup: xtSearch returned -5 [ 107.056356][ T5889] free_index: error reading directory table [ 107.062688][ T5889] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 107.062688][ T5889] [ 107.073144][ T5914] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 107.073706][ T5889] xtLookup: xtSearch returned -5 [ 107.086184][ T5889] free_index: error reading directory table [ 107.115342][ T5923] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 107.115342][ T5923] [ 107.121654][ T5914] UDF-fs: Scanning with blocksize 1024 failed [ 107.167239][ T150] block nbd4: Attempted send on invalid socket [ 107.173476][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.190618][ T1091] block nbd4: Attempted send on invalid socket [ 107.196892][ T1091] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.208505][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 107.219432][ T1091] block nbd4: Attempted send on invalid socket [ 107.225712][ T1091] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.234508][ T5923] xtLookup: xtSearch returned -5 [ 107.237469][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 107.242892][ T5923] add_index: get/read_metapage failed! [ 107.257714][ T5914] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 107.294510][ T5914] UDF-fs: Scanning with blocksize 2048 failed [ 107.302116][ T150] block nbd4: Attempted send on invalid socket [ 107.308410][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.336549][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 107.363913][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 107.434254][ T5914] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 107.503685][ T5916] loop2: detected capacity change from 0 to 32768 [ 107.505060][ T5914] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 107.534865][ T5914] UDF-fs: Scanning with blocksize 4096 failed [ 107.544584][ T5914] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 107.693808][ T5916] XFS (loop2): Mounting V5 Filesystem [ 107.731081][ T5928] loop0: detected capacity change from 0 to 32768 [ 107.775117][ T5928] XFS: noikeep mount option is deprecated. [ 107.904524][ T5916] XFS (loop2): Ending clean mount [ 107.960036][ T4169] Bluetooth: hci4: link tx timeout [ 107.965602][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.973255][ T4169] Bluetooth: hci4: link tx timeout [ 107.979332][ T4169] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.991906][ T5928] XFS (loop0): Mounting V5 Filesystem [ 108.072838][ T4179] XFS (loop2): Unmounting Filesystem [ 108.078243][ T5966] bridge0: port 3(syz_tun) entered blocking state [ 108.095204][ T5966] bridge0: port 3(syz_tun) entered disabled state [ 108.103362][ T5966] device syz_tun entered promiscuous mode [ 108.189668][ T5966] bridge0: port 3(syz_tun) entered blocking state [ 108.196729][ T5966] bridge0: port 3(syz_tun) entered forwarding state [ 108.215918][ T5928] XFS (loop0): Ending clean mount [ 108.235311][ T5968] loop3: detected capacity change from 0 to 1024 [ 108.248426][ T5928] XFS (loop0): Quotacheck needed: Please wait. [ 108.442054][ T5928] XFS (loop0): Quotacheck: Done. [ 108.580547][ T4174] XFS (loop0): Unmounting Filesystem [ 108.787968][ T5983] netlink: 68 bytes leftover after parsing attributes in process `syz.2.603'. [ 108.834524][ T5983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.603'. [ 108.967808][ T5987] loop3: detected capacity change from 0 to 764 [ 109.081499][ T5974] loop4: detected capacity change from 0 to 32768 [ 109.103264][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 109.250682][ T5981] loop1: detected capacity change from 0 to 32768 [ 109.292815][ T5974] JBD2: Ignoring recovery information on journal [ 109.302695][ T5981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.611 (5981) [ 109.361816][ T5981] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 109.362612][ T5998] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 109.374553][ T5981] BTRFS info (device loop1): using free space tree [ 109.390120][ T5981] BTRFS info (device loop1): has skinny extents [ 109.466138][ T5974] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 109.644649][ T6025] loop3: detected capacity change from 0 to 732 [ 109.703292][ T5981] BTRFS info (device loop1): enabling ssd optimizations [ 109.737005][ T4175] ocfs2: Unmounting device (7,4) on (node local) [ 109.920067][ T6039] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 110.169640][ T6044] loop4: detected capacity change from 0 to 512 [ 110.333532][ T6044] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 110.365624][ T6044] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.370728][ T6034] loop0: detected capacity change from 0 to 32768 [ 110.398032][ T6004] loop2: detected capacity change from 0 to 40427 [ 110.415103][ T6044] EXT4-fs (loop4): shut down requested (2) [ 110.417551][ T6034] XFS: noikeep mount option is deprecated. [ 110.516960][ T6004] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.539402][ T6034] XFS (loop0): Mounting V5 Filesystem [ 110.590738][ T6064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.631'. [ 110.660764][ T6066] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 110.682262][ T6004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.707910][ T6004] attempt to access beyond end of device [ 110.707910][ T6004] loop2: rw=2049, want=45104, limit=40427 [ 110.720148][ T6034] XFS (loop0): Ending clean mount [ 110.730523][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'. [ 110.776227][ T6034] XFS (loop0): Quotacheck needed: Please wait. [ 110.823905][ T6072] device syz_tun entered promiscuous mode [ 110.838028][ T6072] device syz_tun left promiscuous mode [ 110.844270][ T6034] XFS (loop0): Quotacheck: Done. [ 110.871881][ T4179] attempt to access beyond end of device [ 110.871881][ T4179] loop2: rw=2049, want=45112, limit=40427 [ 110.976066][ T4174] XFS (loop0): Unmounting Filesystem [ 111.262972][ T6089] loop4: detected capacity change from 0 to 256 [ 111.264869][ T6087] loop1: detected capacity change from 0 to 64 [ 111.385460][ T6087] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 111.413815][ T6089] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xa154a131, utbl_chksum : 0xe619d30d) [ 111.711167][ T6097] netlink: 'syz.4.645': attribute type 22 has an invalid length. [ 111.744590][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 111.981530][ T6091] loop3: detected capacity change from 0 to 32768 [ 112.092447][ T6091] XFS (loop3): Mounting V5 Filesystem [ 112.195856][ T6091] XFS (loop3): Ending clean mount [ 112.231860][ T6091] XFS (loop3): Quotacheck needed: Please wait. [ 112.289379][ T6091] XFS (loop3): Quotacheck: Done. [ 112.393723][ T4167] XFS (loop3): Unmounting Filesystem [ 112.540094][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 112.784487][ T5122] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 112.814631][ T5122] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.954874][ T6150] loop2: detected capacity change from 0 to 128 [ 113.189059][ T6165] loop0: detected capacity change from 0 to 1024 [ 113.309447][ T6165] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 113.404639][ T5121] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.458444][ T6171] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 113.597471][ T6171] syz.0.674 (6171) used greatest stack depth: 19640 bytes left [ 113.736942][ T6155] loop1: detected capacity change from 0 to 40427 [ 113.824179][ T6155] F2FS-fs (loop1): Invalid segment/section count (31 != 24 * 1) [ 113.843977][ T6155] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.864953][ T6155] F2FS-fs (loop1): invalid crc value [ 113.891414][ T6155] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.942797][ T6167] loop4: detected capacity change from 0 to 40427 [ 113.966370][ T5121] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 113.970510][ T6169] loop2: detected capacity change from 0 to 32768 [ 113.988657][ T5121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.009555][ T5121] usb 4-1: Product: syz [ 114.014155][ T5121] usb 4-1: Manufacturer: syz [ 114.028302][ T6167] F2FS-fs (loop4): invalid crc value [ 114.031333][ T6169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.673 (6169) [ 114.033668][ T6155] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.053732][ T5121] usb 4-1: SerialNumber: syz [ 114.072232][ T5121] r8152-cfgselector 4-1: config 0 descriptor?? [ 114.078901][ T6155] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.096309][ T6167] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.156470][ T6169] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 114.170359][ T6167] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 114.187950][ T6169] BTRFS info (device loop2): using free space tree [ 114.219733][ T6169] BTRFS info (device loop2): has skinny extents [ 114.220946][ T6155] attempt to access beyond end of device [ 114.220946][ T6155] loop1: rw=2049, want=53256, limit=40427 [ 114.248046][ T6167] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.304190][ T4175] attempt to access beyond end of device [ 114.304190][ T4175] loop4: rw=2049, want=45104, limit=40427 [ 114.355199][ T4166] attempt to access beyond end of device [ 114.355199][ T4166] loop1: rw=2049, want=45104, limit=40427 [ 114.456418][ T6169] BTRFS info (device loop2): enabling ssd optimizations [ 114.554695][ T5121] r8152-cfgselector 4-1: Unknown version 0x0000 [ 114.561091][ T5121] r8152-cfgselector 4-1: bad CDC descriptors [ 114.628487][ T5121] r8152-cfgselector 4-1: Unknown version 0x0000 [ 114.640215][ T5121] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 114.724100][ T6189] loop0: detected capacity change from 0 to 32768 [ 114.929961][ T6189] XFS (loop0): Mounting V5 Filesystem [ 115.064809][ T6189] XFS (loop0): Ending clean mount [ 115.096704][ T6221] loop4: detected capacity change from 0 to 1024 [ 115.170801][ T4174] XFS (loop0): Unmounting Filesystem [ 115.189965][ T6227] loop2: detected capacity change from 0 to 1024 [ 115.217129][ T6221] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.224013][ T6221] EXT4-fs (loop4): Ignoring removed orlov option [ 115.294741][ T6227] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 115.381482][ T6227] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 115.412807][ T6221] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 115.542550][ T6221] EXT4-fs (loop4): shut down requested (2) [ 115.752406][ T6252] program syz.4.690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.976912][ T26] audit: type=1326 audit(1732691451.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d8eb3e809 code=0x0 [ 116.072435][ T6234] loop3: detected capacity change from 0 to 32768 [ 116.162307][ T6234] xfs: Unknown parameter 'smackfstransmute' [ 116.260966][ T6269] loop4: detected capacity change from 0 to 4096 [ 116.363357][ T6269] ntfs3: loop4: ino=3, Correct links count -> 2. [ 116.401369][ T6255] loop1: detected capacity change from 0 to 32768 [ 116.447887][ T6255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.692 (6255) [ 116.538574][ T6255] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 116.573607][ T6255] BTRFS info (device loop1): enabling auto defrag [ 116.603592][ T6255] BTRFS info (device loop1): doing ref verification [ 116.650708][ T6255] BTRFS info (device loop1): use no compression [ 116.672511][ T6255] BTRFS info (device loop1): force clearing of disk cache [ 116.700511][ T6255] BTRFS info (device loop1): disabling free space tree [ 116.718017][ T6255] BTRFS info (device loop1): has skinny extents [ 116.720892][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.789758][ T6285] device bridge_slave_0 left promiscuous mode [ 116.801153][ T6255] BTRFS info (device loop1): enabling ssd optimizations [ 116.813117][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.813304][ T6255] BTRFS info (device loop1): clearing free space tree [ 116.827760][ T6255] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.840180][ T6255] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.923772][ T26] audit: type=1800 audit(1732691452.869:9): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.692" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 116.936479][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.704'. [ 117.219141][ T6280] loop3: detected capacity change from 0 to 40427 [ 117.259452][ T6313] loop4: detected capacity change from 0 to 8192 [ 117.282678][ T6280] F2FS-fs (loop3): invalid crc value [ 117.343127][ T6280] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.379033][ T6313] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 117.396167][ T6313] REISERFS (device loop4): using ordered data mode [ 117.402711][ T6313] reiserfs: using flush barriers [ 117.448967][ T6313] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.533625][ T6325] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 117.565317][ T6313] REISERFS (device loop4): checking transaction log (loop4) [ 117.597946][ T6325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.605964][ T6325] IPv6: NLM_F_CREATE should be set when creating new route [ 117.627154][ T6280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.828038][ T6313] REISERFS (device loop4): Using tea hash to sort names [ 117.838624][ T4167] attempt to access beyond end of device [ 117.838624][ T4167] loop3: rw=2049, want=45104, limit=40427 [ 117.851770][ T6313] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 117.951093][ T6340] loop2: detected capacity change from 0 to 4096 [ 118.065011][ T6350] loop0: detected capacity change from 0 to 64 [ 118.294676][ T5127] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.654677][ T5127] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 118.665091][ T5127] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 118.676428][ T5127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.736374][ T5127] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 118.790006][ T6360] loop2: detected capacity change from 0 to 32768 [ 118.804603][ T4432] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.838861][ T6360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.729 (6360) [ 118.864255][ T6360] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.874972][ T6360] BTRFS info (device loop2): using free space tree [ 118.881511][ T6360] BTRFS info (device loop2): has skinny extents [ 118.988644][ T6360] BTRFS info (device loop2): enabling ssd optimizations [ 119.022047][ T26] audit: type=1800 audit(1732691454.969:10): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.729" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 119.216946][ T4432] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.227560][ T4432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.263451][ T4432] usb 4-1: config 0 descriptor?? [ 119.288576][ T6391] loop0: detected capacity change from 0 to 1024 [ 119.308268][ T4432] cp210x 4-1:0.0: cp210x converter detected [ 119.500389][ T6391] loop0: detected capacity change from 0 to 1024 [ 119.601706][ T1463] hfsplus: b-tree write err: -5, ino 4 [ 119.768862][ T6408] loop4: detected capacity change from 0 to 512 [ 119.792591][ T6404] loop0: detected capacity change from 0 to 8192 [ 119.834600][ T5127] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 119.846911][ T5127] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 119.853581][ T6404] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 119.881034][ T4425] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.884556][ T5127] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 119.894889][ T6404] REISERFS (device loop0): using ordered data mode [ 119.894905][ T6404] reiserfs: using flush barriers [ 119.897781][ T6404] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.994934][ T6404] REISERFS (device loop0): checking transaction log (loop0) [ 120.090055][ T5127] usb 2-1: USB disconnect, device number 8 [ 120.096606][ T6404] REISERFS (device loop0): Using tea hash to sort names [ 120.111476][ T6404] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 120.164651][ T4425] usb 3-1: Using ep0 maxpacket: 32 [ 120.185011][ T4432] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 120.192695][ T4432] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 120.217391][ T4432] usb 4-1: cp210x converter now attached to ttyUSB0 [ 120.240883][ T4432] usb 4-1: USB disconnect, device number 10 [ 120.253173][ T4432] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.262089][ T4432] cp210x 4-1:0.0: device disconnected [ 120.293335][ T6411] loop4: detected capacity change from 0 to 32768 [ 120.304746][ T4425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.321621][ T4425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.332638][ T4425] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 120.355930][ T4425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.358625][ T6411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.743 (6411) [ 120.371918][ T4425] usb 3-1: config 0 descriptor?? [ 120.427029][ T6411] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 120.441347][ T6411] BTRFS info (device loop4): using free space tree [ 120.448543][ T6411] BTRFS info (device loop4): has skinny extents [ 120.546486][ T6411] BTRFS info (device loop4): enabling ssd optimizations [ 120.814071][ T4232] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 120.877580][ T4425] hid_mf 0003:0079:1801.0009: unknown main item tag 0x0 [ 120.886411][ T4425] hid_mf 0003:0079:1801.0009: unknown main item tag 0x0 [ 120.902397][ T4425] hid_mf 0003:0079:1801.0009: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.2-1/input0 [ 120.914126][ T4425] hid_mf 0003:0079:1801.0009: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 120.927350][ T5127] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.106407][ T4431] usb 3-1: USB disconnect, device number 6 [ 121.225806][ T6433] loop0: detected capacity change from 0 to 40427 [ 121.284818][ T5127] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 121.300576][ T5127] usb 2-1: config 0 has no interface number 0 [ 121.305179][ T6433] F2FS-fs (loop0): invalid crc value [ 121.307300][ T5127] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.333930][ T5127] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.351224][ T5127] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 121.360777][ T5127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.372431][ T5127] usb 2-1: config 0 descriptor?? [ 121.372589][ T6433] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.468251][ T6433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.612080][ T4174] attempt to access beyond end of device [ 121.612080][ T4174] loop0: rw=2049, want=45104, limit=40427 [ 121.835086][ T6442] loop3: detected capacity change from 0 to 32768 [ 121.857261][ T5127] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 121.863690][ T6445] loop4: detected capacity change from 0 to 40427 [ 121.884524][ T5127] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 121.893109][ T5127] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 121.919589][ T6442] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.758 (6442) [ 121.920085][ T6445] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 121.940218][ T5127] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 121.940249][ T5127] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 121.940270][ T5127] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 121.940291][ T5127] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0 [ 121.972135][ T5127] logitech-djreceiver 0003:046D:C71B.000A: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.1-1/input32 [ 121.989047][ T6445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.020505][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 122.050311][ T6445] F2FS-fs (loop4): invalid crc value [ 122.094727][ T5127] usb 2-1: USB disconnect, device number 9 [ 122.103809][ T6445] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.114652][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 122.166995][ T6442] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.179862][ T6442] BTRFS info (device loop3): using free space tree [ 122.242863][ T6442] BTRFS info (device loop3): has skinny extents [ 122.268994][ T6445] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 122.287637][ T6445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.434743][ T4175] attempt to access beyond end of device [ 122.434743][ T4175] loop4: rw=2049, want=45112, limit=40427 [ 122.458785][ T6442] BTRFS info (device loop3): enabling ssd optimizations [ 122.471315][ T6481] loop0: detected capacity change from 0 to 16 [ 122.556533][ T6479] loop2: detected capacity change from 0 to 8192 [ 122.682176][ T6479] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 122.724718][ T6479] REISERFS (device loop2): using ordered data mode [ 122.731259][ T6479] reiserfs: using flush barriers [ 122.839896][ T6479] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.849157][ T6481] erofs: (device loop0): mounted with root inode @ nid 36. [ 122.895037][ T6479] REISERFS (device loop2): checking transaction log (loop2) [ 123.072039][ T6489] libceph: resolve '40.' (ret=-3): failed [ 123.189645][ T6497] loop0: detected capacity change from 0 to 256 [ 123.219253][ T6479] REISERFS (device loop2): Using tea hash to sort names [ 123.249723][ T6479] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 123.316314][ T6503] loop1: detected capacity change from 0 to 64 [ 123.373200][ T6497] FAT-fs (loop0): Directory bread(block 64) failed [ 123.392926][ T6497] FAT-fs (loop0): Directory bread(block 65) failed [ 123.413242][ T6497] FAT-fs (loop0): Directory bread(block 66) failed [ 123.450305][ T6503] hfs: request for non-existent node 131072 in B*Tree [ 123.489992][ T6497] FAT-fs (loop0): Directory bread(block 67) failed [ 123.500437][ T6497] FAT-fs (loop0): Directory bread(block 68) failed [ 123.512594][ T6503] hfs: request for non-existent node 131072 in B*Tree [ 123.531993][ T6497] FAT-fs (loop0): Directory bread(block 69) failed [ 123.563945][ T6497] FAT-fs (loop0): Directory bread(block 70) failed [ 123.576000][ T6497] FAT-fs (loop0): Directory bread(block 71) failed [ 123.582649][ T6497] FAT-fs (loop0): Directory bread(block 72) failed [ 123.593798][ T6497] FAT-fs (loop0): Directory bread(block 73) failed [ 123.704772][ T4431] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.964234][ T6518] loop0: detected capacity change from 0 to 1024 [ 123.984789][ T4431] usb 5-1: Using ep0 maxpacket: 8 [ 124.011921][ T6521] loop2: detected capacity change from 0 to 256 [ 124.050395][ T26] audit: type=1800 audit(1732691459.999:11): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.770" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 124.124780][ T4431] usb 5-1: config 0 has no interfaces? [ 124.130586][ T4431] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.154492][ T4168] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.169209][ T4431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.189503][ T4431] usb 5-1: config 0 descriptor?? [ 124.275338][ T6525] xt_hashlimit: size too large, truncated to 1048576 [ 124.445877][ T4431] usb 5-1: USB disconnect, device number 8 [ 124.555828][ T4168] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 124.576017][ T4168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.590101][ T4168] usb 2-1: config 0 descriptor?? [ 124.713060][ T6527] loop0: detected capacity change from 0 to 32768 [ 124.781113][ T6527] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.841365][ T4174] ocfs2: Unmounting device (7,0) on (node local) [ 125.114791][ T4168] [drm:udl_init] *ERROR* Selecting channel failed [ 125.139616][ T4168] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 125.154410][ T4168] [drm] Initialized udl on minor 2 [ 125.184791][ T4168] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 125.205207][ T4168] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 125.225792][ T4168] usb 2-1: USB disconnect, device number 10 [ 126.625428][ T6536] loop4: detected capacity change from 0 to 256 [ 126.632417][ T6542] loop2: detected capacity change from 0 to 256 [ 126.663222][ T6538] loop0: detected capacity change from 0 to 2048 [ 126.702883][ T6542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 126.751983][ T6538] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.819825][ T6549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.832065][ T6544] loop3: detected capacity change from 0 to 8192 [ 127.032616][ T6544] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 127.062433][ T6544] REISERFS (device loop3): using ordered data mode [ 127.119964][ T6544] reiserfs: using flush barriers [ 127.167839][ T6544] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.210804][ T6564] loop2: detected capacity change from 0 to 1024 [ 127.229596][ T6544] REISERFS (device loop3): checking transaction log (loop3) [ 127.299829][ T4207] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.419636][ T6544] REISERFS (device loop3): Using tea hash to sort names [ 127.424062][ T6564] hfsplus: bad catalog folder thread [ 127.438617][ T6544] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 127.470190][ T6551] loop1: detected capacity change from 0 to 32768 [ 127.568293][ T6551] XFS (loop1): Mounting V5 Filesystem [ 127.627023][ T6551] XFS (loop1): Ending clean mount [ 127.669576][ T4166] XFS (loop1): Unmounting Filesystem [ 127.674804][ T4207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.685643][ T4207] usb 1-1: config 0 has no interfaces? [ 127.691149][ T4207] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 127.700295][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.710084][ T4207] usb 1-1: config 0 descriptor?? [ 127.925238][ T6582] loop3: detected capacity change from 0 to 1024 [ 128.043239][ T6584] loop2: detected capacity change from 0 to 256 [ 128.074554][ T6582] EXT4-fs (loop3): Ignoring removed orlov option [ 128.224283][ T6582] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,bsddf,barrier=0x0000000000000000,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,delalloc,,errors=continue. Quota mode: none. [ 128.236600][ T4207] usb 1-1: string descriptor 0 read error: -71 [ 128.262043][ T4207] usb 1-1: USB disconnect, device number 5 [ 128.386107][ T6576] loop4: detected capacity change from 0 to 32768 [ 128.453066][ T6592] SET target dimension over the limit! [ 128.489067][ T6592] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 128.512664][ T6598] loop3: detected capacity change from 0 to 256 [ 128.580478][ T6598] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2da6ec10, utbl_chksum : 0xe619d30d) [ 128.694526][ T4206] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.934505][ T4206] usb 3-1: Using ep0 maxpacket: 32 [ 128.960877][ T6619] loop1: detected capacity change from 0 to 256 [ 129.100041][ T4206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.184702][ T4206] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 129.203285][ T4206] usb 3-1: config 127 has no interface number 0 [ 129.219516][ T4206] usb 3-1: config 127 interface 25 has no altsetting 0 [ 129.252521][ T26] audit: type=1326 audit(1732691465.199:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.3.812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d0b809 code=0x0 [ 129.386374][ T6615] loop0: detected capacity change from 0 to 40427 [ 129.404585][ T4206] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 129.413647][ T4206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.444459][ T4206] usb 3-1: Product: syz [ 129.448659][ T4206] usb 3-1: Manufacturer: syz [ 129.453251][ T4206] usb 3-1: SerialNumber: syz [ 129.746520][ T4206] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 129.897646][ T6615] F2FS-fs (loop0): journaled quota format not specified [ 130.000891][ T6641] loop0: detected capacity change from 0 to 512 [ 130.010450][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 130.115219][ T6641] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 130.115219][ T6641] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 130.115219][ T6641] [ 130.184840][ T6648] device syz_tun entered promiscuous mode [ 130.196314][ T6648] device syz_tun left promiscuous mode [ 130.202530][ T6641] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 130.220244][ T4206] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 130.240739][ T6641] EXT4-fs (loop0): 1 truncate cleaned up [ 130.268513][ T6641] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,jqfmt=vfsv1,usrjquota="oldalloc,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 130.291485][ T4206] usb 3-1: device reset changed ep0 maxpacket size! [ 130.310345][ T4206] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 130.345374][ T6641] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 4: comm syz.0.817: lblock 0 mapped to illegal pblock 4 (length 1) [ 130.372570][ T4206] usb 3-1: USB disconnect, device number 7 [ 130.467038][ T6656] loop3: detected capacity change from 0 to 256 [ 130.473992][ T6658] loop4: detected capacity change from 0 to 512 [ 130.544754][ T4206] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.559479][ T6658] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 130.784522][ T4206] usb 3-1: Using ep0 maxpacket: 16 [ 130.924524][ T4206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.004491][ T4206] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 131.020147][ T4206] usb 3-1: can't read configurations, error -71 [ 131.267086][ T6658] loop4: detected capacity change from 0 to 32768 [ 131.311615][ T6658] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 131.332809][ T6658] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 131.362719][ T6658] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 131.385879][ T5127] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 131.407882][ T5127] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 131.532132][ T5127] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 131.550496][ T5127] gfs2: fsid=syz:syz.0: jid=0: Done [ 131.570645][ T6658] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 131.944584][ T6702] loop1: detected capacity change from 0 to 164 [ 132.081967][ T6714] bridge0: port 3(syz_tun) entered blocking state [ 132.121306][ T6714] bridge0: port 3(syz_tun) entered disabled state [ 132.136780][ T6714] device syz_tun entered promiscuous mode [ 132.161146][ T6714] bridge0: port 3(syz_tun) entered blocking state [ 132.167692][ T6714] bridge0: port 3(syz_tun) entered forwarding state [ 132.410685][ T6729] loop2: detected capacity change from 0 to 4096 [ 132.469974][ T4168] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.566666][ T6734] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.589395][ T26] audit: type=1800 audit(1732691468.539:13): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.857" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 132.648754][ T26] audit: type=1800 audit(1732691468.539:14): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.857" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 132.707871][ T6712] loop3: detected capacity change from 0 to 40427 [ 132.731444][ T6712] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 132.742493][ T6712] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 132.756617][ T4168] usb 1-1: Using ep0 maxpacket: 16 [ 132.762773][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.769425][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.791599][ T6712] F2FS-fs (loop3): invalid crc value [ 132.816141][ T6712] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.894695][ T4168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 132.909089][ T6712] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 132.926539][ T6712] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.034144][ T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 133.043507][ T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 133.100352][ T4168] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.119665][ T4168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.150161][ T4168] usb 1-1: Product: syz [ 133.162499][ T4168] usb 1-1: Manufacturer: syz [ 133.167618][ T4168] usb 1-1: SerialNumber: syz [ 133.182327][ T4168] usb 1-1: config 0 descriptor?? [ 133.226594][ T4168] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.242711][ T4168] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 133.391498][ T6752] loop2: detected capacity change from 0 to 40427 [ 133.423487][ T6754] ================================================================== [ 133.432258][ T6754] BUG: KASAN: use-after-free in gfs2_qd_shrink_scan+0x63d/0x860 [ 133.439904][ T6754] Write of size 4 at addr ffff88807cf28a70 by task syz.3.867/6754 [ 133.447945][ T6754] [ 133.450285][ T6754] CPU: 0 PID: 6754 Comm: syz.3.867 Not tainted 5.15.173-syzkaller #0 [ 133.458335][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.468587][ T6754] Call Trace: [ 133.471876][ T6754] [ 133.474857][ T6754] dump_stack_lvl+0x1e3/0x2d0 [ 133.479551][ T6754] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 133.485195][ T6754] ? _printk+0xd1/0x120 [ 133.489497][ T6754] ? __wake_up_klogd+0xcc/0x100 [ 133.494386][ T6754] ? panic+0x860/0x860 [ 133.498468][ T6754] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 133.503921][ T6754] print_address_description+0x63/0x3b0 [ 133.509462][ T6754] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 133.514848][ T6754] kasan_report+0x16b/0x1c0 [ 133.519343][ T6754] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 133.524621][ T6754] kasan_check_range+0x27e/0x290 [ 133.529567][ T6754] gfs2_qd_shrink_scan+0x63d/0x860 [ 133.534691][ T6754] ? gfs2_qd_shrink_count+0x100/0x100 [ 133.540063][ T6754] do_shrink_slab+0x542/0xda0 [ 133.544762][ T6754] shrink_slab+0x233/0x960 [ 133.549211][ T6754] ? __lock_acquire+0x1ff0/0x1ff0 [ 133.554255][ T6754] ? drop_slab_node+0x180/0x180 [ 133.559116][ T6754] ? mem_cgroup_iter+0x3b4/0x520 [ 133.564068][ T6754] drop_slab_node+0xed/0x180 [ 133.568666][ T6754] drop_slab+0x8b/0x120 [ 133.572845][ T6754] drop_caches_sysctl_handler+0xb3/0x160 [ 133.578473][ T6754] ? cn_vprintf+0x450/0x450 [ 133.582969][ T6754] proc_sys_call_handler+0x541/0x8a0 [ 133.588253][ T6754] ? proc_sys_open+0x270/0x270 [ 133.593030][ T6754] ? aa_path_link+0xea0/0xea0 [ 133.597700][ T6754] do_iter_readv_writev+0x594/0x7a0 [ 133.602896][ T6754] ? generic_file_rw_checks+0x260/0x260 [ 133.608439][ T6754] ? common_file_perm+0x17d/0x1d0 [ 133.613473][ T6754] ? fsnotify_perm+0x64/0x590 [ 133.618137][ T6754] ? security_file_permission+0x75/0xa0 [ 133.623671][ T6754] do_iter_write+0x1e6/0x760 [ 133.628267][ T6754] do_writev+0x281/0x470 [ 133.632515][ T6754] ? do_readv+0x460/0x460 [ 133.636852][ T6754] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 133.642846][ T6754] ? vtime_user_exit+0x2d1/0x400 [ 133.647847][ T6754] ? syscall_enter_from_user_mode+0x2e/0x240 [ 133.653880][ T6754] ? lockdep_hardirqs_on+0x94/0x130 [ 133.659088][ T6754] ? syscall_enter_from_user_mode+0x2e/0x240 [ 133.665075][ T6754] do_syscall_64+0x3b/0xb0 [ 133.669506][ T6754] ? clear_bhb_loop+0x15/0x70 [ 133.674196][ T6754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.680082][ T6754] RIP: 0033:0x7fb6d1d0b809 [ 133.684497][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.704107][ T6754] RSP: 002b:00007fb6cfb81058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 133.712517][ T6754] RAX: ffffffffffffffda RBX: 00007fb6d1ed0fa0 RCX: 00007fb6d1d0b809 [ 133.720486][ T6754] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 133.728458][ T6754] RBP: 00007fb6d1d7e93e R08: 0000000000000000 R09: 0000000000000000 [ 133.736435][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.744677][ T6754] R13: 0000000000000000 R14: 00007fb6d1ed0fa0 R15: 00007ffe5038c308 [ 133.752679][ T6754] [ 133.755697][ T6754] [ 133.758006][ T6754] Allocated by task 6658: [ 133.762318][ T6754] ____kasan_kmalloc+0xba/0xf0 [ 133.767131][ T6754] kmem_cache_alloc_trace+0x143/0x290 [ 133.772650][ T6754] gfs2_fill_super+0x15a/0x2750 [ 133.777501][ T6754] get_tree_bdev+0x3fe/0x620 [ 133.782113][ T6754] gfs2_get_tree+0x50/0x210 [ 133.786612][ T6754] vfs_get_tree+0x88/0x270 [ 133.791028][ T6754] do_new_mount+0x2ba/0xb40 [ 133.795515][ T6754] __se_sys_mount+0x2d5/0x3c0 [ 133.800199][ T6754] do_syscall_64+0x3b/0xb0 [ 133.804723][ T6754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.810721][ T6754] [ 133.813068][ T6754] Freed by task 4175: [ 133.817038][ T6754] kasan_set_track+0x4b/0x80 [ 133.821638][ T6754] kasan_set_free_info+0x1f/0x40 [ 133.826573][ T6754] ____kasan_slab_free+0xd8/0x120 [ 133.831716][ T6754] slab_free_freelist_hook+0xdd/0x160 [ 133.837088][ T6754] kfree+0xf1/0x270 [ 133.840888][ T6754] generic_shutdown_super+0x130/0x310 [ 133.846243][ T6754] kill_block_super+0x7a/0xe0 [ 133.850919][ T6754] deactivate_locked_super+0xa0/0x110 [ 133.856274][ T6754] cleanup_mnt+0x44e/0x500 [ 133.860695][ T6754] task_work_run+0x129/0x1a0 [ 133.865282][ T6754] exit_to_user_mode_loop+0x106/0x130 [ 133.870655][ T6754] exit_to_user_mode_prepare+0xb1/0x140 [ 133.876197][ T6754] syscall_exit_to_user_mode+0x5d/0x240 [ 133.881752][ T6754] do_syscall_64+0x47/0xb0 [ 133.886157][ T6754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.892054][ T6754] [ 133.894361][ T6754] The buggy address belongs to the object at ffff88807cf28000 [ 133.894361][ T6754] which belongs to the cache kmalloc-8k of size 8192 [ 133.908409][ T6754] The buggy address is located 2672 bytes inside of [ 133.908409][ T6754] 8192-byte region [ffff88807cf28000, ffff88807cf2a000) [ 133.921861][ T6754] The buggy address belongs to the page: [ 133.927480][ T6754] page:ffffea0001f3ca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cf28 [ 133.937667][ T6754] head:ffffea0001f3ca00 order:3 compound_mapcount:0 compound_pincount:0 [ 133.945997][ T6754] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 133.954002][ T6754] raw: 00fff00000010200 ffffea0000974400 0000000200000002 ffff888017442280 [ 133.962586][ T6754] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 133.971155][ T6754] page dumped because: kasan: bad access detected [ 133.977560][ T6754] page_owner tracks the page as allocated [ 133.983257][ T6754] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4159, ts 48687486186, free_ts 48662027375 [ 134.001557][ T6754] get_page_from_freelist+0x3b78/0x3d40 [ 134.007104][ T6754] __alloc_pages+0x272/0x700 [ 134.011693][ T6754] new_slab+0xbb/0x4b0 [ 134.015751][ T6754] ___slab_alloc+0x6f6/0xe10 [ 134.020323][ T6754] kmem_cache_alloc_trace+0x1a0/0x290 [ 134.025739][ T6754] tomoyo_init_log+0x1140/0x1fe0 [ 134.030701][ T6754] tomoyo_supervisor+0x3b8/0x12c0 [ 134.035728][ T6754] tomoyo_env_perm+0x174/0x210 [ 134.040503][ T6754] tomoyo_find_next_domain+0x1469/0x1d40 [ 134.046122][ T6754] tomoyo_bprm_check_security+0xdb/0x120 [ 134.051755][ T6754] security_bprm_check+0x5f/0xa0 [ 134.056682][ T6754] bprm_execve+0x84e/0x17c0 [ 134.061173][ T6754] do_execveat_common+0x583/0x720 [ 134.066206][ T6754] __x64_sys_execve+0x8e/0xa0 [ 134.070889][ T6754] do_syscall_64+0x3b/0xb0 [ 134.075303][ T6754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.081186][ T6754] page last free stack trace: [ 134.085842][ T6754] free_unref_page_prepare+0xc34/0xcf0 [ 134.091305][ T6754] free_unref_page+0x95/0x2d0 [ 134.095965][ T6754] __unfreeze_partials+0x1b7/0x210 [ 134.101059][ T6754] put_cpu_partial+0x132/0x1a0 [ 134.105812][ T6754] ___cache_free+0xe3/0x100 [ 134.110312][ T6754] qlist_free_all+0x36/0x90 [ 134.114801][ T6754] kasan_quarantine_reduce+0x162/0x180 [ 134.120257][ T6754] __kasan_slab_alloc+0x2f/0xc0 [ 134.125089][ T6754] slab_post_alloc_hook+0x53/0x380 [ 134.130215][ T6754] kmem_cache_alloc+0xf3/0x280 [ 134.134958][ T6754] getname_flags+0xb8/0x4e0 [ 134.139440][ T6754] user_path_at_empty+0x2a/0x180 [ 134.144359][ T6754] vfs_statx+0x106/0x3b0 [ 134.148596][ T6754] __x64_sys_newfstatat+0x12c/0x1b0 [ 134.153790][ T6754] do_syscall_64+0x3b/0xb0 [ 134.158192][ T6754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.164073][ T6754] [ 134.166385][ T6754] Memory state around the buggy address: [ 134.172007][ T6754] ffff88807cf28900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.180055][ T6754] ffff88807cf28980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.188194][ T6754] >ffff88807cf28a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.196248][ T6754] ^ [ 134.203952][ T6754] ffff88807cf28a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.211998][ T6754] ffff88807cf28b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.220395][ T6754] ================================================================== [ 134.228449][ T6754] Disabling lock debugging due to kernel taint [ 134.241476][ T6754] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.248689][ T6754] CPU: 0 PID: 6754 Comm: syz.3.867 Tainted: G B 5.15.173-syzkaller #0 [ 134.258152][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.268217][ T6754] Call Trace: [ 134.271504][ T6754] [ 134.274440][ T6754] dump_stack_lvl+0x1e3/0x2d0 [ 134.279126][ T6754] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 134.284764][ T6754] ? panic+0x860/0x860 [ 134.288832][ T6754] ? preempt_schedule_common+0xa6/0xd0 [ 134.294306][ T6754] ? preempt_schedule+0xd9/0xe0 [ 134.299144][ T6754] panic+0x318/0x860 [ 134.303040][ T6754] ? check_panic_on_warn+0x1d/0xa0 [ 134.308146][ T6754] ? fb_is_primary_device+0xd0/0xd0 [ 134.313359][ T6754] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 134.319351][ T6754] ? _raw_spin_unlock+0x40/0x40 [ 134.324212][ T6754] ? print_memory_metadata+0xe2/0x140 [ 134.329607][ T6754] check_panic_on_warn+0x7e/0xa0 [ 134.334541][ T6754] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 134.339839][ T6754] end_report+0x6d/0xf0 [ 134.343981][ T6754] kasan_report+0x18e/0x1c0 [ 134.348475][ T6754] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 134.353779][ T6754] kasan_check_range+0x27e/0x290 [ 134.358750][ T6754] gfs2_qd_shrink_scan+0x63d/0x860 [ 134.363893][ T6754] ? gfs2_qd_shrink_count+0x100/0x100 [ 134.369288][ T6754] do_shrink_slab+0x542/0xda0 [ 134.373987][ T6754] shrink_slab+0x233/0x960 [ 134.378408][ T6754] ? __lock_acquire+0x1ff0/0x1ff0 [ 134.383432][ T6754] ? drop_slab_node+0x180/0x180 [ 134.388272][ T6754] ? mem_cgroup_iter+0x3b4/0x520 [ 134.393192][ T6754] drop_slab_node+0xed/0x180 [ 134.397766][ T6754] drop_slab+0x8b/0x120 [ 134.401917][ T6754] drop_caches_sysctl_handler+0xb3/0x160 [ 134.407538][ T6754] ? cn_vprintf+0x450/0x450 [ 134.412046][ T6754] proc_sys_call_handler+0x541/0x8a0 [ 134.417321][ T6754] ? proc_sys_open+0x270/0x270 [ 134.422073][ T6754] ? aa_path_link+0xea0/0xea0 [ 134.426731][ T6754] do_iter_readv_writev+0x594/0x7a0 [ 134.431940][ T6754] ? generic_file_rw_checks+0x260/0x260 [ 134.437468][ T6754] ? common_file_perm+0x17d/0x1d0 [ 134.442476][ T6754] ? fsnotify_perm+0x64/0x590 [ 134.447130][ T6754] ? security_file_permission+0x75/0xa0 [ 134.452658][ T6754] do_iter_write+0x1e6/0x760 [ 134.457231][ T6754] do_writev+0x281/0x470 [ 134.461456][ T6754] ? do_readv+0x460/0x460 [ 134.465766][ T6754] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 134.471729][ T6754] ? vtime_user_exit+0x2d1/0x400 [ 134.476648][ T6754] ? syscall_enter_from_user_mode+0x2e/0x240 [ 134.482612][ T6754] ? lockdep_hardirqs_on+0x94/0x130 [ 134.487796][ T6754] ? syscall_enter_from_user_mode+0x2e/0x240 [ 134.493759][ T6754] do_syscall_64+0x3b/0xb0 [ 134.498154][ T6754] ? clear_bhb_loop+0x15/0x70 [ 134.502814][ T6754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.508686][ T6754] RIP: 0033:0x7fb6d1d0b809 [ 134.513084][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.532671][ T6754] RSP: 002b:00007fb6cfb81058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 134.541075][ T6754] RAX: ffffffffffffffda RBX: 00007fb6d1ed0fa0 RCX: 00007fb6d1d0b809 [ 134.549036][ T6754] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 134.556993][ T6754] RBP: 00007fb6d1d7e93e R08: 0000000000000000 R09: 0000000000000000 [ 134.564949][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.572904][ T6754] R13: 0000000000000000 R14: 00007fb6d1ed0fa0 R15: 00007ffe5038c308 [ 134.580867][ T6754] [ 134.584103][ T6754] Kernel Offset: disabled [ 134.588428][ T6754] Rebooting in 86400 seconds..