last executing test programs: 9.057433897s ago: executing program 0 (id=1200): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000000)={[{@errors_remount}, {@nolazytime}, {@nodioread_nolock}, {@dioread_nolock}, {@nomblk_io_submit}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x45f, &(0x7f0000000d00)="$eJzs3MtvFVUYAPBvpg+QVyviA0StEmPjo6XlIQs3Gk1cYDTRBS5rWwihUENrIoRINQajMTEkunBlXJr4F7hzY9SViVvdGxKibEBXNTN3Bm4v99JeuY/K/f2SgXPunLnnfHfmzJyZc28D6Fkj2T9JxJaI+C0ihirZlQVGKv9du3Ju+u8r56aTWF5+/c8kL3f1yrnpsmi53eYiM5pGpB8mRSUrLZw5e2Jqbm72dJEfXzz59vjCmbPPHD85dWz22OypyUOH9u+bePbg5IGWxJnFdXXXe/O7d7785sVXpo9cfOunb7P2binWV8fRKiNZ4H8t52rXPd7qyrpsa1U66e9iQ2hKX0Rku2sg7/9D0Rc3dt5QvPRBVxsHtFV2bdrQePXSMnAHS6LbLQC6o7zQZ/e/5dKhoce6cPn5yg1QFve1Yqms6Y+0KDNQc3/bSiMRcWTpn6+yJdr0HAIAoNqn018cjqfrjf/SuK+q3LZiDmU4Iu6OiO0RcU9E7IiIeyPysvdHxANN1l87NXTz+Ce99J8CW6Ns/PdcMbe1cvxXjv5iuK/Ibc3jH0iOHp+b3Vt8JqMxsCHLT9yiju9f/PWzRuuqx3/ZktVfjgWLdlzqr3lANzO1OJUPSlvg8vsRu/rrxZ9cnwlIImJnROxq7q23lYnjT36zu1Gh1ePPfPlx3Y1bMM+0/HXEE5X9vxQ18ZeSxvOTnxycPDC+MeZm946XR8XNfv7lwmuN6l9b/O2T7f9NK4//2iLDSfV87ULzdVz4/aOG9zRl/INNHv+DyRv5+WiweO3dqcXF0xMRg8nhPL/i9ckb25b5snwW/+ie+v1/e7FNFv+DEZEdxA9FxMMR8UjR9kcj4rGI2HOL+H98ofG69bD/Z+qe/64f/zX7v/lE34kfvmtU/9rOf/vz1GjxSn7+W8VaG3g7nx0AAAD8X6T5d+CTdOx6Ok3Hxirf4d8Rm9K5+YXFp47Ov3NqpvJd+eEYSMsnXUNVz0MnkqXiHSv5yeJZcbl+X/Hc+PO+u/L82PT83EyXY4det7lB/8/80dft1gFtV28ebXKwCw0BOq62/6crs+df7WRjgI7ye23oXav0/7RT7QA6z/Ufele9/n++Jm8uAO5Mrv/Qu2r6/8ZutQPoPNd/6F36P/Sk2/ldv0QvJyJdF82QaFNitTNHi/4AEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJv9GwAA//+Rl/AM") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020001000b"], 0x0) 7.465911675s ago: executing program 0 (id=1207): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.07926681s ago: executing program 2 (id=1209): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)='H', 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 6.878483747s ago: executing program 3 (id=1210): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") 6.446621935s ago: executing program 4 (id=1211): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 6.031039828s ago: executing program 2 (id=1213): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000680)=0x8, 0xffffffff) 5.615475962s ago: executing program 3 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.398792956s ago: executing program 1 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 5.398435064s ago: executing program 4 (id=1216): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}]}}]}, 0x3c}}, 0x2000400c) 4.959799301s ago: executing program 2 (id=1217): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000200)) 4.663334923s ago: executing program 0 (id=1218): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 4.424993663s ago: executing program 4 (id=1219): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB") r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.346821537s ago: executing program 3 (id=1220): syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfa, 0x15c, &(0x7f0000000200)="$eJzszz9rWlEcxvHvufd4tVSxpRak0Cp0qK0UtNJupXhLpULthZYunYT29g9UGiIkblFCtgxCVof8WUMgr0CjQ0jQJXkTWdwCGQ33XomE+A7y+0zyPOc83vPh7SijmHn/v7aw6Nbr7s/0F6dS+nrW7Ra93ILG/rU+ON8rwh80PQ3jFnjxIAa//v5zw9PNcRG83/bdIDeoxYE7XmcnNC0NeYL7mafQf+ifM7iZuQVC/uYjDXY8yHLAZAueWWDfv3pK8xwwQSlrmjw2WStnUw8UNDrZvd3jz8Oj8ssX79z1V6X282jSzK7ANraKHA5+n5rTW6Nh5ZNTcbwXvCnk8gavT/zBZhv9MboE3xVob8/A37NIPtHfYFXBhv9f4wMVA/qbF04tPPvAZTMNKtX5UU2GdqqJewZmRnvNhDn8hsi8SgghhBBCCCGEEEIIIYQQQgghxG13GQAA///99E7C") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000000140)=""/184, 0xb8) 4.261170152s ago: executing program 1 (id=1221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300050000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.805770276s ago: executing program 2 (id=1222): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, &(0x7f00000005c0)) 3.197911226s ago: executing program 1 (id=1223): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 3.125910646s ago: executing program 3 (id=1224): unshare(0x22020600) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) 2.701222237s ago: executing program 0 (id=1225): unshare(0x600) r0 = socket(0x2a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e22, 0x83, @local, 0x1}, 0x1c) 2.654795937s ago: executing program 4 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 2.592864839s ago: executing program 2 (id=1227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='afs_call\x00', r0, 0x0, 0x36cd2f91}, 0x18) unshare(0x62040200) 1.894148308s ago: executing program 1 (id=1228): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0xfe, 0x6, @remote}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @broadcast, @void, {@llc={0x4, {@snap={0xa8, 0xab, '5', '\x00', 0x86dd}}}}}, 0x0) 1.768857012s ago: executing program 3 (id=1229): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000480)) 1.59522267s ago: executing program 0 (id=1230): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b3d, 0x0) 1.318734212s ago: executing program 4 (id=1231): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) 746.834844ms ago: executing program 1 (id=1232): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r0, &(0x7f00000029c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_dest={0x18, 0x10c}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x2}}], 0x30, 0x40}, 0x0) 502.641806ms ago: executing program 2 (id=1233): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 454.341743ms ago: executing program 4 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x2}) 279.813332ms ago: executing program 0 (id=1235): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/144, 0x90}, {0x0}], 0x2) 58.77121ms ago: executing program 3 (id=1236): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01003200000000000000180000004f0a751800000002"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28) 0s ago: executing program 1 (id=1237): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): y_hcd.1/usb2/report_descriptor': No such file or directory [ 293.042334][ T6461] loop2: detected capacity change from 0 to 64 [ 293.072333][ T6462] loop1: detected capacity change from 0 to 256 [ 293.092075][ T6463] process 'syz.4.202' launched '/dev/fd/3' with NULL argv: empty string added [ 294.411762][ T6471] loop0: detected capacity change from 0 to 64 [ 294.569739][ T6471] hfs: unable to locate alternate MDB [ 294.575904][ T6471] hfs: continuing without an alternate MDB [ 295.009600][ T6476] veth1_macvtap: vlans aren't supported yet for dev_uc|mc_add() [ 295.274857][ T6472] loop4: detected capacity change from 0 to 4096 [ 295.677779][ T6481] loop2: detected capacity change from 0 to 512 [ 295.691237][ T6481] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 295.741775][ T6472] ntfs3(loop4): ino=19, mi_enum_attr [ 295.748008][ T6472] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 295.787215][ T6481] EXT4-fs (loop2): invalid journal inode [ 295.793723][ T6481] EXT4-fs (loop2): can't get journal size [ 295.882202][ T6481] EXT4-fs (loop2): 1 truncate cleaned up [ 295.891219][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.069532][ T6482] loop0: detected capacity change from 0 to 1024 [ 296.106874][ T6482] EXT4-fs: inline encryption not supported [ 296.236935][ T6482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.317067][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.326148][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.338430][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.187281][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.005199][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.218'. [ 298.022111][ T6501] netlink: 35 bytes leftover after parsing attributes in process `syz.1.218'. [ 298.103602][ T6503] loop4: detected capacity change from 0 to 1024 [ 298.169132][ T6503] EXT4-fs: Ignoring removed bh option [ 298.220380][ T6503] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.271557][ T6503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 298.334145][ T6503] System zones: 0-1, 3-12 [ 298.398610][ T6496] loop2: detected capacity change from 0 to 4096 [ 298.415550][ T6503] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.219: lblock 1 mapped to illegal pblock 1 (length 1) [ 298.498697][ T6503] Quota error (device loop4): write_blk: dquota write failed [ 298.506990][ T6503] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 298.517704][ T6503] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.219: Failed to acquire dquot type 0 [ 298.666682][ T6503] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.219: Freeing blocks not in datazone - block = 0, count = 4096 [ 298.717294][ T6503] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.219: Invalid inode bitmap blk 0 in block_group 0 [ 298.743456][ T3528] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 298.835420][ T3528] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 298.848293][ T3528] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:12: Failed to release dquot type 0 [ 298.861648][ T6503] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 298.862632][ T6503] EXT4-fs (loop4): 1 orphan inode deleted [ 298.865299][ T6503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.152929][ T6503] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 299.507316][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.685471][ T6523] loop3: detected capacity change from 0 to 1024 [ 301.639640][ T3723] hfsplus: b-tree write err: -5, ino 4 [ 303.070156][ T6547] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 303.079069][ T6547] macvlan2: entered promiscuous mode [ 303.086372][ T6547] macvlan2: entered allmulticast mode [ 303.087155][ T6546] loop3: detected capacity change from 0 to 256 [ 303.091971][ T6547] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 303.669160][ T6546] FAT-fs (loop3): Directory bread(block 64) failed [ 303.676332][ T6546] FAT-fs (loop3): Directory bread(block 65) failed [ 303.683831][ T6546] FAT-fs (loop3): Directory bread(block 66) failed [ 303.690630][ T6546] FAT-fs (loop3): Directory bread(block 67) failed [ 303.698588][ T6546] FAT-fs (loop3): Directory bread(block 68) failed [ 303.705624][ T6546] FAT-fs (loop3): Directory bread(block 69) failed [ 303.712815][ T6546] FAT-fs (loop3): Directory bread(block 70) failed [ 303.719918][ T6546] FAT-fs (loop3): Directory bread(block 71) failed [ 303.727643][ T6546] FAT-fs (loop3): Directory bread(block 72) failed [ 303.734953][ T6546] FAT-fs (loop3): Directory bread(block 73) failed [ 304.819391][ T6559] loop2: detected capacity change from 0 to 512 [ 304.923706][ T6559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.987350][ T6561] tipc: Started in network mode [ 304.992919][ T6561] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 305.006412][ T6561] tipc: Enabled bearer , priority 10 [ 305.122161][ T6559] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.246: iget: bad i_size value: 38620345925642 [ 305.234562][ T6559] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.246: couldn't read orphan inode 15 (err -117) [ 305.299639][ T6559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.372332][ T6559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.246: bg 0: block 5: invalid block bitmap [ 305.426352][ T6559] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 305.675870][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.026380][ T6571] netlink: 13 bytes leftover after parsing attributes in process `syz.3.251'. [ 306.123681][ T42] tipc: Node number set to 4269801642 [ 306.554911][ T6579] loop0: detected capacity change from 0 to 64 [ 308.747742][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 308.953339][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 308.980866][ T42] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.994815][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.001762][ T42] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 309.012191][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.109217][ T42] usb 1-1: config 0 descriptor?? [ 309.628047][ T42] hid-u2fzero 0003:20A0:4287.0007: item fetching failed at offset 3/5 [ 309.720014][ T42] hid-u2fzero 0003:20A0:4287.0007: probe with driver hid-u2fzero failed with error -22 [ 309.912972][ T42] usb 1-1: USB disconnect, device number 4 [ 310.253656][ T6616] tipc: Enabled bearer , priority 19 [ 310.805368][ T6622] netlink: 76 bytes leftover after parsing attributes in process `syz.3.274'. [ 312.007936][ T6631] loop3: detected capacity change from 0 to 2048 [ 312.304612][ T6636] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.442134][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(none) [ 312.442312][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.442417][ T6631] Call Trace: [ 312.442478][ T6631] [ 312.442538][ T6631] __dump_stack+0x26/0x30 [ 312.442849][ T6631] dump_stack_lvl+0x1df/0x270 [ 312.443065][ T6631] dump_stack+0x1e/0x25 [ 312.443244][ T6631] nilfs_btree_last_key+0x6b3/0x9a0 [ 312.443502][ T6631] ? __pfx_nilfs_btree_last_key+0x10/0x10 [ 312.443718][ T6631] nilfs_bmap_last_key+0x75/0x230 [ 312.443902][ T6631] nilfs_truncate_bmap+0xd7/0x5b0 [ 312.444099][ T6631] nilfs_truncate+0x261/0x580 [ 312.444264][ T6631] ? unmap_mapping_range+0xc5/0x150 [ 312.444511][ T6631] nilfs_setattr+0x373/0x420 [ 312.444712][ T6631] ? __pfx_nilfs_setattr+0x10/0x10 [ 312.444880][ T6631] notify_change+0x1ada/0x1bf0 [ 312.445128][ T6631] do_truncate+0x28f/0x310 [ 312.445311][ T6631] path_openat+0x5d85/0x6760 [ 312.445627][ T6631] do_filp_open+0x280/0x660 [ 312.445907][ T6631] do_sys_openat2+0x1bb/0x2f0 [ 312.446123][ T6631] __ia32_compat_sys_openat+0x238/0x300 [ 312.446368][ T6631] ia32_sys_call+0x3210/0x4310 [ 312.446595][ T6631] __do_fast_syscall_32+0xb0/0x150 [ 312.446822][ T6631] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 312.447034][ T6631] do_fast_syscall_32+0x38/0x80 [ 312.447239][ T6631] do_SYSENTER_32+0x1f/0x30 [ 312.447438][ T6631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.447643][ T6631] RIP: 0023:0xf70bd539 [ 312.447775][ T6631] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 312.447917][ T6631] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 312.448073][ T6631] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 312.448187][ T6631] RDX: 00000000000a2281 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.448285][ T6631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.448381][ T6631] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.448478][ T6631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.448616][ T6631] [ 312.676260][ T6631] NILFS (loop3): btree level mismatch (ino=16): 1 != 7 [ 312.685704][ T6631] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 312.943475][ T6631] Remounting filesystem read-only [ 312.949026][ T6631] NILFS (loop3): error -5 truncating bmap (ino=16) [ 313.053953][ T6641] NILFS (loop3): mounting fs with errors [ 313.565557][ T6648] vivid-000: ================= START STATUS ================= [ 313.580504][ T6648] vivid-000: Test Pattern: 75% Colorbar [ 313.588559][ T6648] vivid-000: Fill Percentage of Frame: 100 [ 313.595245][ T6648] vivid-000: Horizontal Movement: No Movement [ 313.601675][ T6648] vivid-000: Vertical Movement: No Movement [ 313.608285][ T6648] vivid-000: OSD Text Mode: All [ 313.613691][ T6648] vivid-000: Show Border: false [ 313.619076][ T6648] vivid-000: Show Square: false [ 313.624771][ T6648] vivid-000: Sensor Flipped Horizontally: false [ 313.631495][ T6648] vivid-000: Sensor Flipped Vertically: false [ 313.638216][ T6648] vivid-000: Insert SAV Code in Image: false [ 313.640642][ T6636] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 313.645630][ T6648] vivid-000: Insert EAV Code in Image: [ 313.656063][ T6636] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 313.656222][ T6636] Remounting filesystem read-only [ 313.687952][ T6648] false [ 313.690982][ T6648] vivid-000: Insert Video Guard Band: false [ 313.697602][ T6648] vivid-000: Reduced Framerate: false [ 313.702438][ T5799] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 313.703598][ T6648] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 313.703790][ T6648] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 313.729877][ T6648] vivid-000: Enable Capture Cropping: true grabbed [ 313.737117][ T6648] vivid-000: Enable Capture Composing: true grabbed [ 313.744351][ T6648] vivid-000: Enable Capture Scaler: true grabbed [ 313.751300][ T6648] vivid-000: Timestamp Source: End of Frame [ 313.757970][ T6648] vivid-000: Colorspace: sRGB [ 313.763236][ T6648] vivid-000: Transfer Function: Default [ 313.769249][ T6648] vivid-000: Y'CbCr Encoding: Default [ 313.775202][ T6648] vivid-000: HSV Encoding: Hue 0-179 [ 313.786267][ T6648] vivid-000: Quantization: Default [ 313.791831][ T6648] vivid-000: Apply Alpha To Red Only: false [ 313.799923][ T6648] vivid-000: Standard Aspect Ratio: 4x3 [ 313.806187][ T6648] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 313.815347][ T6648] vivid-000: DV Timings: 640x480p59 inactive [ 313.821772][ T6648] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 313.829663][ T6648] vivid-000: Maximum EDID Blocks: 2 [ 313.835373][ T6648] vivid-000: Limited RGB Range (16-235): false [ 313.841893][ T6648] vivid-000: Rx RGB Quantization Range: Automatic [ 313.848994][ T6648] vivid-000: Power Present: 0x00000001 [ 313.855154][ T6648] tpg source WxH: 320x240 (Y'CbCr) [ 313.860467][ T6648] tpg field: 1 [ 313.864299][ T6648] tpg crop: (0,0)/320x240 [ 313.868937][ T6648] tpg compose: (0,0)/320x240 [ 313.873981][ T6648] tpg colorspace: 8 [ 313.877978][ T6648] tpg transfer function: 0/0 [ 313.887412][ T6648] tpg Y'CbCr encoding: 0/0 [ 313.892051][ T6648] tpg quantization: 0/0 [ 313.898015][ T6648] tpg RGB range: 0/2 [ 313.902132][ T6648] vivid-000: ================== END STATUS ================== [ 315.144347][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.292'. [ 316.243886][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 316.375803][ T6679] loop2: detected capacity change from 0 to 256 [ 316.424739][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 316.462264][ T5862] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.470960][ T5862] usb 1-1: config 0 has no interface number 0 [ 316.557015][ T5862] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 316.566932][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.575697][ T5862] usb 1-1: Product: syz [ 316.580144][ T5862] usb 1-1: Manufacturer: syz [ 316.588825][ T5862] usb 1-1: SerialNumber: syz [ 316.675065][ T6679] FAT-fs (loop2): Directory bread(block 64) failed [ 316.682380][ T6679] FAT-fs (loop2): Directory bread(block 65) failed [ 316.689739][ T6679] FAT-fs (loop2): Directory bread(block 66) failed [ 316.696816][ T6679] FAT-fs (loop2): Directory bread(block 67) failed [ 316.704442][ T6679] FAT-fs (loop2): Directory bread(block 68) failed [ 316.711363][ T6679] FAT-fs (loop2): Directory bread(block 69) failed [ 316.718622][ T6679] FAT-fs (loop2): Directory bread(block 70) failed [ 316.725939][ T6679] FAT-fs (loop2): Directory bread(block 71) failed [ 316.732895][ T6679] FAT-fs (loop2): Directory bread(block 72) failed [ 316.740531][ T6679] FAT-fs (loop2): Directory bread(block 73) failed [ 316.807149][ T5862] usb 1-1: config 0 descriptor?? [ 316.840854][ T5862] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 317.147664][ T6682] tipc: Enabling of bearer rejected, failed to enable media [ 317.487812][ T5862] gspca_spca1528: reg_w err -71 [ 317.500153][ T30] audit: type=1326 audit(1761947810.024:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.302" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 317.505664][ T5862] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 317.521646][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.681337][ T5862] usb 1-1: USB disconnect, device number 5 [ 318.210094][ T6691] netlink: 280 bytes leftover after parsing attributes in process `syz.3.307'. [ 318.661501][ T6689] loop1: detected capacity change from 0 to 4096 [ 318.875169][ T6696] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.230617][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 319.289972][ T6695] loop4: detected capacity change from 0 to 4096 [ 319.306011][ T6702] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 319.566613][ T6705] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.154860][ T6711] loop0: detected capacity change from 0 to 64 [ 320.387389][ T6710] loop1: detected capacity change from 0 to 1024 [ 321.088029][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 321.720698][ T6726] syz.1.319 uses obsolete (PF_INET,SOCK_PACKET) [ 321.814819][ T6727] capability: warning: `syz.1.319' uses 32-bit capabilities (legacy support in use) [ 324.482973][ T6750] loop3: detected capacity change from 0 to 2048 [ 324.706698][ T6750] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.840005][ T6766] IPv6: Can't replace route, no match found [ 327.779991][ T6793] loop3: detected capacity change from 0 to 512 [ 327.846518][ T6793] EXT4-fs: Ignoring removed nobh option [ 328.002090][ T6793] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.351: iget: bad i_size value: 38620345925642 [ 328.093602][ T6793] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.351: couldn't read orphan inode 15 (err -117) [ 328.186539][ T6793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.275722][ T6797] loop4: detected capacity change from 0 to 512 [ 328.354069][ T6797] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.535415][ T6797] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.352: bad orphan inode 13 [ 328.625991][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.664221][ T6797] ext4_test_bit(bit=12, block=18) = 1 [ 328.669951][ T6797] is_bad_inode(inode)=0 [ 328.674703][ T6797] NEXT_ORPHAN(inode)=0 [ 328.679145][ T6797] max_ino=32 [ 328.682522][ T6797] i_nlink=1 [ 328.689277][ T6797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 328.799884][ T6797] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 328.873992][ T6805] loop0: detected capacity change from 0 to 1024 [ 328.893532][ T6797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.352: bg 0: block 248: padding at end of block bitmap is not set [ 328.930448][ T6805] EXT4-fs: Ignoring removed orlov option [ 328.976081][ T6797] Quota error (device loop4): write_blk: dquota write failed [ 328.984556][ T6797] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 328.995684][ T6797] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.352: Failed to acquire dquot type 1 [ 329.085945][ T6805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.573573][ T5862] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 329.611157][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 329.637720][ T58] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 329.652386][ T58] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 329.831747][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.873483][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 329.906213][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.916958][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.928618][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.938964][ T5862] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 329.949582][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.076196][ T5862] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 330.085996][ T5862] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 330.094857][ T5862] usb 4-1: Manufacturer: syz [ 330.247898][ T5862] usb 4-1: config 0 descriptor?? [ 330.641884][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 330.651842][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 330.719319][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 331.004562][ T5862] rc_core: IR keymap rc-hauppauge not found [ 331.010830][ T5862] Registered IR keymap rc-empty [ 331.016974][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.058290][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.106645][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 331.124297][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 331.173413][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.235494][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.267326][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.301207][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.337685][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.370501][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.400689][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.474089][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.504178][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.563990][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 331.609906][ T5862] mceusb 4-1:0.0: Registered 鵣뙊쑡ꬅ쏙滇堠췛៞壳廟쌆贂䬊釤ո with mce emulator interface version 1 [ 331.623860][ T5862] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 331.711631][ T5862] usb 4-1: USB disconnect, device number 3 [ 331.881971][ T6833] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 332.094097][ T6835] loop2: detected capacity change from 0 to 164 [ 332.837366][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 333.701488][ T6846] loop4: detected capacity change from 0 to 2048 [ 335.959789][ T6875] loop3: detected capacity change from 0 to 64 [ 336.368578][ T6881] loop1: detected capacity change from 0 to 8 [ 336.575367][ T6881] SQUASHFS error: Failed to read block 0xdfa: -5 [ 336.581956][ T6881] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 336.630557][ T6881] SQUASHFS error: Failed to read block 0x4e8: -5 [ 336.665714][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.673422][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.683934][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.692215][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.699874][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.707273][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.714976][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.727794][ T6881] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.736890][ T6881] SQUASHFS error: Failed to read block 0x4e8: -5 [ 336.753725][ T30] audit: type=1800 audit(1761947829.274:5): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.387" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 337.042360][ T6883] loop0: detected capacity change from 0 to 64 [ 338.321539][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 338.483954][ T6898] sg_write: data in/out 16514940/4 bytes for SCSI command 0x1c-- guessing data in; [ 338.483954][ T6898] program syz.3.394 not setting count and/or reply_len properly [ 338.568481][ T6901] warning: `syz.2.395' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 339.326878][ T5810] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.334250][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 339.335803][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 339.342199][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 339.347484][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 341.751642][ T6937] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 341.848714][ T6936] loop3: detected capacity change from 0 to 1024 [ 342.259653][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 342.476644][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.488839][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.596660][ T42] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 342.606341][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 342.614986][ T42] usb 1-1: SerialNumber: syz [ 342.945146][ T42] usb 1-1: 0:2 : does not exist [ 343.123869][ T42] usb 1-1: USB disconnect, device number 6 [ 343.979641][ T6955] loop3: detected capacity change from 0 to 64 [ 344.085217][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.126716][ T6955] MINIX-fs: mounting file system with errors, running fsck is recommended [ 344.392620][ T6959] loop2: detected capacity change from 0 to 1024 [ 344.519069][ T6959] EXT4-fs: Ignoring removed oldalloc option [ 344.527494][ T6959] EXT4-fs: quotafile must be on filesystem root [ 344.933993][ T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 345.187001][ T42] usb 3-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 345.198531][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 345.208015][ T42] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.349770][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.359304][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.368044][ T42] usb 3-1: Product: syz [ 345.372556][ T42] usb 3-1: Manufacturer: syz [ 345.377907][ T42] usb 3-1: SerialNumber: syz [ 345.558090][ T42] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 345.567831][ T42] cdc_ncm 3-1:1.0: bind() failure [ 345.800452][ T5862] usb 3-1: USB disconnect, device number 4 [ 347.521242][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 347.535902][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 347.876157][ T6982] loop3: detected capacity change from 0 to 4096 [ 347.953396][ T6982] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 349.076219][ T6998] loop2: detected capacity change from 0 to 512 [ 349.124479][ T6998] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 349.270713][ T6998] EXT4-fs error (device loop2): __ext4_iget:5443: inode #11: block 2: comm syz.2.440: invalid block [ 349.376739][ T7003] loop4: detected capacity change from 0 to 128 [ 349.420102][ T6998] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.440: couldn't read orphan inode 11 (err -117) [ 349.470990][ T6998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.553473][ T7003] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 349.789794][ T7003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.129786][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.997248][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'. [ 352.821243][ T7041] loop2: detected capacity change from 0 to 1024 [ 352.858280][ T7041] EXT4-fs: inline encryption not supported [ 352.865841][ T7041] EXT4-fs: Ignoring removed nobh option [ 352.872651][ T7041] EXT4-fs: Ignoring removed bh option [ 353.076961][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.689794][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.293791][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 354.513611][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 354.573243][ T42] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 354.582819][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.614623][ T7062] loop2: detected capacity change from 0 to 512 [ 354.657337][ T42] usb 1-1: config 0 descriptor?? [ 354.715240][ T42] gspca_main: sq930x-2.14.0 probing 041e:403c [ 354.729898][ T7062] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 354.814900][ T7062] EXT4-fs (loop2): invalid journal inode [ 354.820995][ T7062] EXT4-fs (loop2): can't get journal size [ 354.939877][ T7062] EXT4-fs (loop2): 1 truncate cleaned up [ 355.001935][ T7068] netlink: 128 bytes leftover after parsing attributes in process `syz.4.466'. [ 355.025624][ T7062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.088970][ T7068] Zero length message leads to an empty skb [ 355.159660][ T7070] loop1: detected capacity change from 0 to 22 [ 355.204320][ T7070] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 355.448597][ T42] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 355.465390][ T42] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 355.535690][ T42] usb 1-1: USB disconnect, device number 7 [ 355.874095][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.614794][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 357.822673][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.829579][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.906458][ T7096] loop1: detected capacity change from 0 to 16 [ 357.998508][ T7096] erofs (device loop1): mounted with root inode @ nid 36. [ 358.653432][ T7099] ucma_write: process 207 (syz.2.480) changed security contexts after opening file descriptor, this is not allowed. [ 359.003878][ T7104] loop4: detected capacity change from 0 to 256 [ 359.738116][ T7109] CUSE: unknown device info "" [ 359.743424][ T7109] CUSE: unknown device info "" [ 359.748475][ T7109] CUSE: unknown device info "" [ 359.753765][ T7109] CUSE: unknown device info "" [ 359.765293][ T7109] CUSE: zero length info key specified [ 361.420979][ T7129] loop3: detected capacity change from 0 to 1024 [ 363.931490][ T7160] loop2: detected capacity change from 0 to 256 [ 363.984865][ T7160] exfat: Deprecated parameter 'utf8' [ 364.210280][ T7160] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 365.086031][ T7168] loop3: detected capacity change from 0 to 1024 [ 365.344083][ T7166] loop4: detected capacity change from 0 to 2048 [ 365.362934][ T7168] hfsplus: bad catalog entry type [ 365.513927][ T5862] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 365.665462][ T7166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.735764][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 365.789317][ T5862] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.805950][ T5862] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.820849][ T5862] usb 1-1: config 0 interface 0 has no altsetting 0 [ 365.827979][ T5862] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 365.837706][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.857457][ T5862] usb 1-1: config 0 descriptor?? [ 365.917046][ T3723] hfsplus: b-tree write err: -5, ino 4 [ 366.441530][ T5862] corsair 0003:1B1C:1B34.0008: collection stack underflow [ 366.449435][ T5862] corsair 0003:1B1C:1B34.0008: item 0 4 0 12 parsing failed [ 366.522144][ T5862] corsair 0003:1B1C:1B34.0008: parse failed [ 366.530614][ T5862] corsair 0003:1B1C:1B34.0008: probe with driver corsair failed with error -22 [ 366.702685][ T42] usb 1-1: USB disconnect, device number 8 [ 367.707413][ T7191] loop2: detected capacity change from 0 to 16 [ 367.816481][ T7191] erofs (device loop2): mounted with root inode @ nid 36. [ 368.488364][ T7199] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 369.062487][ T7206] loop2: detected capacity change from 0 to 512 [ 369.110537][ T7201] loop1: detected capacity change from 0 to 2048 [ 369.148121][ T7206] EXT4-fs: Ignoring removed mblk_io_submit option [ 369.148496][ T7206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.192480][ T7201] loop1: p1 < > p3 [ 369.212313][ T7206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.212434][ T7206] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.217615][ T7201] loop1: p3 size 134217728 extends beyond EOD, truncated [ 369.495869][ T7206] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.519: Allocating blocks 41-42 which overlap fs metadata [ 369.524187][ T7206] Quota error (device loop2): write_blk: dquota write failed [ 369.524303][ T7206] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 369.524663][ T7206] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.519: Allocating blocks 41-42 which overlap fs metadata [ 369.537627][ T7206] Quota error (device loop2): write_blk: dquota write failed [ 369.538250][ T7206] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 369.538495][ T7206] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.519: Failed to acquire dquot type 1 [ 369.554283][ T7206] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 369.554714][ T7206] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.519: corrupted inode contents [ 369.560867][ T7206] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.519: mark_inode_dirty error [ 369.562846][ T7206] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.519: corrupted inode contents [ 369.602299][ T7206] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.519: mark_inode_dirty error [ 369.624880][ T7206] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.519: corrupted inode contents [ 369.642238][ T7206] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 369.669360][ T7206] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.519: corrupted inode contents [ 369.675321][ T7206] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.519: mark_inode_dirty error [ 369.697946][ T7206] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 369.738298][ T7206] EXT4-fs (loop2): 1 truncate cleaned up [ 369.741140][ T7206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.077376][ T6074] udevd[6074]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 370.089869][ T7206] EXT4-fs: Cannot change quota options when quota turned on [ 370.095686][ T6028] udevd[6028]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 370.876174][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.056219][ T7224] autofs: Bad value for 'fd' [ 371.996278][ T7233] loop4: detected capacity change from 0 to 256 [ 372.077377][ T7233] exfat: Deprecated parameter 'utf8' [ 372.322811][ T7233] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 372.963701][ T7241] loop0: detected capacity change from 0 to 1024 [ 373.456349][ T30] audit: type=1800 audit(1761947865.964:6): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.530" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 373.924195][ T165] hfsplus: b-tree write err: -5, ino 4 [ 374.341018][ T7253] loop1: detected capacity change from 0 to 128 [ 374.447483][ T7253] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 374.540581][ T7253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.722581][ T30] audit: type=1800 audit(1761947867.244:7): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.537" name="file0" dev="loop1" ino=99 res=0 errno=0 [ 375.664504][ T7263] loop2: detected capacity change from 0 to 128 [ 375.687610][ T7263] EXT4-fs: Ignoring removed nobh option [ 375.804845][ T7263] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.886837][ T5862] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 375.925437][ T7263] ext4 filesystem being mounted at mnt:[4026532746] supports timestamps until 2038-01-19 (0x7fffffff) [ 375.946121][ T11] Process accounting resumed [ 376.062656][ T7263] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.098946][ T5862] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 376.109474][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.199602][ T5862] usb 1-1: config 0 descriptor?? [ 376.330187][ T7268] Process accounting resumed [ 376.694952][ T7276] vivid-004: disconnect [ 376.725358][ T5862] gembird 0003:11FF:3331.0009: unknown main item tag 0x0 [ 376.735980][ T5862] gembird 0003:11FF:3331.0009: item fetching failed at offset 3/5 [ 376.765603][ T7274] vivid-004: reconnect [ 376.817337][ T5862] gembird 0003:11FF:3331.0009: probe with driver gembird failed with error -22 [ 376.949712][ T5862] usb 1-1: USB disconnect, device number 9 [ 378.893742][ T42] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 378.979580][ T7297] loop1: detected capacity change from 0 to 128 [ 379.049697][ T7297] EXT4-fs: Ignoring removed nobh option [ 379.149251][ T42] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 379.158360][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.185006][ T7297] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.204283][ T7297] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.404449][ T42] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 379.414258][ T42] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 379.428500][ T42] usb 1-1: Manufacturer: syz [ 379.506625][ T42] usb 1-1: config 0 descriptor?? [ 379.805156][ T5812] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.143608][ T42] rc_core: IR keymap rc-hauppauge not found [ 380.149787][ T42] Registered IR keymap rc-empty [ 380.159442][ T42] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 380.225170][ T7310] No buffer was provided with the request [ 380.268914][ T42] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 380.450613][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 2 [ 380.676046][ T11] usb 1-1: USB disconnect, device number 10 [ 380.865181][ T5862] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 381.079452][ T5862] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 381.088731][ T5862] usb 5-1: config 0 has no interface number 0 [ 381.095922][ T5862] usb 5-1: config 0 interface 29 has no altsetting 0 [ 381.199896][ T5862] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 381.209701][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.218327][ T5862] usb 5-1: Product: syz [ 381.222710][ T5862] usb 5-1: Manufacturer: syz [ 381.227893][ T5862] usb 5-1: SerialNumber: syz [ 381.381154][ T5862] usb 5-1: config 0 descriptor?? [ 381.427486][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 381.437839][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 381.681996][ T5862] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 381.946944][ T5862] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 381.954754][ T5862] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 381.961873][ T5862] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 382.044623][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 382.206199][ T5862] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 382.294215][ T5862] usb 5-1: USB disconnect, device number 2 [ 382.343878][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.354857][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.485675][ T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.501382][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.511815][ T42] usb 2-1: Product: syz [ 382.516582][ T42] usb 2-1: Manufacturer: syz [ 382.521530][ T42] usb 2-1: SerialNumber: syz [ 382.545983][ T7328] syz_tun: entered allmulticast mode [ 382.565746][ T42] usb 2-1: selecting invalid altsetting 1 [ 383.083607][ T42] usb 2-1: selecting invalid altsetting 1 [ 383.089947][ T42] cdc_ncm 2-1:1.0: bind() failure [ 383.356665][ T42] usb 2-1: USB disconnect, device number 4 [ 383.561184][ T7332] loop0: detected capacity change from 0 to 1024 [ 383.788815][ T7332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.046356][ T30] audit: type=1800 audit(1761947876.554:8): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.569" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 384.547034][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.639417][ T7359] UHID_CREATE from different security context by process 255 (syz.1.581), this is not allowed. [ 386.481366][ T7371] loop3: detected capacity change from 0 to 512 [ 386.817301][ T7371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.830730][ T7371] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.440261][ T7363] loop2: detected capacity change from 0 to 4096 [ 387.533635][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.541729][ T7363] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 387.595706][ T7382] loop1: detected capacity change from 0 to 64 [ 387.696156][ T7382] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 387.735444][ T7363] ntfs3(loop2): failed to replay log file. Can't mount rw! [ 388.395647][ T7387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 390.021736][ T7405] loop1: detected capacity change from 0 to 128 [ 390.217347][ T7405] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.304044][ T7405] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 390.986331][ T5812] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.008839][ T7420] netlink: 128 bytes leftover after parsing attributes in process `syz.3.611'. [ 391.863779][ T7424] loop2: detected capacity change from 0 to 1024 [ 391.873282][ T7427] loop1: detected capacity change from 0 to 164 [ 391.904457][ T7424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.201752][ T7424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.086596][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.681567][ T7443] loop1: detected capacity change from 0 to 1024 [ 393.802565][ T7448] loop4: detected capacity change from 0 to 512 [ 393.845147][ T7443] hfsplus: small file entry [ 393.893961][ T7448] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 393.936327][ T7448] EXT4-fs (loop4): invalid journal inode [ 393.942352][ T7448] EXT4-fs (loop4): can't get journal size [ 394.008137][ T7448] EXT4-fs (loop4): 1 truncate cleaned up [ 394.017083][ T7448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.125928][ T7453] loop0: detected capacity change from 0 to 22 [ 394.171644][ T7453] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 394.625131][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.615'. [ 394.941267][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.036650][ T7460] loop1: detected capacity change from 0 to 128 [ 395.129770][ T7460] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 395.401406][ T7465] netlink: 128 bytes leftover after parsing attributes in process `syz.0.616'. [ 395.677679][ T5807] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 395.728564][ T7460] FAT-fs (loop1): FAT read failed (blocknr 128) [ 396.345686][ T7473] loop0: detected capacity change from 0 to 64 [ 396.713995][ T7475] loop3: detected capacity change from 0 to 24 [ 396.781053][ T7475] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 396.954426][ T7471] loop2: detected capacity change from 0 to 4096 [ 397.153547][ T7479] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.023467][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 399.337305][ T7503] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 399.345078][ T7503] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 399.351107][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.363684][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.374414][ T5862] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 399.383948][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.577077][ T5862] usb 5-1: config 0 descriptor?? [ 400.125275][ T5862] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 400.181564][ T5862] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 400.260855][ T5862] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 400.274844][ T5862] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 400.404846][ T5862] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 400.556465][ T5862] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 400.593302][ T7514] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.633'. [ 400.696881][ T5862] usb 5-1: USB disconnect, device number 3 [ 400.724345][ T5862] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 400.795076][ T7511] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.633'. [ 400.905992][ T7516] netlink: 818 bytes leftover after parsing attributes in process `syz.1.634'. [ 401.625415][ T7518] fido_id[7518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 403.218454][ T7539] loop4: detected capacity change from 0 to 512 [ 403.505227][ T7539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.518648][ T7539] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.016617][ T7550] loop3: detected capacity change from 0 to 1024 [ 404.054721][ T7550] EXT4-fs: Ignoring removed orlov option [ 404.162689][ T7550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.256694][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.770945][ T5862] IPVS: starting estimator thread 0... [ 404.887418][ T7561] IPVS: using max 192 ests per chain, 9600 per kthread [ 404.911366][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.417235][ T7567] loop0: detected capacity change from 0 to 256 [ 407.877879][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 407.956142][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 409.184599][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 409.473495][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.485434][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.496308][ T42] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 409.506097][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.597133][ T42] usb 4-1: config 0 descriptor?? [ 410.114576][ T42] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 410.163213][ T42] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 410.249022][ T42] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 410.260898][ T42] hid-steam 0003:28DE:1142.000C: No HID_FEATURE_REPORT submitted - nothing to read [ 410.365706][ T42] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 410.468088][ T42] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 410.607059][ T42] usb 4-1: USB disconnect, device number 4 [ 410.631983][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 410.725998][ T42] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 410.774948][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 411.211555][ T7619] loop2: detected capacity change from 0 to 4096 [ 411.268266][ T7629] loop0: detected capacity change from 0 to 128 [ 411.629870][ T7619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.700049][ T7626] fido_id[7626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 411.888808][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 411.893845][ T7619] fs-verity (loop2, inode 16): Unknown hash algorithm number: 3 [ 412.026885][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 412.652711][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.644080][ T42] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 413.923449][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.940965][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.953409][ T42] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 413.962928][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.084448][ T42] usb 5-1: config 0 descriptor?? [ 414.588427][ T42] lua 0003:1E7D:2C2E.000E: unknown main item tag 0x0 [ 414.595868][ T42] lua 0003:1E7D:2C2E.000E: unknown main item tag 0x0 [ 414.602943][ T42] lua 0003:1E7D:2C2E.000E: unknown main item tag 0x0 [ 414.610683][ T42] lua 0003:1E7D:2C2E.000E: unknown main item tag 0x0 [ 414.617887][ T42] lua 0003:1E7D:2C2E.000E: unknown main item tag 0x0 [ 414.789448][ T42] lua 0003:1E7D:2C2E.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 414.876956][ T42] usb 5-1: USB disconnect, device number 4 [ 415.514185][ T7669] loop3: detected capacity change from 0 to 256 [ 415.711577][ T7665] fido_id[7665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 416.012310][ T7674] netlink: 11 bytes leftover after parsing attributes in process `syz.1.697'. [ 416.299049][ T11] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 416.500643][ T11] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 416.512252][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 416.519555][ T11] usb 1-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 416.529311][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.717684][ T11] usb 1-1: config 0 descriptor?? [ 416.734920][ T7675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 417.111683][ T7684] veth1_macvtap: vlans aren't supported yet for dev_uc|mc_add() [ 417.404242][ T11] saitek 0003:0738:1709.000F: hidraw0: USB HID vff.f8 Device [HID 0738:1709] on usb-dummy_hcd.0-1/input0 [ 417.590533][ T11] usb 1-1: USB disconnect, device number 11 [ 418.633301][ T7693] fido_id[7693]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 419.053966][ T11] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 419.195524][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.202577][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.326532][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.339602][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.350144][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 419.363718][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.536683][ T11] usb 3-1: config 0 descriptor?? [ 419.957184][ T7709] netlink: 11 bytes leftover after parsing attributes in process `syz.3.712'. [ 420.064269][ T11] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 420.078200][ T11] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 420.088702][ T11] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 420.096117][ T11] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 420.103409][ T11] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 420.255957][ T11] lua 0003:1E7D:2C2E.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 420.385108][ T11] usb 3-1: USB disconnect, device number 5 [ 421.063842][ T7713] loop4: detected capacity change from 0 to 4096 [ 421.079372][ T7716] fido_id[7716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 421.315654][ T42] IPVS: starting estimator thread 0... [ 421.468337][ T7724] IPVS: using max 192 ests per chain, 9600 per kthread [ 423.502500][ T7742] loop0: detected capacity change from 0 to 256 [ 423.527604][ T7742] exfat: Deprecated parameter 'utf8' [ 423.904326][ T7742] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 424.896498][ T7757] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 424.904367][ T7757] macvlan2: entered promiscuous mode [ 424.911126][ T7757] macvlan2: entered allmulticast mode [ 424.917016][ T7757] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 425.766667][ T7767] loop0: detected capacity change from 0 to 256 [ 426.373910][ T7767] FAT-fs (loop0): Directory bread(block 64) failed [ 426.380864][ T7767] FAT-fs (loop0): Directory bread(block 65) failed [ 426.388154][ T7767] FAT-fs (loop0): Directory bread(block 66) failed [ 426.395186][ T7767] FAT-fs (loop0): Directory bread(block 67) failed [ 426.402152][ T7767] FAT-fs (loop0): Directory bread(block 68) failed [ 426.409422][ T7767] FAT-fs (loop0): Directory bread(block 69) failed [ 426.416545][ T7767] FAT-fs (loop0): Directory bread(block 70) failed [ 426.430833][ T7767] FAT-fs (loop0): Directory bread(block 71) failed [ 426.440495][ T7767] FAT-fs (loop0): Directory bread(block 72) failed [ 426.447768][ T7767] FAT-fs (loop0): Directory bread(block 73) failed [ 426.874624][ T7778] tipc: Started in network mode [ 426.879858][ T7778] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 426.892794][ T7778] tipc: Enabled bearer , priority 10 [ 427.475073][ T7784] loop2: detected capacity change from 0 to 1024 [ 427.811382][ T7784] hfsplus: bad catalog entry type [ 428.005498][ T11] tipc: Node number set to 4269801642 [ 428.054579][ T3528] hfsplus: b-tree write err: -5, ino 4 [ 428.295991][ T7792] netlink: 13 bytes leftover after parsing attributes in process `syz.0.746'. [ 428.505737][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 428.703836][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 428.799988][ T11] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.811680][ T11] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.825641][ T11] usb 4-1: config 0 interface 0 has no altsetting 0 [ 428.832674][ T11] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 428.842326][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.080499][ T11] usb 4-1: config 0 descriptor?? [ 429.515666][ T7804] loop1: detected capacity change from 0 to 1024 [ 429.622223][ T11] corsair 0003:1B1C:1B34.0011: collection stack underflow [ 429.629981][ T11] corsair 0003:1B1C:1B34.0011: item 0 4 0 12 parsing failed [ 429.743912][ T11] corsair 0003:1B1C:1B34.0011: parse failed [ 429.750666][ T11] corsair 0003:1B1C:1B34.0011: probe with driver corsair failed with error -22 [ 429.964924][ T42] usb 4-1: USB disconnect, device number 5 [ 429.978781][ T7804] hfsplus: bad catalog entry type [ 430.395486][ T3762] hfsplus: b-tree write err: -5, ino 4 [ 432.066333][ T7834] vivid-000: disconnect [ 432.082327][ T7832] loop0: detected capacity change from 0 to 256 [ 432.108627][ T7829] vivid-000: reconnect [ 432.167704][ T7832] exfat: Deprecated parameter 'utf8' [ 432.260432][ T7832] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 432.323380][ T7836] loop1: detected capacity change from 0 to 512 [ 432.349934][ T7836] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.364224][ T7836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.444275][ T7836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.453921][ T7836] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.707191][ T7836] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.761: Allocating blocks 41-42 which overlap fs metadata [ 432.741381][ T7836] Quota error (device loop1): write_blk: dquota write failed [ 432.749555][ T7836] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 432.759630][ T7836] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.761: Allocating blocks 41-42 which overlap fs metadata [ 432.816950][ T7836] Quota error (device loop1): write_blk: dquota write failed [ 432.825517][ T7836] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 432.836130][ T7836] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.761: Failed to acquire dquot type 1 [ 432.924640][ T7836] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 432.940244][ T7836] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.761: corrupted inode contents [ 433.033669][ T7836] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.761: mark_inode_dirty error [ 433.070657][ T7836] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.761: corrupted inode contents [ 433.146451][ T7836] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.761: mark_inode_dirty error [ 433.188469][ T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 433.229424][ T7836] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.761: corrupted inode contents [ 433.313411][ T7836] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 433.396264][ T7836] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.761: corrupted inode contents [ 433.415555][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 433.462310][ T7836] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.761: mark_inode_dirty error [ 433.474670][ T11] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.475661][ T7836] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 433.492268][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 433.492513][ T11] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 433.492688][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.539609][ T7836] EXT4-fs (loop1): 1 truncate cleaned up [ 433.549152][ T7836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.584065][ T11] usb 5-1: config 0 descriptor?? [ 433.848456][ T7846] loop2: detected capacity change from 0 to 2048 [ 433.927428][ T7836] EXT4-fs: Cannot change quota options when quota turned on [ 434.045992][ T7851] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.131014][ T11] hid-u2fzero 0003:20A0:4287.0012: item fetching failed at offset 3/5 [ 434.218202][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.2.777 Not tainted syzkaller #0 PREEMPT(none) [ 434.218376][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.218467][ T7846] Call Trace: [ 434.218527][ T7846] [ 434.218582][ T7846] __dump_stack+0x26/0x30 [ 434.218771][ T7846] dump_stack_lvl+0x1df/0x270 [ 434.218973][ T7846] dump_stack+0x1e/0x25 [ 434.219156][ T7846] nilfs_btree_last_key+0x6b3/0x9a0 [ 434.219397][ T7846] ? __pfx_nilfs_btree_last_key+0x10/0x10 [ 434.219585][ T7846] nilfs_bmap_last_key+0x75/0x230 [ 434.219789][ T7846] nilfs_truncate_bmap+0xd7/0x5b0 [ 434.219988][ T7846] nilfs_truncate+0x261/0x580 [ 434.220156][ T7846] ? unmap_mapping_range+0xc5/0x150 [ 434.220402][ T7846] nilfs_setattr+0x373/0x420 [ 434.220602][ T7846] ? __pfx_nilfs_setattr+0x10/0x10 [ 434.220771][ T7846] notify_change+0x1ada/0x1bf0 [ 434.221014][ T7846] do_truncate+0x28f/0x310 [ 434.221197][ T7846] path_openat+0x5d85/0x6760 [ 434.221508][ T7846] do_filp_open+0x280/0x660 [ 434.221782][ T7846] do_sys_openat2+0x1bb/0x2f0 [ 434.221991][ T7846] __ia32_compat_sys_openat+0x238/0x300 [ 434.222233][ T7846] ia32_sys_call+0x3210/0x4310 [ 434.222449][ T7846] __do_fast_syscall_32+0xb0/0x150 [ 434.222659][ T7846] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 434.222868][ T7846] do_fast_syscall_32+0x38/0x80 [ 434.223076][ T7846] do_SYSENTER_32+0x1f/0x30 [ 434.223281][ T7846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.223475][ T7846] RIP: 0023:0xf701d539 [ 434.223586][ T7846] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 434.223721][ T7846] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 434.223867][ T7846] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 434.223975][ T7846] RDX: 00000000000a2281 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.224068][ T7846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.224166][ T7846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 434.224257][ T7846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.224390][ T7846] [ 434.451414][ T7846] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 434.460849][ T7846] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 434.530513][ T11] hid-u2fzero 0003:20A0:4287.0012: probe with driver hid-u2fzero failed with error -22 [ 434.555050][ T11] usb 5-1: USB disconnect, device number 5 [ 434.729487][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.798604][ T7846] Remounting filesystem read-only [ 434.805138][ T7846] NILFS (loop2): error -5 truncating bmap (ino=16) [ 434.843470][ T7852] NILFS (loop2): mounting fs with errors [ 435.274924][ T7857] vivid-000: ================= START STATUS ================= [ 435.282857][ T7857] vivid-000: Test Pattern: 75% Colorbar [ 435.289232][ T7857] vivid-000: Fill Percentage of Frame: 100 [ 435.295758][ T7857] vivid-000: Horizontal Movement: No Movement [ 435.302286][ T7857] vivid-000: Vertical Movement: No Movement [ 435.308822][ T7857] vivid-000: OSD Text Mode: All [ 435.314244][ T7857] vivid-000: Show Border: false [ 435.319456][ T7857] vivid-000: Show Square: false [ 435.325562][ T7857] vivid-000: Sensor Flipped Horizontally: false [ 435.339033][ T7857] vivid-000: Sensor Flipped Vertically: false [ 435.347763][ T7857] vivid-000: Insert SAV Code in Image: false [ 435.354365][ T7857] vivid-000: Insert EAV Code in Image: false [ 435.360710][ T7857] vivid-000: Insert Video Guard Band: false [ 435.367199][ T7857] vivid-000: Reduced Framerate: false [ 435.372914][ T7857] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 435.381108][ T7857] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 435.393786][ T7857] vivid-000: Enable Capture Cropping: true grabbed [ 435.400837][ T7857] vivid-000: Enable Capture Composing: true grabbed [ 435.408354][ T7857] vivid-000: Enable Capture Scaler: true grabbed [ 435.415422][ T7857] vivid-000: Timestamp Source: End of Frame [ 435.421666][ T7857] vivid-000: Colorspace: SMPTE 170M [ 435.427413][ T7857] vivid-000: Transfer Function: Default [ 435.440116][ T7857] vivid-000: Y'CbCr Encoding: Default [ 435.447903][ T7857] vivid-000: HSV Encoding: Hue 0-179 [ 435.453738][ T7857] vivid-000: Quantization: Default [ 435.459193][ T7857] vivid-000: Apply Alpha To Red Only: false [ 435.466209][ T7857] vivid-000: Standard Aspect Ratio: 4x3 [ 435.472132][ T7857] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 435.480519][ T7857] vivid-000: DV Timings: 640x480p59 inactive [ 435.487243][ T7857] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 435.495209][ T7857] vivid-000: Maximum EDID Blocks: 2 [ 435.500751][ T7857] vivid-000: Limited RGB Range (16-235): false [ 435.507461][ T7857] vivid-000: Rx RGB Quantization Range: Automatic [ 435.514464][ T7857] vivid-000: Power Present: 0x00000001 [ 435.520267][ T7857] tpg source WxH: 720x576 (Y'CbCr) [ 435.525892][ T7857] tpg field: 4 [ 435.529470][ T7857] tpg crop: (0,0)/720x576 [ 435.541270][ T7857] tpg compose: (0,0)/720x576 [ 435.548313][ T7857] tpg colorspace: 1 [ 435.552302][ T7857] tpg transfer function: 0/1 [ 435.557455][ T7857] tpg Y'CbCr encoding: 0/1 [ 435.562068][ T7857] tpg quantization: 0/2 [ 435.566585][ T7857] tpg RGB range: 0/2 [ 435.570654][ T7857] vivid-000: ================== END STATUS ================== [ 435.694617][ T7851] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 435.706106][ T7851] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 435.715757][ T7851] Remounting filesystem read-only [ 435.795116][ T5805] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 436.013339][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 436.257438][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 436.283663][ T42] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.295454][ T42] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.308931][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.316170][ T42] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 436.325692][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.499575][ T42] usb 2-1: config 0 descriptor?? [ 436.604423][ T7867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.782'. [ 437.005077][ T42] corsair 0003:1B1C:1B34.0013: collection stack underflow [ 437.012672][ T42] corsair 0003:1B1C:1B34.0013: item 0 4 0 12 parsing failed [ 437.107424][ T42] corsair 0003:1B1C:1B34.0013: parse failed [ 437.114710][ T42] corsair 0003:1B1C:1B34.0013: probe with driver corsair failed with error -22 [ 437.292840][ T42] usb 2-1: USB disconnect, device number 5 [ 438.691260][ T7886] loop0: detected capacity change from 0 to 512 [ 438.764038][ T7886] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.771155][ T7886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.850249][ T7886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 438.859842][ T7886] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.006194][ T30] audit: type=1326 audit(1761947931.524:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.1.794" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0 [ 439.085786][ T7886] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.781: Allocating blocks 41-42 which overlap fs metadata [ 439.102255][ T7886] Quota error (device loop0): write_blk: dquota write failed [ 439.111456][ T7886] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 439.127069][ T7886] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.781: Allocating blocks 41-42 which overlap fs metadata [ 439.153861][ T7886] Quota error (device loop0): write_blk: dquota write failed [ 439.162039][ T7886] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 439.173755][ T7886] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.781: Failed to acquire dquot type 1 [ 439.217864][ T7886] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 439.240765][ T7886] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.781: corrupted inode contents [ 439.269459][ T7886] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.781: mark_inode_dirty error [ 439.284310][ T7886] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.781: corrupted inode contents [ 439.344298][ T7886] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.781: mark_inode_dirty error [ 439.391108][ T7886] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.781: corrupted inode contents [ 439.448977][ T7886] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 439.524471][ T7886] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.781: corrupted inode contents [ 439.603968][ T7886] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.781: mark_inode_dirty error [ 439.678376][ T7886] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 439.747535][ T7886] EXT4-fs (loop0): 1 truncate cleaned up [ 439.756321][ T7886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.933466][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 440.118525][ T7886] EXT4-fs: Cannot change quota options when quota turned on [ 440.133575][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 440.181120][ T11] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.189891][ T11] usb 3-1: config 0 has no interface number 0 [ 440.276841][ T11] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 440.286985][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.297030][ T11] usb 3-1: Product: syz [ 440.301528][ T11] usb 3-1: Manufacturer: syz [ 440.306832][ T11] usb 3-1: SerialNumber: syz [ 440.389177][ T11] usb 3-1: config 0 descriptor?? [ 440.414066][ T11] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 440.649744][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.131977][ T11] gspca_spca1528: reg_w err -71 [ 441.160320][ T11] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 441.201761][ T11] usb 3-1: USB disconnect, device number 6 [ 442.404293][ T7918] tipc: Enabling of bearer rejected, failed to enable media [ 443.023445][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 443.223445][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 443.247597][ T42] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.259859][ T42] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.273948][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.280965][ T42] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 443.290584][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.436779][ T42] usb 5-1: config 0 descriptor?? [ 443.990479][ T42] corsair 0003:1B1C:1B34.0014: collection stack underflow [ 443.998506][ T42] corsair 0003:1B1C:1B34.0014: item 0 4 0 12 parsing failed [ 444.082164][ T42] corsair 0003:1B1C:1B34.0014: parse failed [ 444.089442][ T42] corsair 0003:1B1C:1B34.0014: probe with driver corsair failed with error -22 [ 444.255464][ T11] usb 5-1: USB disconnect, device number 6 [ 444.371891][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 444.425301][ T7938] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 445.597310][ T7948] loop3: detected capacity change from 0 to 1024 [ 445.617258][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 446.259519][ T5161] udevd[5161]: worker [6028] terminated by signal 33 (Unknown signal 33) [ 446.363767][ T5161] udevd[5161]: worker [6028] failed while handling '/devices/virtual/block/loop3' [ 447.044043][ T7954] loop0: detected capacity change from 0 to 4096 [ 447.149691][ T7954] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 447.372418][ T7954] ntfs3(loop0): failed to replay log file. Can't mount rw! [ 447.838223][ T7966] loop1: detected capacity change from 0 to 512 [ 447.984438][ T7966] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 448.119826][ T7966] EXT4-fs (loop1): 1 truncate cleaned up [ 448.130027][ T7966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.177962][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 448.220279][ T7971] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 448.479076][ T7966] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.819: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 448.555756][ T7966] EXT4-fs (loop1): Remounting filesystem read-only [ 448.978371][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.518525][ T24] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 449.596542][ T24] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.824113][ T7984] loop1: detected capacity change from 0 to 2048 [ 449.935880][ T7984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.647180][ T7989] fido_id[7989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 451.164054][ T1592] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 451.420405][ T1592] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 451.429143][ T1592] usb 1-1: config 0 has no interface number 0 [ 451.435749][ T1592] usb 1-1: config 0 interface 29 has no altsetting 0 [ 451.535279][ T1592] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 451.545153][ T1592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.554411][ T1592] usb 1-1: Product: syz [ 451.558824][ T1592] usb 1-1: Manufacturer: syz [ 451.564062][ T1592] usb 1-1: SerialNumber: syz [ 451.677288][ T1592] usb 1-1: config 0 descriptor?? [ 451.852181][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 451.862108][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.837'. [ 451.963890][ T1592] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 452.203921][ T1592] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 452.211086][ T1592] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 452.218709][ T1592] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 452.427281][ T1592] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 452.544840][ T1592] usb 1-1: USB disconnect, device number 12 [ 453.181169][ T8015] loop3: detected capacity change from 0 to 1024 [ 453.276705][ T8015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.446243][ T8015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.990869][ T8023] loop2: detected capacity change from 0 to 2048 [ 454.073640][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.146944][ T8023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.612747][ T8028] loop1: detected capacity change from 0 to 1024 [ 454.707997][ T8028] EXT4-fs: Ignoring removed orlov option [ 454.874330][ T8028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.567373][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.580058][ T8040] loop2: detected capacity change from 0 to 128 [ 455.637504][ T8040] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 455.796177][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'. [ 455.807862][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.849'. [ 455.934589][ T8040] FAT-fs (loop2): FAT read failed (blocknr 128) [ 457.568782][ T8060] loop3: detected capacity change from 0 to 164 [ 457.577788][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 457.783274][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 457.800128][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.810751][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.822517][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.832731][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 457.843095][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.078639][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 458.088503][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 458.096983][ T24] usb 2-1: Manufacturer: syz [ 458.217712][ T24] usb 2-1: config 0 descriptor?? [ 458.933748][ T24] rc_core: IR keymap rc-hauppauge not found [ 458.940099][ T24] Registered IR keymap rc-empty [ 458.946181][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 458.976987][ T8070] loop3: detected capacity change from 0 to 2048 [ 458.999839][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.034650][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 459.050974][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 459.234671][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.346803][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.402215][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.439436][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.502279][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.544533][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.628357][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.674314][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.724315][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.757701][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 459.796589][ T24] mceusb 2-1:0.0: Registered 鵣뙊쑡ꬅ쏙滇堠췛៞壳廟쌆贂䬊釤ո with mce emulator interface version 1 [ 459.819507][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 459.939970][ T24] usb 2-1: USB disconnect, device number 6 [ 460.892354][ T8087] loop4: detected capacity change from 0 to 64 [ 461.715093][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 461.979605][ T8099] loop4: detected capacity change from 0 to 24 [ 462.091710][ T8099] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 462.098839][ T8101] loop0: detected capacity change from 0 to 64 [ 462.511713][ T8104] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 462.518839][ T8104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 464.798441][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'. [ 466.709970][ T8144] loop4: detected capacity change from 0 to 4096 [ 467.003589][ T8154] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.101737][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 468.741801][ T8171] usb usb8: usbfs: process 8171 (syz.0.911) did not claim interface 0 before use [ 469.494599][ T8177] loop1: detected capacity change from 0 to 2048 [ 469.613473][ T8184] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.748107][ T8186] loop2: detected capacity change from 0 to 512 [ 469.755450][ T1592] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 469.886254][ T8186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.900320][ T8186] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.003737][ T1592] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.014814][ T1592] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.136048][ T1592] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.150117][ T1592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.159917][ T1592] usb 1-1: Product: syz [ 470.164663][ T1592] usb 1-1: Manufacturer: syz [ 470.169644][ T1592] usb 1-1: SerialNumber: syz [ 470.321794][ T1592] usb 1-1: selecting invalid altsetting 1 [ 470.499775][ T8182] loop4: detected capacity change from 0 to 4096 [ 470.697581][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.744580][ T8182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.895076][ T1592] usb 1-1: selecting invalid altsetting 1 [ 470.901295][ T1592] cdc_ncm 1-1:1.0: bind() failure [ 471.161747][ T1592] usb 1-1: USB disconnect, device number 13 [ 471.349518][ T8195] loop1: detected capacity change from 0 to 128 [ 471.667734][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.776636][ T8203] loop1: detected capacity change from 0 to 1024 [ 472.830256][ T8203] EXT4-fs: Ignoring removed bh option [ 472.885317][ T8203] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 473.001300][ T8208] loop3: detected capacity change from 0 to 128 [ 473.078567][ T8203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 473.159195][ T8208] EXT4-fs: Ignoring removed nobh option [ 473.164343][ T8203] System zones: 0-1, 3-12 [ 473.234424][ T8203] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.934: lblock 1 mapped to illegal pblock 1 (length 1) [ 473.284198][ T8203] Quota error (device loop1): write_blk: dquota write failed [ 473.292046][ T8203] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 473.304191][ T8203] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.934: Failed to acquire dquot type 0 [ 473.345926][ T8208] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.388931][ T8203] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.934: Freeing blocks not in datazone - block = 0, count = 4096 [ 473.415580][ T8203] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.934: Invalid inode bitmap blk 0 in block_group 0 [ 473.449323][ T4232] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 473.468635][ T8208] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.495969][ T8203] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 473.507790][ T4232] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 473.517047][ T4232] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0 [ 473.544218][ T8203] EXT4-fs (loop1): 1 orphan inode deleted [ 473.553647][ T8203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.805207][ T8203] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 474.088717][ T5799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 474.265475][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.705111][ T24] Process accounting resumed [ 475.943491][ T1592] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 476.023829][ T8234] Process accounting resumed [ 476.230534][ T1592] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.241682][ T1592] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.312500][ T1592] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.323996][ T1592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.332283][ T1592] usb 4-1: Product: syz [ 476.337237][ T1592] usb 4-1: Manufacturer: syz [ 476.342060][ T1592] usb 4-1: SerialNumber: syz [ 476.474054][ T1592] usb 4-1: selecting invalid altsetting 1 [ 476.594053][ T8243] loop2: detected capacity change from 0 to 128 [ 476.649404][ T8243] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 476.730983][ T8243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.895544][ T30] audit: type=1800 audit(1761947969.414:10): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.941" name="file0" dev="loop2" ino=99 res=0 errno=0 [ 477.036729][ T1592] usb 4-1: selecting invalid altsetting 1 [ 477.043234][ T1592] cdc_ncm 4-1:1.0: bind() failure [ 477.100520][ T8247] loop0: detected capacity change from 0 to 128 [ 477.200326][ T8247] EXT4-fs: Ignoring removed nobh option [ 477.261585][ T24] usb 4-1: USB disconnect, device number 6 [ 477.364917][ T8247] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.423374][ T8247] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 477.898454][ T5798] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.214017][ T1592] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 478.432245][ T1592] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 478.445930][ T1592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.516190][ T1592] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 478.526045][ T1592] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 478.534696][ T1592] usb 3-1: Manufacturer: syz [ 478.676943][ T1592] usb 3-1: config 0 descriptor?? [ 478.792296][ T8263] loop1: detected capacity change from 0 to 256 [ 479.124208][ T8263] FAT-fs (loop1): Directory bread(block 64) failed [ 479.131298][ T8263] FAT-fs (loop1): Directory bread(block 65) failed [ 479.139767][ T8263] FAT-fs (loop1): Directory bread(block 66) failed [ 479.147430][ T8263] FAT-fs (loop1): Directory bread(block 67) failed [ 479.159991][ T8263] FAT-fs (loop1): Directory bread(block 68) failed [ 479.168860][ T8263] FAT-fs (loop1): Directory bread(block 69) failed [ 479.176343][ T8263] FAT-fs (loop1): Directory bread(block 70) failed [ 479.183649][ T8263] FAT-fs (loop1): Directory bread(block 71) failed [ 479.190600][ T8263] FAT-fs (loop1): Directory bread(block 72) failed [ 479.197772][ T8263] FAT-fs (loop1): Directory bread(block 73) failed [ 479.235098][ T1592] rc_core: IR keymap rc-hauppauge not found [ 479.241263][ T1592] Registered IR keymap rc-empty [ 479.249678][ T1592] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 479.271148][ T1592] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 479.515191][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 2 [ 479.752162][ T24] usb 3-1: USB disconnect, device number 7 [ 480.442862][ T8275] loop1: detected capacity change from 0 to 64 [ 480.627436][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.634503][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.872436][ T8274] loop0: detected capacity change from 0 to 2048 [ 480.926880][ T8279] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 480.935597][ T8279] macvlan2: entered promiscuous mode [ 480.942320][ T8279] macvlan2: entered allmulticast mode [ 480.948278][ T8279] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 480.962758][ T1592] IPVS: starting estimator thread 0... [ 481.106688][ T8281] IPVS: using max 192 ests per chain, 9600 per kthread [ 481.116355][ T8274] loop0: p1 < > p3 [ 481.158256][ T8274] loop0: p3 size 134217728 extends beyond EOD, truncated [ 481.866312][ T8288] loop3: detected capacity change from 0 to 128 [ 481.918108][ T8288] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 481.966185][ T8288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.044233][ T30] audit: type=1800 audit(1761947974.564:11): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.957" name="file0" dev="loop3" ino=99 res=0 errno=0 [ 483.079023][ T6074] udevd[6074]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 483.215052][ T8299] tipc: Started in network mode [ 483.215254][ T8299] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 483.218988][ T8299] tipc: Enabled bearer , priority 10 [ 484.334179][ T1592] tipc: Node number set to 4269801642 [ 484.613441][ T8309] loop3: detected capacity change from 0 to 2048 [ 484.777099][ T6025] loop3: p1 < > p3 [ 484.824524][ T6025] loop3: p3 size 134217728 extends beyond EOD, truncated [ 484.920808][ T8309] loop3: p1 < > p3 [ 484.980059][ T8309] loop3: p3 size 134217728 extends beyond EOD, truncated [ 485.696541][ T6074] udevd[6074]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 485.717561][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 485.932085][ T8322] tipc: Enabled bearer , priority 19 [ 486.692787][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 486.726888][ T6074] udevd[6074]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 487.259369][ T8334] loop0: detected capacity change from 0 to 2048 [ 487.492775][ T8339] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 487.620353][ T8334] CPU: 1 UID: 0 PID: 8334 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT(none) [ 487.620528][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.620624][ T8334] Call Trace: [ 487.620683][ T8334] [ 487.620742][ T8334] __dump_stack+0x26/0x30 [ 487.620938][ T8334] dump_stack_lvl+0x1df/0x270 [ 487.621142][ T8334] dump_stack+0x1e/0x25 [ 487.621318][ T8334] nilfs_btree_last_key+0x6b3/0x9a0 [ 487.621562][ T8334] ? __pfx_nilfs_btree_last_key+0x10/0x10 [ 487.621755][ T8334] nilfs_bmap_last_key+0x75/0x230 [ 487.621937][ T8334] nilfs_truncate_bmap+0xd7/0x5b0 [ 487.622141][ T8334] nilfs_truncate+0x261/0x580 [ 487.622299][ T8334] ? unmap_mapping_range+0xc5/0x150 [ 487.622552][ T8334] nilfs_setattr+0x373/0x420 [ 487.622754][ T8334] ? __pfx_nilfs_setattr+0x10/0x10 [ 487.622935][ T8334] notify_change+0x1ada/0x1bf0 [ 487.623174][ T8334] do_truncate+0x28f/0x310 [ 487.623365][ T8334] path_openat+0x5d85/0x6760 [ 487.623689][ T8334] do_filp_open+0x280/0x660 [ 487.623977][ T8334] do_sys_openat2+0x1bb/0x2f0 [ 487.624196][ T8334] __ia32_compat_sys_openat+0x238/0x300 [ 487.624456][ T8334] ia32_sys_call+0x3210/0x4310 [ 487.624688][ T8334] __do_fast_syscall_32+0xb0/0x150 [ 487.624912][ T8334] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 487.625128][ T8334] do_fast_syscall_32+0x38/0x80 [ 487.625347][ T8334] do_SYSENTER_32+0x1f/0x30 [ 487.625559][ T8334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.625772][ T8334] RIP: 0023:0xf7f26539 [ 487.625892][ T8334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 487.626039][ T8334] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 487.626202][ T8334] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 487.626320][ T8334] RDX: 00000000000a2281 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.626429][ T8334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.626527][ T8334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 487.626627][ T8334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.626769][ T8334] [ 487.852888][ T8334] NILFS (loop0): btree level mismatch (ino=16): 1 != 7 [ 487.869207][ T8334] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 488.126255][ T8334] Remounting filesystem read-only [ 488.126330][ T8334] NILFS (loop0): error -5 truncating bmap (ino=16) [ 488.137089][ T8347] NILFS (loop0): mounting fs with errors [ 488.690658][ T8350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 488.762775][ T8339] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 488.763239][ T8339] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 488.763390][ T8339] Remounting filesystem read-only [ 488.766650][ T5798] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 490.139988][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 490.208002][ T30] audit: type=1326 audit(1761947982.724:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.994" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x0 [ 490.323961][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 490.339201][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.347723][ T24] usb 2-1: config 0 has no interface number 0 [ 490.400838][ T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 490.410455][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.424946][ T24] usb 2-1: Product: syz [ 490.429381][ T24] usb 2-1: Manufacturer: syz [ 490.436465][ T24] usb 2-1: SerialNumber: syz [ 490.489952][ T24] usb 2-1: config 0 descriptor?? [ 490.578000][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 491.069291][ T8368] loop3: detected capacity change from 0 to 4096 [ 491.230058][ T24] gspca_spca1528: reg_w err -71 [ 491.267392][ T24] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 491.322086][ T24] usb 2-1: USB disconnect, device number 7 [ 491.391549][ T8373] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.923934][ T8377] loop2: detected capacity change from 0 to 64 [ 492.594031][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 494.729908][ T8404] loop2: detected capacity change from 0 to 512 [ 494.734442][ T8404] EXT4-fs: Ignoring removed i_version option [ 494.738968][ T8404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 494.807130][ T8404] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 494.836601][ T8404] EXT4-fs (loop2): 1 truncate cleaned up [ 494.894579][ T8404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.495686][ T8409] loop0: detected capacity change from 0 to 4096 [ 495.627859][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.685775][ T8413] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.919760][ T5161] udevd[5161]: worker [6025] terminated by signal 33 (Unknown signal 33) [ 495.920008][ T5161] udevd[5161]: worker [6025] failed while handling '/devices/virtual/block/loop2' [ 495.939581][ T5161] udevd[5161]: worker [6074] terminated by signal 33 (Unknown signal 33) [ 496.081329][ T5161] udevd[5161]: worker [6074] failed while handling '/devices/virtual/block/loop0' [ 496.987018][ T8419] loop1: detected capacity change from 0 to 512 [ 497.156314][ T8419] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.1016: corrupted xattr block 95: invalid header [ 497.294177][ T8419] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1016: bg 0: block 7: invalid block bitmap [ 497.429874][ T8419] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 497.522882][ T8419] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.1016: corrupted xattr block 95: invalid header [ 497.574314][ T8419] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 497.584409][ T8419] EXT4-fs (loop1): 1 orphan inode deleted [ 497.598098][ T8419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.635521][ T8429] loop3: detected capacity change from 0 to 256 [ 498.536362][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.333502][ T8435] loop2: detected capacity change from 0 to 4096 [ 499.392775][ T8435] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 499.754413][ T8435] ntfs3(loop2): ino=1a, mi_enum_attr [ 499.760344][ T8435] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 499.835577][ T5867] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 500.109556][ T5867] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 55911, setting to 64 [ 500.121496][ T5867] usb 4-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.135611][ T5867] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 500.145123][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.371888][ T8447] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.372803][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1033'. [ 500.785399][ T24] usb 4-1: USB disconnect, device number 7 [ 502.073942][ T8465] loop2: detected capacity change from 0 to 256 [ 502.294045][ T8465] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 502.453538][ T5867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 502.688874][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.697696][ T5867] usb 4-1: config 0 has no interface number 0 [ 502.704308][ T5867] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.719572][ T5867] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.732854][ T5867] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 502.744882][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.939409][ T5867] usb 4-1: config 0 descriptor?? [ 503.616079][ T5867] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0016/input/input13 [ 503.798695][ T8479] loop2: detected capacity change from 0 to 256 [ 503.840933][ T8479] exfat: Deprecated parameter 'utf8' [ 504.089987][ T8479] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 504.139320][ T5867] holtek_kbd 0003:04D9:A055.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 504.234531][ T5867] usb 4-1: USB disconnect, device number 8 [ 505.556103][ T8487] fido_id[8487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 505.772714][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 506.271583][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 507.822279][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 508.113895][ T5867] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 508.219104][ T30] audit: type=1326 audit(1761948000.734:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 508.247852][ T30] audit: type=1326 audit(1761948000.774:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 508.272465][ T30] audit: type=1326 audit(1761948000.774:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 508.325736][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 508.397719][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.406327][ T5867] usb 4-1: config 0 has no interface number 0 [ 508.412890][ T5867] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.424737][ T5867] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.437376][ T5867] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 508.450720][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.504348][ T30] audit: type=1326 audit(1761948000.844:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 508.573298][ T5867] usb 4-1: config 0 descriptor?? [ 509.054153][ T30] audit: type=1326 audit(1761948001.564:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 509.207607][ T30] audit: type=1326 audit(1761948001.654:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 509.288162][ T5867] uclogic 0003:28BD:0094.0017: failed retrieving string descriptor #100: -71 [ 509.297973][ T5867] uclogic 0003:28BD:0094.0017: failed retrieving pen parameters: -71 [ 509.306717][ T5867] uclogic 0003:28BD:0094.0017: pen probing failed: -71 [ 509.314117][ T5867] uclogic 0003:28BD:0094.0017: failed probing parameters: -71 [ 509.322250][ T5867] uclogic 0003:28BD:0094.0017: probe with driver uclogic failed with error -71 [ 509.488012][ T5867] usb 4-1: USB disconnect, device number 9 [ 509.841834][ T8531] tipc: Started in network mode [ 509.847515][ T8531] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 509.857106][ T8531] tipc: Enabled bearer , priority 14 [ 509.947287][ T8533] netlink: 'syz.2.1072': attribute type 1 has an invalid length. [ 510.095712][ T8535] loop4: detected capacity change from 0 to 512 [ 510.275891][ T8529] loop0: detected capacity change from 0 to 4096 [ 510.342435][ T8529] ntfs3(loop0): ino=3, Correct links count -> 2. [ 510.439602][ T8535] EXT4-fs (loop4): 1 orphan inode deleted [ 510.448620][ T8535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.530037][ T8535] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.719336][ T8535] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0000601b, b_size=4096, device loop4 blocksize: 4096 [ 510.734472][ T8535] grow_buffers: requested out-of-range block 144115188075855872 for device loop4 [ 510.744138][ T8535] EXT4-fs warning (device loop4): ext4_resize_fs:2019: can't read last block, resize aborted [ 510.973563][ T5867] tipc: Node number set to 15444650 [ 511.012875][ T8529] ntfs3(loop0): ino=1a, mi_enum_attr [ 511.019059][ T8529] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 511.094804][ T8544] pim6reg9: entered allmulticast mode [ 511.256675][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.858389][ T8550] loop2: detected capacity change from 0 to 256 [ 512.202095][ T8550] FAT-fs (loop2): Directory bread(block 64) failed [ 512.209777][ T8550] FAT-fs (loop2): Directory bread(block 65) failed [ 512.217651][ T8550] FAT-fs (loop2): Directory bread(block 66) failed [ 512.224851][ T8550] FAT-fs (loop2): Directory bread(block 67) failed [ 512.237407][ T8550] FAT-fs (loop2): Directory bread(block 68) failed [ 512.246026][ T8550] FAT-fs (loop2): Directory bread(block 69) failed [ 512.253350][ T8550] FAT-fs (loop2): Directory bread(block 70) failed [ 512.260245][ T8550] FAT-fs (loop2): Directory bread(block 71) failed [ 512.267656][ T8550] FAT-fs (loop2): Directory bread(block 72) failed [ 512.274693][ T8550] FAT-fs (loop2): Directory bread(block 73) failed [ 512.313969][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 512.491762][ T8557] loop3: detected capacity change from 0 to 8 [ 512.544738][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 512.611481][ T6072] udevd[6072]: incorrect cramfs checksum on /dev/loop3 [ 512.633387][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 512.649191][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.660217][ T24] usb 5-1: Product: syz [ 512.664848][ T24] usb 5-1: Manufacturer: syz [ 512.669688][ T24] usb 5-1: SerialNumber: syz [ 512.798858][ T24] usb 5-1: config 0 descriptor?? [ 512.894829][ T24] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 513.294541][ T6076] udevd[6076]: incorrect cramfs checksum on /dev/loop3 [ 513.403684][ T24] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 513.412838][ T24] visor 5-1:0.0: probe with driver visor failed with error -5 [ 513.660437][ T5867] usb 5-1: USB disconnect, device number 7 [ 515.349697][ T8578] loop1: detected capacity change from 0 to 512 [ 515.463922][ T8578] EXT4-fs (loop1): Test dummy encryption mode enabled [ 515.516380][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 515.589337][ T8578] EXT4-fs error (device loop1): __ext4_iget:5443: inode #11: block 1: comm syz.1.1092: invalid block [ 515.647900][ T8578] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1092: couldn't read orphan inode 11 (err -117) [ 515.667655][ T8578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.733568][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.744605][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.756651][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.767111][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 515.774404][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 515.783916][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.034439][ T24] usb 5-1: config 0 descriptor?? [ 516.389469][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.542345][ T24] kye 0003:0458:0087.0018: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 516.574827][ T8589] raw_sendmsg: syz.3.1096 forgot to set AF_INET. Fix it! [ 516.804212][ T5867] usb 5-1: USB disconnect, device number 8 [ 517.580446][ T8592] fido_id[8592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 517.620590][ T8596] loop0: detected capacity change from 0 to 256 [ 517.822132][ T8600] program syz.3.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.199067][ T8602] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1102'. [ 518.770785][ T8604] loop4: detected capacity change from 0 to 2048 [ 518.910621][ T8604] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 518.940463][ T8604] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 518.948834][ T8604] UDF-fs: Scanning with blocksize 512 failed [ 519.043845][ T8604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.115087][ T8608] loop3: detected capacity change from 0 to 1764 [ 519.291764][ T8608] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 519.642181][ T8614] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1108'. [ 520.393131][ T30] audit: type=1326 audit(1761948012.904:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 520.441564][ T8622] loop3: detected capacity change from 0 to 16 [ 520.516012][ T8622] erofs (device loop3): mounted with root inode @ nid 36. [ 520.531068][ T30] audit: type=1326 audit(1761948012.964:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 520.556555][ T30] audit: type=1326 audit(1761948012.964:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 520.579973][ T30] audit: type=1326 audit(1761948012.964:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 520.602585][ T30] audit: type=1326 audit(1761948012.994:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 520.626061][ T30] audit: type=1326 audit(1761948012.994:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 520.655731][ T30] audit: type=1326 audit(1761948013.004:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 522.314600][ T8641] loop0: detected capacity change from 0 to 1024 [ 522.567434][ T8641] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1118'. [ 523.728078][ T8652] loop4: detected capacity change from 0 to 764 [ 523.787460][ T8652] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 524.576787][ T8657] loop0: detected capacity change from 0 to 4096 [ 524.774505][ T8666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.316666][ T8681] loop1: detected capacity change from 0 to 512 [ 526.517110][ T8681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.525269][ T8681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.588606][ T8681] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 526.742683][ T8681] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 526.751873][ T8681] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 526.810510][ T8681] EXT4-fs (loop1): 1 truncate cleaned up [ 526.813404][ T8686] loop3: detected capacity change from 0 to 1024 [ 526.819306][ T8681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.888785][ T8686] EXT4-fs: Ignoring removed bh option [ 526.895406][ T8686] EXT4-fs: inline encryption not supported [ 526.960222][ T8686] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.045596][ T8681] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.1138: lblock 0 mapped to illegal pblock 4 (length 1) [ 527.071095][ T8686] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 527.126884][ T8681] EXT4-fs (loop1): Remounting filesystem read-only [ 527.167552][ T8686] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1139: lblock 2 mapped to illegal pblock 2 (length 1) [ 527.220997][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.275327][ T8686] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 527.293229][ T8686] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1139: lblock 0 mapped to illegal pblock 48 (length 1) [ 527.461496][ T8686] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 527.471075][ T8686] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1139: Failed to acquire dquot type 0 [ 527.586454][ T8686] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 527.684331][ T8686] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1139: mark_inode_dirty error [ 527.784369][ T8686] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 527.801338][ T8686] EXT4-fs (loop3): 1 orphan inode deleted [ 527.905274][ T58] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.909230][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.031201][ T58] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 528.040345][ T58] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 528.724499][ T8701] loop2: detected capacity change from 0 to 256 [ 528.741795][ T8701] exfat: Deprecated parameter 'utf8' [ 528.749170][ T8701] exfat: Deprecated parameter 'namecase' [ 528.795704][ T8686] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1139: lblock 0 mapped to illegal pblock 48 (length 1) [ 528.879284][ T8686] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 529.056850][ T8701] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 529.185860][ T1592] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 529.274849][ T1592] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.396967][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.414453][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 530.432015][ T8708] fido_id[8708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 530.506124][ T8718] loop0: detected capacity change from 0 to 256 [ 530.626414][ T8718] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 530.678475][ T8719] loop2: detected capacity change from 0 to 1024 [ 530.728635][ T8718] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 530.748215][ T8719] ext3: Bad value for 'mb_optimize_scan' [ 532.013688][ T1592] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 532.233637][ T1592] usb 5-1: Using ep0 maxpacket: 32 [ 532.261009][ T1592] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 532.270060][ T1592] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 532.279301][ T1592] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 532.288844][ T1592] usb 5-1: config 1 has no interface number 0 [ 532.295645][ T1592] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.311573][ T1592] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 532.326491][ T1592] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 532.336744][ T1592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.586160][ T8730] syz.2.1157 (8730): drop_caches: 4 [ 532.664509][ T1592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 532.948657][ T1592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 533.574438][ T1592] usb 5-1: USB disconnect, device number 9 [ 533.601488][ T1592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 533.652444][ T8732] syz.3.1158 (8732) used greatest stack depth: 2320 bytes left [ 533.797999][ T8739] loop2: detected capacity change from 0 to 1024 [ 533.947880][ T30] audit: type=1800 audit(1761948026.454:26): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1161" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 534.219645][ T8744] loop1: detected capacity change from 0 to 47 [ 536.447957][ T8765] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1174'. [ 536.457678][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 536.467330][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1174'. [ 538.011602][ T8780] loop0: detected capacity change from 0 to 512 [ 538.083594][ T8780] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 538.224020][ T8780] EXT4-fs (loop0): 1 truncate cleaned up [ 538.232603][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.881100][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.548775][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1190'. [ 540.246268][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 540.606256][ T8809] loop3: detected capacity change from 0 to 2048 [ 540.752485][ T8816] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.568992][ T8824] loop0: detected capacity change from 0 to 512 [ 541.636092][ T8824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 541.643277][ T8824] EXT4-fs: Ignoring removed oldalloc option [ 541.854904][ T8824] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1200: Parent and EA inode have the same ino 15 [ 541.964638][ T8824] EXT4-fs (loop0): Remounting filesystem read-only [ 541.971471][ T8824] EXT4-fs (loop0): 1 orphan inode deleted [ 541.980913][ T8824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.075733][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.082591][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.586674][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.604543][ T1592] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 543.660078][ T8845] loop3: detected capacity change from 0 to 256 [ 543.726368][ T8845] exfat: Invalid uid '0x00000000ffffffff' [ 543.794685][ T1592] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 543.805057][ T1592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.884480][ T1592] usb 1-1: config 0 descriptor?? [ 543.929214][ T1592] cp210x 1-1:0.0: cp210x converter detected [ 544.451951][ T1592] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 544.501751][ T1592] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 544.513887][ T1592] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 544.641206][ T1592] usb 1-1: cp210x converter now attached to ttyUSB0 [ 544.700290][ T1592] usb 1-1: USB disconnect, device number 14 [ 544.751409][ T1592] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 544.762202][ T1592] cp210x 1-1:0.0: device disconnected [ 544.951574][ T8853] bridge0: entered promiscuous mode [ 544.957348][ T8853] macsec1: entered promiscuous mode [ 544.970487][ T8853] bridge0: port 3(macsec1) entered blocking state [ 544.977822][ T8853] bridge0: port 3(macsec1) entered disabled state [ 544.986545][ T8853] macsec1: entered allmulticast mode [ 544.992064][ T8853] bridge0: entered allmulticast mode [ 545.069454][ T8853] macsec1: left allmulticast mode [ 545.075169][ T8853] bridge0: left allmulticast mode [ 545.117897][ T8853] bridge0: left promiscuous mode [ 546.073579][ T8862] loop0: detected capacity change from 0 to 512 [ 546.179551][ T8866] loop3: detected capacity change from 0 to 16 [ 546.233736][ T8862] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 546.245867][ T8862] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 546.256561][ T8862] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1218: Corrupt directory, running e2fsck is recommended [ 546.272819][ T8863] loop4: detected capacity change from 0 to 2048 [ 546.321710][ T8862] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 546.352058][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 546.379935][ T8862] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1218: corrupted in-inode xattr: invalid ea_ino [ 546.416078][ T8862] EXT4-fs (loop0): Remounting filesystem read-only [ 546.419600][ T8863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.425545][ T8862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.534115][ T8862] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 546.550622][ T8862] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 546.562569][ T8862] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1218: Corrupt directory, running e2fsck is recommended [ 546.652240][ T8863] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 547.270079][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.087650][ T8887] loop3: detected capacity change from 0 to 128 [ 549.244107][ T8887] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 550.374275][ T8899] ===================================================== [ 550.381977][ T8899] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_iter+0x4e4/0x33f0 [ 550.390723][ T8899] _copy_to_iter+0x4e4/0x33f0 [ 550.395867][ T8899] __skb_datagram_iter+0x196/0x12c0 [ 550.401314][ T8899] skb_copy_datagram_iter+0x5b/0x1e0 [ 550.407224][ T8899] packet_recvmsg+0xe2b/0x24e0 [ 550.412203][ T8899] sock_recvmsg+0x2df/0x390 [ 550.417144][ T8899] sock_read_iter+0x2c8/0x360 [ 550.422026][ T8899] do_iter_readv_writev+0x9e1/0xc20 [ 550.432780][ T8899] vfs_readv+0x34a/0xf30 [ 550.439305][ T8899] do_readv+0x1b5/0x580 [ 550.443953][ T8899] __ia32_sys_readv+0x9c/0xf0 [ 550.448836][ T8899] ia32_sys_call+0x40c0/0x4310 [ 550.454044][ T8899] __do_fast_syscall_32+0xb0/0x150 [ 550.459408][ T8899] do_fast_syscall_32+0x38/0x80 [ 550.464805][ T8899] do_SYSENTER_32+0x1f/0x30 [ 550.469542][ T8899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.476342][ T8899] [ 550.478785][ T8899] Uninit was created at: [ 550.484032][ T8899] kmem_cache_free+0x2b0/0x1490 [ 550.489126][ T8899] skb_free_head+0x13c/0x3a0 [ 550.494503][ T8899] skb_release_data+0x9f7/0xac0 [ 550.499594][ T8899] __kfree_skb+0x6b/0x260 [ 550.504341][ T8899] consume_skb+0x83/0x230 [ 550.508887][ T8899] skb_free_datagram+0x1e/0x30 [ 550.514127][ T8899] netlink_recvmsg+0xad1/0xfe0 [ 550.519139][ T8899] sock_recvmsg+0x2df/0x390 [ 550.524641][ T8899] __sys_recvfrom+0x282/0x550 [ 550.534657][ T8899] __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 550.541001][ T8899] ia32_sys_call+0x2942/0x4310 [ 550.547632][ T8899] __do_fast_syscall_32+0xb0/0x150 [ 550.553355][ T8899] do_fast_syscall_32+0x38/0x80 [ 550.558454][ T8899] do_SYSENTER_32+0x1f/0x30 [ 550.563393][ T8899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.569960][ T8899] [ 550.572379][ T8899] Bytes 4-5 of 120 are uninitialized [ 550.577988][ T8899] Memory access of size 120 starts at ffff88811468af64 [ 550.585333][ T8899] Data copied to user address 000000008000038c [ 550.591608][ T8899] [ 550.594286][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.0.1235 Not tainted syzkaller #0 PREEMPT(none) [ 550.606797][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.617710][ T8899] ===================================================== [ 550.624970][ T8899] Disabling lock debugging due to kernel taint [ 550.636574][ T8899] Kernel panic - not syncing: kmsan.panic set ... [ 550.643253][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.0.1235 Tainted: G B syzkaller #0 PREEMPT(none) [ 550.654344][ T8899] Tainted: [B]=BAD_PAGE [ 550.658619][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.668838][ T8899] Call Trace: [ 550.672253][ T8899] [ 550.675302][ T8899] __dump_stack+0x26/0x30 [ 550.679846][ T8899] dump_stack_lvl+0x53/0x270 [ 550.684651][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.691817][ T8899] dump_stack+0x1e/0x25 [ 550.696208][ T8899] vpanic+0x435/0xd30 [ 550.700435][ T8899] panic+0x15d/0x160 [ 550.704606][ T8899] kmsan_report+0x31c/0x320 [ 550.709315][ T8899] ? kmsan_internal_check_memory+0x16c/0x230 [ 550.715566][ T8899] ? kmsan_copy_to_user+0xf1/0x190 [ 550.720895][ T8899] ? _copy_to_iter+0x4e4/0x33f0 [ 550.725977][ T8899] ? __skb_datagram_iter+0x196/0x12c0 [ 550.731604][ T8899] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 550.737304][ T8899] ? packet_recvmsg+0xe2b/0x24e0 [ 550.742461][ T8899] ? sock_recvmsg+0x2df/0x390 [ 550.747330][ T8899] ? sock_read_iter+0x2c8/0x360 [ 550.752369][ T8899] ? do_iter_readv_writev+0x9e1/0xc20 [ 550.757930][ T8899] ? vfs_readv+0x34a/0xf30 [ 550.762565][ T8899] ? do_readv+0x1b5/0x580 [ 550.767092][ T8899] ? __ia32_sys_readv+0x9c/0xf0 [ 550.772128][ T8899] ? ia32_sys_call+0x40c0/0x4310 [ 550.777305][ T8899] ? __do_fast_syscall_32+0xb0/0x150 [ 550.782819][ T8899] ? do_fast_syscall_32+0x38/0x80 [ 550.788168][ T8899] ? do_SYSENTER_32+0x1f/0x30 [ 550.793068][ T8899] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.799828][ T8899] ? stack_depot_save_flags+0x35/0x7b0 [ 550.805511][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.810828][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.816157][ T8899] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 550.822793][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.828135][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.834167][ T8899] ? finish_task_switch+0x1a7/0x920 [ 550.839590][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.845107][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.851159][ T8899] kmsan_internal_check_memory+0x16c/0x230 [ 550.857259][ T8899] kmsan_copy_to_user+0xf1/0x190 [ 550.862395][ T8899] _copy_to_iter+0x4e4/0x33f0 [ 550.867262][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.872575][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.878605][ T8899] ? kmsan_internal_check_memory+0x9c/0x230 [ 550.884795][ T8899] __skb_datagram_iter+0x196/0x12c0 [ 550.890247][ T8899] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 550.896168][ T8899] skb_copy_datagram_iter+0x5b/0x1e0 [ 550.901698][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.907724][ T8899] packet_recvmsg+0xe2b/0x24e0 [ 550.912762][ T8899] ? __pfx_packet_recvmsg+0x10/0x10 [ 550.918188][ T8899] sock_recvmsg+0x2df/0x390 [ 550.922898][ T8899] sock_read_iter+0x2c8/0x360 [ 550.927799][ T8899] ? __pfx_sock_read_iter+0x10/0x10 [ 550.933178][ T8899] do_iter_readv_writev+0x9e1/0xc20 [ 550.938608][ T8899] vfs_readv+0x34a/0xf30 [ 550.943069][ T8899] ? filter_irq_stacks+0x49/0x190 [ 550.948401][ T8899] ? stack_depot_save_flags+0x35/0x7b0 [ 550.954064][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.959410][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.964718][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.970741][ T8899] do_readv+0x1b5/0x580 [ 550.975102][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 550.980431][ T8899] __ia32_sys_readv+0x9c/0xf0 [ 550.985318][ T8899] ia32_sys_call+0x40c0/0x4310 [ 550.990331][ T8899] __do_fast_syscall_32+0xb0/0x150 [ 550.995690][ T8899] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 551.001656][ T8899] do_fast_syscall_32+0x38/0x80 [ 551.006737][ T8899] do_SYSENTER_32+0x1f/0x30 [ 551.011466][ T8899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.018020][ T8899] RIP: 0023:0xf7f26539 [ 551.022231][ T8899] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 551.042041][ T8899] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 551.050665][ T8899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 551.058784][ T8899] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.066891][ T8899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.074993][ T8899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.083110][ T8899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.091262][ T8899] [ 551.094676][ T8899] Kernel Offset: disabled [ 551.099060][ T8899] Rebooting in 86400 seconds..