last executing test programs: 3.411925817s ago: executing program 4 (id=1365): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x20}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x2, 0x4, 0x39}) 3.344715823s ago: executing program 2 (id=1366): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00'/10, 0xfdef, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 2.919358618s ago: executing program 0 (id=1370): capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 2.916559543s ago: executing program 2 (id=1371): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180600000000000000000000000000001830000000000000000000000020000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x8f, &(0x7f0000000100)=""/143, 0x40f00}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2.688321178s ago: executing program 4 (id=1373): syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000000)=ANY=[], 0x1, 0x2dc, &(0x7f0000000b40)="$eJzs3EFr02AYwPGn7dZ0k247DfTii4LoJcx6VGF1bCAWlG4V9SBkLNPS2s6kaCqCOXva5xgevQni0cu+hbchyE5DwUibpEuD3ehc27n9f7Alb573bZ4ky3gy9mbn0eaLyrqtrxsNSWaUJEVc2ROZkbKEXs76y7SIJNrfA7dz4sq1uVe775cfP7mXLxQWi0ot5Vdu5JTKTl38/Prth0tfGucefpzSNNmeebrzI/dte3b7/M7vledlW5VtVas3lKFW6/WGsVo11VrZruhKPaiahm2qcs02ra74erW+sdFURm0tO7lhmbatjFpTJaWpGnWVCbKqKV3XVXaytZ6RMyTd94jSVrFo5AeSDE4My8obWRGZyMh8d6S0NaqcAADA6PSu/5OdPolgmYzX/yK963/Vqv/fBb2mPh1Q/4/JUer/lHTq/4rZrv8bVlMZz4xytP6fGN6Z/B8dVP8nog032kgONikcRSJ6ie50hSwr3+M++On5YpvP1FMzAAAAAAAAAAAAAAAAAAAAAAAn357nTXueN91auiLiBW1NRFJB2/W8ab+3Fh3KLIFTIHr9vciXFlzgsD3qPDEYkYl7GZHvrlNySon20o8v3S0szqm2yMS/XccppTrx635cRePzMi6Tfnwh95e4U0rL1cv++FZs4X4hGt90ShOyFss1nK3ELx4AAAAAAPqjq46ZzsaMdJ7vdV1pEo/LrvMreGeIu//3gdjz/ZhcGBvecQAAAAAAgN7s8DWvdvNNxahWTWugK6nB7yK+8rXvUSKH9fFS/r9HdYduetqx5Nz68EP6FJdFBn/qrvQ7SpMhX9xDV8aDH+9/+ZzwXhnFUaTjW24d2y68RHhaxrsOMCPBXQAAAADgdNl/Hgi3JEabEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ9Aw3mE26mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAToo/AQAA//9BG77+") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494f) 2.50403207s ago: executing program 0 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}}, 0x4000) 2.485957048s ago: executing program 2 (id=1375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x1) 2.451642116s ago: executing program 3 (id=1376): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cff", 0x45, 0x0, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) 2.315538177s ago: executing program 1 (id=1377): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x5fa, 0x400, 0x2, {0x1, @pix={0x1, 0x8001, 0x32314d4e, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x7, 0x1, 0x6}}, 0x7f}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0xffffffff, 0x0, 0x2, {0x9, @pix_mp={0x131c, 0x2, 0x20363159, 0x3, 0x0, [{0x2776463d, 0x7}, {0x0, 0x7f}, {0xffffffff, 0xffff}, {0x3ff, 0x4}, {0x7, 0x310cb2b8}, {0x7fffffff, 0x80}, {0x614, 0xfffffffc}, {0x81, 0x6}], 0xa0, 0x4, 0x7, 0x1, 0x7}}, 0x8}) 2.081810807s ago: executing program 0 (id=1378): syz_mount_image$bfs(&(0x7f0000000280), &(0x7f0000000240)='./bus\x00', 0x808008, &(0x7f0000000200)=ANY=[], 0xf, 0xaa, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7Cb1kYEC2sb7+BRxNI0YqUI3sCbeBWPkN7CIq2II5iIiJ1FBPm+YuDNY+C1sz/t+kUWkTYRadibH9LDYrmaTYr6DL5SFhH/EZFHxKBT5+O47n6avqzW07L6fX38t219LwAA8L4sRs/5kpqLc/MLvIXuvc9b3gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwadcAAAD//xynKEA=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.002863503s ago: executing program 3 (id=1379): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000000)) 1.94855426s ago: executing program 1 (id=1380): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, 0x0, 0x0) 1.791069211s ago: executing program 2 (id=1381): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) mincore(&(0x7f0000d10000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/85) 1.688723555s ago: executing program 4 (id=1382): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0xffffffff, @empty, 0x1}}, 0x6, 0x1c0}, 0x90) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback, 0x80}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1}}], 0x1, 0x48001) 1.572957578s ago: executing program 3 (id=1383): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 1.47367154s ago: executing program 1 (id=1384): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) 1.440293486s ago: executing program 0 (id=1385): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x3f}, 0x80, 0x0}, 0x24048015) 1.437830619s ago: executing program 2 (id=1386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.121056025s ago: executing program 3 (id=1387): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000880)={0x0, @bt={0x8a5, 0x90, 0x1, 0x1, 0xd59f80, 0x4, 0x7, 0x19ef, 0x3, 0x7, 0x3, 0x2800, 0x2, 0x3, 0x0, 0x8, {0x8, 0xfffffffc}, 0xd4, 0x5}}) 1.072538045s ago: executing program 4 (id=1388): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.069666469s ago: executing program 1 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a00a421"], 0x24}}, 0x0) 999.268467ms ago: executing program 2 (id=1390): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb7, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "ddc9fac7"}]}}, 0x0}, 0x0) 914.169982ms ago: executing program 0 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x260}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 638.999202ms ago: executing program 4 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5ae, &(0x7f0000000180)="$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") 620.583691ms ago: executing program 1 (id=1393): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x200101, 0x0) read(r0, 0x0, 0x0) 570.048225ms ago: executing program 3 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x2c}}, 0x814) 382.156782ms ago: executing program 0 (id=1395): unshare(0x20040600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 147.193616ms ago: executing program 1 (id=1396): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 146.96329ms ago: executing program 4 (id=1397): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000ec0)=""/4071, 0xfe7}, {&(0x7f0000001ec0)=""/4076, 0xfec}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000340)=""/198, 0xc6}], 0x4}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 0s ago: executing program 3 (id=1398): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8000, 0xe}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000001cc0)=0x9c) kernel console output (not intermixed with test programs): nting filesystem 00000000-0000-0000-0000-000000000000. [ 222.872269][ T6214] loop1: detected capacity change from 0 to 8192 [ 222.990725][ T6214] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.567174][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.574042][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.629946][ T6265] mmap: syz.3.112 (6265) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.696784][ T6268] loop4: detected capacity change from 0 to 16 [ 225.758201][ T6268] erofs (device loop4): mounted with root inode @ nid 36. [ 226.420753][ T6277] loop3: detected capacity change from 0 to 1024 [ 226.461890][ T6277] EXT4-fs: Ignoring removed orlov option [ 226.509271][ T6277] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 226.635674][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.071726][ T6293] loop4: detected capacity change from 0 to 256 [ 227.188163][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.301908][ T6293] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 227.666013][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 227.679420][ T6301] usb usb7: usbfs: process 6301 (syz.3.126) did not claim interface 13 before use [ 228.262549][ T6309] loop0: detected capacity change from 0 to 1024 [ 228.299084][ T6311] loop3: detected capacity change from 0 to 128 [ 228.324512][ T6309] ext4: Unknown parameter 'smackfsroot' [ 228.343808][ T6311] EXT4-fs (loop3): Test dummy encryption mode enabled [ 228.540315][ T6311] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.593886][ T6311] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.074441][ T6322] loop4: detected capacity change from 0 to 256 [ 229.239573][ T30] audit: type=1800 audit(1753974688.815:6): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="file1" dev="loop4" ino=1048616 res=0 errno=0 [ 229.244703][ T6322] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 229.268966][ T6322] FAT-fs (loop4): Filesystem has been set read-only [ 229.438443][ T6311] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 229.552650][ T6311] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.562733][ T5437] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 229.809838][ T5437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.821251][ T5437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.832508][ T5437] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 229.845815][ T5437] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 229.855960][ T5437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.968615][ T5818] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.011130][ T5437] usb 2-1: config 0 descriptor?? [ 230.018564][ T6328] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 230.384222][ T6339] loop0: detected capacity change from 0 to 1024 [ 230.458362][ T6341] xt_socket: unknown flags 0xd0 [ 230.564651][ T5437] aureal 0003:0755:2626.0001: unknown main item tag 0x6 [ 230.571946][ T5437] aureal 0003:0755:2626.0001: report_id 29495 is invalid [ 230.579633][ T5437] aureal 0003:0755:2626.0001: item 0 2 1 8 parsing failed [ 230.675391][ T5437] aureal 0003:0755:2626.0001: probe with driver aureal failed with error -22 [ 230.791694][ T5873] usb 2-1: USB disconnect, device number 3 [ 231.105595][ T6347] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 231.910289][ T6358] netlink: 256 bytes leftover after parsing attributes in process `syz.4.153'. [ 231.920174][ T6358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.153'. [ 232.379981][ T5437] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 232.519537][ T6364] loop2: detected capacity change from 0 to 1024 [ 232.600694][ T5437] usb 2-1: Using ep0 maxpacket: 16 [ 232.634235][ T5437] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 232.642667][ T5437] usb 2-1: config 0 has no interface number 0 [ 232.654126][ T5437] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.668702][ T6364] syz.2.156: attempt to access beyond end of device [ 232.668702][ T6364] loop2: rw=0, sector=2097350, nr_sectors = 2 limit=1024 [ 232.683499][ T6364] Buffer I/O error on dev loop2, logical block 1048675, async page read [ 232.692111][ T6364] syz.2.156: attempt to access beyond end of device [ 232.692111][ T6364] loop2: rw=0, sector=2097352, nr_sectors = 2 limit=1024 [ 232.706252][ T6364] Buffer I/O error on dev loop2, logical block 1048676, async page read [ 232.715135][ T6364] syz.2.156: attempt to access beyond end of device [ 232.715135][ T6364] loop2: rw=0, sector=2097354, nr_sectors = 2 limit=1024 [ 232.729213][ T6364] Buffer I/O error on dev loop2, logical block 1048677, async page read [ 232.737960][ T6364] syz.2.156: attempt to access beyond end of device [ 232.737960][ T6364] loop2: rw=0, sector=2097356, nr_sectors = 2 limit=1024 [ 232.756384][ T6364] Buffer I/O error on dev loop2, logical block 1048678, async page read [ 232.783728][ T5437] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 232.793327][ T5437] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 232.801827][ T5437] usb 2-1: Product: syz [ 232.806415][ T5437] usb 2-1: SerialNumber: syz [ 232.854325][ T6364] hfsplus: failed to load catalog file [ 232.906322][ T5437] usb 2-1: config 0 descriptor?? [ 232.909402][ T6372] loop4: detected capacity change from 0 to 8 [ 232.945395][ T5437] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 232.964337][ T5437] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 233.099169][ T6372] SQUASHFS error: zlib decompression failed, data probably corrupt [ 233.107726][ T6372] SQUASHFS error: Failed to read block 0x9b: -5 [ 233.114463][ T6372] SQUASHFS error: Unable to read metadata cache entry [99] [ 233.121850][ T6372] SQUASHFS error: Unable to read inode 0x127 [ 233.430000][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 233.441892][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.453688][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.461226][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.474015][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.485361][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.494165][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.501662][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.510895][ T5437] usb 2-1: USB disconnect, device number 4 [ 233.517247][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.517377][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 233.550333][ T5437] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 233.700138][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.160'. [ 233.709783][ T6376] netlink: 'syz.3.160': attribute type 4 has an invalid length. [ 233.871788][ T6378] loop2: detected capacity change from 0 to 256 [ 234.331124][ T6378] FAT-fs (loop2): Directory bread(block 64) failed [ 234.338244][ T6378] FAT-fs (loop2): Directory bread(block 65) failed [ 234.346865][ T6378] FAT-fs (loop2): Directory bread(block 66) failed [ 234.354800][ T6378] FAT-fs (loop2): Directory bread(block 67) failed [ 234.361798][ T6378] FAT-fs (loop2): Directory bread(block 68) failed [ 234.369664][ T6378] FAT-fs (loop2): Directory bread(block 69) failed [ 234.376845][ T6378] FAT-fs (loop2): Directory bread(block 70) failed [ 234.383744][ T6378] FAT-fs (loop2): Directory bread(block 71) failed [ 234.396445][ T6378] FAT-fs (loop2): Directory bread(block 72) failed [ 234.405055][ T6378] FAT-fs (loop2): Directory bread(block 73) failed [ 234.548278][ T6384] loop3: detected capacity change from 0 to 128 [ 234.763487][ T6384] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.818513][ T6384] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.695755][ T5818] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.787579][ T6397] sg_write: data in/out 2031668/1 bytes for SCSI command 0x26-- guessing data in; [ 235.787579][ T6397] program syz.4.170 not setting count and/or reply_len properly [ 236.123965][ T5437] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 236.383667][ T5437] usb 1-1: Using ep0 maxpacket: 8 [ 236.424134][ T5437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.436010][ T5437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.451049][ T5437] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 236.462190][ T5437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.493577][ T6410] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 236.607149][ T5437] usb 1-1: config 0 descriptor?? [ 237.109750][ T5437] cherry 0003:046A:0027.0002: fixing up Cherry Cymotion report descriptor [ 237.159992][ T6419] usb usb8: usbfs: process 6419 (syz.2.180) did not claim interface 0 before use [ 237.170038][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 237.177488][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 237.184948][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 237.192206][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x6 [ 237.199864][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x5 [ 237.207234][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x4 [ 237.214620][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 237.222046][ T5437] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 237.231735][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 237.411515][ T5437] cherry 0003:046A:0027.0002: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.0-1/input0 [ 237.513495][ T5437] usb 1-1: USB disconnect, device number 2 [ 238.886578][ T6431] fido_id[6431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 238.887061][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 238.917698][ T6440] netlink: 'syz.1.190': attribute type 30 has an invalid length. [ 238.925996][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 239.761779][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 239.844511][ T6456] Bluetooth: MGMT ver 1.23 [ 240.518365][ T6462] loop0: detected capacity change from 0 to 256 [ 240.821577][ T6470] loop4: detected capacity change from 0 to 256 [ 240.900251][ T6470] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.911574][ T6470] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 240.978788][ T6462] FAT-fs (loop0): Directory bread(block 64) failed [ 240.985741][ T6462] FAT-fs (loop0): Directory bread(block 65) failed [ 240.992701][ T6462] FAT-fs (loop0): Directory bread(block 66) failed [ 240.999680][ T6462] FAT-fs (loop0): Directory bread(block 67) failed [ 241.007169][ T6462] FAT-fs (loop0): Directory bread(block 68) failed [ 241.014111][ T6462] FAT-fs (loop0): Directory bread(block 69) failed [ 241.021104][ T6462] FAT-fs (loop0): Directory bread(block 70) failed [ 241.027952][ T6462] FAT-fs (loop0): Directory bread(block 71) failed [ 241.035064][ T6462] FAT-fs (loop0): Directory bread(block 72) failed [ 241.041776][ T6462] FAT-fs (loop0): Directory bread(block 73) failed [ 241.153849][ T5437] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 241.211499][ T6470] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 241.323650][ T5437] usb 4-1: Using ep0 maxpacket: 32 [ 241.337047][ T5437] usb 4-1: config index 0 descriptor too short (expected 2322, got 18) [ 241.364103][ T5437] usb 4-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 241.373692][ T5437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.382027][ T5437] usb 4-1: Product: syz [ 241.386497][ T5437] usb 4-1: Manufacturer: syz [ 241.391338][ T5437] usb 4-1: SerialNumber: syz [ 241.496453][ T5437] usb 4-1: config 0 descriptor?? [ 242.138898][ T5437] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 242.150118][ T5437] asix 4-1:0.0: probe with driver asix failed with error -71 [ 242.268098][ T5437] usb 4-1: USB disconnect, device number 3 [ 242.622737][ T6488] loop1: detected capacity change from 0 to 128 [ 242.733277][ T6488] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.944180][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 243.173731][ T5873] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 243.182425][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.192321][ T6497] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 243.326161][ T5873] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 243.335756][ T5873] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 243.344248][ T5873] usb 1-1: Manufacturer: syz [ 243.435553][ T5873] usb 1-1: config 0 descriptor?? [ 243.874012][ T5873] rc_core: IR keymap rc-hauppauge not found [ 243.880108][ T5873] Registered IR keymap rc-empty [ 243.888335][ T5873] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 243.903423][ T5873] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 244.157439][ T6512] rc rc0: two consecutive events of type space [ 244.381521][ T5873] usb 1-1: USB disconnect, device number 3 [ 244.860251][ T6521] loop2: detected capacity change from 0 to 512 [ 245.081369][ T6521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.095137][ T6521] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.340980][ T6514] loop3: detected capacity change from 0 to 32768 [ 245.387933][ T6514] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x5c7/0x640, xfs_sb block 0x0 [ 245.400487][ T6514] XFS (loop3): Unmount and run xfs_repair [ 245.407219][ T6514] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 245.415079][ T6514] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 245.424247][ T6514] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 245.433466][ T6514] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 245.442527][ T6514] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40 ....... ......$@ [ 245.457741][ T6514] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 245.468724][ T6514] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 245.478649][ T6514] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 245.487923][ T6514] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 245.497238][ T6514] XFS (loop3): SB validate failed with error -74. [ 246.082750][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 246.355875][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.061970][ T6548] loop2: detected capacity change from 0 to 256 [ 247.117406][ T6548] exfat: Deprecated parameter 'namecase' [ 247.123725][ T6548] exfat: Deprecated parameter 'utf8' [ 247.247228][ T6548] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 247.730387][ T6559] loop1: detected capacity change from 0 to 64 [ 247.988630][ T6564] tmpfs: Cannot change global quota limit on remount [ 249.740088][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 250.541148][ T6595] loop3: detected capacity change from 0 to 4096 [ 250.994593][ T6606] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.121350][ T6603] loop0: detected capacity change from 0 to 4096 [ 251.271912][ T6603] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 251.331941][ T6602] loop4: detected capacity change from 0 to 32768 [ 251.377314][ T6602] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 251.386082][ T6602] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 251.414556][ T6602] gfs2: fsid=syz:syz.s: journal 0 mapped with 11 extents in 0ms [ 251.461279][ T6602] syz.4.263: attempt to access beyond end of device [ 251.461279][ T6602] loop4: rw=0, sector=381120, nr_sectors = 8 limit=32768 [ 251.468886][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.724675][ T6605] loop2: detected capacity change from 0 to 4096 [ 251.739001][ T6602] gfs2: fsid=syz:syz.s: Error parsing journal for spectator mount. [ 252.038099][ T5810] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 252.045929][ T5810] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.125554][ T6605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.474420][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.584280][ T6605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.594376][ T6605] EXT4-fs (loop2): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 252.701637][ T6605] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 253.293756][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.345498][ T6625] loop0: detected capacity change from 0 to 256 [ 253.961586][ T6632] netlink: 'syz.3.274': attribute type 27 has an invalid length. [ 254.103511][ T5437] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 254.315043][ T5437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.325879][ T5437] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.335937][ T5437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.426194][ T5437] usb 3-1: config 0 descriptor?? [ 254.476878][ T5437] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 254.654316][ T5873] usb 3-1: USB disconnect, device number 2 [ 255.472059][ T6651] loop3: detected capacity change from 0 to 256 [ 255.747210][ T6650] loop1: detected capacity change from 0 to 2048 [ 256.116942][ T6650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.123509][ T6651] FAT-fs (loop3): Directory bread(block 64) failed [ 256.136155][ T6651] FAT-fs (loop3): Directory bread(block 65) failed [ 256.143028][ T6651] FAT-fs (loop3): Directory bread(block 66) failed [ 256.149912][ T6651] FAT-fs (loop3): Directory bread(block 67) failed [ 256.157012][ T6651] FAT-fs (loop3): Directory bread(block 68) failed [ 256.164037][ T6651] FAT-fs (loop3): Directory bread(block 69) failed [ 256.170908][ T6651] FAT-fs (loop3): Directory bread(block 70) failed [ 256.178176][ T6651] FAT-fs (loop3): Directory bread(block 71) failed [ 256.185290][ T6651] FAT-fs (loop3): Directory bread(block 72) failed [ 256.192085][ T6651] FAT-fs (loop3): Directory bread(block 73) failed [ 256.361523][ T6660] loop4: detected capacity change from 0 to 256 [ 256.416080][ T6650] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 256.474339][ T6660] exfat: Deprecated parameter 'namecase' [ 256.480676][ T6660] exfat: Deprecated parameter 'utf8' [ 256.522443][ T6650] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 256.535733][ T6650] EXT4-fs (loop1): This should not happen!! Data will be lost [ 256.535733][ T6650] [ 256.545836][ T6650] EXT4-fs (loop1): Total free blocks count 0 [ 256.552357][ T6650] EXT4-fs (loop1): Free/Dirty block details [ 256.558609][ T6650] EXT4-fs (loop1): free_blocks=66060288 [ 256.564575][ T6650] EXT4-fs (loop1): dirty_blocks=32 [ 256.569906][ T6650] EXT4-fs (loop1): Block reservation details [ 256.577253][ T6650] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 256.729851][ T6660] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 257.274558][ T3746] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 257.887941][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 257.898316][ T6675] netlink: 43 bytes leftover after parsing attributes in process `syz.2.293'. [ 257.907701][ T6675] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 257.915669][ T6675] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 257.923703][ T6675] netlink: 43 bytes leftover after parsing attributes in process `syz.2.293'. [ 258.523702][ T5817] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 258.686457][ T6686] syz.0.297 uses old SIOCAX25GETINFO [ 259.625071][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 260.749436][ T6710] loop2: detected capacity change from 0 to 1024 [ 261.183793][ T6710] hfsplus: bad catalog entry type [ 261.283486][ T6716] GUP no longer grows the stack in syz.4.310 (6716): 200000005000-200000008000 (200000004000) [ 261.294716][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.4.310 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(none) [ 261.294861][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.294952][ T6716] Call Trace: [ 261.295007][ T6716] [ 261.295057][ T6716] __dump_stack+0x26/0x30 [ 261.295238][ T6716] dump_stack_lvl+0x1df/0x270 [ 261.295427][ T6716] dump_stack+0x1e/0x25 [ 261.295599][ T6716] __get_user_pages+0x586f/0x6b20 [ 261.295772][ T6716] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 261.295943][ T6716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.296201][ T6716] __gup_longterm_locked+0x184e/0x2c10 [ 261.296377][ T6716] ? __msan_warning+0x1b/0x30 [ 261.296536][ T6716] ? filter_irq_stacks+0x13f/0x190 [ 261.296749][ T6716] ? stack_depot_save_flags+0x35/0x7b0 [ 261.296957][ T6716] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 261.297145][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 261.297334][ T6716] gup_fast_fallback+0x4fbb/0x5370 [ 261.297528][ T6716] ? psi_group_change+0xee6/0x13c0 [ 261.297742][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 261.297909][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 261.298082][ T6716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.298276][ T6716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.298469][ T6716] get_user_pages_fast+0xb7/0x120 [ 261.298647][ T6716] get_futex_key+0xc9e/0x1e90 [ 261.298833][ T6716] ? filter_irq_stacks+0x49/0x190 [ 261.299048][ T6716] futex_wait_setup+0x71/0x8e0 [ 261.299187][ T6716] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 261.299358][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 261.299552][ T6716] __futex_wait+0xe1/0x450 [ 261.299695][ T6716] ? __pfx_futex_wake_mark+0x10/0x10 [ 261.299866][ T6716] futex_wait+0xd6/0x360 [ 261.299999][ T6716] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 261.300167][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 261.300353][ T6716] do_futex+0x3a1/0x480 [ 261.300577][ T6716] __se_sys_futex+0x5b9/0x740 [ 261.300755][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 261.300929][ T6716] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 261.301099][ T6716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.301277][ T6716] __x64_sys_futex+0x114/0x1a0 [ 261.301493][ T6716] x64_sys_call+0x3b18/0x3e20 [ 261.301681][ T6716] do_syscall_64+0xd9/0x210 [ 261.301829][ T6716] ? irqentry_exit+0x16/0x60 [ 261.301956][ T6716] ? clear_bhb_loop+0x40/0x90 [ 261.302116][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.302275][ T6716] RIP: 0033:0x7f0550b8eb69 [ 261.302399][ T6716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.302523][ T6716] RSP: 002b:00007f0551ab9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 261.302653][ T6716] RAX: ffffffffffffffda RBX: 00007f0550db5fa0 RCX: 00007f0550b8eb69 [ 261.302751][ T6716] RDX: 00000000fffffffd RSI: 0000000000000009 RDI: 0000200000004000 [ 261.302840][ T6716] RBP: 00007f0550c11df1 R08: 0000000000000000 R09: 0000000000000001 [ 261.302925][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.303007][ T6716] R13: 0000000000000000 R14: 00007f0550db5fa0 R15: 00007ffc28813e28 [ 261.303129][ T6716] [ 261.638630][ T6717] autofs: Bad value for 'fd' [ 262.064929][ T3919] hfsplus: b-tree write err: -5, ino 4 [ 262.974744][ T6730] netlink: 288 bytes leftover after parsing attributes in process `syz.3.317'. [ 263.137418][ T6725] loop4: detected capacity change from 0 to 32768 [ 263.147636][ T6725] bcachefs: bch2_fs_parse_param() Error parsing option root_reserve_percent: option_value [ 263.319078][ T6735] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 263.326027][ T6735] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 263.332912][ T6735] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.339853][ T6735] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 263.347391][ T6735] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 263.354219][ T6735] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 263.361118][ T6735] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.367966][ T6735] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.378094][ T6735] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 263.386502][ T6735] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 263.393552][ T6735] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 263.400341][ T6735] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 263.407468][ T6735] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 263.416145][ T6735] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 263.729481][ T6737] loop2: detected capacity change from 0 to 1024 [ 263.867862][ T6737] hfsplus: failed to load root directory [ 263.981134][ T6737] overlay: Unknown parameter 'nobarrier' [ 265.024103][ T5437] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 265.085061][ T5437] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 266.381597][ T6769] fido_id[6769]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 266.999262][ T5873] Process accounting resumed [ 267.242358][ T6784] Process accounting resumed [ 267.884438][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 269.316705][ T6828] fuse: Unexpected value for 'default_permissions' [ 269.456249][ T6830] netlink: 'syz.3.363': attribute type 2 has an invalid length. [ 270.352752][ T6846] loop4: detected capacity change from 0 to 512 [ 270.416923][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 270.554346][ T6846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.568285][ T6846] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.616505][ T6851] netlink: 84 bytes leftover after parsing attributes in process `syz.3.372'. [ 270.633651][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 270.684039][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.695487][ T5873] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.708790][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.715910][ T5873] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 270.725387][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.861707][ T5873] usb 3-1: config 0 descriptor?? [ 271.374755][ T5873] input: HID 28bd:0935 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0935.0004/input/input7 [ 271.442133][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.600582][ T5873] uclogic 0003:28BD:0935.0004: input,hidraw0: USB HID vff.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.2-1/input0 [ 271.681090][ T5873] usb 3-1: USB disconnect, device number 3 [ 272.508013][ T6861] loop1: detected capacity change from 0 to 40427 [ 272.528579][ T6861] F2FS-fs (loop1): build fault injection rate: 20 [ 272.536177][ T6861] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 272.557228][ T6861] F2FS-fs (loop1): invalid crc value [ 272.664691][ T6861] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 272.993277][ T6861] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_inode_folio+0x40/0x50 [ 273.012560][ T6861] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 273.108463][ T6861] F2FS-fs (loop1): Failed to read root inode [ 273.955622][ T6871] fido_id[6871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 274.804331][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.389'. [ 274.814349][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.389'. [ 275.005020][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 275.056385][ T6896] Zero length message leads to an empty skb [ 276.099190][ T6899] loop0: detected capacity change from 0 to 32768 [ 276.217174][ T6899] (syz.0.393,6899,1):ocfs2_read_journal_inode:1659 ERROR: status = -13 [ 276.225898][ T6899] (syz.0.393,6899,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13 [ 276.234303][ T6899] (syz.0.393,6899,1):ocfs2_check_volume:2420 ERROR: status = -13 [ 276.242249][ T6899] (syz.0.393,6899,1):ocfs2_check_volume:2432 ERROR: status = -13 [ 276.250326][ T6899] (syz.0.393,6899,1):ocfs2_mount_volume:1764 ERROR: status = -13 [ 276.260868][ T6899] (syz.0.393,6899,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 77 [ 276.368115][ T6899] (syz.0.393,6899,1):ocfs2_fill_super:1177 ERROR: status = -13 [ 276.806723][ T6911] netlink: 'syz.1.398': attribute type 6 has an invalid length. [ 277.127656][ T5164] udevd[5164]: worker [6366] terminated by signal 33 (Unknown signal 33) [ 277.174165][ T5872] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 277.202850][ T5164] udevd[5164]: worker [6366] failed while handling '/devices/virtual/block/loop1' [ 277.265984][ T6907] loop2: detected capacity change from 0 to 4096 [ 277.342610][ T6907] ntfs3: Bad value for 'gid' [ 277.347761][ T6907] ntfs3: Bad value for 'gid' [ 277.423764][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.439288][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.449589][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 277.600090][ T5872] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 277.614357][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 277.622596][ T5872] usb 5-1: Product: syz [ 277.738405][ T5872] usb 5-1: config 0 descriptor?? [ 278.267516][ T5872] waltop 0003:172F:0037.0005: unknown main item tag 0x0 [ 278.276433][ T5872] waltop 0003:172F:0037.0005: unknown main item tag 0x0 [ 278.284025][ T5872] waltop 0003:172F:0037.0005: unknown main item tag 0x0 [ 278.347413][ T6925] loop2: detected capacity change from 0 to 256 [ 278.380547][ T5872] waltop 0003:172F:0037.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 278.478299][ T6925] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 278.508677][ T5872] usb 5-1: USB disconnect, device number 2 [ 278.633381][ T5437] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 278.850452][ T5437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.862166][ T5437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.872599][ T5437] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 278.882166][ T5437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.967352][ T5437] usb 2-1: config 0 descriptor?? [ 279.178375][ T6934] tipc: Started in network mode [ 279.183689][ T6934] tipc: Node identity , cluster identity 4711 [ 279.190273][ T6934] tipc: Failed to obtain node identity [ 279.196360][ T6934] tipc: Enabling of bearer rejected, failed to enable media [ 279.250571][ T6929] netlink: 'syz.1.407': attribute type 3 has an invalid length. [ 279.258917][ T6929] netlink: 666 bytes leftover after parsing attributes in process `syz.1.407'. [ 279.453606][ T5437] usbhid 2-1:0.0: can't add hid device: -71 [ 279.460193][ T5437] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.534638][ T5437] usb 2-1: USB disconnect, device number 5 [ 279.806398][ T6936] fido_id[6936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 283.752691][ T6992] loop2: detected capacity change from 0 to 4096 [ 283.833713][ T6992] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 284.290903][ T6992] ntfs3(loop2): ino=19, mi_enum_attr [ 284.297006][ T6992] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 284.374866][ T5437] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 284.523579][ T6992] ntfs3(loop2): failed to convert "c46c" to iso8859-13 [ 284.550303][ T6992] ntfs3(loop2): ino=20, mi_enum_attr [ 284.595507][ T5437] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 284.605278][ T5437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.613678][ T5437] usb 5-1: Product: syz [ 284.618114][ T5437] usb 5-1: Manufacturer: syz [ 284.622882][ T5437] usb 5-1: SerialNumber: syz [ 284.749837][ T5437] usb 5-1: config 0 descriptor?? [ 284.808786][ T5437] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 285.091193][ T7014] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 285.164142][ T7013] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 285.235196][ T5437] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 285.242502][ T5437] sq905c 5-1:0.0: Reading version command failed [ 285.249748][ T5437] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 285.326152][ T5437] usb 5-1: USB disconnect, device number 3 [ 285.647863][ T7016] loop3: detected capacity change from 0 to 512 [ 285.725683][ T7016] EXT4-fs: Ignoring removed oldalloc option [ 285.731818][ T7016] EXT4-fs: Ignoring removed bh option [ 285.831649][ T7016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 285.904119][ T7016] System zones: 1-12 [ 285.991284][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.998632][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.054293][ T7016] EXT4-fs error (device loop3): ext4_iget_extra_inode:5030: inode #15: comm syz.3.448: corrupted in-inode xattr: e_value size too large [ 286.140582][ T7026] tipc: Enabling of bearer <‰ý‘eth:g> rejected, media not registered [ 286.166346][ T7016] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.448: couldn't read orphan inode 15 (err -117) [ 286.226836][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.985631][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.383442][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 287.481462][ T7042] loop4: detected capacity change from 0 to 128 [ 287.563348][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 287.573414][ T7042] ufs: You didn't specify the type of your ufs filesystem [ 287.573414][ T7042] [ 287.573414][ T7042] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 287.573414][ T7042] [ 287.573414][ T7042] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 287.604587][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.646064][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.656820][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 287.666761][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.712132][ T7042] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 287.784408][ T5872] usb 2-1: config 0 descriptor?? [ 287.838557][ T5872] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 288.035739][ T7046] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 288.467759][ T5872] gspca_vc032x: reg_r err -71 [ 288.473415][ T5872] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 288.538709][ T5872] usb 2-1: USB disconnect, device number 6 [ 289.785507][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 289.798933][ T7069] netlink: 1 bytes leftover after parsing attributes in process `syz.0.472'. [ 289.825374][ T7070] sp0: Synchronizing with TNC [ 290.703359][ T5437] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 290.745267][ T7085] loop4: detected capacity change from 0 to 512 [ 290.774675][ T7086] netlink: 52 bytes leftover after parsing attributes in process `syz.0.481'. [ 290.831960][ T7085] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.480: bad orphan inode 11 [ 290.926050][ T5437] usb 4-1: Using ep0 maxpacket: 32 [ 290.943627][ T7085] ext4_test_bit(bit=10, block=4) = 1 [ 290.949385][ T7085] is_bad_inode(inode)=0 [ 290.954006][ T7085] NEXT_ORPHAN(inode)=2080374784 [ 290.959007][ T7085] max_ino=32 [ 290.962343][ T7085] i_nlink=0 [ 290.966133][ T7085] EXT4-fs (loop4): 1 truncate cleaned up [ 290.974522][ T7085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.003701][ T5437] usb 4-1: config 0 interface 0 has no altsetting 0 [ 291.099191][ T5437] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 291.108778][ T5437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.117288][ T5437] usb 4-1: Product: syz [ 291.126405][ T5437] usb 4-1: Manufacturer: syz [ 291.131207][ T5437] usb 4-1: SerialNumber: syz [ 291.287115][ T5437] usb 4-1: config 0 descriptor?? [ 291.757294][ T5437] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 291.780887][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.976688][ T5437] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 291.985561][ T5437] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 292.105571][ T5437] usb 4-1: USB disconnect, device number 4 [ 292.164304][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 292.373581][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 292.398965][ T5872] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 292.408308][ T5872] usb 3-1: config 0 has no interface number 0 [ 292.414822][ T5872] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.471645][ T7105] loop1: detected capacity change from 0 to 2048 [ 292.488508][ T7104] loop0: detected capacity change from 0 to 2048 [ 292.529120][ T5872] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 292.539257][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.547870][ T5872] usb 3-1: Product: syz [ 292.552655][ T5872] usb 3-1: Manufacturer: syz [ 292.560866][ T5872] usb 3-1: SerialNumber: syz [ 292.603403][ T7105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.641971][ T5872] usb 3-1: config 0 descriptor?? [ 292.716768][ T5872] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 292.727389][ T5872] em28xx 3-1:0.132: Video interface 132 found: [ 292.728963][ T7104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.746949][ T7104] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.104036][ T5872] em28xx 3-1:0.132: chip ID is em2710/2820 [ 293.356566][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.411866][ T5872] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 293.421264][ T5872] em28xx 3-1:0.132: board has no eeprom [ 293.498615][ T7113] loop1: detected capacity change from 0 to 256 [ 293.573718][ T5872] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 293.587021][ T5872] em28xx 3-1:0.132: analog set to bulk mode. [ 293.597740][ T5873] em28xx 3-1:0.132: Registering V4L2 extension [ 293.674988][ T5872] usb 3-1: USB disconnect, device number 4 [ 293.686422][ T5872] em28xx 3-1:0.132: Disconnecting em28xx [ 294.005468][ T7113] FAT-fs (loop1): Directory bread(block 64) failed [ 294.012320][ T7113] FAT-fs (loop1): Directory bread(block 65) failed [ 294.019593][ T7113] FAT-fs (loop1): Directory bread(block 66) failed [ 294.026555][ T7113] FAT-fs (loop1): Directory bread(block 67) failed [ 294.033991][ T7113] FAT-fs (loop1): Directory bread(block 68) failed [ 294.040788][ T7113] FAT-fs (loop1): Directory bread(block 69) failed [ 294.047822][ T7113] FAT-fs (loop1): Directory bread(block 70) failed [ 294.054851][ T7113] FAT-fs (loop1): Directory bread(block 71) failed [ 294.061716][ T7113] FAT-fs (loop1): Directory bread(block 72) failed [ 294.068745][ T7113] FAT-fs (loop1): Directory bread(block 73) failed [ 294.620598][ T7124] loop3: detected capacity change from 0 to 1024 [ 294.679283][ T7126] loop2: detected capacity change from 0 to 1024 [ 294.875398][ T7124] hfsplus: small dir entry [ 294.951652][ T5873] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 294.959897][ T5873] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 294.967577][ T5873] em28xx 3-1:0.132: No AC97 audio processor [ 295.022430][ T5873] usb 3-1: Decoder not found [ 295.027848][ T5873] em28xx 3-1:0.132: failed to create media graph [ 295.034574][ T5873] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 295.069055][ T5873] em28xx 3-1:0.132: Remote control support is not available for this card. [ 295.082529][ T5872] em28xx 3-1:0.132: Closing input extension [ 295.175769][ T5872] em28xx 3-1:0.132: Freeing device [ 295.282822][ T6365] udevd[6365]: failed to send result of seq 11880 to main daemon: Connection refused [ 295.429163][ T7136] loop0: detected capacity change from 0 to 64 [ 296.313847][ T7150] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 296.542692][ T7155] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 296.555334][ T7155] macvtap1: entered promiscuous mode [ 296.709529][ T7155] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 298.730347][ T7189] loop3: detected capacity change from 0 to 256 [ 299.183628][ T30] audit: type=1326 audit(1753974758.765:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 299.291474][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 299.310202][ T30] audit: type=1326 audit(1753974758.815:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 299.337686][ T30] audit: type=1326 audit(1753974758.825:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 299.361885][ T30] audit: type=1326 audit(1753974758.825:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 299.384751][ T30] audit: type=1326 audit(1753974758.825:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 299.407721][ T30] audit: type=1326 audit(1753974758.835:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 299.434952][ T30] audit: type=1326 audit(1753974758.835:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 299.477479][ T7202] loop3: detected capacity change from 0 to 1024 [ 299.553022][ T7202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.566792][ T7202] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.754780][ T7202] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.528: bg 0: block 393: padding at end of block bitmap is not set [ 299.817233][ T7202] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 300.158010][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.161097][ T7220] mmap: syz.4.536 (7220): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 300.316524][ T7224] loop1: detected capacity change from 0 to 128 [ 300.397463][ T7224] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.429061][ T7224] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.948951][ T5808] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.317457][ T7234] netlink: 344 bytes leftover after parsing attributes in process `syz.3.543'. [ 301.328257][ T7234] netlink: 120 bytes leftover after parsing attributes in process `syz.3.543'. [ 301.535263][ T7230] loop4: detected capacity change from 0 to 40427 [ 301.571377][ T7230] F2FS-fs (loop4): Mismatch start address, segment0(67109376) cp_blkaddr(0) [ 301.580534][ T7230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 301.643315][ T7230] F2FS-fs (loop4): invalid crc value [ 301.685212][ T7230] F2FS-fs (loop4): Mismatch valid blocks 4 vs. 7 [ 301.720253][ T7230] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 302.672057][ T7247] program syz.3.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.833965][ T7251] loop1: detected capacity change from 0 to 128 [ 303.495330][ T7266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.557'. [ 304.050416][ T7274] loop2: detected capacity change from 0 to 128 [ 304.151741][ T7274] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 304.300449][ T7274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.727377][ T7278] loop1: detected capacity change from 0 to 256 [ 304.866443][ T7273] loop3: detected capacity change from 0 to 32768 [ 304.878691][ T7278] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 304.908085][ T7273] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 304.916136][ T7278] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 304.920182][ T7273] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 304.927223][ T7278] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 304.941155][ T7278] UDF-fs: Scanning with blocksize 512 failed [ 304.980801][ T7278] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 305.026073][ T7273] gfs2: fsid=syz:syz.s: journal 0 mapped with 7 extents in 0ms [ 305.038159][ T7278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.205945][ T7273] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 305.675633][ T7285] loop2: detected capacity change from 0 to 4096 [ 305.707598][ T7285] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 305.729668][ T7282] loop0: detected capacity change from 0 to 4096 [ 305.842129][ T7282] NILFS (loop0): invalid segment: Checksum error in segment payload [ 305.850696][ T7282] NILFS (loop0): trying rollback from an earlier position [ 305.949968][ T7282] NILFS (loop0): recovery complete [ 306.011022][ T7293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.031718][ T7307] loop3: detected capacity change from 0 to 128 [ 307.111514][ T7307] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.223777][ T7307] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.558489][ T5818] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.280232][ T7329] loop4: detected capacity change from 0 to 512 [ 308.339664][ T7329] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.439829][ T7329] EXT4-fs (loop4): 1 truncate cleaned up [ 308.447965][ T7329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.462673][ T7334] loop2: detected capacity change from 0 to 512 [ 308.483380][ T7334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 308.515098][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.521396][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 308.534112][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 308.540415][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 308.547706][ T5104] Bluetooth: hci4: command 0x0405 tx timeout [ 308.568230][ T7334] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 308.583825][ T7334] EXT4-fs (loop2): 1 truncate cleaned up [ 308.591822][ T7334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.608713][ T7337] loop0: detected capacity change from 0 to 512 [ 308.643623][ T7337] EXT4-fs: inline encryption not supported [ 308.649990][ T7337] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.661986][ T7337] EXT4-fs (loop0): Test dummy encryption mode enabled [ 308.731262][ T7340] tipc: Started in network mode [ 308.741411][ T7340] tipc: Node identity ac14140f, cluster identity 4711 [ 308.752594][ T7340] tipc: Enabled bearer , priority 10 [ 308.760952][ T7337] EXT4-fs (loop0): orphan cleanup on readonly fs [ 308.829413][ T7337] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.587: inode #13: comm syz.0.587: iget: illegal inode # [ 308.871305][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.899961][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 308.909709][ T7337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 309.034193][ T7346] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 309.138436][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.281822][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.867881][ T5872] tipc: Node number set to 2886997007 [ 310.485527][ T7372] pimreg3: entered allmulticast mode [ 310.797258][ T7380] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 310.812545][ T7380] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 311.278688][ T30] audit: type=1326 audit(1753974770.855:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc9418eb69 code=0x0 [ 312.314572][ T7399] loop2: detected capacity change from 0 to 32768 [ 312.381482][ T7399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.617 (7399) [ 312.436919][ T7399] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.448165][ T7399] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 312.457562][ T7399] BTRFS error (device loop2): nologreplay must be used with ro mount option [ 312.466641][ T7399] BTRFS info (device loop2): disk space caching is enabled [ 312.474182][ T7399] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 312.489142][ T7399] BTRFS error (device loop2): open_ctree failed: -22 [ 313.381266][ T7420] netlink: 104 bytes leftover after parsing attributes in process `syz.4.627'. [ 314.211559][ T7437] loop2: detected capacity change from 0 to 512 [ 314.288616][ T7437] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.329030][ T7437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 314.336284][ T7437] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.635: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 314.363639][ T7437] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.635: Bad quota inode: 3, type: 0 [ 314.395725][ T7437] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 314.411091][ T7437] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 314.420197][ T7437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.523958][ T7437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.635: bg 0: block 64: padding at end of block bitmap is not set [ 314.915640][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.605049][ T7460] loop2: detected capacity change from 0 to 512 [ 315.746299][ T7460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 315.795490][ T7460] System zones: 1-12 [ 315.841218][ T7460] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.645: Directory hole found for htree index block 0 [ 315.885706][ T7460] EXT4-fs (loop2): Remounting filesystem read-only [ 315.914289][ T7460] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 315.922991][ T7460] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 315.939807][ T7460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.943382][ T7453] loop0: detected capacity change from 0 to 4096 [ 315.976023][ T5872] kernel write not supported for file /input/mouse0 (pid: 5872 comm: kworker/1:4) [ 315.994000][ T7453] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 316.175224][ T7460] EXT4-fs: Ignoring sb option on remount [ 316.181152][ T7460] EXT4-fs: Ignoring removed orlov option [ 316.187948][ T7460] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 316.265461][ T7460] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 316.433818][ T7453] ntfs3(loop0): ino=19, mi_enum_attr [ 316.439386][ T7453] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 316.552776][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.957166][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.656'. [ 316.966825][ T7482] team_slave_0: entered promiscuous mode [ 316.972737][ T7482] team_slave_1: entered promiscuous mode [ 317.307305][ T7488] loop2: detected capacity change from 0 to 8 [ 317.824054][ T5872] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 318.021164][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.031863][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 318.041420][ T5872] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 318.054284][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.157064][ T5872] usb 5-1: config 0 descriptor?? [ 318.198442][ T5872] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 318.205915][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 318.231080][ T5872] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 318.262497][ T5872] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 318.271836][ T5872] usb 5-1: media controller created [ 318.282699][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.341349][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 318.349490][ T5872] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 318.385855][ T7494] dibusb: i2c wr: len=1792 is too big! [ 318.385855][ T7494] [ 318.434533][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 318.504999][ T5872] dvb-usb: schedule remote query interval to 150 msecs. [ 318.512159][ T5872] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 318.578760][ T5872] usb 5-1: USB disconnect, device number 4 [ 318.730431][ T5872] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 319.118337][ T30] audit: type=1326 audit(1753974778.695:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7138eb69 code=0x7ffc0000 [ 319.220050][ T30] audit: type=1326 audit(1753974778.765:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbb7138eb69 code=0x7ffc0000 [ 319.243522][ T30] audit: type=1326 audit(1753974778.765:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7138eb69 code=0x7ffc0000 [ 319.266722][ T30] audit: type=1326 audit(1753974778.765:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7138eb69 code=0x7ffc0000 [ 319.294102][ T30] audit: type=1326 audit(1753974778.765:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fbb7138eb69 code=0x7ffc0000 [ 319.318087][ T30] audit: type=1326 audit(1753974778.765:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7138eb69 code=0x7ffc0000 [ 319.341368][ T30] audit: type=1326 audit(1753974778.775:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7138eb69 code=0x7ffc0000 [ 319.460865][ T7526] loop1: detected capacity change from 0 to 8 [ 319.507135][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 319.739668][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'. [ 319.868808][ T7533] netlink: 104 bytes leftover after parsing attributes in process `syz.0.681'. [ 320.726150][ T7549] loop1: detected capacity change from 0 to 256 [ 320.764909][ T7547] loop2: detected capacity change from 0 to 1024 [ 322.575251][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 322.584709][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 323.166537][ T7595] loop3: detected capacity change from 0 to 64 [ 323.290111][ T7600] syz.0.714 uses obsolete (PF_INET,SOCK_PACKET) [ 323.762588][ T7610] loop0: detected capacity change from 0 to 64 [ 323.930728][ T7610] hfs: small file entry [ 324.579213][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 324.588901][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 324.693381][ T5872] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 324.861165][ T7633] loop1: detected capacity change from 0 to 1024 [ 324.879155][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 324.935288][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.946826][ T5872] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.959329][ T5872] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.977619][ T5872] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.991037][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 324.998341][ T5872] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 325.008294][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.089137][ T30] audit: type=1326 audit(1753974784.665:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373d78eb69 code=0x7ffc0000 [ 325.097703][ T5872] usb 5-1: config 0 descriptor?? [ 325.125128][ T7633] hfsplus: bad catalog entry type [ 325.179735][ T30] audit: type=1326 audit(1753974784.735:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373d78eb69 code=0x7ffc0000 [ 325.203388][ T30] audit: type=1326 audit(1753974784.755:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f373d78eb69 code=0x7ffc0000 [ 325.229678][ T30] audit: type=1326 audit(1753974784.755:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f373d78eba3 code=0x7ffc0000 [ 325.254357][ T30] audit: type=1326 audit(1753974784.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f373d78d61f code=0x7ffc0000 [ 325.255329][ T7637] loop3: detected capacity change from 0 to 512 [ 325.278161][ T30] audit: type=1326 audit(1753974784.795:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f373d78ebf7 code=0x7ffc0000 [ 325.278452][ T30] audit: type=1326 audit(1753974784.795:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f373d78d4d0 code=0x7ffc0000 [ 325.333696][ T30] audit: type=1326 audit(1753974784.845:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f373d78e76b code=0x7ffc0000 [ 325.377927][ T7637] vfat: Bad value for 'allow_utime' [ 325.402051][ T30] audit: type=1326 audit(1753974784.965:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f373d78d7ca code=0x7ffc0000 [ 325.427961][ T30] audit: type=1326 audit(1753974784.965:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f373d78d7ca code=0x7ffc0000 [ 325.462559][ T4069] hfsplus: b-tree write err: -5, ino 4 [ 325.695075][ T5872] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 325.771684][ T5872] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -38 [ 325.859212][ T7641] loop0: detected capacity change from 0 to 2048 [ 325.884273][ T5437] usb 5-1: USB disconnect, device number 5 [ 325.957752][ T7641] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 326.027590][ T7641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.223606][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 327.224790][ T7671] loop3: detected capacity change from 0 to 512 [ 327.284817][ T7671] EXT4-fs (loop3): can't mount with both data=journal and dax [ 327.546605][ T7674] loop0: detected capacity change from 0 to 256 [ 327.623978][ T7674] exfat: Deprecated parameter 'utf8' [ 327.629718][ T7674] exfat: Deprecated parameter 'namecase' [ 327.773916][ T7674] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 327.880734][ T7684] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 3, id = 0 [ 328.122770][ T7687] loop1: detected capacity change from 0 to 256 [ 328.184337][ T7687] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.204660][ T7687] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 328.358507][ T7687] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 328.509586][ T7687] ptrace attach of "./syz-executor exec"[5808] was attempted by " [ 330.003627][ T7724] loop3: detected capacity change from 0 to 128 [ 330.761821][ T7724] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 330.770211][ T7724] FAT-fs (loop3): Filesystem has been set read-only [ 330.777609][ T7724] syz.3.771: attempt to access beyond end of device [ 330.777609][ T7724] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 330.791824][ T7724] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 330.800290][ T7724] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 330.883817][ T7724] syz.3.771: attempt to access beyond end of device [ 330.883817][ T7724] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.903332][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 330.903409][ T30] audit: type=1800 audit(1753974790.485:40): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.771" name="file2" dev="loop3" ino=1048666 res=0 errno=0 [ 330.969892][ T7724] syz.3.771 (7724) used greatest stack depth: 3600 bytes left [ 331.030873][ T7734] loop4: detected capacity change from 0 to 1024 [ 331.175293][ T7734] hfsplus: xattr searching failed [ 332.322314][ T7753] loop4: detected capacity change from 0 to 4096 [ 332.703929][ T7765] loop3: detected capacity change from 0 to 128 [ 332.740475][ T7765] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 332.767932][ T7765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.991374][ T3919] ntfs3(loop4): ino=5, mi_enum_attr [ 333.113275][ T5437] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 333.119387][ T7774] loop0: detected capacity change from 0 to 64 [ 333.285760][ T5437] usb 2-1: Using ep0 maxpacket: 8 [ 333.384535][ T5437] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 333.394546][ T5437] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 333.402841][ T5437] usb 2-1: Product: syz [ 333.407507][ T5437] usb 2-1: Manufacturer: syz [ 333.417522][ T5437] usb 2-1: SerialNumber: syz [ 333.455639][ T5437] usb 2-1: config 0 descriptor?? [ 333.486980][ T5437] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 333.566168][ T7776] loop3: detected capacity change from 0 to 2048 [ 333.680968][ T7776] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 333.835849][ T7776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.124053][ T5437] gspca_zc3xx: reg_w_i err -71 [ 334.136512][ T5437] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 334.169213][ T5437] usb 2-1: USB disconnect, device number 7 [ 335.022912][ T7801] loop1: detected capacity change from 0 to 256 [ 335.048148][ T7801] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 335.149398][ T7801] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 335.165447][ T7801] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 335.175566][ T7801] UDF-fs: Scanning with blocksize 512 failed [ 335.268378][ T7801] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 335.348183][ T7801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.165289][ T7818] rdma_op ffff88804e9f6d80 conn xmit_rdma 0000000000000000 [ 337.037753][ T7820] loop4: detected capacity change from 0 to 32768 [ 337.051808][ T7820] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.814 (7820) [ 337.115093][ T7820] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 337.125774][ T7820] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 337.134951][ T7820] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 337.149397][ T7820] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 337.213748][ T7820] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 337.268403][ T7820] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 337.312767][ T7820] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 337.325957][ T7820] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 337.339874][ T7820] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 337.483746][ T7820] BTRFS info (device loop4): rebuilding free space tree [ 337.554965][ T7820] BTRFS info (device loop4): disabling free space tree [ 337.562281][ T7820] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 337.572456][ T7820] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 337.634021][ T7820] BTRFS info (device loop4): checking UUID tree [ 337.675923][ T7820] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 338.554940][ T7858] loop1: detected capacity change from 0 to 8 [ 339.299255][ T7856] loop3: detected capacity change from 0 to 32768 [ 339.341881][ T7856] gfs2: fsid=_Ý**: Trying to join cluster "lock_nolock", "_Ý**" [ 339.353659][ T7856] gfs2: fsid=_Ý**: Now mounting FS (format 0)... [ 339.364441][ T7856] gfs2: fsid=_Ý**: can't read superblock: -22 [ 340.421089][ T7869] loop2: detected capacity change from 0 to 4096 [ 340.537149][ T7883] loop4: detected capacity change from 0 to 128 [ 340.650613][ T7883] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.674075][ T7883] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.736541][ T7869] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 340.875217][ T7869] ntfs3(loop2): ino=1f, "file2" attr_set_size [ 340.915740][ T7894] netlink: 240 bytes leftover after parsing attributes in process `syz.3.840'. [ 340.926263][ T7894] NCSI netlink: No device for ifindex 1025 [ 341.108096][ T5815] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 341.119529][ T5822] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.639235][ T7902] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 342.018465][ T7896] loop1: detected capacity change from 0 to 32768 [ 342.029337][ T7896] XFS: noattr2 mount option is deprecated. [ 342.036124][ T7896] XFS (loop1): attr2 and noattr2 cannot both be specified. [ 342.473635][ T5872] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 342.683556][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 342.716614][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.754794][ T5872] usb 4-1: config 4 interface 0 has no altsetting 0 [ 342.784769][ T5872] usb 4-1: string descriptor 0 read error: -22 [ 342.791396][ T5872] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 342.800938][ T5872] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 342.857566][ T5872] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 342.975018][ T5872] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.987128][ T5872] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 342.994868][ T5872] usb 4-1: media controller created [ 343.101507][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.140431][ T5872] zl10353_read_register: readreg error (reg=127, ret==0) [ 344.459175][ T7938] loop2: detected capacity change from 0 to 512 [ 344.540225][ T5872] usb 4-1: USB disconnect, device number 5 [ 344.551274][ T7938] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.671404][ T7938] EXT4-fs (loop2): 1 truncate cleaned up [ 344.685374][ T7938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.730407][ T7941] loop0: detected capacity change from 0 to 2048 [ 344.771502][ T7938] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 344.839393][ T7941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.884952][ T7950] pim6reg: entered allmulticast mode [ 345.150988][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.163740][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.250631][ T7953] loop3: detected capacity change from 0 to 1024 [ 345.368542][ T7953] syz.3.865: attempt to access beyond end of device [ 345.368542][ T7953] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 345.477571][ T7959] loop1: detected capacity change from 0 to 64 [ 346.443477][ T7978] loop2: detected capacity change from 0 to 512 [ 346.491936][ T7978] EXT4-fs: Ignoring removed orlov option [ 346.540668][ T7978] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 346.601852][ T7978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 346.650746][ T7978] EXT4-fs error (device loop2): ext4_iget_extra_inode:5030: inode #15: comm syz.2.878: corrupted in-inode xattr: e_value size too large [ 346.666810][ T7986] loop3: detected capacity change from 0 to 128 [ 346.714696][ T7986] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 346.737723][ T7978] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.878: couldn't read orphan inode 15 (err -117) [ 346.777673][ T7978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.810624][ T7984] loop4: detected capacity change from 0 to 1024 [ 346.992962][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.180499][ T7990] loop1: detected capacity change from 0 to 2048 [ 347.219863][ T7990] EXT4-fs: Ignoring removed bh option [ 347.247427][ T3793] hfsplus: b-tree write err: -5, ino 4 [ 347.366575][ T7990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.415519][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.422187][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.437718][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.886'. [ 347.509529][ T7999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.886'. [ 347.548127][ T7990] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.883: bg 0: block 104: padding at end of block bitmap is not set [ 347.593828][ T7990] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 117 [ 347.606839][ T7990] EXT4-fs (loop1): This should not happen!! Data will be lost [ 347.606839][ T7990] [ 347.888183][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.239583][ T8012] loop2: detected capacity change from 0 to 256 [ 348.326859][ T8012] exfat: Deprecated parameter 'namecase' [ 348.451119][ T8012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 348.490072][ T8017] loop0: detected capacity change from 0 to 64 [ 349.234367][ T8032] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.549383][ T8034] loop3: detected capacity change from 0 to 1024 [ 349.672470][ T8037] loop4: detected capacity change from 0 to 256 [ 350.144393][ T12] hfsplus: b-tree write err: -5, ino 4 [ 350.461158][ T8053] loop0: detected capacity change from 0 to 64 [ 351.506605][ T8074] loop0: detected capacity change from 0 to 256 [ 351.598098][ T8076] loop1: detected capacity change from 0 to 512 [ 351.632726][ T8076] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 351.710662][ T8080] loop3: detected capacity change from 0 to 256 [ 351.739842][ T8081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.925'. [ 351.755317][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 351.770348][ T8080] exfat: Deprecated parameter 'utf8' [ 351.776563][ T8080] exfat: Deprecated parameter 'namecase' [ 351.782539][ T8080] exfat: Deprecated parameter 'utf8' [ 351.802935][ T8083] loop4: detected capacity change from 0 to 512 [ 351.811246][ T8076] EXT4-fs (loop1): 1 truncate cleaned up [ 351.812576][ T8083] EXT4-fs: Ignoring removed bh option [ 351.819652][ T8076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.864371][ T8083] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 351.948720][ T8083] EXT4-fs (loop4): 1 truncate cleaned up [ 351.956990][ T8080] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 351.974653][ T8083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.045868][ T30] audit: type=1800 audit(1753974811.625:41): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.923" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 352.239127][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.388614][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.525409][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.930'. [ 352.536001][ T8090] 8021q: VLANs not supported on gre0 [ 353.308205][ T8105] loop2: detected capacity change from 0 to 8 [ 353.436404][ T8105] SQUASHFS error: lzo decompression failed, data probably corrupt [ 353.444980][ T8105] SQUASHFS error: Failed to read block 0x144: -5 [ 353.451480][ T8105] SQUASHFS error: Unable to read metadata cache entry [142] [ 353.459449][ T8105] SQUASHFS error: Unable to read inode 0x11f [ 353.711033][ T8099] loop4: detected capacity change from 0 to 32768 [ 353.721108][ T8099] btrfs: Deprecated parameter 'usebackuproot' [ 353.727647][ T8099] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 353.765318][ T8099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.933 (8099) [ 353.798244][ T8099] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.809543][ T8099] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 353.925527][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x84fefa3c level 0 [ 353.939571][ T8099] BTRFS error (device loop4): failed to load root extent [ 353.947399][ T8099] BTRFS warning (device loop4): try to load backup roots slot 1 [ 353.957559][ T3793] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 353.972005][ T8099] BTRFS warning (device loop4): couldn't read tree root [ 353.983380][ T8099] BTRFS warning (device loop4): try to load backup roots slot 2 [ 353.999361][ T58] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 354.010881][ T8099] BTRFS warning (device loop4): couldn't read tree root [ 354.029681][ T8099] BTRFS warning (device loop4): try to load backup roots slot 3 [ 354.039734][ T8124] loop0: detected capacity change from 0 to 736 [ 354.067435][ T3919] BTRFS warning (device loop4): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0xc4a80df2 level 0 [ 354.083948][ T8099] BTRFS warning (device loop4): couldn't read tree root [ 354.101820][ T8107] loop1: detected capacity change from 0 to 4096 [ 354.168218][ T8107] ntfs3(loop1): It is recommened to use chkdsk. [ 354.205310][ T8099] BTRFS error (device loop4): open_ctree failed: -5 [ 354.284230][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 354.292829][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 354.309990][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 354.320346][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 354.328778][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 354.337346][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 354.345985][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 354.354285][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 354.362546][ T8107] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 354.809365][ T8128] loop3: detected capacity change from 0 to 16 [ 354.875183][ T8128] erofs (device loop3): mounted with root inode @ nid 36. [ 354.964162][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 355.875022][ T8154] netlink: 'syz.0.953': attribute type 11 has an invalid length. [ 355.883832][ T8154] netlink: 204 bytes leftover after parsing attributes in process `syz.0.953'. [ 356.291216][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 356.710848][ T8170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.961'. [ 356.720585][ T8170] tipc: Enabling of bearer rejected, already enabled [ 356.749401][ T8172] loop2: detected capacity change from 0 to 16 [ 357.140528][ T8177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.966'. [ 357.200820][ T5437] IPVS: starting estimator thread 0... [ 357.298911][ T8182] IPVS: using max 240 ests per chain, 12000 per kthread [ 357.693392][ T5437] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 357.720343][ T8189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.970'. [ 357.872907][ T8193] netlink: 165 bytes leftover after parsing attributes in process `syz.3.972'. [ 357.927824][ T5437] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.937457][ T5437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.994450][ T5437] usb 3-1: config 0 descriptor?? [ 358.016725][ T5437] cp210x 3-1:0.0: cp210x converter detected [ 358.364506][ T30] audit: type=1326 audit(1753974817.935:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.4.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 358.388210][ T30] audit: type=1326 audit(1753974817.935:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.4.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 358.414357][ T30] audit: type=1326 audit(1753974817.955:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.4.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 358.438046][ T30] audit: type=1326 audit(1753974817.955:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.4.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 358.460822][ T30] audit: type=1326 audit(1753974817.955:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.4.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 358.484100][ T30] audit: type=1326 audit(1753974817.955:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.4.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 358.509653][ T30] audit: type=1326 audit(1753974817.985:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 358.534028][ T30] audit: type=1326 audit(1753974817.985:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 358.556950][ T30] audit: type=1326 audit(1753974818.035:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 358.579704][ T30] audit: type=1326 audit(1753974818.035:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 358.634402][ T5437] usb 3-1: cp210x converter now attached to ttyUSB0 [ 358.736279][ T5872] usb 3-1: USB disconnect, device number 5 [ 358.757195][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.834933][ T5872] cp210x 3-1:0.0: device disconnected [ 359.044798][ T8211] pim6reg9: entered allmulticast mode [ 359.444870][ T8217] netlink: 6 bytes leftover after parsing attributes in process `syz.3.983'. [ 361.076209][ T8233] loop2: detected capacity change from 0 to 32768 [ 361.127258][ T8233] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.991 (8233) [ 361.147453][ T8233] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.158283][ T8233] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 361.174465][ T8233] BTRFS error (device loop2): cannot disable free-space-tree [ 361.182268][ T8233] BTRFS error (device loop2): open_ctree failed: -22 [ 361.204479][ T8245] loop4: detected capacity change from 0 to 512 [ 361.235815][ T8245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.313860][ T8245] EXT4-fs (loop4): Test dummy encryption mode enabled [ 361.399501][ T8245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 361.459137][ T8245] System zones: 2-12, 7-7 [ 361.525992][ T8245] EXT4-fs (loop4): 1 truncate cleaned up [ 361.534216][ T8245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.677540][ T8252] loop3: detected capacity change from 0 to 512 [ 361.759964][ T8252] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.998: casefold flag without casefold feature [ 361.884087][ T8252] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.998: couldn't read orphan inode 15 (err -117) [ 361.940809][ T8252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.036562][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.151850][ T8259] loop2: detected capacity change from 0 to 128 [ 362.451536][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.680292][ T8267] loop1: detected capacity change from 0 to 256 [ 362.707762][ T8269] autofs: Bad value for 'uid' [ 362.712739][ T8269] autofs: Bad value for 'uid' [ 362.839895][ T8267] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 362.947391][ T8271] loop4: detected capacity change from 0 to 64 [ 362.988377][ T8267] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 363.151756][ T8276] Bluetooth: MGMT ver 1.23 [ 364.021189][ T8289] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1015'. [ 364.896530][ T8292] loop2: detected capacity change from 0 to 32768 [ 364.905886][ T8292] ocfs2: Unknown parameter 'coherencÿ' [ 365.739283][ T5872] IPVS: starting estimator thread 0... [ 365.854258][ T8312] IPVS: using max 240 ests per chain, 12000 per kthread [ 366.261367][ T8322] loop2: detected capacity change from 0 to 47 [ 366.840998][ T8333] loop0: detected capacity change from 0 to 512 [ 367.008756][ T8335] loop2: detected capacity change from 0 to 2048 [ 367.009668][ T8333] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1035: bg 0: block 506: padding at end of block bitmap is not set [ 367.033482][ T8339] loop4: detected capacity change from 0 to 256 [ 367.042716][ T8335] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 367.044381][ T8339] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.063659][ T8339] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 367.084133][ T8333] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 367.121423][ T8333] EXT4-fs (loop0): 1 orphan inode deleted [ 367.130102][ T8333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.144223][ T8343] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.148120][ T3919] __quota_error: 1 callbacks suppressed [ 367.148199][ T3919] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 367.171440][ T3919] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 367.221739][ T8333] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.283410][ T8339] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 367.561133][ T8345] loop3: detected capacity change from 0 to 128 [ 367.653349][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.825894][ T8348] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 368.470187][ T8363] loop0: detected capacity change from 0 to 1024 [ 368.568618][ T8356] loop3: detected capacity change from 0 to 4096 [ 368.734280][ T8356] NILFS (loop3): invalid segment: Checksum error in segment payload [ 368.747348][ T8356] NILFS (loop3): trying rollback from an earlier position [ 368.873861][ T8356] NILFS (loop3): recovery complete [ 368.919882][ T3987] hfsplus: b-tree write err: -5, ino 4 [ 368.926741][ T8370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.907232][ T5872] kernel write not supported for file /media2 (pid: 5872 comm: kworker/1:4) [ 370.046220][ T8393] loop0: detected capacity change from 0 to 256 [ 370.077979][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 370.090810][ T8393] exfat: Deprecated parameter 'namecase' [ 370.098047][ T8393] exfat: Deprecated parameter 'utf8' [ 370.236143][ T8393] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 370.257552][ T8397] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.265058][ T8397] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 370.271827][ T8396] loop4: detected capacity change from 0 to 512 [ 370.271942][ T8397] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.290897][ T8397] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 370.299389][ T8397] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.306546][ T8397] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 370.314077][ T8397] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.320791][ T8397] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.327736][ T8397] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 370.334607][ T8397] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 370.341369][ T8397] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 370.348757][ T8397] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 370.355758][ T8397] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 370.364498][ T8397] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 370.372521][ T8397] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 370.384674][ T8397] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 370.391487][ T8397] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 370.401482][ T8397] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 370.408653][ T8397] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 370.415497][ T8397] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 370.422177][ T8397] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 370.429671][ T8397] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 370.453303][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 370.462323][ T8396] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1064: bad orphan inode 13 [ 370.489323][ T5870] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 370.499035][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.507420][ T5870] usb 3-1: Product: syz [ 370.511788][ T5870] usb 3-1: Manufacturer: syz [ 370.516732][ T5870] usb 3-1: SerialNumber: syz [ 370.526417][ T5870] usb 3-1: config 0 descriptor?? [ 370.532768][ T8396] ext4_test_bit(bit=12, block=4) = 1 [ 370.538610][ T8396] is_bad_inode(inode)=0 [ 370.543215][ T8396] NEXT_ORPHAN(inode)=0 [ 370.547901][ T8396] max_ino=32 [ 370.551254][ T8396] i_nlink=1 [ 370.556830][ T8396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.577496][ T5870] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 370.595188][ T5870] usb 3-1: setting power ON [ 370.599942][ T5870] dvb-usb: bulk message failed: -22 (2/0) [ 370.610681][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.631847][ T5870] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 370.640823][ T5870] usb 3-1: media controller created [ 370.648817][ T8396] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1064: Unrecognised inode hash code 20 [ 370.661237][ T8396] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1064: Corrupt directory, running e2fsck is recommended [ 370.733600][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.757997][ T8396] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1064: Unrecognised inode hash code 20 [ 370.770284][ T8396] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1064: Corrupt directory, running e2fsck is recommended [ 370.803890][ T30] audit: type=1800 audit(1753974830.375:53): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1064" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 370.836530][ T8385] dvb-usb: bulk message failed: -22 (3/0) [ 370.842660][ T8385] dvb-usb: bulk message failed: -22 (4/0) [ 370.849013][ T8385] cxusb: i2c read failed [ 370.954541][ T5870] usb 3-1: selecting invalid altsetting 6 [ 370.960759][ T5870] usb 3-1: digital interface selection failed (-22) [ 370.968366][ T5870] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 371.034722][ T5870] usb 3-1: setting power OFF [ 371.039538][ T5870] dvb-usb: bulk message failed: -22 (2/0) [ 371.045970][ T5870] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 371.055624][ T5870] (NULL device *): no alternate interface [ 371.150615][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.172207][ T8408] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 371.180479][ T8408] nbd: couldn't find device at index 137 [ 371.585447][ T5870] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 371.636844][ T5870] usb 3-1: USB disconnect, device number 6 [ 371.931148][ T5437] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 372.167819][ T5437] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.178270][ T5437] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.187532][ T5437] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 372.285276][ T5437] usb 4-1: string descriptor 0 read error: -22 [ 372.292127][ T5437] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.301658][ T5437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.383810][ T8414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 372.442329][ T5437] usb 4-1: 0:2 : does not exist [ 372.696483][ T8430] loop0: detected capacity change from 0 to 512 [ 372.717160][ T5437] usb 4-1: USB disconnect, device number 6 [ 372.756637][ T8430] EXT4-fs: Ignoring removed orlov option [ 373.344900][ T8426] loop1: detected capacity change from 0 to 32768 [ 373.357710][ T8426] XFS: attr2 mount option is deprecated. [ 373.455080][ T8430] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 373.470010][ T8426] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 373.630294][ T8430] EXT4-fs (loop0): 1 orphan inode deleted [ 373.636774][ T8430] EXT4-fs (loop0): 1 truncate cleaned up [ 373.644740][ T8430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.685955][ T8426] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x1b9/0x300, xfs_agf block 0x1 [ 373.698683][ T8426] XFS (loop1): Unmount and run xfs_repair [ 373.705064][ T8426] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 373.713821][ T8426] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 373.723813][ T8426] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 373.733294][ T8426] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 373.742873][ T8426] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 373.763414][ T8426] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 373.772640][ T8426] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 373.782292][ T8426] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ [ 373.792297][ T8426] 00000070: 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 373.802141][ T8426] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23d/0x550" at daddr 0x1 len 1 error 74 [ 373.813235][ T8426] XFS (loop1): Error -117 reserving per-AG metadata reserve pool. [ 373.821832][ T8426] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x4d7/0x590 (fs/xfs/xfs_fsops.c:566). Shutting down filesystem. [ 373.837811][ T8426] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 373.846695][ T8426] XFS (loop1): Ending clean mount [ 373.852702][ T8426] XFS (loop1): Failed to initialize disk quotas, err -5. [ 373.909709][ T8430] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 373.954112][ T5808] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 374.054336][ T8430] EXT4-fs (loop0): Remounting filesystem read-only [ 374.061809][ T8430] overlayfs: failed to verify upper root origin [ 374.339716][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.422415][ T8463] loop2: detected capacity change from 0 to 4096 [ 375.463363][ T8461] loop3: detected capacity change from 0 to 32768 [ 375.471398][ T8465] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1093'. [ 375.475611][ T8461] read_mapping_page failed! [ 375.486609][ T8461] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 375.493390][ T8461] Mount JFS Failure: -5 [ 375.504739][ T8461] jfs_mount failed w/return code = -5 [ 375.513809][ T8463] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 377.082676][ T8489] tmpfs: User quota inode hardlimit too large. [ 377.380079][ T8495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.670328][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 377.806124][ T8501] loop0: detected capacity change from 0 to 1024 [ 377.913445][ T8501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.132569][ T5821] Bluetooth: hci0: Malformed HCI Event [ 378.207496][ T8515] loop4: detected capacity change from 0 to 256 [ 378.330211][ T8518] loop3: detected capacity change from 0 to 164 [ 378.358004][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.412492][ T8518] Unable to read rock-ridge attributes [ 378.475832][ T8518] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 378.520417][ T8515] FAT-fs (loop4): Directory bread(block 64) failed [ 378.528518][ T8515] FAT-fs (loop4): Directory bread(block 65) failed [ 378.535812][ T8515] FAT-fs (loop4): Directory bread(block 66) failed [ 378.542682][ T8515] FAT-fs (loop4): Directory bread(block 67) failed [ 378.549984][ T8515] FAT-fs (loop4): Directory bread(block 68) failed [ 378.556899][ T8515] FAT-fs (loop4): Directory bread(block 69) failed [ 378.563948][ T8515] FAT-fs (loop4): Directory bread(block 70) failed [ 378.574528][ T8515] FAT-fs (loop4): Directory bread(block 71) failed [ 378.581408][ T8515] FAT-fs (loop4): Directory bread(block 72) failed [ 378.589982][ T8515] FAT-fs (loop4): Directory bread(block 73) failed [ 379.513722][ T8534] loop4: detected capacity change from 0 to 256 [ 379.679375][ T8534] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 379.951119][ T8540] loop1: detected capacity change from 0 to 1024 [ 380.112071][ T8540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.185472][ T8546] netlink: 'syz.4.1129': attribute type 11 has an invalid length. [ 380.273684][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.554446][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.045572][ T8564] loop1: detected capacity change from 0 to 256 [ 381.125121][ T8564] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 381.145291][ T8564] FAT-fs (loop1): Filesystem has been set read-only [ 381.152138][ T8564] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 381.162794][ T8564] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 381.187126][ T30] audit: type=1800 audit(1753974840.765:54): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1134" name="file1" dev="loop1" ino=1048699 res=0 errno=0 [ 381.663678][ T5437] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 381.884216][ T5437] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.892538][ T5437] usb 3-1: config 0 has no interface number 0 [ 381.899072][ T5437] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.910354][ T5437] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.920541][ T5437] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 381.930113][ T5437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.106067][ T5437] usb 3-1: config 0 descriptor?? [ 382.119937][ T8584] netlink: 'syz.3.1149': attribute type 10 has an invalid length. [ 382.147979][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.179420][ T8584] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 382.638811][ T5437] prodikeys 0003:041E:2801.0007: unknown main item tag 0x7 [ 382.646624][ T5437] prodikeys 0003:041E:2801.0007: item fetching failed at offset 3/7 [ 382.708594][ T5437] prodikeys 0003:041E:2801.0007: hid parse failed [ 382.716153][ T5437] prodikeys 0003:041E:2801.0007: probe with driver prodikeys failed with error -22 [ 382.861984][ T5872] usb 3-1: USB disconnect, device number 7 [ 383.310494][ T8605] tipc: Started in network mode [ 383.316708][ T8605] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 383.325314][ T8605] tipc: Enabled bearer , priority 10 [ 383.829440][ T8614] netlink: 'syz.2.1163': attribute type 16 has an invalid length. [ 383.837927][ T8614] netlink: 'syz.2.1163': attribute type 3 has an invalid length. [ 383.846682][ T8614] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1163'. [ 383.884049][ T8617] loop4: detected capacity change from 0 to 256 [ 384.356297][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 384.443488][ T5872] tipc: Node number set to 8432298 [ 384.738734][ T8630] loop0: detected capacity change from 0 to 1024 [ 384.781239][ T8636] loop3: detected capacity change from 0 to 256 [ 384.839829][ T8630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.069646][ T8636] FAT-fs (loop3): Directory bread(block 64) failed [ 385.077014][ T8636] FAT-fs (loop3): Directory bread(block 65) failed [ 385.084205][ T8636] FAT-fs (loop3): Directory bread(block 66) failed [ 385.090921][ T8636] FAT-fs (loop3): Directory bread(block 67) failed [ 385.098125][ T8636] FAT-fs (loop3): Directory bread(block 68) failed [ 385.105061][ T8636] FAT-fs (loop3): Directory bread(block 69) failed [ 385.111995][ T8636] FAT-fs (loop3): Directory bread(block 70) failed [ 385.119098][ T8636] FAT-fs (loop3): Directory bread(block 71) failed [ 385.130348][ T8636] FAT-fs (loop3): Directory bread(block 72) failed [ 385.138405][ T8636] FAT-fs (loop3): Directory bread(block 73) failed [ 385.273949][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.041958][ T8655] loop3: detected capacity change from 0 to 512 [ 386.179903][ T8655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.381664][ T8666] loop2: detected capacity change from 0 to 8 [ 386.525091][ T8666] SQUASHFS error: Unable to read directory block [2c0:35] [ 386.542205][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.484769][ T30] audit: type=1326 audit(1753974847.065:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.511375][ T30] audit: type=1326 audit(1753974847.065:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.654096][ T30] audit: type=1326 audit(1753974847.155:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.677147][ T30] audit: type=1326 audit(1753974847.155:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.705031][ T30] audit: type=1326 audit(1753974847.155:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.730140][ T30] audit: type=1326 audit(1753974847.175:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.753431][ T30] audit: type=1326 audit(1753974847.175:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.776244][ T30] audit: type=1326 audit(1753974847.175:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940378eb69 code=0x7ffc0000 [ 387.803437][ T30] audit: type=1326 audit(1753974847.315:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0550b8eb69 code=0x7ffc0000 [ 387.828305][ T30] audit: type=1326 audit(1753974847.335:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0550b8d4d0 code=0x7ffc0000 [ 388.845745][ T8711] loop2: detected capacity change from 0 to 64 [ 388.963583][ T8718] Invalid logical block size (18) [ 389.174295][ T5437] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 389.420906][ T5437] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.436797][ T5437] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.518744][ T5437] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 389.534208][ T5437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 389.542712][ T5437] usb 2-1: SerialNumber: syz [ 389.866681][ T5437] usb 2-1: 0:2 : does not exist [ 389.985506][ T5437] usb 2-1: USB disconnect, device number 8 [ 390.335173][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.335173][ T3919] loop2: rw=1, sector=2089, nr_sectors = 2048 limit=64 [ 390.359959][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.359959][ T3919] loop2: rw=1, sector=4137, nr_sectors = 32 limit=64 [ 390.376683][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.376683][ T3919] loop2: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 390.390771][ T3919] Buffer I/O error on dev loop2, logical block 4169, lost async page write [ 390.399750][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.399750][ T3919] loop2: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 390.413621][ T3919] Buffer I/O error on dev loop2, logical block 4170, lost async page write [ 390.422477][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.422477][ T3919] loop2: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 390.436565][ T3919] Buffer I/O error on dev loop2, logical block 4172, lost async page write [ 390.446203][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.446203][ T3919] loop2: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 390.465644][ T3919] Buffer I/O error on dev loop2, logical block 4173, lost async page write [ 390.477205][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.477205][ T3919] loop2: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 390.490971][ T3919] Buffer I/O error on dev loop2, logical block 4174, lost async page write [ 390.500078][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.500078][ T3919] loop2: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 390.513901][ T3919] Buffer I/O error on dev loop2, logical block 4175, lost async page write [ 390.522716][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.522716][ T3919] loop2: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 390.536938][ T3919] Buffer I/O error on dev loop2, logical block 4176, lost async page write [ 390.545841][ T3919] kworker/u8:15: attempt to access beyond end of device [ 390.545841][ T3919] loop2: rw=1, sector=4177, nr_sectors = 1 limit=64 [ 390.565220][ T3919] Buffer I/O error on dev loop2, logical block 4177, lost async page write [ 390.576866][ T3919] Buffer I/O error on dev loop2, logical block 4196, lost async page write [ 390.585846][ T3919] Buffer I/O error on dev loop2, logical block 4197, lost async page write [ 392.247053][ T8754] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1227'. [ 393.618898][ T8768] loop4: detected capacity change from 0 to 32768 [ 393.670745][ T8768] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1232 (8768) [ 393.700277][ T8768] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.714108][ T8768] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 393.729999][ T8768] BTRFS info (device loop4): using free-space-tree [ 394.095971][ T8768] BTRFS info (device loop4): rebuilding free space tree [ 394.148105][ T8768] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 395.037290][ T8801] loop2: detected capacity change from 0 to 256 [ 396.189291][ T8819] Invalid ELF header magic: != ELF [ 396.336956][ T8823] loop1: detected capacity change from 0 to 64 [ 397.029419][ T8833] loop0: detected capacity change from 0 to 64 [ 397.742922][ T8840] loop1: detected capacity change from 0 to 4096 [ 397.791131][ T8846] loop3: detected capacity change from 0 to 512 [ 397.840251][ T8846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 397.863576][ T8840] NILFS (loop1): invalid segment: Checksum error in segment payload [ 397.871885][ T8840] NILFS (loop1): trying rollback from an earlier position [ 397.922295][ T8846] EXT4-fs (loop3): 1 truncate cleaned up [ 397.935850][ T8846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.983617][ T8840] NILFS (loop1): recovery complete [ 398.063845][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 398.063916][ T30] audit: type=1326 audit(1753974857.645:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373d78eb69 code=0x7ffc0000 [ 398.064111][ T8855] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.115155][ T30] audit: type=1326 audit(1753974857.705:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f373d78eb69 code=0x7ffc0000 [ 398.142712][ T30] audit: type=1326 audit(1753974857.705:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373d78eb69 code=0x7ffc0000 [ 398.426797][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.668159][ T8861] loop0: detected capacity change from 0 to 1024 [ 398.696764][ T8861] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.705030][ T8861] EXT4-fs: Ignoring removed nobh option [ 398.710905][ T8861] EXT4-fs: Ignoring removed bh option [ 398.819140][ T8861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.902129][ T8868] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 399.116827][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.309978][ T8869] loop3: detected capacity change from 0 to 4096 [ 399.428986][ T8878] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.452901][ T8898] loop1: detected capacity change from 0 to 128 [ 400.507905][ T8898] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 400.562020][ T8898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.614916][ T8901] [U] êS] [ 400.991254][ T8904] loop3: detected capacity change from 0 to 2048 [ 401.034740][ T8904] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 401.103495][ T8911] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.670293][ T8913] loop4: detected capacity change from 0 to 4096 [ 401.721582][ T8913] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 402.485977][ T8933] loop1: detected capacity change from 0 to 64 [ 403.213417][ T5437] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 403.390405][ T5437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.402560][ T5437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.413069][ T5437] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 403.422431][ T5437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.526262][ T5437] usb 5-1: config 0 descriptor?? [ 403.984454][ T8962] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 403.997665][ T8961] loop0: detected capacity change from 0 to 256 [ 404.044700][ T5437] hid (null): invalid report_count 55288 [ 404.080607][ T5437] steelseries 0003:1038:12B6.0008: invalid report_count 55288 [ 404.088524][ T5437] steelseries 0003:1038:12B6.0008: item 0 4 1 9 parsing failed [ 404.133794][ T8961] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 404.154436][ T5437] steelseries 0003:1038:12B6.0008: probe with driver steelseries failed with error -22 [ 404.258177][ T5873] usb 5-1: USB disconnect, device number 6 [ 405.663719][ T8982] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1325'. [ 405.799133][ T8976] loop2: detected capacity change from 0 to 40427 [ 405.837390][ T8976] F2FS-fs (loop2): invalid crc value [ 406.175132][ T8976] F2FS-fs (loop2): Start checkpoint disabled! [ 406.186903][ T8976] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 406.261762][ T8990] loop4: detected capacity change from 0 to 64 [ 407.098538][ T9001] loop0: detected capacity change from 0 to 1024 [ 407.107656][ T8995] loop3: detected capacity change from 0 to 4096 [ 407.161085][ T8995] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 407.519014][ T8995] ntfs3(loop3): ino=19, mi_enum_attr [ 407.524933][ T8995] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 407.632951][ T8995] ntfs3(loop3): failed to convert "c46c" to macturkish [ 407.648668][ T8995] ntfs3(loop3): ino=20, mi_enum_attr [ 408.302945][ T9016] loop4: detected capacity change from 0 to 256 [ 408.490051][ T9016] FAT-fs (loop4): Directory bread(block 64) failed [ 408.497283][ T9016] FAT-fs (loop4): Directory bread(block 65) failed [ 408.504411][ T9016] FAT-fs (loop4): Directory bread(block 66) failed [ 408.511361][ T9016] FAT-fs (loop4): Directory bread(block 67) failed [ 408.518461][ T9016] FAT-fs (loop4): Directory bread(block 68) failed [ 408.525515][ T9016] FAT-fs (loop4): Directory bread(block 69) failed [ 408.532393][ T9016] FAT-fs (loop4): Directory bread(block 70) failed [ 408.539475][ T9016] FAT-fs (loop4): Directory bread(block 71) failed [ 408.546625][ T9016] FAT-fs (loop4): Directory bread(block 72) failed [ 408.553540][ T9016] FAT-fs (loop4): Directory bread(block 73) failed [ 408.856173][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.863118][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.996838][ T9029] loop2: detected capacity change from 0 to 40427 [ 410.013607][ T9029] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 410.027599][ T9029] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 410.037855][ T9029] F2FS-fs (loop2): build fault injection rate: 14 [ 410.045441][ T9029] F2FS-fs (loop2): build fault injection type: 0x1 [ 410.056651][ T9029] F2FS-fs (loop2): invalid crc value [ 410.075549][ T9029] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x50c0/0x54d0 [ 410.086651][ T9029] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 411.534106][ T9058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1359'. [ 411.547936][ T9058] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1359'. [ 412.720272][ T9085] loop4: detected capacity change from 0 to 128 [ 412.849403][ T9085] FAT-fs (loop4): Directory bread(block 11554) failed [ 412.857160][ T9085] FAT-fs (loop4): Directory bread(block 11555) failed [ 412.868494][ T9085] FAT-fs (loop4): Directory bread(block 11556) failed [ 412.881191][ T9085] FAT-fs (loop4): Directory bread(block 11557) failed [ 412.890280][ T9085] FAT-fs (loop4): Directory bread(block 11558) failed [ 412.897499][ T9085] FAT-fs (loop4): Directory bread(block 11559) failed [ 412.904702][ T9085] FAT-fs (loop4): Directory bread(block 11560) failed [ 412.911804][ T9085] FAT-fs (loop4): Directory bread(block 11561) failed [ 412.919561][ T9085] FAT-fs (loop4): Directory bread(block 11562) failed [ 412.926859][ T9085] FAT-fs (loop4): Directory bread(block 11563) failed [ 413.328110][ T9097] loop0: detected capacity change from 0 to 64 [ 414.475110][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 414.484932][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 414.608004][ T5437] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 414.772653][ T9128] loop4: detected capacity change from 0 to 1024 [ 414.801131][ T9128] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 414.801707][ T5437] usb 3-1: config 0 interface 0 altsetting 183 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.813629][ T9128] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 414.840492][ T5437] usb 3-1: config 0 interface 0 has no altsetting 0 [ 414.847707][ T5437] usb 3-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 414.857262][ T5437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.865769][ T9128] EXT4-fs (loop4): invalid journal inode [ 414.865924][ T9128] EXT4-fs (loop4): can't get journal size [ 414.911595][ T9128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.016139][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.019652][ T5437] usb 3-1: config 0 descriptor?? [ 415.261955][ T3919] ===================================================== [ 415.270415][ T3919] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0 [ 415.280591][ T3919] n_tty_receive_buf_standard+0xafd/0x98a0 [ 415.287897][ T3919] n_tty_receive_buf_common+0x1a68/0x2540 [ 415.294843][ T3919] n_tty_receive_buf2+0x4c/0x60 [ 415.300516][ T3919] tty_ldisc_receive_buf+0xc6/0x2c0 [ 415.306638][ T3919] tty_port_default_receive_buf+0xd7/0x1a0 [ 415.313538][ T3919] flush_to_ldisc+0x43e/0xe30 [ 415.319689][ T3919] process_scheduled_works+0xb91/0x1d80 [ 415.326239][ T3919] worker_thread+0xedf/0x1590 [ 415.340752][ T3919] kthread+0xd59/0xf00 [ 415.348642][ T3919] ret_from_fork+0x1e0/0x310 [ 415.354423][ T3919] ret_from_fork_asm+0x1a/0x30 [ 415.360040][ T3919] [ 415.363383][ T3919] Uninit was stored to memory at: [ 415.370747][ T3919] n_tty_receive_buf_standard+0xaf6/0x98a0 [ 415.377683][ T3919] n_tty_receive_buf_common+0x1a68/0x2540 [ 415.384428][ T3919] n_tty_receive_buf2+0x4c/0x60 [ 415.390008][ T3919] tty_ldisc_receive_buf+0xc6/0x2c0 [ 415.396399][ T3919] tty_port_default_receive_buf+0xd7/0x1a0 [ 415.403155][ T3919] flush_to_ldisc+0x43e/0xe30 [ 415.408693][ T3919] process_scheduled_works+0xb91/0x1d80 [ 415.415117][ T3919] worker_thread+0xedf/0x1590 [ 415.420545][ T3919] kthread+0xd59/0xf00 [ 415.425392][ T3919] ret_from_fork+0x1e0/0x310 [ 415.430682][ T3919] ret_from_fork_asm+0x1a/0x30 [ 415.446346][ T3919] [ 415.451547][ T3919] Uninit was created at: [ 415.456948][ T3919] __kmalloc_noprof+0x95f/0x1310 [ 415.462789][ T3919] __tty_buffer_request_room+0x3d4/0x7a0 [ 415.469518][ T3919] __tty_insert_flip_string_flags+0x157/0x6f0 [ 415.476580][ T3919] uart_insert_char+0x368/0x930 [ 415.482198][ T3919] serial8250_read_char+0x1ba/0x670 [ 415.488192][ T3919] serial8250_handle_irq+0x930/0x1110 [ 415.494915][ T3919] serial8250_default_handle_irq+0x116/0x330 [ 415.501895][ T3919] serial8250_interrupt+0xc8/0x400 [ 415.508220][ T3919] __handle_irq_event_percpu+0x11f/0xbf0 [ 415.514968][ T3919] handle_irq_event+0xe0/0x2a0 [ 415.520625][ T3919] handle_edge_irq+0x2a9/0xae0 [ 415.526702][ T3919] __common_interrupt+0x9f/0x220 [ 415.532412][ T3919] common_interrupt+0x94/0xb0 [ 415.547011][ T3919] asm_common_interrupt+0x2b/0x40 [ 415.555621][ T3919] [ 415.559552][ T3919] CPU: 0 UID: 0 PID: 3919 Comm: kworker/u8:15 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(none) [ 415.572284][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.583646][ T3919] Workqueue: events_unbound flush_to_ldisc [ 415.590260][ T3919] ===================================================== [ 415.598085][ T3919] Disabling lock debugging due to kernel taint [ 415.605047][ T3919] Kernel panic - not syncing: kmsan.panic set ... [ 415.612133][ T3919] CPU: 0 UID: 0 PID: 3919 Comm: kworker/u8:15 Tainted: G B 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(none) [ 415.626538][ T3919] Tainted: [B]=BAD_PAGE [ 415.630884][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.641275][ T3919] Workqueue: events_unbound flush_to_ldisc [ 415.647410][ T3919] Call Trace: [ 415.650868][ T3919] [ 415.653991][ T3919] __dump_stack+0x26/0x30 [ 415.658519][ T3919] dump_stack_lvl+0x53/0x270 [ 415.663402][ T3919] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 415.669520][ T3919] dump_stack+0x1e/0x25 [ 415.673899][ T3919] vpanic+0x361/0xbc0 [ 415.678275][ T3919] panic+0x15d/0x160 [ 415.682519][ T3919] kmsan_report+0x31c/0x320 [ 415.687322][ T3919] ? __msan_warning+0x1b/0x30 [ 415.692360][ T3919] ? n_tty_receive_buf_standard+0xafd/0x98a0 [ 415.698589][ T3919] ? n_tty_receive_buf_common+0x1a68/0x2540 [ 415.704815][ T3919] ? n_tty_receive_buf2+0x4c/0x60 [ 415.710065][ T3919] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 415.715624][ T3919] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 415.721838][ T3919] ? flush_to_ldisc+0x43e/0xe30 [ 415.726873][ T3919] ? process_scheduled_works+0xb91/0x1d80 [ 415.732908][ T3919] ? worker_thread+0xedf/0x1590 [ 415.737978][ T3919] ? kthread+0xd59/0xf00 [ 415.742389][ T3919] ? ret_from_fork+0x1e0/0x310 [ 415.747427][ T3919] ? ret_from_fork_asm+0x1a/0x30 [ 415.752575][ T3919] ? ret_from_fork_asm+0x1a/0x30 [ 415.757845][ T3919] ? stack_depot_save_flags+0x35/0x7b0 [ 415.763723][ T3919] ? kmsan_get_metadata+0xfb/0x160 [ 415.769510][ T3919] ? kmsan_get_metadata+0x150/0x160 [ 415.774938][ T3919] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 415.781690][ T3919] ? kmsan_get_metadata+0x150/0x160 [ 415.787101][ T3919] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 415.793137][ T3919] ? n_tty_receive_char+0xfae/0x1440 [ 415.798687][ T3919] ? kmsan_get_metadata+0xfb/0x160 [ 415.804198][ T3919] __msan_warning+0x1b/0x30 [ 415.808881][ T3919] n_tty_receive_buf_standard+0xafd/0x98a0 [ 415.815191][ T3919] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 415.821184][ T3919] ? mod_timer_pending+0x21/0x50 [ 415.826419][ T3919] ? sk_skb_reason_drop+0x126/0x440 [ 415.831846][ T3919] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 415.838385][ T3919] n_tty_receive_buf_common+0x1a68/0x2540 [ 415.844338][ T3919] ? _raw_spin_lock_irqsave+0x21/0xc0 [ 415.849935][ T3919] ? stack_depot_save_flags+0x35/0x7b0 [ 415.855653][ T3919] n_tty_receive_buf2+0x4c/0x60 [ 415.860749][ T3919] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 415.866748][ T3919] tty_ldisc_receive_buf+0xc6/0x2c0 [ 415.872455][ T3919] tty_port_default_receive_buf+0xd7/0x1a0 [ 415.878751][ T3919] flush_to_ldisc+0x43e/0xe30 [ 415.883813][ T3919] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 415.890560][ T3919] ? __pfx_flush_to_ldisc+0x10/0x10 [ 415.895945][ T3919] process_scheduled_works+0xb91/0x1d80 [ 415.901887][ T3919] worker_thread+0xedf/0x1590 [ 415.906838][ T3919] kthread+0xd59/0xf00 [ 415.911093][ T3919] ? __pfx_worker_thread+0x10/0x10 [ 415.916404][ T3919] ? __pfx_kthread+0x10/0x10 [ 415.921232][ T3919] ret_from_fork+0x1e0/0x310 [ 415.926245][ T3919] ? __pfx_kthread+0x10/0x10 [ 415.930989][ T3919] ret_from_fork_asm+0x1a/0x30 [ 415.936070][ T3919] [ 415.939535][ T3919] Kernel Offset: disabled [ 415.944388][ T3919] Rebooting in 86400 seconds..