last executing test programs: 6.267048898s ago: executing program 4 (id=2685): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 5.639519702s ago: executing program 4 (id=2690): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@usrjquota={'usrjquota', 0x3d, 'fastboot'}}, {@heap}, {@alloc_mode_def}, {@memory_normal}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x17}}, {@discard}, {@noinline_dentry}, {@fastboot}, {@quota}, {@gc_merge}, {@two_active_logs}, {@quota}]}, 0x1, 0x5509, &(0x7f000001aac0)="$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") 5.571343039s ago: executing program 1 (id=2691): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty, {[@lsrr={0x83, 0x17, 0x99, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010100, @private=0xa010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_prespec={0x44, 0x14, 0x82, 0x3, 0x1, [{@local, 0x2}, {@rand_addr=0x64010101, 0xc00000}]}]}}}}}}}, 0x0) 4.927410264s ago: executing program 1 (id=2695): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0xeb1, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80186e82, &(0x7f0000000080)={0x10000, 0xffe, 0xf, 0xff, 0x0, 0xfffc, 0x2401}) 4.505811093s ago: executing program 2 (id=2697): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) 3.914546487s ago: executing program 3 (id=2699): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) setreuid(0xffffffffffffffff, 0xee00) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 3.789024029s ago: executing program 4 (id=2700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x840) 3.631750601s ago: executing program 2 (id=2701): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000880)={0x0, 0xc3bb, 0x80, 0x21, 0x89}, &(0x7f0000000400), &(0x7f0000000280)) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r0}, 0x0) 3.604286909s ago: executing program 3 (id=2702): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 3.476009982s ago: executing program 1 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x34}}, 0x0) 3.275796818s ago: executing program 0 (id=2704): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x80}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x8, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3.208648063s ago: executing program 4 (id=2705): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x2148a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@dax}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 3.114723137s ago: executing program 2 (id=2706): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c14000000000000", @ANYRES32=r0], 0x30}}, 0x0) 2.959813917s ago: executing program 0 (id=2707): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e6400000000140002800500010006000000080002"], 0x44}}, 0x40) 2.895309734s ago: executing program 3 (id=2708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 2.824144316s ago: executing program 1 (id=2709): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 2.535485566s ago: executing program 1 (id=2710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f00000001c0)={[{@usrjquota}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@discard}, {@delalloc}, {@noauto_da_alloc}]}, 0xee, 0x43e, &(0x7f00000008c0)="$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") 2.535041873s ago: executing program 2 (id=2711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)={[{@journal_transaction_names}, {@fix_errors={'fix_errors', 0x3d, 'no'}}, {@read_only}, {@compression={'compression', 0x3d, 'zstd'}}, {@inodes_32bit}, {@nochanges}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'set_may_go_rw'}}, {@reconstruct_alloc}, {@version_upgrade={'version_upgrade', 0x3d, 'none'}}]}, 0x1, 0x5960, &(0x7f00000009c0)="$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") 2.452958537s ago: executing program 0 (id=2712): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0xffffe000) keyctl$describe(0x6, r0, &(0x7f00000014c0)=""/180, 0xb4) 2.075487104s ago: executing program 4 (id=2713): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) 2.003367975s ago: executing program 3 (id=2714): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @broadcast}], 0x20) 1.928606744s ago: executing program 0 (id=2715): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_EGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004990}, 0x8840) 1.568625113s ago: executing program 1 (id=2716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x1800402, &(0x7f0000000840)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6d657461646174615f636865636b73756d3d63726336342c7f6174615f636865636b73756d3d6372633332632c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656cd6ee984c5f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c7374725f686173683d736970686173682c000f456c33737c01c96a485301f57184319607791e0389515818ee65b05741a83e2d3412b274e683f19cb37b6975e95e26fbf8", @ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32], 0x1, 0x5962, &(0x7f0000001400)="$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") 1.415762548s ago: executing program 3 (id=2717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 1.286721506s ago: executing program 0 (id=2718): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) brk(0x9) 757.72002ms ago: executing program 2 (id=2719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005640)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0xffffffffffffffff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0) 406.695838ms ago: executing program 3 (id=2720): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 406.368607ms ago: executing program 4 (id=2721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000300)={&(0x7f00000006c0)={0x14, r1, 0x511}, 0x14}}, 0x0) 100.413351ms ago: executing program 0 (id=2722): r0 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x44, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002020}) io_uring_enter(r0, 0x567, 0x1e, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2723): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') renameat2(r1, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000140)='./mnt\x00', 0x0) kernel console output (not intermixed with test programs): raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.526078][ T8683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.553314][ T8683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.833119][ T24] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 436.845166][ T24] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 436.956207][ T24] usb 2-1: USB disconnect, device number 7 [ 438.122752][ T8710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1228'. [ 438.590243][ T8720] loop3: detected capacity change from 0 to 512 [ 438.640187][ T8720] EXT4-fs: Ignoring removed orlov option [ 438.696949][ T8720] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 438.731316][ T8720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 438.772004][ T8720] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1233: corrupted in-inode xattr: e_value size too large [ 438.795717][ T8720] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1233: couldn't read orphan inode 15 (err -117) [ 438.814960][ T8720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.977581][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.523703][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 439.533260][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 440.922947][ T8742] loop3: detected capacity change from 0 to 40427 [ 440.953799][ T8742] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off [ 441.491398][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 441.757073][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 441.809203][ T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 441.826837][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 441.836564][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.909046][ T24] usb 3-1: config 0 descriptor?? [ 441.960359][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 442.031146][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 442.102135][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.113772][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.124234][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 442.139519][ T42] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 442.149650][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.220789][ T42] usb 2-1: config 0 descriptor?? [ 442.406453][ T5822] Bluetooth: hci4: unexpected event for opcode 0x204e [ 442.800233][ T42] magicmouse 0003:05AC:0265.000F: unknown main item tag 0x0 [ 442.869208][ T24] gspca_nw80x: reg_w err -71 [ 442.874584][ T24] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 442.907986][ T42] magicmouse 0003:05AC:0265.000F: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 442.932939][ T24] usb 3-1: USB disconnect, device number 8 [ 442.989773][ T5901] usb 2-1: USB disconnect, device number 8 [ 443.178881][ T8765] loop3: detected capacity change from 0 to 256 [ 443.252707][ T8765] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 444.288302][ T8776] netlink: 'syz.2.1260': attribute type 4 has an invalid length. [ 444.374514][ T8778] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 444.677543][ T8772] loop3: detected capacity change from 0 to 40427 [ 444.729917][ T8772] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 444.737322][ T8772] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 444.747190][ T8772] F2FS-fs (loop3): build fault injection rate: 17008 [ 444.754851][ T8772] F2FS-fs (loop3): build fault injection type: 0x6 [ 445.881657][ T8792] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 446.042009][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 446.239552][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.251234][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.261602][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 446.271131][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.371377][ T24] usb 1-1: config 0 descriptor?? [ 446.822234][ T24] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 446.878198][ T24] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 447.062114][ T24] arvo 0003:1E7D:30D4.0010: couldn't init struct arvo_device [ 447.071040][ T24] arvo 0003:1E7D:30D4.0010: couldn't install keyboard [ 447.134046][ T24] arvo 0003:1E7D:30D4.0010: probe with driver arvo failed with error -71 [ 447.193180][ T24] usb 1-1: USB disconnect, device number 7 [ 448.032615][ T8812] loop1: detected capacity change from 0 to 2048 [ 448.083274][ T8812] EXT4-fs: Ignoring removed orlov option [ 448.089403][ T8812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.225162][ T8812] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 448.257161][ T8818] loop0: detected capacity change from 0 to 2048 [ 448.403182][ T8818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.613824][ T8812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.952305][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.223263][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.772565][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 450.172194][ T8847] loop1: detected capacity change from 0 to 256 [ 450.327786][ T8847] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 450.666586][ T8852] loop2: detected capacity change from 0 to 1024 [ 451.029253][ T8846] loop3: detected capacity change from 0 to 40427 [ 451.151062][ T8846] F2FS-fs (loop3): invalid crc value [ 451.479225][ T8846] F2FS-fs (loop3): Start checkpoint disabled! [ 451.524313][ T8846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 451.984713][ T8862] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1297'. [ 452.685489][ T5901] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 452.871537][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 452.930005][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.941557][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.951858][ T5901] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 452.961850][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.059919][ T5901] usb 3-1: config 0 descriptor?? [ 453.534665][ T5901] ntrig 0003:1B96:0008.0011: unbalanced delimiter at end of report description [ 453.578011][ T5901] ntrig 0003:1B96:0008.0011: parse failed [ 453.585047][ T5901] ntrig 0003:1B96:0008.0011: probe with driver ntrig failed with error -22 [ 453.765766][ T24] usb 3-1: USB disconnect, device number 9 [ 453.880507][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 454.477704][ T8887] loop0: detected capacity change from 0 to 512 [ 454.682571][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 454.694443][ T8887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.707683][ T8887] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.274548][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.217638][ T8940] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1329'. [ 457.228038][ T8940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.806087][ T8953] netem: incorrect gi model size [ 457.811511][ T8953] netem: change failed [ 459.296970][ T8980] loop0: detected capacity change from 0 to 16 [ 459.331867][ T8980] erofs (device loop0): mounted with root inode @ nid 36. [ 459.477157][ T8982] loop3: detected capacity change from 0 to 2048 [ 459.494255][ T8982] hpfs: filesystem error: improperly stopped; already mounted read-only [ 459.503369][ T8982] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 459.836324][ T8987] loop4: detected capacity change from 0 to 512 [ 460.011116][ T8987] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 460.023425][ T8987] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 460.033968][ T8987] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1356: Corrupt directory, running e2fsck is recommended [ 460.185322][ T8987] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -12 [ 460.221165][ T8987] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.1356: corrupted in-inode xattr: invalid ea_ino [ 460.271210][ T8987] EXT4-fs (loop4): Remounting filesystem read-only [ 460.280302][ T8987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.377210][ T8987] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 460.652476][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.709620][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 461.071876][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 461.292386][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 461.329275][ T42] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 461.338957][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.393501][ T42] usb 2-1: config 0 descriptor?? [ 461.413261][ T42] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 461.441997][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 461.642133][ T42] usb 2-1: Detected FT232B [ 461.837185][ T42] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 461.871920][ T42] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 461.911625][ T42] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 461.951606][ T42] usb 2-1: USB disconnect, device number 9 [ 461.976041][ T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 461.986848][ T42] ftdi_sio 2-1:0.0: device disconnected [ 462.127651][ T9030] loop2: detected capacity change from 0 to 4096 [ 462.270891][ T9034] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.280000][ T9032] loop0: detected capacity change from 0 to 512 [ 462.291732][ T9032] EXT4-fs: Ignoring removed nobh option [ 462.364901][ T9032] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 462.417883][ T9032] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 462.437162][ T9032] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.1377: casefold flag without casefold feature [ 462.458318][ T9032] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1377: couldn't read orphan inode 13 (err -117) [ 462.481196][ T9032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.549478][ T9035] loop3: detected capacity change from 0 to 128 [ 462.585809][ T9035] hpfs: hpfs_map_4sectors(): unaligned read [ 462.592250][ T9035] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 462.645830][ T9035] hpfs: hpfs_map_sector(): read error [ 462.750888][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.878726][ T9044] fuse: Bad value for 'group_id' [ 462.884053][ T9044] fuse: Bad value for 'group_id' [ 463.516198][ T9058] netlink: 'syz.3.1388': attribute type 29 has an invalid length. [ 463.626840][ T9058] netlink: 'syz.3.1388': attribute type 29 has an invalid length. [ 464.199425][ T9074] loop4: detected capacity change from 0 to 64 [ 465.289534][ T9095] overlay: filesystem on ./file0/file0 not supported [ 465.818020][ T9107] loop2: detected capacity change from 0 to 2048 [ 465.830000][ T9104] loop4: detected capacity change from 0 to 512 [ 465.858951][ T9105] loop0: detected capacity change from 0 to 1024 [ 465.872123][ T9105] EXT4-fs: Ignoring removed nobh option [ 465.884962][ T9107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.908850][ T9105] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 465.931249][ T9104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.026966][ T9105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.032708][ T9104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.052512][ T9104] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.210081][ T9105] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1407: Allocating blocks 497-513 which overlap fs metadata [ 466.252282][ T9105] EXT4-fs (loop0): Remounting filesystem read-only [ 466.466653][ T9102] EXT4-fs (loop0): pa ffff8881269bc0e0: logic 131104, phys. 177, len 21 [ 466.595686][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.883087][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.946971][ T9125] loop3: detected capacity change from 0 to 128 [ 467.047933][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 467.048015][ T30] audit: type=1800 audit(1752917105.998:37): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1418" name="file1" dev="loop3" ino=1048650 res=0 errno=0 [ 467.355964][ T9126] loop4: detected capacity change from 0 to 4096 [ 467.404888][ T9126] ntfs3(loop4): It is recommened to use chkdsk. [ 467.467509][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 467.476152][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 467.484739][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 467.493220][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 467.501521][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 467.509717][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 467.518154][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 467.528515][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 467.537509][ T9126] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 467.541682][ T5901] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 467.561460][ T9135] loop1: detected capacity change from 0 to 64 [ 467.618746][ T9135] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 467.706317][ T9135] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 467.748618][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 467.764253][ T5901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.771531][ T5901] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 467.780963][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.839147][ T5901] usb 1-1: config 0 descriptor?? [ 468.337305][ T5901] chicony 0003:04F2:1421.0012: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 468.459013][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 468.517513][ T5901] usb 1-1: USB disconnect, device number 8 [ 469.107757][ T9160] loop1: detected capacity change from 0 to 128 [ 469.213743][ T30] audit: type=1800 audit(1752917108.158:38): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1434" name="file2" dev="loop1" ino=1048651 res=0 errno=0 [ 469.247389][ T9160] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 469.256461][ T9160] FAT-fs (loop1): Filesystem has been set read-only [ 469.303039][ T9160] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 469.466197][ T30] audit: type=1326 audit(1752917108.408:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.2.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 469.491073][ T30] audit: type=1326 audit(1752917108.418:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.2.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 469.513947][ T30] audit: type=1326 audit(1752917108.418:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.2.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 469.928350][ T9178] loop2: detected capacity change from 0 to 256 [ 470.007448][ T9178] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 470.212812][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.219477][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.702872][ T42] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 470.778161][ T9195] loop4: detected capacity change from 0 to 512 [ 470.867557][ T9195] EXT4-fs (loop4): orphan cleanup on readonly fs [ 470.874507][ T9195] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 470.882125][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 470.911197][ T9195] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 470.984052][ T42] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 470.992644][ T42] usb 3-1: config 0 has no interface number 0 [ 471.002324][ T9195] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1448: attempt to clear invalid blocks 2 len 1 [ 471.063781][ T42] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 471.068747][ T9195] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1448: invalid indirect mapped block 1819239214 (level 0) [ 471.073371][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.095791][ T42] usb 3-1: Product: syz [ 471.100178][ T42] usb 3-1: Manufacturer: syz [ 471.105263][ T42] usb 3-1: SerialNumber: syz [ 471.106550][ T9195] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1448: invalid indirect mapped block 1819239214 (level 1) [ 471.156771][ T9195] EXT4-fs (loop4): 1 truncate cleaned up [ 471.165289][ T9195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.228736][ T42] usb 3-1: config 0 descriptor?? [ 471.264844][ T42] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 471.301974][ T9197] loop0: detected capacity change from 0 to 4096 [ 471.464321][ T9205] syz.1.1451 uses obsolete (PF_INET,SOCK_PACKET) [ 471.504329][ T42] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 471.527430][ T42] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 471.527599][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.912664][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 471.923207][ T42] usb 3-1: USB disconnect, device number 10 [ 471.961349][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 472.018423][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 472.033838][ T42] quatech2 3-1:0.51: device disconnected [ 472.096562][ T9209] loop1: detected capacity change from 0 to 1024 [ 472.172956][ T9209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.185932][ T9209] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.218824][ T9211] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 472.256319][ T30] audit: type=1800 audit(1752917111.208:42): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1454" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 472.413440][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.079936][ T9231] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 473.458326][ T9238] loop3: detected capacity change from 0 to 256 [ 473.533536][ T9238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 473.968416][ T30] audit: type=1326 audit(1752917112.898:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 473.992907][ T30] audit: type=1326 audit(1752917112.898:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 474.016372][ T30] audit: type=1326 audit(1752917112.908:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 474.039063][ T30] audit: type=1326 audit(1752917112.908:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 474.061927][ T30] audit: type=1326 audit(1752917112.908:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 474.104709][ T9252] loop3: detected capacity change from 0 to 8 [ 475.156751][ T9265] loop4: detected capacity change from 0 to 64 [ 475.230163][ T9265] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 475.303969][ T9257] loop1: detected capacity change from 0 to 32768 [ 475.314555][ T9257] XFS: ikeep mount option is deprecated. [ 475.322012][ T9257] XFS (loop1): Invalid device [./file0], error=-15 [ 476.202958][ T9277] loop1: detected capacity change from 0 to 1024 [ 476.281457][ T9277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.294211][ T9277] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.721868][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.301173][ T5901] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 477.430300][ T9306] process 'syz.0.1500' launched './file1' with NULL argv: empty string added [ 477.505262][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.517448][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 477.528977][ T5901] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 477.538362][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.669837][ T5901] usb 5-1: config 0 descriptor?? [ 477.680075][ T9300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.708929][ T5901] hub 5-1:0.0: USB hub found [ 477.938783][ T5901] hub 5-1:0.0: 2 ports detected [ 477.942951][ T9317] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1505'. [ 477.953407][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 478.347685][ T5901] hub 5-1:0.0: set hub depth failed [ 478.377531][ T5901] usb 5-1: USB disconnect, device number 9 [ 478.432971][ T9326] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1510'. [ 478.571209][ T42] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 478.807831][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.819425][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.830144][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 478.861419][ T42] usb 3-1: New USB device found, idVendor=056a, idProduct=7c27, bcdDevice=4f.64 [ 478.871001][ T42] usb 3-1: New USB device strings: Mfr=223, Product=0, SerialNumber=0 [ 478.879416][ T42] usb 3-1: Manufacturer: syz [ 478.915787][ T42] usb 3-1: config 0 descriptor?? [ 479.171082][ T9337] loop3: detected capacity change from 0 to 128 [ 479.234983][ T9337] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.298606][ T9337] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 479.424510][ T42] wacom 0003:056A:7C27.0013: unbalanced delimiter at end of report description [ 479.441581][ T9343] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1518'. [ 479.451127][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1518'. [ 479.483105][ T42] wacom 0003:056A:7C27.0013: parse failed [ 479.489550][ T42] wacom 0003:056A:7C27.0013: probe with driver wacom failed with error -22 [ 479.566759][ T4029] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 479.591608][ T5901] usb 3-1: USB disconnect, device number 11 [ 480.192200][ T9355] tipc: Enabling of bearer rejected, media not registered [ 481.007679][ T9369] loop1: detected capacity change from 0 to 512 [ 481.131368][ T9369] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1530: iget: bad i_size value: 38620345925642 [ 481.223051][ T9369] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1530: couldn't read orphan inode 15 (err -117) [ 481.240220][ T9369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.342004][ T9369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1530: bg 0: block 5: invalid block bitmap [ 481.374146][ T9369] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 481.387145][ T9369] EXT4-fs (loop1): This should not happen!! Data will be lost [ 481.387145][ T9369] [ 481.397406][ T9369] EXT4-fs (loop1): Total free blocks count 0 [ 481.403992][ T9369] EXT4-fs (loop1): Free/Dirty block details [ 481.410118][ T9369] EXT4-fs (loop1): free_blocks=0 [ 481.415439][ T9369] EXT4-fs (loop1): dirty_blocks=2 [ 481.420897][ T9369] EXT4-fs (loop1): Block reservation details [ 481.427152][ T9369] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 481.566393][ T9383] loop4: detected capacity change from 0 to 16 [ 481.616484][ T9383] erofs (device loop4): mounted with root inode @ nid 36. [ 481.640994][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.668835][ T9385] loop3: detected capacity change from 0 to 512 [ 481.739302][ T9385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 481.771979][ T9385] System zones: 1-12 [ 481.841776][ T9385] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1537: corrupted in-inode xattr: invalid ea_ino [ 481.901371][ T9385] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1537: couldn't read orphan inode 15 (err -117) [ 481.944849][ T9391] usb usb6: usbfs: process 9391 (syz.1.1540) did not claim interface 63 before use [ 481.976580][ T9385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.278329][ T9399] loop0: detected capacity change from 0 to 8 [ 482.313202][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.780280][ T9409] pim6reg9: entered allmulticast mode [ 483.726285][ T9425] loop3: detected capacity change from 0 to 736 [ 485.310400][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1573'. [ 485.337875][ T9459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1573'. [ 486.652006][ T9485] loop0: detected capacity change from 0 to 256 [ 487.034898][ T9485] FAT-fs (loop0): Directory bread(block 64) failed [ 487.042416][ T9485] FAT-fs (loop0): Directory bread(block 65) failed [ 487.049311][ T9485] FAT-fs (loop0): Directory bread(block 66) failed [ 487.056266][ T9485] FAT-fs (loop0): Directory bread(block 67) failed [ 487.063389][ T9485] FAT-fs (loop0): Directory bread(block 68) failed [ 487.070203][ T9485] FAT-fs (loop0): Directory bread(block 69) failed [ 487.077438][ T9485] FAT-fs (loop0): Directory bread(block 70) failed [ 487.086150][ T9485] FAT-fs (loop0): Directory bread(block 71) failed [ 487.094058][ T9485] FAT-fs (loop0): Directory bread(block 72) failed [ 487.101073][ T9485] FAT-fs (loop0): Directory bread(block 73) failed [ 487.201969][ T30] audit: type=1326 audit(1752917126.158:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 487.261981][ T9494] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1590'. [ 487.281857][ T30] audit: type=1326 audit(1752917126.178:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 487.304258][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.313111][ T30] audit: type=1326 audit(1752917126.198:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 487.335457][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.412233][ T9509] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 488.460116][ T9501] loop2: detected capacity change from 0 to 32768 [ 488.474722][ T9501] bcachefs (/dev/loop2): error validating superblock: Invalid superblock: optional field with size 0 (type 0) [ 488.487432][ T9501] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 489.568469][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 489.578133][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'. [ 489.587597][ T9527] netlink: 'syz.4.1615': attribute type 11 has an invalid length. [ 489.595787][ T9527] netlink: 'syz.4.1615': attribute type 12 has an invalid length. [ 490.055490][ T9538] loop3: detected capacity change from 0 to 64 [ 490.074481][ T9538] hfs: unable to locate alternate MDB [ 490.080493][ T9538] hfs: continuing without an alternate MDB [ 490.277870][ T5901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 490.461037][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 490.524743][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 490.534257][ T5901] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 490.544869][ T5901] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 490.554884][ T5901] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 490.573513][ T5901] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 490.583686][ T5901] usb 2-1: config 1 interface 0 has no altsetting 0 [ 490.590602][ T5901] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 490.600074][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.813635][ T5901] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 490.814262][ T9544] loop3: detected capacity change from 0 to 512 [ 490.997035][ T9544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.010981][ T9544] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.123522][ T5901] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 491.222695][ T5901] usb 2-1: USB disconnect, device number 10 [ 491.380430][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.521597][ T5106] Bluetooth: hci4: command 0x0405 tx timeout [ 493.656281][ T9602] loop3: detected capacity change from 0 to 512 [ 493.707381][ T9602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 493.782619][ T9599] loop1: detected capacity change from 0 to 2048 [ 493.891685][ T9599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.084673][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.587757][ T9621] loop0: detected capacity change from 0 to 256 [ 494.774799][ T30] audit: type=1804 audit(1752917133.708:51): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1659" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048676 res=1 errno=0 [ 495.689077][ T9638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1655'. [ 495.700553][ T9638] unsupported nlmsg_type 40 [ 496.475410][ T9635] loop0: detected capacity change from 0 to 40427 [ 496.486896][ T9635] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 496.494298][ T9635] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 496.503819][ T9635] F2FS-fs (loop0): heap/no_heap options were deprecated [ 496.518302][ T9635] F2FS-fs (loop0): build fault injection type: 0x0 [ 496.561915][ T9635] F2FS-fs (loop0): invalid crc value [ 496.867204][ T9635] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 496.874882][ T9635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 497.463789][ T9653] loop3: detected capacity change from 0 to 4096 [ 497.764501][ T9653] ntfs3(loop3): $Secure::$SII is corrupted. [ 497.770960][ T9653] ntfs3(loop3): Failed to initialize $Secure (-22). [ 497.963881][ T5822] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 497.971345][ T5822] Bluetooth: hci1: unexpected event for opcode 0x203e [ 498.053587][ T9653] netlink: zone id is out of range [ 498.060493][ T9653] netlink: zone id is out of range [ 498.065960][ T9653] netlink: zone id is out of range [ 498.071477][ T9653] netlink: zone id is out of range [ 498.076804][ T9653] netlink: zone id is out of range [ 498.082320][ T9653] netlink: zone id is out of range [ 498.087635][ T9653] netlink: zone id is out of range [ 498.093188][ T9653] netlink: zone id is out of range [ 498.098479][ T9653] netlink: zone id is out of range [ 498.103912][ T9653] netlink: zone id is out of range [ 498.581377][ T9674] tipc: Started in network mode [ 498.586556][ T9674] tipc: Node identity aaaaaaaaaa4, cluster identity 4711 [ 498.595749][ T9674] tipc: Enabled bearer , priority 10 [ 499.111556][ T9682] loop0: detected capacity change from 0 to 512 [ 499.136417][ T9682] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 499.206687][ T9682] EXT4-fs (loop0): 1 truncate cleaned up [ 499.214796][ T9682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.363525][ T9690] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1678'. [ 499.395715][ T9682] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 499.601255][ T5901] tipc: Node number set to 15379114 [ 499.722718][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.750143][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 500.167072][ T9706] loop2: detected capacity change from 0 to 256 [ 500.229990][ T9706] exfat: Deprecated parameter 'utf8' [ 500.236230][ T9706] exfat: Deprecated parameter 'namecase' [ 500.359143][ T9706] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 500.430145][ T9709] loop1: detected capacity change from 0 to 2048 [ 500.475862][ T9712] loop0: detected capacity change from 0 to 256 [ 500.518161][ T9709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.589987][ T9712] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 502.337186][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 502.353499][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1704'. [ 503.095395][ T9739] loop0: detected capacity change from 0 to 40427 [ 503.122172][ T9739] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 503.129937][ T9739] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 503.147248][ T9739] F2FS-fs (loop0): invalid crc value [ 503.246605][ T9754] loop4: detected capacity change from 0 to 16 [ 503.364133][ T9754] erofs (device loop4): unsupported datalayout 5 of nid 36 [ 503.501264][ T9739] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 503.508676][ T9739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 503.728982][ T9761] loop1: detected capacity change from 0 to 512 [ 503.936187][ T9761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 504.096074][ T9761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.109487][ T9761] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.215321][ T30] audit: type=1800 audit(1752917143.168:52): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1710" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 504.253676][ T9761] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 504.545608][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.951330][ T5901] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 506.146979][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 506.231150][ T5901] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 506.246547][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.257132][ T5901] usb 4-1: Product: syz [ 506.261807][ T5901] usb 4-1: Manufacturer: syz [ 506.266669][ T5901] usb 4-1: SerialNumber: syz [ 506.482973][ T5901] usb 4-1: config 0 descriptor?? [ 506.566167][ T5901] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 506.734100][ T9800] loop2: detected capacity change from 0 to 32768 [ 506.743151][ T9800] BTRFS error: invalid value 0 for thread_pool [ 506.919160][ T9804] loop0: detected capacity change from 0 to 256 [ 507.029132][ T5901] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 507.038673][ T5901] visor 4-1:0.0: probe with driver visor failed with error -5 [ 507.284015][ T5901] usb 4-1: USB disconnect, device number 11 [ 508.537023][ T9830] loop2: detected capacity change from 0 to 4096 [ 508.628457][ T9830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.655079][ T9830] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 508.787681][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 508.804465][ T9837] nbd: socks must be embedded in a SOCK_ITEM attr [ 508.820496][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.309041][ T9846] loop3: detected capacity change from 0 to 64 [ 510.363109][ T30] audit: type=1326 audit(1752917149.318:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.4.1758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c518e9a9 code=0x0 [ 510.481061][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 510.490546][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 511.229688][ T9884] loop1: detected capacity change from 0 to 512 [ 511.326968][ T9884] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 511.385023][ T9884] EXT4-fs (loop1): orphan cleanup on readonly fs [ 511.499620][ T9884] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1764: corrupted inode contents [ 511.533376][ T9884] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1764: mark_inode_dirty error [ 511.618561][ T9884] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1764: corrupted inode contents [ 511.648531][ T9884] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1764: mark_inode_dirty error [ 511.678910][ T9896] loop4: detected capacity change from 0 to 256 [ 511.698955][ T9896] exfat: Deprecated parameter 'utf8' [ 511.705051][ T9896] exfat: Deprecated parameter 'utf8' [ 511.711393][ T9884] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1764: corrupted inode contents [ 511.765043][ T9884] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 511.775164][ T9896] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 511.791199][ T9884] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1764: corrupted inode contents [ 511.831021][ T9884] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1764: mark_inode_dirty error [ 511.852060][ T9884] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 511.905481][ T9884] EXT4-fs (loop1): 1 truncate cleaned up [ 511.923938][ T35] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 511.934575][ T35] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 511.951197][ T5901] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 511.979651][ T9884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.141493][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 512.201933][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.213727][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.224001][ T5901] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 512.233488][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.305095][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.327259][ T5901] usb 1-1: config 0 descriptor?? [ 512.803322][ T5901] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 512.811648][ T5901] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 512.819084][ T5901] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 512.826644][ T5901] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 512.912113][ T5901] konepure 0003:1E7D:2DB4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 512.990111][ T5901] usb 1-1: USB disconnect, device number 9 [ 513.144346][ T9919] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1782'. [ 513.896502][ T9936] loop2: detected capacity change from 0 to 64 [ 514.017667][ T9928] loop4: detected capacity change from 0 to 2048 [ 514.063675][ T9930] xt_CT: No such helper "pptp" [ 514.199085][ T9928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.552916][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.791078][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 514.977301][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.988940][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.002677][ T42] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 515.012216][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.047779][ T5901] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 515.058755][ T9957] vlan2: entered promiscuous mode [ 515.064186][ T9957] bridge0: entered promiscuous mode [ 515.113380][ T42] usb 3-1: config 0 descriptor?? [ 515.238966][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.256412][ T5901] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 515.268191][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.306419][ T5901] usb 5-1: config 0 descriptor?? [ 515.560144][ T42] cypress 0003:04B4:DE61.0015: unknown main item tag 0x0 [ 515.573685][ T42] cypress 0003:04B4:DE61.0015: unknown main item tag 0x0 [ 515.675582][ T42] cypress 0003:04B4:DE61.0015: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 515.765509][ T42] usb 3-1: USB disconnect, device number 12 [ 515.774483][ T5901] lua 0003:1E7D:2C2E.0016: hidraw1: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 515.855599][ T24] IPVS: starting estimator thread 0... [ 515.952024][ T5901] usb 5-1: USB disconnect, device number 10 [ 515.962541][ T9968] IPVS: using max 192 ests per chain, 9600 per kthread [ 516.089650][ T30] audit: type=1326 audit(1752917155.028:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 516.112889][ T30] audit: type=1326 audit(1752917155.028:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 516.186326][ T9971] loop0: detected capacity change from 0 to 512 [ 516.216098][ T30] audit: type=1326 audit(1752917155.098:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 516.239420][ T30] audit: type=1326 audit(1752917155.098:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb9258e9e3 code=0x7ffc0000 [ 516.275658][ T30] audit: type=1326 audit(1752917155.118:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb9258d45f code=0x7ffc0000 [ 516.298111][ T9971] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 516.307845][ T30] audit: type=1326 audit(1752917155.128:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdb9258ea37 code=0x7ffc0000 [ 516.330570][ T30] audit: type=1326 audit(1752917155.138:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb9258d310 code=0x7ffc0000 [ 516.353529][ T30] audit: type=1326 audit(1752917155.138:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb9258e5ab code=0x7ffc0000 [ 516.377768][ T30] audit: type=1326 audit(1752917155.158:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdb9258d60a code=0x7ffc0000 [ 516.400908][ T30] audit: type=1326 audit(1752917155.158:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdb9258d60a code=0x7ffc0000 [ 516.430489][ T9971] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 516.452307][ T9971] System zones: 0-2, 18-18, 34-34 [ 516.494837][ T9971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.508352][ T9971] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.642005][ T5106] Bluetooth: hci4: command 0x0405 tx timeout [ 516.949387][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.968626][T10003] loop1: detected capacity change from 0 to 4096 [ 519.255449][T10018] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 519.819999][T10023] loop3: detected capacity change from 0 to 2048 [ 519.992753][T10026] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 521.404850][T10044] loop4: detected capacity change from 0 to 1024 [ 521.423467][T10044] EXT4-fs: Ignoring removed orlov option [ 521.478266][T10044] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 521.566894][T10044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.165246][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.555455][T10066] netlink: 'syz.1.1843': attribute type 30 has an invalid length. [ 523.000177][T10075] loop3: detected capacity change from 0 to 128 [ 523.444902][T10080] loop0: detected capacity change from 0 to 512 [ 523.487754][T10080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 523.579470][T10080] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 523.588505][T10080] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 523.728931][T10080] EXT4-fs (loop0): 1 truncate cleaned up [ 523.736996][T10080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.843186][T10080] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 4: comm syz.0.1851: lblock 0 mapped to illegal pblock 4 (length 1) [ 523.887146][T10080] EXT4-fs (loop0): Remounting filesystem read-only [ 524.126167][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.940433][T10110] loop4: detected capacity change from 0 to 512 [ 525.021161][T10110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 525.142368][T10114] loop3: detected capacity change from 0 to 512 [ 525.206111][T10110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.219281][T10110] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.435140][T10114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.448468][T10114] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.773829][T10130] loop2: detected capacity change from 0 to 64 [ 525.976260][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.119897][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.247836][T10125] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 527.131385][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 527.161689][ T42] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 527.350984][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 527.412407][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.423849][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.436166][ T42] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 527.446353][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.522933][ T42] usb 3-1: config 0 descriptor?? [ 527.989898][ T42] ft260 0003:0403:6030.0017: item fetching failed at offset 0/2 [ 528.026353][ T42] ft260 0003:0403:6030.0017: failed to parse HID [ 528.033672][ T42] ft260 0003:0403:6030.0017: probe with driver ft260 failed with error -22 [ 528.076637][T10163] loop4: detected capacity change from 0 to 16 [ 528.103516][T10163] erofs (device loop4): mounted with root inode @ nid 36. [ 528.163169][ T42] usb 3-1: USB disconnect, device number 13 [ 528.892413][T10168] loop0: detected capacity change from 0 to 4096 [ 528.961429][T10168] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 529.866782][T10188] loop1: detected capacity change from 0 to 256 [ 529.925512][T10188] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 529.936633][T10188] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 530.020348][T10192] loop0: detected capacity change from 0 to 256 [ 530.033095][T10190] loop3: detected capacity change from 0 to 4096 [ 530.036490][T10192] exfat: Deprecated parameter 'namecase' [ 530.090271][T10192] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 530.123042][T10193] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.151565][T10188] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 530.516576][T10198] loop0: detected capacity change from 0 to 16 [ 530.621593][T10198] erofs (device loop0): mounted with root inode @ nid 36. [ 531.028181][T10205] loop0: detected capacity change from 0 to 256 [ 531.068748][T10205] exfat: Deprecated parameter 'namecase' [ 531.245609][T10205] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xa6b7a7ad, utbl_chksum : 0xe619d30d) [ 531.692601][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.699503][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.230428][ T42] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 532.231838][T10214] loop2: detected capacity change from 0 to 32768 [ 532.365957][T10214] (syz.2.1919,10214,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0 [ 532.366154][T10214] (syz.2.1919,10214,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 532.366302][T10214] (syz.2.1919,10214,0):ocfs2_mount_volume:1758 ERROR: status = -22 [ 532.368336][T10214] (syz.2.1919,10214,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 532.397551][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.397730][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.397929][ T42] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 532.398087][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.789325][ T42] usb 4-1: config 0 descriptor?? [ 532.823449][T10225] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1912'. [ 532.823631][T10225] netlink: 'syz.1.1912': attribute type 3 has an invalid length. [ 533.692044][ T5106] Bluetooth: hci4: command 0x0405 tx timeout [ 534.021167][T10233] random: crng reseeded on system resumption [ 534.241282][ T42] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 534.248762][ T42] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 534.311436][ T42] cypress 0003:04B4:DE61.0018: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 534.345249][T10228] loop4: detected capacity change from 0 to 32768 [ 534.359047][ T42] usb 4-1: USB disconnect, device number 12 [ 534.383988][T10228] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 534.394754][T10228] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 534.420289][T10228] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 534.445122][T10235] loop0: detected capacity change from 0 to 47 [ 534.577816][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 534.697736][T10228] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 535.414767][T10247] CUSE: unknown device info "" [ 535.421552][T10247] CUSE: unknown device info "appraise_type" [ 535.428631][T10247] CUSE: DEVNAME unspecified [ 535.515964][T10244] loop2: detected capacity change from 0 to 4096 [ 535.548020][T10250] loop1: detected capacity change from 0 to 8 [ 535.657134][T10251] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.957963][T10264] loop4: detected capacity change from 0 to 4096 [ 537.010545][T10264] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 537.089585][T10267] loop2: detected capacity change from 0 to 4096 [ 537.112748][T10264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.148688][T10267] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 537.330561][T10264] fs-verity: sha256 using implementation "sha256-x86_64" [ 537.599090][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.861427][ T5901] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 538.997345][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 538.997526][ T30] audit: type=1326 audit(1752917177.948:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 539.062051][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 539.090159][ T30] audit: type=1326 audit(1752917177.998:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 539.115590][ T30] audit: type=1326 audit(1752917177.998:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 539.115890][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.140407][ T30] audit: type=1326 audit(1752917177.998:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 539.149680][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.149864][ T5901] usb 4-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 539.149989][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.200316][ T30] audit: type=1326 audit(1752917178.008:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 539.224889][ T30] audit: type=1326 audit(1752917178.008:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 539.248408][ T30] audit: type=1326 audit(1752917178.008:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764418e9a9 code=0x7ffc0000 [ 539.294566][ T5901] usb 4-1: config 0 descriptor?? [ 539.327593][T10309] loop0: detected capacity change from 0 to 64 [ 539.788161][ T5901] asus 0003:0B05:1866.0019: hidraw0: USB HID v0.00 Device [HID 0b05:1866] on usb-dummy_hcd.3-1/input0 [ 539.800389][ T5901] asus 0003:0B05:1866.0019: Asus input not registered [ 539.836314][T10313] loop2: detected capacity change from 0 to 1024 [ 539.902345][ T5901] asus 0003:0B05:1866.0019: probe with driver asus failed with error -12 [ 539.903161][ T42] kernel write not supported for file /sg0 (pid: 42 comm: kworker/1:1) [ 539.982398][ T42] usb 4-1: USB disconnect, device number 13 [ 540.918093][T10332] loop2: detected capacity change from 0 to 64 [ 541.496927][T10341] loop3: detected capacity change from 0 to 2048 [ 541.603873][T10346] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 542.005606][T10349] usb usb1: check_ctrlrecip: process 10349 (syz.1.1968) requesting ep 01 but needs 81 [ 542.521054][ T42] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 542.736639][ T42] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 542.745523][ T42] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 542.754927][ T42] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 542.765597][ T42] usb 3-1: config 220 has no interface number 2 [ 542.772341][ T42] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 542.785956][ T42] usb 3-1: config 220 interface 0 has no altsetting 0 [ 542.795679][ T42] usb 3-1: config 220 interface 76 has no altsetting 0 [ 542.803517][ T42] usb 3-1: config 220 interface 1 has no altsetting 0 [ 542.866272][ T42] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 542.875950][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.884455][ T42] usb 3-1: Product: syz [ 542.888867][ T42] usb 3-1: Manufacturer: syz [ 542.895373][ T42] usb 3-1: SerialNumber: syz [ 543.163820][ T42] usb 3-1: selecting invalid altsetting 0 [ 543.170291][ T42] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 543.178949][ T42] usb 3-1: No valid video chain found. [ 543.363555][ T42] usb 3-1: selecting invalid altsetting 0 [ 543.369735][ T42] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 543.555782][ T42] usb 3-1: USB disconnect, device number 14 [ 544.023603][T10373] loop0: detected capacity change from 0 to 128 [ 544.184719][T10373] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 544.251185][T10377] loop1: detected capacity change from 0 to 256 [ 544.261458][T10377] exfat: Deprecated parameter 'utf8' [ 544.270294][T10368] loop4: detected capacity change from 0 to 32768 [ 544.282713][T10373] ext4 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 544.334304][T10368] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 544.345022][T10368] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 544.376268][T10368] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 544.390973][T10368] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 544.400331][T10368] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:10368 [syz.4.1978] init_journal+0x332e/0x3a30 [ 544.411256][T10368] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 544.419977][T10368] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 544.435494][T10368] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 544.446877][T10368] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 544.453981][T10368] gfs2: fsid=syz:syz.s: File system withdrawn [ 544.460340][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.4.1978 Tainted: G W 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(none) [ 544.460492][T10368] Tainted: [W]=WARN [ 544.460542][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.460631][T10368] Call Trace: [ 544.460683][T10368] [ 544.460733][T10368] __dump_stack+0x26/0x30 [ 544.460910][T10368] dump_stack_lvl+0x1df/0x270 [ 544.461087][T10368] dump_stack+0x1e/0x25 [ 544.461258][T10368] gfs2_withdraw+0x1d26/0x22e0 [ 544.461512][T10368] gfs2_consist_inode_i+0x1b2/0x250 [ 544.461705][T10368] gfs2_jdesc_check+0x170/0x440 [ 544.461912][T10368] check_journal_clean+0x1b6/0x4c0 [ 544.462081][T10368] ? init_journal+0x332e/0x3a30 [ 544.462244][T10368] ? kmsan_get_metadata+0xfb/0x160 [ 544.462401][T10368] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 544.462572][T10368] init_journal+0x332e/0x3a30 [ 544.462778][T10368] ? init_inodes+0x124/0x510 [ 544.462955][T10368] ? init_inodes+0x124/0x510 [ 544.463140][T10368] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 544.463352][T10368] init_inodes+0x124/0x510 [ 544.463550][T10368] gfs2_fill_super+0x384a/0x3f50 [ 544.463750][T10368] ? init_locking+0xed/0x500 [ 544.464033][T10368] get_tree_bdev_flags+0x6e3/0x920 [ 544.464216][T10368] ? __pfx_gfs2_fill_super+0x10/0x10 [ 544.464406][T10368] ? __pfx_gfs2_fill_super+0x10/0x10 [ 544.464598][T10368] ? __pfx_gfs2_get_tree+0x10/0x10 [ 544.464775][T10368] get_tree_bdev+0x38/0x50 [ 544.464930][T10368] gfs2_get_tree+0x57/0x350 [ 544.465112][T10368] ? __pfx_gfs2_get_tree+0x10/0x10 [ 544.465290][T10368] vfs_get_tree+0xb0/0x5c0 [ 544.465455][T10368] ? mount_capable+0x99/0x100 [ 544.465666][T10368] do_new_mount+0x738/0x1610 [ 544.465829][T10368] ? kmsan_get_metadata+0xfb/0x160 [ 544.466000][T10368] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 544.466198][T10368] path_mount+0x6db/0x1e90 [ 544.466366][T10368] ? user_path_at+0x32d/0x3d0 [ 544.466586][T10368] __se_sys_mount+0x6eb/0x7d0 [ 544.466774][T10368] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 544.467060][T10368] __x64_sys_mount+0xe4/0x150 [ 544.467250][T10368] x64_sys_call+0xfa7/0x3db0 [ 544.467459][T10368] do_syscall_64+0xd9/0x210 [ 544.467643][T10368] ? irqentry_exit+0x16/0x60 [ 544.467791][T10368] ? clear_bhb_loop+0x40/0x90 [ 544.467980][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.468159][T10368] RIP: 0033:0x7ff3c519014a [ 544.468282][T10368] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.468409][T10368] RSP: 002b:00007ff3c5f66e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.468548][T10368] RAX: ffffffffffffffda RBX: 00007ff3c5f66ef0 RCX: 00007ff3c519014a [ 544.468660][T10368] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007ff3c5f66eb0 [ 544.468791][T10368] RBP: 0000200000000400 R08: 00007ff3c5f66ef0 R09: 0000000000200001 [ 544.468890][T10368] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 544.468968][T10368] R13: 00007ff3c5f66eb0 R14: 00000000000125d5 R15: 0000200000000080 [ 544.469103][T10368] [ 544.782421][T10368] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 545.345535][ T5827] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 545.485635][T10377] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x509db19e, utbl_chksum : 0xe619d30d) [ 546.159038][T10400] program syz.3.1991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.231514][ T5901] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 546.413249][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.424741][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.434927][ T5901] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 546.444343][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.553498][ T5901] usb 3-1: config 0 descriptor?? [ 546.568746][T10403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1994'. [ 546.593496][ T42] IPVS: starting estimator thread 0... [ 546.702093][T10406] IPVS: using max 240 ests per chain, 12000 per kthread [ 547.035171][ T5901] glorious 0003:258A:0036.001A: item fetching failed at offset 0/2 [ 547.060001][ T5901] glorious 0003:258A:0036.001A: probe with driver glorious failed with error -22 [ 547.231626][ T5901] usb 3-1: USB disconnect, device number 15 [ 547.366684][T10415] sp0: Synchronizing with TNC [ 547.906573][T10425] loop1: detected capacity change from 0 to 8 [ 548.134006][T10425] SQUASHFS error: xz decompression failed, data probably corrupt [ 548.142268][T10425] SQUASHFS error: Failed to read block 0x60: -5 [ 548.181944][T10425] SQUASHFS error: xz decompression failed, data probably corrupt [ 548.190013][T10425] SQUASHFS error: Failed to read block 0x60: -5 [ 548.210254][ T30] audit: type=1800 audit(1752917187.148:80): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2002" name="file0" dev="loop1" ino=1 res=0 errno=0 [ 549.321362][T10445] loop2: detected capacity change from 0 to 64 [ 549.370946][T10445] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 550.336897][T10461] loop2: detected capacity change from 0 to 512 [ 550.382102][T10461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 550.481628][T10461] EXT4-fs (loop2): 1 truncate cleaned up [ 550.489660][T10461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.696019][T10461] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 1969368878 > max in inode 18 [ 551.020301][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.934877][T10471] loop0: detected capacity change from 0 to 32768 [ 552.042379][T10471] (syz.0.2022,10471,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 552.059921][T10471] (syz.0.2022,10471,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 553.048881][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 553.121050][ T5878] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 553.232996][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.251128][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.263851][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 553.292537][T10484] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2028'. [ 553.358657][ T5901] usb 4-1: New USB device found, idVendor=056a, idProduct=7c27, bcdDevice=4f.64 [ 553.368385][ T5901] usb 4-1: New USB device strings: Mfr=223, Product=0, SerialNumber=0 [ 553.376972][ T5901] usb 4-1: Manufacturer: syz [ 553.417038][ T5878] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 553.426694][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.435169][ T5878] usb 5-1: Product: syz [ 553.445627][ T5878] usb 5-1: Manufacturer: syz [ 553.450492][ T5878] usb 5-1: SerialNumber: syz [ 553.462518][ T5901] usb 4-1: config 0 descriptor?? [ 553.471708][ T5878] usb 5-1: config 0 descriptor?? [ 553.878706][T10490] loop0: detected capacity change from 0 to 64 [ 553.981418][ T5901] wacom 0003:056A:7C27.001B: unbalanced delimiter at end of report description [ 554.020808][ T5901] wacom 0003:056A:7C27.001B: parse failed [ 554.027709][ T5901] wacom 0003:056A:7C27.001B: probe with driver wacom failed with error -22 [ 554.154385][ T5878] usb 5-1: Firmware version (0.0) predates our first public release. [ 554.177280][ T5878] usb 5-1: Please update to version 0.2 or newer [ 554.202719][ T5901] usb 4-1: USB disconnect, device number 14 [ 554.346062][ T5878] usb 5-1: USB disconnect, device number 11 [ 554.521107][T10496] loop0: detected capacity change from 0 to 128 [ 554.532836][T10496] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 554.562365][T10496] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 554.964437][ T4198] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 557.300168][T10536] loop1: detected capacity change from 0 to 8192 [ 557.357743][T10536] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000ff00) [ 557.370893][T10536] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000ff00) [ 557.963214][T10548] loop3: detected capacity change from 0 to 256 [ 557.975158][T10548] exfat: Deprecated parameter 'utf8' [ 557.981274][T10548] exfat: Deprecated parameter 'namecase' [ 557.994438][T10548] exfat: Deprecated parameter 'utf8' [ 558.050150][T10548] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 558.707283][T10562] loop1: detected capacity change from 0 to 512 [ 558.741349][T10562] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 558.816193][T10562] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 559.549481][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 559.611426][T10576] loop2: detected capacity change from 0 to 128 [ 559.680094][ T30] audit: type=1800 audit(1752917198.628:81): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2072" name="file2" dev="loop2" ino=1048697 res=0 errno=0 [ 559.723108][T10576] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 559.731341][T10576] FAT-fs (loop2): Filesystem has been set read-only [ 559.745432][T10576] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 560.063106][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 560.382716][T10580] loop3: detected capacity change from 0 to 4096 [ 560.452387][T10580] ntfs3(loop3): It is recommened to use chkdsk. [ 560.491535][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 560.499743][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 560.510352][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 560.519338][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 560.527833][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 560.540505][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 560.548900][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 560.557376][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 560.565866][T10580] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 561.265266][T10603] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 561.475294][T10607] loop3: detected capacity change from 0 to 64 [ 561.593785][T10609] loop4: detected capacity change from 0 to 256 [ 561.619795][T10609] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 561.646029][T10611] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2086'. [ 562.485084][T10627] loop2: detected capacity change from 0 to 16 [ 562.564920][T10627] erofs (device loop2): mounted with root inode @ nid 36. [ 562.939219][ T5878] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 563.121185][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 563.199035][ T5878] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 563.208666][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.339516][ T5878] usb 4-1: config 0 descriptor?? [ 563.414700][ T5878] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 563.461560][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 563.633289][ T5878] usb 4-1: Detected FT232B [ 563.731258][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 563.769758][ T5901] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 563.771357][T10636] loop0: detected capacity change from 0 to 40427 [ 563.779463][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.809802][T10636] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 563.817186][T10636] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 563.830214][T10636] F2FS-fs (loop0): build fault injection rate: 17008 [ 563.837547][T10636] F2FS-fs (loop0): build fault injection type: 0x6 [ 563.848619][ T5878] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 563.895826][ T5878] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 563.908833][ T5878] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 563.942918][ T5901] usb 5-1: config 0 descriptor?? [ 563.980106][ T5901] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 564.043060][ T5878] usb 4-1: USB disconnect, device number 15 [ 564.117524][ T5878] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 564.129453][ T5878] ftdi_sio 4-1:0.0: device disconnected [ 564.693507][ T5901] gspca_nw80x: reg_w err -71 [ 564.698685][ T5901] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 564.752633][ T5901] usb 5-1: USB disconnect, device number 12 [ 564.799863][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 565.905895][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 566.352705][T10679] fuse: Bad value for 'group_id' [ 566.357988][T10679] fuse: Bad value for 'group_id' [ 567.703165][T10700] loop2: detected capacity change from 0 to 4096 [ 567.999669][T10700] ntfs3(loop2): ino=1a, mi_enum_attr [ 568.006873][T10700] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 568.228755][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2134'. [ 568.239106][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 568.574769][T10719] usb usb7: usbfs: process 10719 (syz.0.2136) did not claim interface 0 before use [ 569.028105][T10727] loop1: detected capacity change from 0 to 1024 [ 569.095956][T10730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2145'. [ 569.179523][T10727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.239644][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2145'. [ 569.339189][T10727] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2144: missing EA_INODE flag [ 569.356288][T10727] EXT4-fs (loop1): Remounting filesystem read-only [ 569.487457][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.113115][T10754] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2153'. [ 570.136298][T10754] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2153'. [ 570.291147][T10759] loop4: detected capacity change from 0 to 256 [ 570.314056][T10759] exfat: Deprecated parameter 'namecase' [ 570.410225][T10759] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 572.783506][T10790] loop4: detected capacity change from 0 to 40427 [ 572.853734][T10800] tipc: Started in network mode [ 572.858950][T10800] tipc: Node identity aaaaaaaaaa4, cluster identity 4711 [ 572.869119][T10800] tipc: Enabled bearer , priority 10 [ 572.875662][T10790] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 572.875778][T10790] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 572.883712][T10790] F2FS-fs (loop4): invalid crc value [ 573.196584][T10790] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 573.212592][T10790] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 573.982232][ T42] tipc: Node number set to 15379114 [ 574.447662][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2186'. [ 575.496883][T10845] loop2: detected capacity change from 0 to 16 [ 575.535140][T10845] erofs (device loop2): unsupported datalayout 5 of nid 36 [ 575.942160][T10856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2200'. [ 577.042385][T10876] loop4: detected capacity change from 0 to 512 [ 577.133883][T10876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 577.469216][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.955465][T10897] net_ratelimit: 46 callbacks suppressed [ 577.955529][T10897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.086428][T10901] loop3: detected capacity change from 0 to 1024 [ 579.211202][ T5106] Bluetooth: hci4: command 0x0405 tx timeout [ 579.269958][T10906] loop4: detected capacity change from 0 to 32768 [ 579.279150][T10906] XFS: noikeep mount option is deprecated. [ 579.286538][T10906] XFS (loop4): Invalid device [./file1], error=-2 [ 579.457858][ T3576] hfsplus: b-tree write err: -5, ino 4 [ 579.853140][T10917] loop1: detected capacity change from 0 to 512 [ 579.919208][T10917] EXT4-fs: Ignoring removed mblk_io_submit option [ 579.931890][T10917] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 579.969525][T10920] loop2: detected capacity change from 0 to 1024 [ 580.049624][T10917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 580.058781][T10917] System zones: 1-12 [ 580.084132][T10917] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2232: corrupted in-inode xattr: e_value size too large [ 580.110910][T10917] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2232: couldn't read orphan inode 15 (err -117) [ 580.144075][T10917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.195232][T10929] loop4: detected capacity change from 0 to 256 [ 580.196348][T10920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.506347][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.598265][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.809013][T10936] loop1: detected capacity change from 0 to 512 [ 580.873022][T10936] EXT4-fs: Ignoring removed oldalloc option [ 580.902510][T10936] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 580.981428][T10936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 580.999730][T10936] System zones: 1-12 [ 581.010423][T10936] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2238: corrupted in-inode xattr: e_value size too large [ 581.051611][T10930] loop0: detected capacity change from 0 to 4096 [ 581.052048][T10940] netlink: 'syz.2.2239': attribute type 46 has an invalid length. [ 581.064659][T10930] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 581.098307][T10936] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2238: couldn't read orphan inode 15 (err -117) [ 581.142740][T10942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.173860][T10936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.578763][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.750074][T10930] ntfs3(loop0): ino=1a, mi_enum_attr [ 581.756276][T10930] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 581.815896][T10930] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 581.932529][ T30] audit: type=1800 audit(1752917220.878:82): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2235" name="file1" dev="loop0" ino=24 res=0 errno=0 [ 582.187027][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 582.382924][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 582.454105][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 582.463998][ T42] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 582.472544][ T42] usb 5-1: Product: syz [ 582.476979][ T42] usb 5-1: Manufacturer: syz [ 582.482052][ T42] usb 5-1: SerialNumber: syz [ 582.574993][ T42] usb 5-1: config 0 descriptor?? [ 582.610435][ T42] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 582.865587][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 583.231458][ T42] gspca_zc3xx: reg_w_i err -71 [ 583.239873][ T42] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 583.302786][ T42] usb 5-1: USB disconnect, device number 13 [ 584.928212][ T30] audit: type=1326 audit(1752917223.868:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 585.030974][ T30] audit: type=1326 audit(1752917223.908:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 585.054042][ T30] audit: type=1326 audit(1752917223.938:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 585.076733][ T30] audit: type=1326 audit(1752917223.958:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 585.105260][ T30] audit: type=1326 audit(1752917223.958:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 585.130295][ T30] audit: type=1326 audit(1752917223.958:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 585.153067][ T30] audit: type=1326 audit(1752917223.958:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 585.175786][ T30] audit: type=1326 audit(1752917223.958:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe518e9a9 code=0x7ffc0000 [ 586.451812][T11022] pim6reg9: entered allmulticast mode [ 587.258244][T11035] loop1: detected capacity change from 0 to 256 [ 587.289767][T11035] exfat: Deprecated parameter 'namecase' [ 587.460157][T11035] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 588.948299][T11051] loop1: detected capacity change from 0 to 256 [ 589.155441][T11051] FAT-fs (loop1): Directory bread(block 64) failed [ 589.162670][T11051] FAT-fs (loop1): Directory bread(block 65) failed [ 589.169711][T11051] FAT-fs (loop1): Directory bread(block 66) failed [ 589.183752][T11051] FAT-fs (loop1): Directory bread(block 67) failed [ 589.193165][T11051] FAT-fs (loop1): Directory bread(block 68) failed [ 589.199949][T11051] FAT-fs (loop1): Directory bread(block 69) failed [ 589.207098][T11051] FAT-fs (loop1): Directory bread(block 70) failed [ 589.214026][T11051] FAT-fs (loop1): Directory bread(block 71) failed [ 589.221076][T11051] FAT-fs (loop1): Directory bread(block 72) failed [ 589.227871][T11051] FAT-fs (loop1): Directory bread(block 73) failed [ 590.106749][T11070] loop2: detected capacity change from 0 to 512 [ 590.358759][T11072] CUSE: unknown device info "" [ 590.364271][T11072] CUSE: unknown device info "appraise_type" [ 590.370770][T11072] CUSE: DEVNAME unspecified [ 590.721468][T11068] loop1: detected capacity change from 0 to 32768 [ 590.786605][T11068] (syz.1.2297,11068,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0 [ 590.797832][T11068] (syz.1.2297,11068,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 590.807199][T11068] (syz.1.2297,11068,0):ocfs2_mount_volume:1758 ERROR: status = -22 [ 590.825462][T11068] (syz.1.2297,11068,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 590.898550][T11070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.912362][T11070] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.494805][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.713880][T11091] random: crng reseeded on system resumption [ 591.892521][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2307'. [ 592.878236][T11109] loop4: detected capacity change from 0 to 256 [ 592.911758][T11109] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 592.923067][T11109] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 592.990843][T11109] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 593.057783][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.064932][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.777789][T11118] loop0: detected capacity change from 0 to 128 [ 593.832972][T11118] zonefs: Bad value for 'errors' [ 593.955205][T11118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2319'. [ 594.501168][ T5901] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 594.720486][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.732438][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.742725][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 594.756016][ T5901] usb 3-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 594.765463][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.860006][ T5901] usb 3-1: config 0 descriptor?? [ 595.113869][T11136] loop3: detected capacity change from 0 to 256 [ 595.231748][T11136] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 595.243642][T11136] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 595.342576][ T5901] hid-generic 0003:045E:008E.001C: unbalanced collection at end of report description [ 595.357772][T11136] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 595.413197][ T5901] hid-generic 0003:045E:008E.001C: probe with driver hid-generic failed with error -22 [ 595.540192][ T5901] usb 3-1: USB disconnect, device number 16 [ 596.601292][T11161] loop4: detected capacity change from 0 to 512 [ 596.646181][T11161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 596.714781][T11161] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 596.747405][T11161] EXT4-fs (loop4): 1 truncate cleaned up [ 596.763121][T11161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.138936][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.328271][T11171] loop2: detected capacity change from 0 to 1024 [ 597.529969][T11175] loop3: detected capacity change from 0 to 256 [ 597.565466][T11175] exfat: Deprecated parameter 'utf8' [ 597.571652][T11171] hfsplus: bad catalog entry type [ 597.658872][T11175] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 597.861872][T11179] loop1: detected capacity change from 0 to 512 [ 597.912052][ T4198] hfsplus: b-tree write err: -5, ino 4 [ 598.049103][T11179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.062407][T11179] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.408150][T11186] loop0: detected capacity change from 0 to 512 [ 598.466217][T11186] EXT4-fs: Ignoring removed bh option [ 598.479336][T11186] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 598.507342][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.658862][T11186] EXT4-fs (loop0): 1 truncate cleaned up [ 598.673534][T11186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.859489][T11194] loop4: detected capacity change from 0 to 512 [ 598.881490][T11190] loop3: detected capacity change from 0 to 2048 [ 598.934567][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.979879][T11190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.053073][T11194] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 599.118173][ T30] audit: type=1800 audit(1752917238.048:91): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2351" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 600.347537][T11216] loop1: detected capacity change from 0 to 128 [ 600.452176][T11216] FAT-fs (loop1): Directory bread(block 414) failed [ 600.459267][T11216] FAT-fs (loop1): Directory bread(block 415) failed [ 600.466391][T11216] FAT-fs (loop1): Directory bread(block 416) failed [ 600.473459][T11216] FAT-fs (loop1): Directory bread(block 417) failed [ 600.480330][T11216] FAT-fs (loop1): Directory bread(block 418) failed [ 600.488522][T11216] FAT-fs (loop1): Directory bread(block 419) failed [ 600.496017][T11216] FAT-fs (loop1): Directory bread(block 420) failed [ 600.503032][T11216] FAT-fs (loop1): Directory bread(block 421) failed [ 600.672406][T11216] FAT-fs (loop1): Directory bread(block 414) failed [ 600.679511][T11216] FAT-fs (loop1): Directory bread(block 415) failed [ 600.701345][T11216] syz.1.2364: attempt to access beyond end of device [ 600.701345][T11216] loop1: rw=3, sector=478, nr_sectors = 2 limit=128 [ 600.715097][T11216] syz.1.2364: attempt to access beyond end of device [ 600.715097][T11216] loop1: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 600.841623][ T5901] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 601.063989][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 601.115563][ T5901] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 601.125320][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.132289][T11223] loop4: detected capacity change from 0 to 4096 [ 601.133645][ T5901] usb 4-1: Product: syz [ 601.144629][ T5901] usb 4-1: Manufacturer: syz [ 601.149434][ T5901] usb 4-1: SerialNumber: syz [ 601.191202][T11223] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 601.204220][ T5901] usb 4-1: config 0 descriptor?? [ 601.541291][T11223] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 601.693617][ T5901] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 601.702675][ T5901] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 601.785008][ T5901] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -32 [ 601.816130][ T5901] usb 4-1: USB disconnect, device number 16 [ 602.250920][T11240] loop4: detected capacity change from 0 to 1024 [ 602.571792][ T4198] hfsplus: b-tree write err: -5, ino 4 [ 602.950064][T11252] loop0: detected capacity change from 0 to 128 [ 604.209474][T11269] loop2: detected capacity change from 0 to 1764 [ 604.805667][T11281] loop1: detected capacity change from 0 to 512 [ 604.991105][T11281] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2394: bad orphan inode 11 [ 605.091547][T11281] ext4_test_bit(bit=10, block=4) = 1 [ 605.097224][T11281] is_bad_inode(inode)=0 [ 605.101778][T11281] NEXT_ORPHAN(inode)=2080374784 [ 605.106867][T11281] max_ino=32 [ 605.110258][T11281] i_nlink=0 [ 605.113946][T11281] EXT4-fs (loop1): 1 truncate cleaned up [ 605.123332][T11281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.285568][T11281] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2394: bg 0: block 393: padding at end of block bitmap is not set [ 605.324957][T11281] overlayfs: failed to verify upper root origin [ 605.333992][T11275] loop4: detected capacity change from 0 to 8192 [ 605.421722][T11275] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 605.450491][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.802070][T11275] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 605.832573][T11275] ntfs3(loop4): Failed to load $Extend (-2). [ 605.838814][T11275] ntfs3(loop4): Failed to initialize $Extend. [ 605.925237][T11292] loop1: detected capacity change from 0 to 512 [ 605.986022][T11294] loop2: detected capacity change from 0 to 256 [ 606.022756][T11292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 606.095117][T11292] System zones: 1-12 [ 606.158198][T11292] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2398: error while reading EA inode 32 err=-116 [ 606.202738][T11294] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 606.232063][T11292] EXT4-fs (loop1): Remounting filesystem read-only [ 606.239216][T11292] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 606.250314][T11292] EXT4-fs (loop1): 1 orphan inode deleted [ 606.259041][T11292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.282884][T11294] exFAT-fs (loop2): error, data size is invalid(10) [ 606.289725][T11294] exFAT-fs (loop2): Filesystem has been set read-only [ 606.342977][T11299] exFAT-fs (loop2): error, data size is invalid(10) [ 606.625468][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.959032][T11305] loop2: detected capacity change from 0 to 1024 [ 607.319273][ T4198] hfsplus: b-tree write err: -5, ino 4 [ 608.946449][T11340] loop0: detected capacity change from 0 to 64 [ 609.292798][T11343] loop1: detected capacity change from 0 to 2048 [ 609.407968][T11343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.414862][T11349] loop3: detected capacity change from 0 to 256 [ 609.492454][T11348] loop4: detected capacity change from 0 to 512 [ 609.532855][T11348] EXT4-fs: Ignoring removed nobh option [ 609.655765][T11348] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2424: bg 0: block 393: padding at end of block bitmap is not set [ 609.738725][T11349] FAT-fs (loop3): Directory bread(block 64) failed [ 609.746233][T11349] FAT-fs (loop3): Directory bread(block 65) failed [ 609.753413][T11349] FAT-fs (loop3): Directory bread(block 66) failed [ 609.754235][T11348] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 609.762038][T11349] FAT-fs (loop3): Directory bread(block 67) failed [ 609.762303][T11349] FAT-fs (loop3): Directory bread(block 68) failed [ 609.762420][T11349] FAT-fs (loop3): Directory bread(block 69) failed [ 609.762668][T11349] FAT-fs (loop3): Directory bread(block 70) failed [ 609.762783][T11349] FAT-fs (loop3): Directory bread(block 71) failed [ 609.763046][T11349] FAT-fs (loop3): Directory bread(block 72) failed [ 609.763164][T11349] FAT-fs (loop3): Directory bread(block 73) failed [ 609.859062][T11348] EXT4-fs (loop4): 2 truncates cleaned up [ 609.869740][T11348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.914038][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.011283][ T30] audit: type=1800 audit(1752917248.948:92): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2424" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 610.266277][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.340491][T11359] tmpfs: Cannot change global quota limit on remount [ 610.362755][T11361] loop1: detected capacity change from 0 to 8 [ 610.409406][T11361] SQUASHFS error: lzo decompression failed, data probably corrupt [ 610.417971][T11361] SQUASHFS error: Failed to read block 0x91: -5 [ 610.425553][T11361] SQUASHFS error: Unable to read metadata cache entry [8f] [ 610.434166][T11361] SQUASHFS error: Unable to read inode 0x11f [ 610.696101][T11365] loop3: detected capacity change from 0 to 128 [ 610.766544][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2432'. [ 610.778463][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 610.799447][T11368] loop4: detected capacity change from 0 to 512 [ 610.831982][ T30] audit: type=1800 audit(1752917249.778:93): pid=11365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2431" name="file2" dev="loop3" ino=1048731 res=0 errno=0 [ 610.905858][T11368] EXT4-fs (loop4): too many log groups per flexible block group [ 610.914486][T11368] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 610.921802][T11368] EXT4-fs (loop4): mount failed [ 611.431940][T11379] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 613.021814][T11395] loop4: detected capacity change from 0 to 32768 [ 613.103523][T11395] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal: journal bucket at sector 0 [ 613.103523][T11395] journal (size 64): [ 613.103523][T11395] Buckets: 6431665835172427386 16981954538416098692 128 34376515584 1714681267 1611530240 0 [ 613.103523][T11395] [ 613.132833][T11395] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 614.132393][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2451'. [ 614.142365][T11407] netlink: 'syz.3.2451': attribute type 2 has an invalid length. [ 614.150359][T11407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2451'. [ 614.206465][T11403] loop2: detected capacity change from 0 to 32768 [ 614.229854][T11403] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 614.331689][T11403] (syz.2.2449,11403,0):ocfs2_clear_journal_error:1147 ERROR: File system error -318767104 recorded in journal 0. [ 614.344404][T11403] (syz.2.2449,11403,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop2 needs checking. [ 614.365445][T11403] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 614.567125][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 615.758324][ T5901] kernel write not supported for file /980/attr/exec (pid: 5901 comm: kworker/0:6) [ 615.999396][T11428] loop3: detected capacity change from 0 to 256 [ 616.369627][T11428] FAT-fs (loop3): Directory bread(block 64) failed [ 616.376757][T11428] FAT-fs (loop3): Directory bread(block 65) failed [ 616.383904][T11428] FAT-fs (loop3): Directory bread(block 66) failed [ 616.390954][T11428] FAT-fs (loop3): Directory bread(block 67) failed [ 616.397886][T11428] FAT-fs (loop3): Directory bread(block 68) failed [ 616.405717][T11428] FAT-fs (loop3): Directory bread(block 69) failed [ 616.412832][T11428] FAT-fs (loop3): Directory bread(block 70) failed [ 616.423178][T11428] FAT-fs (loop3): Directory bread(block 71) failed [ 616.430102][T11428] FAT-fs (loop3): Directory bread(block 72) failed [ 616.439409][T11428] FAT-fs (loop3): Directory bread(block 73) failed [ 616.777804][T11437] loop0: detected capacity change from 0 to 1024 [ 617.228414][T11446] loop4: detected capacity change from 0 to 64 [ 617.539984][ T3990] hfsplus: b-tree write err: -5, ino 4 [ 617.874672][T11456] ALSA: mixer_oss: invalid index 100000 [ 618.273764][ T30] audit: type=1326 audit(1752917257.228:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 618.297534][ T30] audit: type=1326 audit(1752917257.228:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 618.320814][ T30] audit: type=1326 audit(1752917257.228:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 618.343655][ T30] audit: type=1326 audit(1752917257.228:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 618.368195][ T30] audit: type=1326 audit(1752917257.228:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 618.391770][ T30] audit: type=1326 audit(1752917257.228:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 618.415370][ T30] audit: type=1326 audit(1752917257.228:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9258e9a9 code=0x7ffc0000 [ 619.016717][T11480] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2484'. [ 619.065894][T11478] loop0: detected capacity change from 0 to 2048 [ 619.306206][T11478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.652484][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.087038][T11501] loop0: detected capacity change from 0 to 16 [ 620.115606][T11501] erofs (device loop0): unsupported datalayout 5 of nid 36 [ 620.274818][T11505] loop1: detected capacity change from 0 to 512 [ 620.338003][T11505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 620.374658][T11505] System zones: 1-12 [ 620.392866][T11505] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2504: corrupted in-inode xattr: invalid ea_ino [ 620.425489][T11505] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2504: couldn't read orphan inode 15 (err -117) [ 620.543523][T11505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.840096][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.811565][T11529] usb usb6: usbfs: process 11529 (syz.3.2505) did not claim interface 63 before use [ 622.039879][T11537] loop4: detected capacity change from 0 to 128 [ 622.086208][T11537] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 622.142451][T11537] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 622.494256][ T3576] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 623.509509][T11561] loop4: detected capacity change from 0 to 256 [ 623.523012][T11561] exfat: Deprecated parameter 'utf8' [ 623.523285][T11561] exfat: Deprecated parameter 'namecase' [ 623.523904][T11561] exfat: Deprecated parameter 'utf8' [ 623.618986][T11561] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 623.803557][T11563] loop2: detected capacity change from 0 to 2048 [ 623.873368][T11563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.886128][T11563] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.083303][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.636422][T11579] loop0: detected capacity change from 0 to 256 [ 624.668676][T11579] exfat: Deprecated parameter 'utf8' [ 624.746665][T11579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 624.931157][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 624.996519][ T5878] kernel write not supported for file /input/mouse0 (pid: 5878 comm: kworker/0:5) [ 625.101240][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 625.151558][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.163046][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.173459][ T5901] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 625.182839][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.261099][ T5901] usb 4-1: config 0 descriptor?? [ 625.694087][ T5901] ntrig 0003:1B96:0008.001D: unbalanced delimiter at end of report description [ 625.707835][ T5901] ntrig 0003:1B96:0008.001D: parse failed [ 625.714409][ T5901] ntrig 0003:1B96:0008.001D: probe with driver ntrig failed with error -22 [ 625.918553][T11599] sp0: Synchronizing with TNC [ 625.925921][ T42] usb 4-1: USB disconnect, device number 17 [ 626.013447][T11601] loop2: detected capacity change from 0 to 512 [ 626.100941][T11601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.114406][T11601] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.269846][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.585473][T11608] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2541'. [ 626.896747][T11617] loop2: detected capacity change from 0 to 256 [ 626.908369][T11617] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 627.480102][T11625] loop2: detected capacity change from 0 to 512 [ 627.530768][T11625] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 627.542942][T11625] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 627.553394][T11625] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2559: Corrupt directory, running e2fsck is recommended [ 627.575703][T11625] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -12 [ 627.611254][T11625] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2559: corrupted in-inode xattr: invalid ea_ino [ 627.654618][T11625] EXT4-fs (loop2): Remounting filesystem read-only [ 627.668101][T11625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.786772][T11625] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 627.910539][T11634] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 627.979638][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.178854][T11637] loop4: detected capacity change from 0 to 128 [ 628.224189][T11637] hpfs: hpfs_map_4sectors(): unaligned read [ 628.230411][T11637] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 628.260932][T11637] hpfs: hpfs_map_sector(): read error [ 628.641825][T11646] netem: incorrect gi model size [ 628.647024][T11646] netem: change failed [ 628.881197][T11651] loop1: detected capacity change from 0 to 2048 [ 628.906237][T11651] hpfs: filesystem error: improperly stopped; already mounted read-only [ 628.922119][T11651] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 629.473405][T11661] fuse: Bad value for 'group_id' [ 629.478653][T11661] fuse: Bad value for 'group_id' [ 629.648330][T11668] netlink: 'syz.1.2569': attribute type 29 has an invalid length. [ 629.710913][T11671] netlink: 'syz.1.2569': attribute type 29 has an invalid length. [ 630.566611][T11669] loop2: detected capacity change from 0 to 40427 [ 630.626162][T11669] F2FS-fs (loop2): invalid crc value [ 630.934458][T11669] F2FS-fs (loop2): Start checkpoint disabled! [ 630.949834][T11669] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 632.427056][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2586'. [ 632.436794][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 633.381429][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 633.552214][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 633.649924][ T42] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 633.658663][ T42] usb 4-1: config 1 has no interface number 0 [ 633.665221][ T42] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 633.675595][ T42] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 633.686212][ T42] usb 4-1: config 1 interface 105 has no altsetting 0 [ 633.799965][ T42] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 633.809559][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.818203][ T42] usb 4-1: Product: syz [ 633.826086][ T42] usb 4-1: Manufacturer: syz [ 633.833691][ T42] usb 4-1: SerialNumber: syz [ 633.885370][T11725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.902208][T11725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 634.161778][T11741] loop2: detected capacity change from 0 to 1024 [ 634.293830][T11741] hfsplus: bad catalog entry type [ 634.374957][T11725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 634.384605][T11725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 634.457754][ T1147] hfsplus: b-tree write err: -5, ino 4 [ 634.618207][ T42] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 634.631619][ T42] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 634.668756][ T42] usb 4-1: USB disconnect, device number 18 [ 636.145883][T11766] loop4: detected capacity change from 0 to 512 [ 636.193120][T11766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 636.236542][T11766] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 636.245901][T11766] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 636.270512][T11766] EXT4-fs (loop4): 1 truncate cleaned up [ 636.279363][T11766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.374743][T11766] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2611: lblock 0 mapped to illegal pblock 4 (length 1) [ 636.402479][T11766] EXT4-fs (loop4): Remounting filesystem read-only [ 636.629517][T11768] loop3: detected capacity change from 0 to 4096 [ 636.639466][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.664359][T11768] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 636.959805][T11778] loop2: detected capacity change from 0 to 8 [ 637.005018][T11778] SQUASHFS error: xz decompression failed, data probably corrupt [ 637.013203][T11778] SQUASHFS error: Failed to read block 0x108: -5 [ 637.019749][T11778] SQUASHFS error: Unable to read metadata cache entry [106] [ 637.027626][T11778] SQUASHFS error: Unable to read inode 0x11f [ 638.250190][T11800] loop1: detected capacity change from 0 to 256 [ 638.318638][T11800] FAT-fs (loop1): Directory bread(block 1285) failed [ 638.676911][T11806] loop2: detected capacity change from 0 to 256 [ 638.816247][T11806] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 640.268482][T11835] loop3: detected capacity change from 0 to 512 [ 640.358415][T11837] loop1: detected capacity change from 0 to 1024 [ 640.457369][T11837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.144319][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.187012][T11840] loop0: detected capacity change from 0 to 32768 [ 641.213592][T11840] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section crypt: wrong size (got 40 should be 64) [ 641.213592][T11840] crypt (size 40): [ 641.213592][T11840] KFD: 9 [ 641.213592][T11840] scrypt n: 7 [ 641.213592][T11840] scrypt r: 0 [ 641.213592][T11840] scrypt p: 0 [ 641.213592][T11840] [ 641.248669][T11840] bcachefs: bch2_fs_get_tree() error: invalid_sb_crypt [ 641.801238][T11852] loop1: detected capacity change from 0 to 256 [ 644.097188][T11902] netlink: 'syz.4.2676': attribute type 3 has an invalid length. [ 644.656750][T11912] ptrace attach of "./syz-executor exec"[5815] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\x [ 645.341490][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2687'. [ 645.516594][T11930] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 646.686656][T11932] loop4: detected capacity change from 0 to 40427 [ 646.697211][T11932] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 646.705337][T11932] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 646.715092][T11932] F2FS-fs (loop4): heap/no_heap options were deprecated [ 646.723020][T11932] F2FS-fs (loop4): build fault injection rate: 19 [ 646.736739][T11932] F2FS-fs (loop4): journaled quota format not specified [ 646.862524][T11944] fuse: Invalid rootmode [ 647.315345][T11942] loop1: detected capacity change from 0 to 4096 [ 647.451009][T11948] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 647.823432][T11957] loop3: detected capacity change from 0 to 128 [ 647.902165][T11957] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 647.942342][T11957] ext4 filesystem being mounted at /563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 648.315540][ T5819] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 648.335345][T11963] loop4: detected capacity change from 0 to 1024 [ 648.414445][T11969] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 648.424480][T11969] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 648.463649][T11963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.483713][T11963] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.698882][T11963] EXT4-fs: can't change dax mount option while remounting [ 648.854847][T11979] loop1: detected capacity change from 0 to 512 [ 648.914957][T11979] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 648.926995][T11979] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 648.937481][T11979] EXT4-fs (loop1): group descriptors corrupted! [ 649.169463][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.530677][T11978] loop2: detected capacity change from 0 to 32768 [ 649.545432][T11978] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64) [ 649.545432][T11978] members_v2 (size 40): [ 649.545432][T11978] nr_devices mismatch: have 2 entries, should be 1Device:0 [ 649.545432][T11978] Label: (none) [ 649.545432][T11978] UUID: 07000000-0000-0000-1800-000000000000 [ 649.545432][T11978] Size: 0 [ 649.545432][T11978] read errors: 0 [ 649.545432][T11978] write errors: 0 [ 649.545432][T11978] checksum errors: 0 [ 649.545432][T11978] seqread iops: 0 [ 649.545432][T11978] seqwrite iops: 0 [ 649.545432][T11978] randread iops: 0 [ 649.545432][T11978] randwrite iops: 0 [ 649.545432][T11978] Bucket size: 0 [ 649.545432][T11978] First bucket: 0 [ 649.545432][T11978] Buckets: 0 [ 649.545432][T11978] Last mount: (never) [ 649.545432][T11978] Last superblock write: 0 [ 649.545432][T11978] State: rw [ 649.545432][T11978] Data allowed: (none) [ 649.545432][T11978] Has data: journal,btree,user [ 649.545432][T11978] Btree allocated bitmap blocksize:1 [ 649.545432][T11978] Btree allocated bitmap: 0000000000000000000000000000000000000000000000000000000000000000 [ 649.545432][T11978] Durabili [ 649.546281][T11978] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 650.797923][T11987] loop1: detected capacity change from 0 to 32768 [ 650.950744][T11987] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 650.950887][T11987] allowing incompatible features above 0.0: (unknown version) [ 650.950973][T11987] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 650.994334][T11987] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 651.003628][T11987] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 651.013177][T11987] bcachefs (loop1): Version upgrade required: [ 651.013177][T11987] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 651.013177][T11987] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 651.013177][T11987] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 651.104308][T11987] bcachefs (loop1): dropping and reconstructing all alloc info [ 651.169315][T12007] loop3: detected capacity change from 0 to 64 [ 651.201571][T11987] bcachefs (loop1): accounting_read... done [ 651.221112][T11987] bcachefs (loop1): alloc_read... done [ 651.242035][T11987] bcachefs (loop1): snapshots_read... done [ 651.254675][T11987] bcachefs (loop1): check_allocations... [ 651.327984][ T30] audit: type=1800 audit(1752917290.268:101): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2720" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 651.350702][T12007] ===================================================== [ 651.365372][T12007] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 [ 651.373823][T12007] hfs_find_set_zero_bits+0x74d/0xb60 [ 651.379441][T12007] hfs_vbm_search_free+0x13c/0x5b0 [ 651.385492][T12007] hfs_extend_file+0x6a5/0x1b00 [ 651.390665][T12007] hfs_get_block+0x435/0x1150 [ 651.395534][T12007] __blockdev_direct_IO+0x2914/0x65a0 [ 651.401233][T12007] hfs_direct_IO+0x12b/0x3f0 [ 651.406015][T12007] generic_file_direct_write+0x2bc/0x720 [ 651.412106][T12007] __generic_file_write_iter+0x25b/0x460 [ 651.417994][T12007] generic_file_write_iter+0x131/0x980 [ 651.423839][T12007] do_iter_readv_writev+0x94a/0xba0 [ 651.429263][T12007] vfs_writev+0x52a/0x1500 [ 651.434047][T12007] do_writev+0x1b5/0x580 [ 651.446742][T12007] __x64_sys_writev+0x99/0xf0 [ 651.454301][T12007] x64_sys_call+0x269a/0x3db0 [ 651.459254][T12007] do_syscall_64+0xd9/0x210 [ 651.464112][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.470241][T12007] [ 651.473317][T12007] Uninit was created at: [ 651.476320][T11987] done [ 651.477809][T12007] __kmalloc_cache_noprof+0x7f7/0xed0 [ 651.486092][T12007] hfs_mdb_get+0x1cc8/0x2a90 [ 651.490949][T12007] hfs_fill_super+0x3d0/0xb80 [ 651.495822][T12007] get_tree_bdev_flags+0x6e3/0x920 [ 651.501338][T12007] get_tree_bdev+0x38/0x50 [ 651.505945][T12007] hfs_get_tree+0x35/0x40 [ 651.510456][T12007] vfs_get_tree+0xb0/0x5c0 [ 651.512689][T11987] bcachefs (loop1): going read-write [ 651.515133][T12007] do_new_mount+0x738/0x1610 [ 651.525407][T12007] path_mount+0x6db/0x1e90 [ 651.530018][T12007] __se_sys_mount+0x6eb/0x7d0 [ 651.534982][T12007] __x64_sys_mount+0xe4/0x150 [ 651.547510][T12007] x64_sys_call+0xfa7/0x3db0 [ 651.554645][T12007] do_syscall_64+0xd9/0x210 [ 651.559443][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.565751][T12007] [ 651.568225][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.3.2720 Tainted: G W 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(none) [ 651.582219][T12007] Tainted: [W]=WARN [ 651.586187][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.596493][T12007] ===================================================== [ 651.603693][T12007] Disabling lock debugging due to kernel taint [ 651.609976][T12007] Kernel panic - not syncing: kmsan.panic set ... [ 651.616567][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.3.2720 Tainted: G B W 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(none) [ 651.630470][T12007] Tainted: [B]=BAD_PAGE, [W]=WARN [ 651.635613][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.645828][T12007] Call Trace: [ 651.649232][T12007] [ 651.652307][T12007] __dump_stack+0x26/0x30 [ 651.656890][T12007] dump_stack_lvl+0x53/0x270 [ 651.661730][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.667784][T12007] dump_stack+0x1e/0x25 [ 651.672179][T12007] panic+0x4bd/0xd50 [ 651.676353][T12007] kmsan_report+0x31c/0x320 [ 651.681064][T12007] ? __msan_warning+0x1b/0x30 [ 651.685917][T12007] ? hfs_find_set_zero_bits+0x74d/0xb60 [ 651.691723][T12007] ? hfs_vbm_search_free+0x13c/0x5b0 [ 651.697288][T12007] ? hfs_extend_file+0x6a5/0x1b00 [ 651.702546][T12007] ? hfs_get_block+0x435/0x1150 [ 651.707634][T12007] ? __blockdev_direct_IO+0x2914/0x65a0 [ 651.713464][T12007] ? hfs_direct_IO+0x12b/0x3f0 [ 651.718472][T12007] ? generic_file_direct_write+0x2bc/0x720 [ 651.724556][T12007] ? __generic_file_write_iter+0x25b/0x460 [ 651.730626][T12007] ? generic_file_write_iter+0x131/0x980 [ 651.736487][T12007] ? do_iter_readv_writev+0x94a/0xba0 [ 651.742068][T12007] ? vfs_writev+0x52a/0x1500 [ 651.746910][T12007] ? do_writev+0x1b5/0x580 [ 651.751565][T12007] ? __x64_sys_writev+0x99/0xf0 [ 651.756625][T12007] ? x64_sys_call+0x269a/0x3db0 [ 651.761725][T12007] ? do_syscall_64+0xd9/0x210 [ 651.766611][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.772900][T12007] ? hfs_find_exit+0x4e/0xb0 [ 651.777752][T12007] ? hfs_extend_file+0x46d/0x1b00 [ 651.783003][T12007] ? hfs_get_block+0x435/0x1150 [ 651.788074][T12007] ? __blockdev_direct_IO+0x2914/0x65a0 [ 651.793904][T12007] ? hfs_direct_IO+0x12b/0x3f0 [ 651.798892][T12007] ? generic_file_direct_write+0x2bc/0x720 [ 651.804987][T12007] ? __generic_file_write_iter+0x25b/0x460 [ 651.811061][T12007] ? generic_file_write_iter+0x131/0x980 [ 651.816961][T12007] ? do_iter_readv_writev+0x94a/0xba0 [ 651.822578][T12007] ? vfs_writev+0x52a/0x1500 [ 651.827396][T12007] ? do_writev+0x1b5/0x580 [ 651.832071][T12007] ? __x64_sys_writev+0x99/0xf0 [ 651.837134][T12007] ? x64_sys_call+0x269a/0x3db0 [ 651.842240][T12007] ? do_syscall_64+0xd9/0x210 [ 651.847119][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.853424][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 651.858753][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.864805][T12007] ? kfree+0xc1/0xec0 [ 651.868983][T12007] ? filter_irq_stacks+0x49/0x190 [ 651.874228][T12007] ? stack_depot_save_flags+0x35/0x7b0 [ 651.879953][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 651.885281][T12007] __msan_warning+0x1b/0x30 [ 651.889980][T12007] hfs_find_set_zero_bits+0x74d/0xb60 [ 651.895706][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 651.901023][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.907063][T12007] hfs_vbm_search_free+0x13c/0x5b0 [ 651.912452][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.918507][T12007] hfs_extend_file+0x6a5/0x1b00 [ 651.923613][T12007] ? __mark_inode_dirty+0x371/0x1090 [ 651.929170][T12007] hfs_get_block+0x435/0x1150 [ 651.934101][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 651.939448][T12007] ? __pfx_hfs_get_block+0x10/0x10 [ 651.944765][T12007] __blockdev_direct_IO+0x2914/0x65a0 [ 651.950471][T12007] ? __pfx_hfs_get_block+0x10/0x10 [ 651.955886][T12007] hfs_direct_IO+0x12b/0x3f0 [ 651.960723][T12007] ? __pfx_hfs_direct_IO+0x10/0x10 [ 651.966038][T12007] generic_file_direct_write+0x2bc/0x720 [ 651.971944][T12007] __generic_file_write_iter+0x25b/0x460 [ 651.977930][T12007] generic_file_write_iter+0x131/0x980 [ 651.983660][T12007] ? __rcu_read_unlock+0x6d/0xd0 [ 651.988790][T12007] ? aa_file_perm+0x24c/0x18d0 [ 651.993831][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 651.999138][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 652.005166][T12007] ? vfs_iter_read+0x6f1/0x770 [ 652.010113][T12007] ? filter_irq_stacks+0x49/0x190 [ 652.015322][T12007] ? stack_depot_save_flags+0x35/0x7b0 [ 652.021013][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 652.026315][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 652.031620][T12007] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 652.038206][T12007] ? __pfx_generic_file_write_iter+0x10/0x10 [ 652.044437][T12007] do_iter_readv_writev+0x94a/0xba0 [ 652.049898][T12007] ? __pfx_generic_file_write_iter+0x10/0x10 [ 652.056117][T12007] ? __pfx_generic_file_write_iter+0x10/0x10 [ 652.062328][T12007] vfs_writev+0x52a/0x1500 [ 652.067001][T12007] ? stack_depot_save_flags+0x35/0x7b0 [ 652.072869][T12007] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 652.079435][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 652.084729][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 652.090739][T12007] do_writev+0x1b5/0x580 [ 652.095202][T12007] __x64_sys_writev+0x99/0xf0 [ 652.100090][T12007] x64_sys_call+0x269a/0x3db0 [ 652.105006][T12007] do_syscall_64+0xd9/0x210 [ 652.109697][T12007] ? irqentry_exit+0x16/0x60 [ 652.114450][T12007] ? clear_bhb_loop+0x40/0x90 [ 652.119350][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.125445][T12007] RIP: 0033:0x7f19d798e9a9 [ 652.130002][T12007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.149832][T12007] RSP: 002b:00007f19d88c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 652.158532][T12007] RAX: ffffffffffffffda RBX: 00007f19d7bb5fa0 RCX: 00007f19d798e9a9 [ 652.166672][T12007] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 652.174782][T12007] RBP: 00007f19d7a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 652.182900][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.191021][T12007] R13: 0000000000000000 R14: 00007f19d7bb5fa0 R15: 00007fff7e1c49d8 [ 652.199174][T12007] [ 652.202724][T12007] Kernel Offset: disabled [ 652.207149][T12007] Rebooting in 86400 seconds..