last executing test programs: 20m31.049724607s ago: executing program 2 (id=2680): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) 20m30.475946351s ago: executing program 2 (id=2685): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180), 0x4) 20m29.995423454s ago: executing program 2 (id=2687): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@ [ 1622.634654][T31276] __dump_stack+0x26/0x30 [ 1622.634934][T31276] dump_stack_lvl+0x14c/0x1c0 [ 1622.635116][T31276] dump_stack+0x1e/0x25 [ 1622.635297][T31276] gfs2_withdraw+0xd5/0x270 [ 1622.635663][T31276] gfs2_metatype_check_ii+0x113/0x140 [ 1622.635883][T31276] gfs2_meta_buffer+0x4b3/0x590 [ 1622.636129][T31276] __gfs2_iomap_get+0xf1c/0x2230 [ 1622.636442][T31276] gfs2_block_map+0x286/0xde0 [ 1622.636701][T31276] ? kmsan_get_metadata+0xf1/0x160 [ 1622.636992][T31276] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1622.637224][T31276] gfs2_write_alloc_required+0x4fc/0x6d0 [ 1622.637504][T31276] gfs2_jdesc_check+0x33b/0x440 [ 1622.637687][T31276] init_journal+0x1380/0x3970 [ 1622.637931][T31276] ? init_inodes+0x124/0x510 [ 1622.638147][T31276] ? init_inodes+0x124/0x510 [ 1622.638346][T31276] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1622.638581][T31276] init_inodes+0x124/0x510 [ 1622.638790][T31276] gfs2_fill_super+0x3518/0x3ff0 [ 1622.639000][T31276] ? init_locking+0xed/0x500 [ 1622.639245][T31276] get_tree_bdev_flags+0x6e6/0x920 [ 1622.639496][T31276] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1622.639701][T31276] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1622.639897][T31276] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1622.640098][T31276] get_tree_bdev+0x38/0x50 [ 1622.640289][T31276] gfs2_get_tree+0x57/0x350 [ 1622.640517][T31276] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1622.640717][T31276] vfs_get_tree+0xb3/0x5d0 [ 1622.640911][T31276] do_new_mount+0x885/0x1dd0 [ 1622.641234][T31276] ? apparmor_capable+0x2a2/0x380 [ 1622.641558][T31276] ? kmsan_get_metadata+0xf1/0x160 [ 1622.641773][T31276] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1622.642019][T31276] path_mount+0x7a2/0x20b0 [ 1622.642243][T31276] ? user_path_at+0x1fc/0x330 [ 1622.642493][T31276] __se_sys_mount+0x704/0x7f0 [ 1622.642644][T31276] ? kmsan_get_metadata+0xf1/0x160 [ 1622.642889][T31276] __x64_sys_mount+0xe4/0x150 [ 1622.643050][T31276] x64_sys_call+0x39f0/0x3ea0 [ 1622.643265][T31276] do_syscall_64+0x134/0xf80 [ 1622.643623][T31276] ? clear_bhb_loop+0x50/0xa0 [ 1622.643787][T31276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.643951][T31276] RIP: 0033:0x7fb7ebb9da0a [ 1622.644074][T31276] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.644205][T31276] RSP: 002b:00007fb7ec99fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1622.644345][T31276] RAX: ffffffffffffffda RBX: 00007fb7ec99fee0 RCX: 00007fb7ebb9da0a [ 1622.644453][T31276] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fb7ec99fea0 [ 1622.644587][T31276] RBP: 0000200000000400 R08: 00007fb7ec99fee0 R09: 0000000000210401 [ 1622.644692][T31276] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 1622.644794][T31276] R13: 00007fb7ec99fea0 R14: 000000000001260b R15: 0000200000000500 [ 1622.644939][T31276] [ 1622.963525][T31276] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 1622.973753][T31276] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0x124/0x510 [ 1622.983384][T31276] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1622.996265][T31276] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 1624.819190][T31326] loop6: detected capacity change from 0 to 256 [ 1624.869848][T31326] exfat: Deprecated parameter 'namecase' [ 1625.039482][T31326] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1626.168482][T31351] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8231'. [ 1627.247405][T31366] loop6: detected capacity change from 0 to 256 [ 1627.271299][T31361] loop4: detected capacity change from 0 to 2048 [ 1627.439846][T31373] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1627.473439][T31366] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 1627.580018][T31371] loop3: detected capacity change from 0 to 1024 [ 1627.592999][T31361] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 1627.614029][T31371] EXT4-fs (loop3): filesystem is read-only [ 1627.661920][T31361] Remounting filesystem read-only [ 1627.681752][T31371] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1627.724718][T31371] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 1627.765216][T31371] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1627.815049][T31371] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: comm syz.3.8239: inode #1: comm syz.3.8239: iget: illegal inode # [ 1627.924560][T31371] loop3: lost filesystem error report for type 5 error -117 [ 1627.934350][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1627.948670][ C1] EXT4-fs (loop3): initial error at time 1773435055: ext4_get_journal_inode:5863 [ 1627.958200][ C1] EXT4-fs (loop3): last error at time 1773435055: ext4_get_journal_inode:5863 [ 1627.969943][T31371] EXT4-fs (loop3): no journal found [ 1628.024898][T31371] EXT4-fs (loop3): can't get journal size [ 1628.083588][T31371] EXT4-fs error (device loop3): __ext4_fill_super:5563: inode #2: comm syz.3.8239: iget: special inode unallocated [ 1628.124867][T31371] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1628.154529][T31371] EXT4-fs (loop3): get root inode failed [ 1628.200921][ T5774] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1628.280712][T31371] EXT4-fs (loop3): mount failed [ 1633.597577][T31486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8272'. [ 1633.814935][T12151] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1634.032276][T12151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.073847][T12151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.141499][T12151] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1634.153513][T12151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.246990][T12151] usb 7-1: config 0 descriptor?? [ 1634.812704][T12151] hkems 0003:2006:0118.001E: item fetching failed at offset 5/7 [ 1634.861427][T12151] hkems 0003:2006:0118.001E: parse failed [ 1634.878489][T12151] hkems 0003:2006:0118.001E: probe with driver hkems failed with error -22 [ 1634.909158][ T40] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1635.017993][T12151] usb 7-1: USB disconnect, device number 17 [ 1635.134508][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 1635.228556][ T40] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.271832][ T40] usb 8-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1635.310647][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.325051][ T40] usb 8-1: Product: syz [ 1635.329499][ T40] usb 8-1: Manufacturer: syz [ 1635.389203][ T40] usb 8-1: SerialNumber: syz [ 1635.423840][ T40] usb 8-1: config 0 descriptor?? [ 1635.491719][ T40] cdc_phonet 8-1:0.0: skipping garbage [ 1635.514322][ T40] cdc_phonet 8-1:0.0: invalid descriptor buffer length [ 1635.533662][ T40] cdc_phonet 8-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1635.699519][ T40] usb 8-1: USB disconnect, device number 12 [ 1636.358657][T31548] loop6: detected capacity change from 0 to 1024 [ 1636.593059][T31548] hfsplus: bad catalog entry type [ 1636.898801][ T40] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1637.044338][ T4063] hfsplus: b-tree write err: -5, ino 25 [ 1637.050509][ T4063] hfsplus: b-tree write err: -5, ino 4 [ 1637.111058][ T40] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 1637.115269][ T4063] hfsplus: b-tree write err: -5, ino 2 [ 1637.154622][ T40] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1637.174523][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.218130][ T40] usb 4-1: config 0 descriptor?? [ 1637.263418][ T40] usb 4-1: bad CDC descriptors [ 1637.549770][ T40] usb 4-1: USB disconnect, device number 39 [ 1637.913290][T31585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1637.980287][T31585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1638.598298][T31591] loop6: detected capacity change from 0 to 64 [ 1638.810597][T31591] hfs: bad catalog entry type 65535 [ 1640.038233][T31625] loop7: detected capacity change from 0 to 256 [ 1640.623400][T31636] loop6: detected capacity change from 0 to 1024 [ 1640.680493][T31636] EXT4-fs: Ignoring removed orlov option [ 1640.799186][T31636] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1640.991096][T31636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1641.238638][T31651] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 1641.603101][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.691490][T31657] loop3: detected capacity change from 0 to 64 [ 1642.124766][T12151] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1642.239026][T31007] hfs: request for non-existent node 1280 in B*Tree [ 1642.327838][T31007] hfs: request for non-existent node 1280 in B*Tree [ 1642.369828][T12151] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.412270][T12151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.440622][T12151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.508736][T12151] usb 8-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1642.594416][T12151] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.691192][T12151] usb 8-1: config 0 descriptor?? [ 1642.846186][T31681] loop3: detected capacity change from 0 to 64 [ 1643.311985][T12151] wacom 0003:056A:0010.001F: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1643.457852][T12151] wacom 0003:056A:0010.001F: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.7-1/input0 [ 1643.597445][T12151] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0010.001F/input/input42 [ 1643.877407][T12151] usb 8-1: USB disconnect, device number 13 [ 1644.763143][T31702] fido_id[31702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1645.114860][T12122] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1645.173280][T31740] loop3: detected capacity change from 0 to 1024 [ 1645.339972][T12122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.398841][T12122] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1645.423704][T12122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.461459][T12122] usb 5-1: Product: syz [ 1645.469795][T12122] usb 5-1: Manufacturer: syz [ 1645.514676][T12122] usb 5-1: SerialNumber: syz [ 1645.546419][T12122] usb 5-1: config 0 descriptor?? [ 1645.646547][T12122] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1646.300103][T12122] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1646.367214][T12122] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1646.442458][T12122] usb 5-1: USB disconnect, device number 47 [ 1646.635334][T31775] loop7: detected capacity change from 0 to 1024 [ 1646.802413][T31774] loop6: detected capacity change from 0 to 1024 [ 1646.864743][T31774] EXT4-fs: inline encryption not supported [ 1647.101365][T31774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.243751][T31788] random: crng reseeded on system resumption [ 1647.448803][T31774] EXT4-fs: Ignoring removed orlov option [ 1647.515695][T31774] EXT4-fs: can't change dax mount option while remounting [ 1648.091025][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.419798][T31799] loop7: detected capacity change from 0 to 2048 [ 1648.541648][T31799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.617529][ T29] audit: type=1326 audit(1773435076.148:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.0.8344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1648.643921][ T29] audit: type=1326 audit(1773435076.168:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.0.8344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1648.675803][T31799] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1648.719365][ T29] audit: type=1326 audit(1773435076.248:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.0.8344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1648.799343][T31799] EXT4-fs (loop7): resizing filesystem from 256 to 0 blocks [ 1648.838348][ T29] audit: type=1326 audit(1773435076.248:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.0.8344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1648.880608][T31799] EXT4-fs warning (device loop7): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 1648.968738][ T29] audit: type=1326 audit(1773435076.248:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.0.8344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1649.038182][T31814] loop6: detected capacity change from 0 to 512 [ 1649.134829][ T29] audit: type=1326 audit(1773435076.248:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.0.8344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1649.308129][ T29] audit: type=1326 audit(1773435076.248:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.0.8344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1649.389725][T31814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.449941][T21939] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.458294][T31814] EXT4-fs error (device loop6): ext4_readdir:225: inode #12: comm syz.6.8343: path /561/file0/file0: directory fails checksum at offset 0 [ 1649.507548][T31822] overlayfs: failed to resolve './file0': -40 [ 1649.842065][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.936290][T31823] loop4: detected capacity change from 0 to 2048 [ 1650.184487][T31823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1650.395566][T31841] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 1650.464963][T31833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1650.497222][T31834] loop3: detected capacity change from 0 to 1024 [ 1650.537920][T31833] team0: Device macvlan2 is already an upper device of the team interface [ 1650.676873][T31834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1651.411396][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1651.849793][T31868] loop3: detected capacity change from 0 to 256 [ 1652.215887][T31874] netlink: 'syz.0.8359': attribute type 10 has an invalid length. [ 1652.424933][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1653.171508][T31902] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1653.184615][T12151] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1653.382217][T12151] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1653.425388][T12151] usb 7-1: config 0 has no interface number 0 [ 1653.431776][T12151] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.485304][T12151] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.544744][T12151] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1653.609620][T12151] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1653.645146][T12151] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1653.704350][T12151] usb 7-1: Product: syz [ 1653.752859][T12151] usb 7-1: config 0 descriptor?? [ 1654.280572][T12151] chicony 0003:04F2:1421.0020: unknown main item tag 0x3 [ 1654.304522][T12151] chicony 0003:04F2:1421.0020: report_id 2141495278 is invalid [ 1654.323382][T12151] chicony 0003:04F2:1421.0020: item 0 4 1 8 parsing failed [ 1654.362847][T12151] chicony 0003:04F2:1421.0020: Chicony hid parse failed: -22 [ 1654.392347][T12151] chicony 0003:04F2:1421.0020: probe with driver chicony failed with error -22 [ 1654.517799][T12151] usb 7-1: USB disconnect, device number 18 [ 1654.867918][T31940] loop4: detected capacity change from 0 to 256 [ 1655.111139][T31945] loop7: detected capacity change from 0 to 64 [ 1655.819077][T31950] loop3: detected capacity change from 0 to 2048 [ 1655.962364][T31950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1656.274749][ T40] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1656.481652][ T40] usb 8-1: Using ep0 maxpacket: 16 [ 1656.513908][ T40] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.387133][T31975] loop6: detected capacity change from 0 to 32768 [ 1657.407915][T31975] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8380 (31975) [ 1657.437928][ T40] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.449738][ T40] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1657.473238][ T40] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1657.489119][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.553201][T31975] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1657.564381][T31975] BTRFS info (device loop6): using sha256 checksum algorithm [ 1657.576095][T31975] BTRFS error (device loop6): ignoredatacsums must be used with ro mount option [ 1657.585764][T31975] BTRFS error (device loop6): open_ctree failed: -22 [ 1657.749153][ T40] usb 8-1: config 0 descriptor?? [ 1658.300416][ T40] nzxt-smart2 0003:1E71:2009.0021: collection stack underflow [ 1658.375525][ T40] nzxt-smart2 0003:1E71:2009.0021: item 0 2 0 12 parsing failed [ 1658.475018][ T40] nzxt-smart2 0003:1E71:2009.0021: probe with driver nzxt-smart2 failed with error -22 [ 1658.596324][ T40] usb 8-1: USB disconnect, device number 14 [ 1659.729525][T32026] gretap2: entered promiscuous mode [ 1660.563059][ T29] audit: type=1326 audit(1773435088.078:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32033 comm="syz.6.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7d99c799 code=0x7fc00000 [ 1661.049579][T32056] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1661.320040][T32061] loop7: detected capacity change from 0 to 512 [ 1661.389538][T32061] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1661.514671][T32061] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.8401: corrupted xattr entries [ 1661.544467][T32061] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1661.554198][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1661.570391][ C0] EXT4-fs (loop7): initial error at time 1773435089: xattr_find_entry:337: inode 15 [ 1661.580198][ C0] EXT4-fs (loop7): last error at time 1773435089: xattr_find_entry:337: inode 15 [ 1661.595175][T32061] EXT4-fs (loop7): Remounting filesystem read-only [ 1661.664614][T32061] EXT4-fs (loop7): 1 truncate cleaned up [ 1661.785041][T32061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1661.810324][T32066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8402'. [ 1661.821464][T32053] loop4: detected capacity change from 0 to 8192 [ 1662.273164][T21939] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.488310][T32077] loop3: detected capacity change from 0 to 4096 [ 1663.779714][T32097] loop7: detected capacity change from 0 to 512 [ 1663.837228][T32097] EXT4-fs: Ignoring removed nobh option [ 1663.897075][T32097] EXT4-fs: Ignoring removed bh option [ 1664.014511][T32097] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1664.030384][T32097] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8409: invalid indirect mapped block 256 (level 1) [ 1664.044905][T32097] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1664.054184][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1664.070289][ C1] EXT4-fs (loop7): initial error at time 1773435091: ext4_free_branches:1023: inode 13 [ 1664.070444][T32097] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8409: invalid indirect mapped block 2683928664 (level 1) [ 1664.080459][ C1] EXT4-fs (loop7): last error at time 1773435091: ext4_free_branches:1023: inode 13 [ 1664.205506][T32097] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1664.207895][T32097] EXT4-fs (loop7): 1 truncate cleaned up [ 1664.351636][T32097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.455279][T32105] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1664.588871][T32105] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1664.711980][T32097] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1664.812394][T32097] EXT4-fs (loop7): changing journal_checksum during remount not supported; ignoring [ 1665.326175][T21939] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.912585][T32130] loop6: detected capacity change from 0 to 64 [ 1667.209976][T32158] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 1667.746376][T32166] loop7: detected capacity change from 0 to 764 [ 1668.611510][ T29] audit: type=1326 audit(1773435096.138:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32179 comm="syz.6.8434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a7d99c799 code=0x0 [ 1668.762366][T32183] loop7: detected capacity change from 0 to 512 [ 1669.005343][T32183] EXT4-fs (loop7): 1 truncate cleaned up [ 1669.111617][T32183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.680941][T21939] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.235178][T32213] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8442'. [ 1670.278980][T32213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8442'. [ 1671.620653][T32238] loop6: detected capacity change from 0 to 512 [ 1671.694357][T12151] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1671.880173][T12151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.921592][T32238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1671.972346][T12151] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1671.977067][T32238] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1672.037581][T12151] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1672.080774][T12151] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1672.146831][T12151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1672.189981][T12151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.228344][T12151] usb 5-1: Product: syz [ 1672.232826][T12151] usb 5-1: Manufacturer: syz [ 1672.249852][T12151] usb 5-1: SerialNumber: syz [ 1672.383491][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.386608][ T40] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1672.606484][T12151] usb 5-1: 0:2 : does not exist [ 1672.634325][ T40] usb 8-1: Using ep0 maxpacket: 16 [ 1672.666045][ T40] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1672.702453][ T40] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1672.764699][ T40] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1672.798317][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.850812][ T40] usb 8-1: Product: syz [ 1672.869400][ T40] usb 8-1: Manufacturer: syz [ 1672.894482][ T40] usb 8-1: SerialNumber: syz [ 1672.937166][ T40] usb 8-1: config 0 descriptor?? [ 1673.325732][ T40] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input45 [ 1673.378991][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1673.597503][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1673.608206][ T40] imon:send_packet: packet tx failed (-71) [ 1673.646441][ T40] imon 8-1:0.0: panel buttons/knobs setup failed [ 1673.673373][T12151] usb 5-1: USB disconnect, device number 48 [ 1674.109519][T27465] udevd[27465]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1674.334318][ T40] rc_core: IR keymap rc-imon-pad not found [ 1674.355185][T32301] loop4: detected capacity change from 0 to 512 [ 1674.389976][ T40] Registered IR keymap rc-empty [ 1674.395730][ T40] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1674.447021][ T40] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1674.496368][T32301] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1674.543699][ T40] imon:send_packet: packet tx failed (-71) [ 1674.599490][ T40] imon 8-1:0.0: remote input dev register failed [ 1674.646133][ T40] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 1674.671151][T32305] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8458'. [ 1674.774554][T32301] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 1674.891727][ T40] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1674.932995][ T40] imon:imon_probe: failed to initialize context! [ 1675.000512][ T40] imon 8-1:0.0: unable to register, err -19 [ 1675.055035][ T40] usb 8-1: USB disconnect, device number 15 [ 1676.458269][T32342] loop6: detected capacity change from 0 to 256 [ 1676.855402][T32342] FAT-fs (loop6): Directory bread(block 64) failed [ 1676.862556][T32342] FAT-fs (loop6): Directory bread(block 65) failed [ 1676.948553][T32342] FAT-fs (loop6): Directory bread(block 66) failed [ 1676.966950][T32342] FAT-fs (loop6): Directory bread(block 67) failed [ 1677.024412][T32342] FAT-fs (loop6): Directory bread(block 68) failed [ 1677.031221][T32342] FAT-fs (loop6): Directory bread(block 69) failed [ 1677.051750][T32342] FAT-fs (loop6): Directory bread(block 70) failed [ 1677.073395][T32342] FAT-fs (loop6): Directory bread(block 71) failed [ 1677.110382][T32342] FAT-fs (loop6): Directory bread(block 72) failed [ 1677.151428][T32342] FAT-fs (loop6): Directory bread(block 73) failed [ 1678.055661][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.062953][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.420970][T32394] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1679.468745][T32394] team0: Device macvlan2 is already an upper device of the team interface [ 1680.414434][T32409] loop4: detected capacity change from 0 to 512 [ 1680.473359][T32409] EXT4-fs: Ignoring removed i_version option [ 1680.549691][T32409] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1680.813455][T32409] EXT4-fs (loop4): 1 truncate cleaned up [ 1680.887147][T32409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.254511][ T40] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1681.335948][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1681.478120][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1681.524375][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.589458][ T40] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1681.607789][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.622768][T32437] loop6: detected capacity change from 0 to 64 [ 1681.660776][ T40] usb 4-1: config 0 descriptor?? [ 1681.820635][T32437] hfs: unexpected record length: entrylength 108 [ 1682.219389][T19677] hfs: node 4:2 still has 1 user(s)! [ 1682.293016][ T40] isku 0003:1E7D:319C.0022: unknown main item tag 0x0 [ 1682.324726][ T40] isku 0003:1E7D:319C.0022: unknown main item tag 0x0 [ 1682.386160][ T40] isku 0003:1E7D:319C.0022: unknown main item tag 0x0 [ 1682.426917][ T40] isku 0003:1E7D:319C.0022: unknown main item tag 0x0 [ 1682.465546][ T40] isku 0003:1E7D:319C.0022: unknown main item tag 0x0 [ 1682.500040][ T40] isku 0003:1E7D:319C.0022: unknown main item tag 0x0 [ 1682.524461][ T40] isku 0003:1E7D:319C.0022: unknown main item tag 0x0 [ 1682.573417][T32456] loop7: detected capacity change from 0 to 128 [ 1682.604962][ T40] isku 0003:1E7D:319C.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1682.619761][T32456] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1682.673577][ T40] isku 0003:1E7D:319C.0022: couldn't init struct isku_device [ 1682.702711][ T40] isku 0003:1E7D:319C.0022: couldn't install keyboard [ 1682.723581][T32457] loop6: detected capacity change from 0 to 256 [ 1682.731584][T32456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1682.743641][ T40] isku 0003:1E7D:319C.0022: probe with driver isku failed with error -71 [ 1682.762105][T32457] exfat: Deprecated parameter 'namecase' [ 1682.800619][ T40] usb 4-1: USB disconnect, device number 40 [ 1682.954786][T32457] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1683.892490][T32478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1684.048282][T32471] fido_id[32471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1684.072784][T32478] team0: Device macvlan2 is already an upper device of the team interface [ 1684.818790][T32498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8500'. [ 1685.093407][T32506] loop3: detected capacity change from 0 to 128 [ 1685.139843][T32506] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1685.259366][T32506] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1685.752524][T32517] loop6: detected capacity change from 0 to 512 [ 1685.782508][T31303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1686.010121][T32523] GUP no longer grows the stack in syz.4.8508 (32523): 200000006000-200000009000 (200000004000) [ 1686.027986][T32523] CPU: 0 UID: 0 PID: 32523 Comm: syz.4.8508 Tainted: G L syzkaller #0 PREEMPT(full) [ 1686.028182][T32523] Tainted: [L]=SOFTLOCKUP [ 1686.028241][T32523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1686.028331][T32523] Call Trace: [ 1686.028391][T32523] [ 1686.028449][T32523] __dump_stack+0x26/0x30 [ 1686.028633][T32523] dump_stack_lvl+0x14c/0x1c0 [ 1686.028818][T32523] dump_stack+0x1e/0x25 [ 1686.028990][T32523] fixup_user_fault+0xcc0/0xde0 [ 1686.029325][T32523] fault_in_user_writeable+0x99/0x1a0 [ 1686.029546][T32523] futex_lock_pi+0x5a8/0x1530 [ 1686.029753][T32523] ? futex_unqueue+0x22d/0x2c0 [ 1686.029938][T32523] ? kmsan_get_metadata+0xf1/0x160 [ 1686.030162][T32523] ? __se_sys_futex+0x5b8/0x740 [ 1686.030351][T32523] ? __msan_warning+0x1b/0x30 [ 1686.030546][T32523] ? __pfx_futex_wake_mark+0x10/0x10 [ 1686.030816][T32523] do_futex+0x2e1/0x480 [ 1686.031013][T32523] __se_sys_futex+0x5b8/0x740 [ 1686.031198][T32523] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1686.031413][T32523] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1686.031641][T32523] __x64_sys_futex+0x114/0x1a0 [ 1686.031849][T32523] x64_sys_call+0x2c48/0x3ea0 [ 1686.032055][T32523] do_syscall_64+0x134/0xf80 [ 1686.032221][T32523] ? clear_bhb_loop+0x50/0xa0 [ 1686.032385][T32523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.032552][T32523] RIP: 0033:0x7fb7ebb9c799 [ 1686.032669][T32523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.032805][T32523] RSP: 002b:00007fb7ec9a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1686.032950][T32523] RAX: ffffffffffffffda RBX: 00007fb7ebe15fa0 RCX: 00007fb7ebb9c799 [ 1686.033068][T32523] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 1686.033170][T32523] RBP: 00007fb7ebc32c99 R08: 0000000000000000 R09: 0000000000000082 [ 1686.033266][T32523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.033361][T32523] R13: 00007fb7ebe16038 R14: 00007fb7ebe15fa0 R15: 00007ffdc2f4deb8 [ 1686.033507][T32523] [ 1686.946468][T32536] netlink: 'syz.7.8511': attribute type 6 has an invalid length. [ 1687.328640][T32538] loop6: detected capacity change from 0 to 2048 [ 1687.506386][T32548] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1688.014752][ T40] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1688.093098][T32558] loop3: detected capacity change from 0 to 2048 [ 1688.230727][T32558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1688.232852][ T40] usb 8-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1688.321833][ T40] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1688.356358][ T40] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.405740][ T40] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1688.448142][T32558] exFAT-fs (loop3): invalid boot record signature [ 1688.474733][T32558] exFAT-fs (loop3): failed to read boot sector [ 1688.476917][ T40] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1688.491409][T32558] exFAT-fs (loop3): failed to recognize exfat type [ 1688.540223][ T40] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1688.604670][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.662492][ T40] usb 8-1: config 0 descriptor?? [ 1689.238486][ T40] ryos 0003:1E7D:3138.0023: ignoring exceeding usage max [ 1689.344783][ T40] ryos 0003:1E7D:3138.0023: unbalanced delimiter at end of report description [ 1689.417618][ T40] ryos 0003:1E7D:3138.0023: parse failed [ 1689.467492][ T40] ryos 0003:1E7D:3138.0023: probe with driver ryos failed with error -22 [ 1689.586612][ T40] usb 8-1: USB disconnect, device number 16 [ 1691.535633][T32618] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8530'. [ 1692.186672][T32631] [U]  [ 1692.739475][T32638] netlink: 'syz.7.8537': attribute type 3 has an invalid length. [ 1692.953487][T32644] loop6: detected capacity change from 0 to 512 [ 1693.062433][T32644] EXT4-fs: Ignoring removed orlov option [ 1693.119932][T32644] EXT4-fs: Ignoring removed bh option [ 1693.260496][T32644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1693.360782][T32644] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1693.497871][T32644] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8539: bg 0: block 248: padding at end of block bitmap is not set [ 1693.557762][T32644] loop6: lost filesystem error report for type 5 error -117 [ 1693.564211][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1693.578456][ C0] EXT4-fs (loop6): last error at time 1773435121: ext4_validate_block_bitmap:441 [ 1693.655531][T32644] Quota error (device loop6): write_blk: dquota write failed [ 1693.665532][T32644] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1693.714758][T32644] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.8539: Failed to acquire dquot type 1 [ 1693.805334][T32644] loop6: lost filesystem error report for type 5 error -117 [ 1693.823004][T32644] EXT4-fs (loop6): 1 truncate cleaned up [ 1693.946324][T32644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1694.080328][T32644] EXT4-fs: Ignoring removed orlov option [ 1694.104517][T32644] EXT4-fs: Ignoring removed bh option [ 1694.110603][T32644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1694.311575][T32644] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1694.444377][T32644] EXT4-fs error (device loop6): __ext4_remount:6804: comm syz.6.8539: Abort forced by user [ 1694.489055][T32644] EXT4-fs (loop6): Remounting filesystem read-only [ 1694.524499][T32644] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1694.555282][T32644] ext4 filesystem being remounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1695.056989][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.784820][T29571] Bluetooth: hci4: command 0x0405 tx timeout [ 1696.903664][T32722] loop4: detected capacity change from 0 to 1024 [ 1697.213141][T32722] hfsplus: bad catalog folder entry [ 1697.629796][ T131] hfsplus: bad catalog folder entry [ 1697.640350][ T131] hfsplus: bad catalog file entry [ 1697.724559][T32735] loop7: detected capacity change from 0 to 512 [ 1697.750311][T32735] EXT4-fs: Ignoring removed bh option [ 1697.776609][T32735] EXT4-fs: Ignoring removed mblk_io_submit option [ 1697.843427][T32735] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1697.929982][T32735] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1698.011290][T32735] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1698.113769][T32735] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 1698.124950][T32745] loop6: detected capacity change from 0 to 128 [ 1698.151917][T32745] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1698.215347][T32735] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 1698.241701][T32735] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.8567: Failed to acquire dquot type 1 [ 1698.276823][T32735] loop7: lost filesystem error report for type 5 error -5 [ 1698.281509][T32745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1698.289262][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1698.289381][ C1] EXT4-fs (loop7): last error at time 1773435125: ext4_acquire_dquot:7001 [ 1698.326391][T32735] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.8567: Invalid block bitmap block 0 in block_group 0 [ 1698.395073][T32735] loop7: lost filesystem error report for type 5 error -117 [ 1698.416032][T32735] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.8567: Invalid block bitmap block 0 in block_group 0 [ 1698.531407][T32735] loop7: lost filesystem error report for type 5 error -117 [ 1698.532915][T32735] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.8567: Invalid block bitmap block 0 in block_group 0 [ 1698.668881][T32735] loop7: lost filesystem error report for type 5 error -117 [ 1698.670857][T32735] Quota error (device loop7): write_blk: dquota write failed [ 1698.786613][T32735] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1698.895987][T32735] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.8567: Failed to acquire dquot type 1 [ 1698.966898][T32735] loop7: lost filesystem error report for type 5 error -28 [ 1698.973917][T32735] Quota error (device loop7): write_blk: dquota write failed [ 1699.115825][T32735] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1699.149911][T32756] binfmt_misc: register: failed to install interpreter file éq‰Y’3aK [ 1699.215054][T32735] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.8567: Failed to acquire dquot type 1 [ 1699.254578][T32735] loop7: lost filesystem error report for type 5 error -28 [ 1699.256291][T32735] EXT4-fs (loop7): 1 orphan inode deleted [ 1699.323509][T32735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1699.696147][T32765] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8573'. [ 1699.885442][T32735] syz.7.8567 (32735) used greatest stack depth: 2384 bytes left [ 1699.939949][T21939] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.572720][ T311] loop6: detected capacity change from 0 to 256 [ 1700.887396][T12151] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1701.057919][T12151] usb 8-1: Using ep0 maxpacket: 16 [ 1701.096906][T12151] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1701.110045][T12151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.120159][T12151] usb 8-1: Product: syz [ 1701.125821][T12151] usb 8-1: Manufacturer: syz [ 1701.143895][T12151] usb 8-1: SerialNumber: syz [ 1701.181857][T12151] usb 8-1: config 0 descriptor?? [ 1701.265813][T12151] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 1701.503389][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8583'. [ 1701.676721][T12151] usb 8-1: clie_3_5_startup: get interface number bad return length: 0 [ 1701.735094][T12151] visor 8-1:0.0: probe with driver visor failed with error -5 [ 1701.929094][T12122] usb 8-1: USB disconnect, device number 17 [ 1703.120170][ T350] loop6: detected capacity change from 0 to 4096 [ 1703.171543][ T350] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1703.611896][ T350] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1705.008645][ T392] IPVS: Error connecting to the multicast addr [ 1705.679838][ T401] gretap0: entered promiscuous mode [ 1705.760899][ T409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8602'. [ 1705.789281][ T401] gretap0: left promiscuous mode [ 1706.524949][ T421] loop3: detected capacity change from 0 to 128 [ 1706.593802][ T419] loop4: detected capacity change from 0 to 1024 [ 1706.613038][ T421] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1706.670102][ T421] hpfs: filesystem error: improperly stopped [ 1706.705882][ T421] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1706.743116][ T421] hpfs: You really don't want any checks? You are crazy... [ 1706.805441][ T421] hpfs: hpfs_map_sector(): read error [ 1706.832182][ T421] hpfs: code page support is disabled [ 1706.968184][ T421] hpfs: hpfs_map_4sectors(): unaligned read [ 1706.987961][ T421] hpfs: hpfs_map_4sectors(): unaligned read [ 1707.040097][ T421] hpfs: filesystem error: unable to find root dir [ 1707.111950][ T429] loop6: detected capacity change from 0 to 1024 [ 1707.183285][ T429] EXT4-fs: Ignoring removed bh option [ 1707.406344][ T429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1707.608101][ T29] audit: type=1326 audit(1773435135.118:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=437 comm="syz.7.8610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f901579c799 code=0x0 [ 1708.294974][ T451] loop3: detected capacity change from 0 to 128 [ 1708.328141][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.942610][ T462] loop6: detected capacity change from 0 to 512 [ 1709.135872][ T466] loop7: detected capacity change from 0 to 256 [ 1709.168157][ T462] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 1709.281418][ T462] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.8615: iget: bad i_size value: 12154757448730 [ 1709.364425][ T462] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1709.366977][ T462] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8615: couldn't read orphan inode 13 (err -117) [ 1709.379672][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1709.379787][ C1] EXT4-fs (loop6): initial error at time 1773435136: ext4_orphan_get:1391: inode 13 [ 1709.379959][ C1] EXT4-fs (loop6): last error at time 1773435136: ext4_orphan_get:1391: inode 13 [ 1709.514557][ T462] loop6: lost filesystem error report for type 5 error -117 [ 1709.542000][ T462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1709.579505][ T466] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1709.667743][ T466] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1709.830884][ T466] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 1710.196981][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.739507][ T29] audit: type=1326 audit(1773435138.268:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=495 comm="syz.7.8624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f901579c799 code=0x0 [ 1710.882442][ T498] loop3: detected capacity change from 0 to 512 [ 1710.971385][ T503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8627'. [ 1711.080663][ T498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1711.182196][ T498] ext4 filesystem being mounted at /1682/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1711.767437][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.921666][ T511] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8628'. [ 1712.393658][ T521] loop3: detected capacity change from 0 to 512 [ 1712.456970][ T521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1712.603036][ T521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.722696][ T521] ext4 filesystem being mounted at /1683/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1713.226217][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.242600][ T538] siw: device registration error -23 [ 1714.303682][ T539] loop7: detected capacity change from 0 to 32768 [ 1714.435563][ T539] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1714.634231][ T539] XFS (loop7): Metadata corruption detected at xfs_inode_buf_verify+0x613/0x6b0, xfs_inode block 0x2280 xfs_inode_buf_verify [ 1714.650954][ T539] XFS (loop7): Unmount and run xfs_repair [ 1714.657152][ T539] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1714.667740][ T539] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1714.679923][ T539] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1714.693090][ T539] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 1714.702347][ T539] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20 4.Xh........... [ 1714.715692][ T539] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1714.725261][ T539] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 3f 08 c9 94 ............?... [ 1714.734600][ T539] 00000060: ff ff 01 04 49 55 aa 1c 00 00 00 00 00 00 00 04 ....IU.......... [ 1714.743713][ T539] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 1714.755948][ T539] XFS (loop7): metadata I/O error in "xfs_imap_to_bp+0x128/0x2e0" at daddr 0x2280 len 64 error 117 [ 1714.767257][ T539] loop7: lost filesystem error report for type 5 error -117 [ 1714.767476][ T539] XFS (loop7): Failed to read root inode 0x1140, error 117 [ 1714.782976][ T539] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair. [ 1715.456539][ T567] loop7: detected capacity change from 0 to 512 [ 1715.527835][ T567] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1715.559538][T17543] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 1715.731177][ T567] EXT4-fs (loop7): 1 truncate cleaned up [ 1715.813975][ T567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.020064][ T567] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 1716.467009][T21939] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.379870][ T604] loop6: detected capacity change from 0 to 512 [ 1717.455551][ T604] EXT4-fs: Ignoring removed bh option [ 1717.570407][ T604] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1717.700796][ T604] EXT4-fs (loop6): 1 truncate cleaned up [ 1717.789179][ T604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1717.833487][ T599] loop7: detected capacity change from 0 to 4096 [ 1717.978121][ T599] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1718.041605][ T599] ntfs3(loop7): It is recommended to use chkdsk. [ 1718.438681][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.559989][ T599] ntfs3(loop7): failed to convert "076c" to iso8859-5 [ 1718.621369][ T599] ntfs3(loop7): ino=5, "/" ntfs_readdir [ 1720.020293][ T649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8663'. [ 1720.364365][T12151] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1720.573335][T12151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.619202][T12151] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1720.688150][T12151] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1720.716391][T12151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.802639][T12151] usb 5-1: config 0 descriptor?? [ 1721.107302][T17543] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1721.115535][T12151] usb 5-1: string descriptor 0 read error: -71 [ 1721.205163][T12151] usb 5-1: USB disconnect, device number 49 [ 1721.635983][ T683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8672'. [ 1722.275042][ T692] loop4: detected capacity change from 0 to 64 [ 1722.495334][ T692] minix: block size(59136) > page size(4096) not supported by filesystem [ 1722.864416][T12122] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1722.875934][ T690] loop7: detected capacity change from 0 to 4096 [ 1723.074505][T12122] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.212144][T12122] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1723.321421][T12122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.589334][T12122] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1723.740138][ T690] ntfs3(loop7): ino=b, mi_enum_attr [ 1723.824446][ T690] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1723.884567][ T690] ntfs3(loop7): Failed to load $Extend (-22). [ 1723.915771][ T690] ntfs3(loop7): Failed to initialize $Extend. [ 1724.564844][ T723] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.8682' resets device [ 1724.754992][T12122] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1724.804436][T12122] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1724.835466][T12122] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1725.070756][T12151] usb 4-1: USB disconnect, device number 41 [ 1725.378301][ T736] loop7: detected capacity change from 0 to 1024 [ 1725.509292][ T743] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1725.512142][ T739] loop4: detected capacity change from 0 to 2048 [ 1725.532034][ T736] hfsplus: bad catalog entry type [ 1725.570436][ T739] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1725.799915][ T748] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1725.913507][ T131] hfsplus: b-tree write err: -5, ino 25 [ 1726.005537][ T131] hfsplus: b-tree write err: -5, ino 4 [ 1726.011488][ T131] hfsplus: b-tree write err: -5, ino 2 [ 1726.809380][ T764] netlink: 'syz.4.8692': attribute type 2 has an invalid length. [ 1727.042256][ T769] IPVS: length: 8 != 3390824 [ 1727.436484][ T773] loop3: detected capacity change from 0 to 1024 [ 1727.462899][ T773] EXT4-fs: inline encryption not supported [ 1727.513402][ T774] xt_hashlimit: size too large, truncated to 1048576 [ 1727.786048][ T773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1727.868513][ T773] ext4 filesystem being mounted at /1695/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1728.367926][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1730.550566][ T828] loop7: detected capacity change from 0 to 22 [ 1730.718056][ T828] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1731.875895][ T859] netlink: 92 bytes leftover after parsing attributes in process `syz.6.8717'. [ 1732.157504][ T29] audit: type=1326 audit(1773435159.688:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=863 comm="syz.3.8719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efff5f9c799 code=0x0 [ 1732.430635][ T871] loop7: detected capacity change from 0 to 7 [ 1732.571045][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1732.584159][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.594378][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1732.602443][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.612707][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 1732.620880][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.630807][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 1732.638969][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.648875][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 1732.657044][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.666949][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 1732.675151][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.685052][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 1732.693119][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.703028][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 1732.726354][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.736409][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1732.747735][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1732.757695][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 1732.765912][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 1733.802342][ T895] loop7: detected capacity change from 0 to 512 [ 1734.153898][ T881] ceph: No mds server is up or the cluster is laggy [ 1734.434592][T12122] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1734.747135][T12122] usb 7-1: Using ep0 maxpacket: 8 [ 1734.761458][T12122] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1734.798086][T12122] usb 7-1: config 179 has no interface number 0 [ 1734.824352][T12122] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1734.846334][T12122] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1734.925100][T12122] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1734.978748][T12122] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1735.078723][T12122] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1735.148502][T12122] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1735.183628][T12122] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1735.229440][T12122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.429612][T12122] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input47 [ 1735.603376][ T5118] input input47: unable to receive magic message: -110 [ 1735.750930][ T5118] input input47: unable to receive magic message: -71 [ 1735.934152][ T5118] input input47: unable to receive magic message: -71 [ 1735.934793][T12122] usb 7-1: USB disconnect, device number 19 [ 1735.941381][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1735.941618][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1736.022028][ T959] loop3: detected capacity change from 0 to 64 [ 1736.035847][ T955] loop7: detected capacity change from 0 to 256 [ 1736.078368][ T955] exfat: Deprecated parameter 'utf8' [ 1736.105131][ T955] exfat: Deprecated parameter 'namecase' [ 1736.140632][ T955] exfat: Deprecated parameter 'namecase' [ 1736.179360][ T955] exfat: Deprecated parameter 'utf8' [ 1736.385749][ T955] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1736.457542][ T970] overlayfs: failed to resolve './file0': -2 [ 1736.465679][ T955] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1737.894774][ T982] loop6: detected capacity change from 0 to 32768 [ 1737.907237][ T982] Mount JFS Failure: -22 [ 1737.911707][ T982] jfs_mount failed w/return code = -22 [ 1737.928480][ T987] loop3: detected capacity change from 0 to 2048 [ 1738.019661][ T992] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8744'. [ 1738.543175][ T1004] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1739.529792][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.536724][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1742.090244][ T1079] loop4: detected capacity change from 0 to 16 [ 1742.107157][T12151] kernel write not supported for file /uinput (pid: 12151 comm: kworker/0:18) [ 1742.172767][ T1079] erofs (device loop4): mounted with root inode @ nid 36. [ 1742.258494][ T29] audit: type=1800 audit(1773435169.778:398): pid=1079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8766" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1742.788339][ T1088] sctp: [Deprecated]: syz.3.8769 (pid 1088) Use of int in max_burst socket option. [ 1742.788339][ T1088] Use struct sctp_assoc_value instead [ 1744.789603][ T1113] loop3: detected capacity change from 0 to 4096 [ 1745.066780][ T1113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1745.673238][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.064811][ T1140] netlink: 'syz.4.8786': attribute type 10 has an invalid length. [ 1746.092519][ T1131] loop7: detected capacity change from 0 to 4096 [ 1747.550422][ T1169] loop4: detected capacity change from 0 to 256 [ 1748.315511][ T1179] loop3: detected capacity change from 0 to 2048 [ 1748.405868][ T1183] veth0_to_team: entered promiscuous mode [ 1748.443555][ T29] audit: type=1326 audit(1773435175.968:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1748.559497][ T29] audit: type=1326 audit(1773435176.018:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1748.592747][ T29] audit: type=1326 audit(1773435176.118:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1748.624960][ T1179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1748.640794][ T29] audit: type=1326 audit(1773435176.118:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f84fa39c502 code=0x7ffc0000 [ 1748.785009][ T29] audit: type=1326 audit(1773435176.238:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84fa35cfce code=0x7ffc0000 [ 1748.965173][ T29] audit: type=1326 audit(1773435176.398:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f84fa39c5c7 code=0x7ffc0000 [ 1749.121779][ T29] audit: type=1326 audit(1773435176.398:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84fa35cfce code=0x7ffc0000 [ 1749.263532][ T29] audit: type=1326 audit(1773435176.418:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f84fa35cfce code=0x7ffc0000 [ 1749.350834][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.385522][ T29] audit: type=1326 audit(1773435176.548:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1749.494452][ T29] audit: type=1326 audit(1773435176.548:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1185 comm="syz.0.8798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fa39c799 code=0x7ffc0000 [ 1749.749438][ T1206] loop7: detected capacity change from 0 to 128 [ 1750.203642][ T1202] loop4: detected capacity change from 0 to 4096 [ 1750.730321][T12122] kernel read not supported for file /3576/personality (pid: 12122 comm: kworker/1:16) [ 1752.003262][T12122] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1752.186419][T12122] usb 7-1: Using ep0 maxpacket: 8 [ 1752.210760][T12122] usb 7-1: config 0 has an invalid interface number: 30 but max is 0 [ 1752.227391][T12122] usb 7-1: config 0 has no interface number 0 [ 1752.248896][T12122] usb 7-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 1752.283571][T12122] usb 7-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.310071][T12122] usb 7-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.332308][T12122] usb 7-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1752.364683][T12122] usb 7-1: config 0 interface 30 has no altsetting 0 [ 1752.391538][T12122] usb 7-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 1752.411264][T12122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.456154][T12122] usb 7-1: config 0 descriptor?? [ 1752.960575][T12122] uclogic 0003:256C:006E.0024: interface is invalid, ignoring [ 1753.103435][ T734] usb 7-1: USB disconnect, device number 20 [ 1753.292015][ T1290] loop4: detected capacity change from 0 to 164 [ 1753.422541][ T1290] rock: directory entry would overflow storage [ 1753.472793][ T1290] rock: sig=0x4f50, size=4, remaining=3 [ 1753.525026][ T1290] isofs: Unable to find the ".." directory for NFS. [ 1754.292736][ T1311] xt_hashlimit: size too large, truncated to 1048576 [ 1755.656447][ T1330] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1755.714978][ T1330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1756.444374][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1756.444470][ T29] audit: type=1326 audit(1773435183.968:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1341 comm="syz.3.8836" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efff5f9c799 code=0x0 [ 1759.130238][ T1383] loop6: detected capacity change from 0 to 512 [ 1759.178508][ T1383] EXT4-fs: Ignoring removed nobh option [ 1759.244353][ T1383] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1759.418673][ T1383] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 1: comm syz.6.8849: invalid block [ 1759.512475][ T1383] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1759.514118][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1759.530290][ C0] EXT4-fs (loop6): initial error at time 1773435187: __ext4_iget:5378: inode 11: block 1 [ 1759.540717][ C0] EXT4-fs (loop6): last error at time 1773435187: __ext4_iget:5378: inode 11: block 1 [ 1759.556609][ T1383] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8849: couldn't read orphan inode 11 (err -117) [ 1759.584359][ T1383] loop6: lost filesystem error report for type 5 error -117 [ 1759.620733][ T1383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1760.065629][ T734] IPVS: starting estimator thread 0... [ 1760.223451][ T1404] IPVS: using max 192 ests per chain, 9600 per kthread [ 1760.355050][T19677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.747828][ T1415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8859'. [ 1760.807931][ T1415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8859'. [ 1760.830706][ T1417] loop3: detected capacity change from 0 to 256 [ 1761.417097][ T1417] FAT-fs (loop3): Directory bread(block 64) failed [ 1761.466702][ T1417] FAT-fs (loop3): Directory bread(block 65) failed [ 1761.492935][ T1417] FAT-fs (loop3): Directory bread(block 66) failed [ 1761.573845][ T1417] FAT-fs (loop3): Directory bread(block 67) failed [ 1761.581238][ T1417] FAT-fs (loop3): Directory bread(block 68) failed [ 1761.629699][ T1417] FAT-fs (loop3): Directory bread(block 69) failed [ 1761.693874][ T1417] FAT-fs (loop3): Directory bread(block 70) failed [ 1761.701021][ T1417] FAT-fs (loop3): Directory bread(block 71) failed [ 1761.765027][ T1417] FAT-fs (loop3): Directory bread(block 72) failed [ 1761.771835][ T1417] FAT-fs (loop3): Directory bread(block 73) failed [ 1761.965271][T12122] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1762.207216][T12122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.252410][T12122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.303581][ T56] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.346554][T12122] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1762.378768][ T34] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.392654][T12122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.419483][ T34] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.465975][T12122] usb 5-1: config 0 descriptor?? [ 1762.489238][ T34] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.967857][T12122] holtek_kbd 0003:04D9:A055.0025: unknown main item tag 0x1 [ 1763.013236][T12122] holtek_kbd 0003:04D9:A055.0025: item fetching failed at offset 3/7 [ 1763.084871][T12122] holtek_kbd 0003:04D9:A055.0025: probe with driver holtek_kbd failed with error -22 [ 1763.186506][ T1461] CIFS: Unable to determine destination address [ 1763.205935][T12122] usb 5-1: USB disconnect, device number 50 [ 1763.382605][ T1459] loop7: detected capacity change from 0 to 512 [ 1763.478378][ T1459] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1763.609617][ T1459] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1763.764659][ T1459] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8869: bg 0: block 248: padding at end of block bitmap is not set [ 1763.836607][ T1459] loop7: lost filesystem error report for type 5 error -117 [ 1763.844155][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1763.858536][ C0] EXT4-fs (loop7): last error at time 1773435191: ext4_validate_block_bitmap:441 [ 1763.884921][ T1459] Quota error (device loop7): write_blk: dquota write failed [ 1763.892902][ T1459] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1763.965646][ T1459] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.8869: Failed to acquire dquot type 1 [ 1763.979042][ T1459] loop7: lost filesystem error report for type 5 error -117 [ 1763.983129][ T1459] EXT4-fs (loop7): 1 truncate cleaned up [ 1764.007308][ T1459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1764.186109][ T1459] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 1764.228495][ T1459] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 131074 [ 1764.284571][ T1459] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.8869: Failed to acquire dquot type 1 [ 1764.789271][T21939] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1765.259396][ T1504] loop7: detected capacity change from 0 to 256 [ 1766.525735][ T1531] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8887'. [ 1768.130940][ T1561] loop4: detected capacity change from 0 to 24 [ 1768.284861][ T1561] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1771.361061][ T1599] loop3: detected capacity change from 0 to 32768 [ 1771.377311][ T1599] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/__Š°"_½z#²˱1Ä [ 1771.407629][ T1599] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 1771.422567][ T1599] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1801)... [ 1771.457343][ T1599] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no journals! [ 1772.488224][ T1630] loop7: detected capacity change from 0 to 128 [ 1772.816280][ T1638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8917'. [ 1774.474851][ T1661] loop6: detected capacity change from 0 to 2048 [ 1774.640143][ T1661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1774.891196][ T1651] loop4: detected capacity change from 0 to 32768 [ 1774.939039][ T1651] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1774.950752][ T1651] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1774.999127][ T1651] gfs2: fsid=syz:syz.s: fatal: invalid metadata block - bh = 2 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 1775.019576][ T1651] CPU: 0 UID: 0 PID: 1651 Comm: syz.4.8920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1775.019793][ T1651] Tainted: [L]=SOFTLOCKUP [ 1775.019852][ T1651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1775.019946][ T1651] Call Trace: [ 1775.020006][ T1651] [ 1775.020070][ T1651] __dump_stack+0x26/0x30 [ 1775.020253][ T1651] dump_stack_lvl+0x14c/0x1c0 [ 1775.020443][ T1651] dump_stack+0x1e/0x25 [ 1775.020609][ T1651] gfs2_withdraw+0xd5/0x270 [ 1775.020815][ T1651] gfs2_meta_check_ii+0xd7/0x100 [ 1775.021030][ T1651] gfs2_meta_buffer+0x39a/0x590 [ 1775.021226][ T1651] __gfs2_iomap_get+0xf1c/0x2230 [ 1775.021499][ T1651] gfs2_block_map+0x286/0xde0 [ 1775.021745][ T1651] ? kmsan_get_metadata+0xf1/0x160 [ 1775.021968][ T1651] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1775.022203][ T1651] gfs2_write_alloc_required+0x4fc/0x6d0 [ 1775.022478][ T1651] gfs2_jdesc_check+0x33b/0x440 [ 1775.022656][ T1651] check_journal_clean+0x1b6/0x4c0 [ 1775.022866][ T1651] ? init_journal+0x31d8/0x3970 [ 1775.023069][ T1651] ? kmsan_get_metadata+0xf1/0x160 [ 1775.023286][ T1651] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1775.023520][ T1651] init_journal+0x31d8/0x3970 [ 1775.023767][ T1651] ? init_inodes+0x124/0x510 [ 1775.023974][ T1651] ? init_inodes+0x124/0x510 [ 1775.024173][ T1651] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1775.024416][ T1651] init_inodes+0x124/0x510 [ 1775.024631][ T1651] gfs2_fill_super+0x3518/0x3ff0 [ 1775.024845][ T1651] ? init_locking+0xed/0x500 [ 1775.025089][ T1651] get_tree_bdev_flags+0x6e6/0x920 [ 1775.025293][ T1651] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1775.025508][ T1651] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1775.025707][ T1651] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1775.025911][ T1651] get_tree_bdev+0x38/0x50 [ 1775.026103][ T1651] gfs2_get_tree+0x57/0x350 [ 1775.026306][ T1651] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1775.026515][ T1651] vfs_get_tree+0xb3/0x5d0 [ 1775.026721][ T1651] do_new_mount+0x885/0x1dd0 [ 1775.026931][ T1651] ? apparmor_capable+0x2a2/0x380 [ 1775.027132][ T1651] ? kmsan_get_metadata+0xf1/0x160 [ 1775.027347][ T1651] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1775.027603][ T1651] path_mount+0x7a2/0x20b0 [ 1775.027824][ T1651] ? user_path_at+0x1fc/0x330 [ 1775.028021][ T1651] __se_sys_mount+0x704/0x7f0 [ 1775.028172][ T1651] ? kmsan_get_metadata+0xf1/0x160 [ 1775.028418][ T1651] __x64_sys_mount+0xe4/0x150 [ 1775.028593][ T1651] x64_sys_call+0x39f0/0x3ea0 [ 1775.028791][ T1651] do_syscall_64+0x134/0xf80 [ 1775.028960][ T1651] ? clear_bhb_loop+0x50/0xa0 [ 1775.029128][ T1651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.029296][ T1651] RIP: 0033:0x7fb7ebb9da0a [ 1775.029420][ T1651] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.029559][ T1651] RSP: 002b:00007fb7ec99fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1775.029703][ T1651] RAX: ffffffffffffffda RBX: 00007fb7ec99fee0 RCX: 00007fb7ebb9da0a [ 1775.029819][ T1651] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fb7ec99fea0 [ 1775.029929][ T1651] RBP: 0000200000000400 R08: 00007fb7ec99fee0 R09: 0000000000210401 [ 1775.030036][ T1651] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 1775.030137][ T1651] R13: 00007fb7ec99fea0 R14: 00000000000125d8 R15: 0000200000000500 [ 1775.030286][ T1651] [ 1775.365549][ T1651] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:5 [ 1775.381351][ T1651] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:1651 [syz.4.8920] init_journal+0x31d8/0x3970 [ 1775.392170][ T1651] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1775.403889][ T1651] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 1776.447416][ T1691] tipc: Started in network mode [ 1776.453912][ T1691] tipc: Node identity , cluster identity 4711 [ 1777.996676][ T1714] bridge0: port 3(ipvlan3) entered blocking state [ 1778.033184][ T1714] bridge0: port 3(ipvlan3) entered disabled state [ 1778.072585][ T1714] ipvlan3: entered allmulticast mode [ 1778.116024][ T1714] bridge0: entered allmulticast mode [ 1778.132904][ T1714] ipvlan3: left allmulticast mode [ 1778.153463][ T1714] bridge0: left allmulticast mode [ 1779.641669][ T1750] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8949'. [ 1780.316257][ T1761] loop3: detected capacity change from 0 to 512 [ 1780.357990][ T1761] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1780.544309][ T1761] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.8953: bad orphan inode 131083 [ 1780.644838][ T1761] loop3: lost filesystem error report for type 5 error -117 [ 1780.654172][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1780.668631][ C1] EXT4-fs (loop3): initial error at time 1773435208: ext4_orphan_get:1417 [ 1780.677531][ C1] EXT4-fs (loop3): last error at time 1773435208: ext4_orphan_get:1417 [ 1780.703782][ T1776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1780.776522][ T1761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1780.779770][ T1776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1781.113553][ T1782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8959'. [ 1781.221913][ T1782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8959'. [ 1781.591499][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1783.634261][T12122] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1783.894716][T12122] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.934433][T12122] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.965539][T12122] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1783.993893][T12122] usb 4-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 1784.003472][T12122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.096600][T12122] usb 4-1: config 0 descriptor?? [ 1784.237409][ T1841] loop7: detected capacity change from 0 to 1024 [ 1784.458002][ T1847] tmpfs: Cannot change global quota limit on remount [ 1784.649674][T12122] hid-generic 0003:0463:1215.0026: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.3-1/input0 [ 1784.793791][T12122] usb 4-1: USB disconnect, device number 42 [ 1785.238244][ T1873] netlink: 'syz.7.8978': attribute type 3 has an invalid length. [ 1785.296273][ T1873] netlink: 'syz.7.8978': attribute type 3 has an invalid length. [ 1785.601783][ T1873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8978'. [ 1785.707261][ T1863] fido_id[1863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1786.058771][T12122] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1786.285096][ T1895] tipc: Cannot configure node identity twice [ 1786.291663][T12122] usb 4-1: Using ep0 maxpacket: 16 [ 1786.359319][T12122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.404917][T12122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1786.494226][T12122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1786.580234][T12122] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1786.640250][T12122] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1786.703287][T12122] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1786.721521][T12122] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1786.767006][T12122] usb 4-1: Manufacturer: syz [ 1786.848125][T12122] usb 4-1: config 0 descriptor?? [ 1787.665232][T12122] rc_core: IR keymap rc-hauppauge not found [ 1787.692307][T12122] Registered IR keymap rc-empty [ 1787.703114][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1787.775164][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1787.842368][T12122] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1787.948663][T12122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 1788.073531][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.176403][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.225679][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.288000][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.355472][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.394916][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.476467][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.527333][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.605202][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.657122][T12122] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1788.712287][T12122] mceusb 4-1:0.0: Registered with mce emulator interface version 0 [ 1788.774701][T12122] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1788.849285][T12122] usb 4-1: USB disconnect, device number 43 [ 1789.065440][ T734] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1789.244222][ T734] usb 5-1: Using ep0 maxpacket: 8 [ 1789.278270][ T734] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 1789.336316][ T734] usb 5-1: config 0 has no interface number 0 [ 1789.384384][ T734] usb 5-1: too many endpoints for config 0 interface 32 altsetting 110: 111, using maximum allowed: 30 [ 1789.424442][ T734] usb 5-1: config 0 interface 32 altsetting 110 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1789.560601][ T734] usb 5-1: config 0 interface 32 has no altsetting 0 [ 1789.607083][ T734] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1789.644151][ T734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.687492][ T734] usb 5-1: Product: syz [ 1789.691951][ T734] usb 5-1: Manufacturer: syz [ 1789.722536][ T734] usb 5-1: SerialNumber: syz [ 1789.758436][ T734] usb 5-1: config 0 descriptor?? [ 1790.093703][ T734] usb_ehset_test 5-1:0.32: probe with driver usb_ehset_test failed with error -32 [ 1790.208807][ T734] usb 5-1: USB disconnect, device number 51 [ 1790.505970][ T1991] loop6: detected capacity change from 0 to 256 [ 1790.541989][ T1991] exfat: Deprecated parameter 'namecase' [ 1790.591809][ T1991] exfat: Deprecated parameter 'namecase' [ 1790.690293][ T1991] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1792.232961][ T2015] loop4: detected capacity change from 0 to 1024 [ 1792.787623][ T34] hfsplus: b-tree write err: -5, ino 25 [ 1792.793804][ T34] hfsplus: b-tree write err: -5, ino 4 [ 1792.832437][ T34] hfsplus: b-tree write err: -5, ino 2 [ 1794.514964][ T2064] loop6: detected capacity change from 0 to 64 [ 1794.694793][ T2064] syz.6.9023: attempt to access beyond end of device [ 1794.694793][ T2064] loop6: rw=8388608, sector=234881062, nr_sectors = 2 limit=64 [ 1794.782480][ T2064] buffer_io_error: 25 callbacks suppressed [ 1794.782573][ T2064] Buffer I/O error on dev loop6, logical block 117440531, async page read [ 1794.836132][ T29] audit: type=1804 audit(1773435222.338:413): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.9023" name="/newroot/695/file2/file2" dev="loop6" ino=6 res=1 errno=0 [ 1794.889769][ T2070] Trying to free block not in datazone [ 1794.921426][ T2070] Trying to free block not in datazone [ 1794.948084][ T29] audit: type=1800 audit(1773435222.448:414): pid=2064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9023" name="file2" dev="loop6" ino=6 res=0 errno=0 [ 1794.991767][ T2070] Trying to free block not in datazone [ 1795.046706][ T2070] Trying to free block not in datazone [ 1795.248004][ T2078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9028'. [ 1795.810406][ T2086] loop4: detected capacity change from 0 to 512 [ 1795.995967][ T2086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1796.078945][ T2086] ext4 filesystem being mounted at /1827/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1796.150757][ T2100] loop3: detected capacity change from 0 to 512 [ 1796.265320][ T2100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 1796.289900][ T2096] loop6: detected capacity change from 0 to 2048 [ 1796.348498][ T2100] System zones: 1-12 [ 1796.395645][ T2100] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.9034: Directory hole found for htree index block 0 [ 1796.447405][ T2096] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1796.526971][ T2096] NILFS (loop6): mounting unchecked fs [ 1796.576040][ T2100] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1796.579386][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.590896][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1796.591006][ C0] EXT4-fs (loop3): initial error at time 1773435224: dx_probe:791: inode 2 [ 1796.591178][ C0] EXT4-fs (loop3): last error at time 1773435224: dx_probe:791: inode 2 [ 1796.651429][ T2100] EXT4-fs (loop3): Remounting filesystem read-only [ 1796.674431][ T2100] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1796.683077][ T2100] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1796.733842][ T2096] NILFS (loop6): recovery complete [ 1796.776452][ T2100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1796.832573][ T2108] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1796.937537][ T2100] EXT4-fs: user quota file already specified [ 1797.288131][ T2113] loop4: detected capacity change from 0 to 512 [ 1797.316163][ T2113] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1797.411341][ T2113] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1797.426870][ T2113] Quota error (device loop4): write_blk: dquota write failed [ 1797.434785][ T2113] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1797.448202][ T2113] Quota error (device loop4): write_blk: dquota write failed [ 1797.456462][ T2113] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1797.466878][ T2113] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.9035: Failed to acquire dquot type 1 [ 1797.478500][ T2113] loop4: lost filesystem error report for type 5 error -28 [ 1797.484110][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 1797.498170][ C1] EXT4-fs (loop4): initial error at time 1773435224: ext4_mb_generate_buddy:1315 [ 1797.507690][ C1] EXT4-fs (loop4): last error at time 1773435225: ext4_acquire_dquot:7001 [ 1797.533795][ T2113] EXT4-fs (loop4): 1 truncate cleaned up [ 1797.542043][ T2113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1797.761969][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1797.847953][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1799.038174][ T2135] loop4: detected capacity change from 0 to 4096 [ 1799.095585][ T2135] EXT4-fs: Ignoring removed orlov option [ 1799.161591][ T2135] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1799.242347][ T2135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1799.333126][ T29] audit: type=1800 audit(1773435226.858:415): pid=2135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9039" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1799.382126][ T2135] fs-verity (loop4, inode 15): Error -22 reading file data [ 1799.411731][ T2135] fs-verity (loop4, inode 15): Error -22 building Merkle tree [ 1799.829737][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1800.354967][ T2161] loop6: detected capacity change from 0 to 2048 [ 1800.416513][ T2161] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1800.658263][ T2161] UDF-fs: unknown compression code (0) [ 1800.931666][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1800.949382][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.603354][ T2194] loop3: detected capacity change from 0 to 4096 [ 1802.812290][ T2207] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1804.109574][ T2234] loop4: detected capacity change from 0 to 256 [ 1804.617818][ T2240] loop3: detected capacity change from 0 to 256 [ 1806.812078][ T131] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1806.878087][ T131] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.034547][T12122] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1807.091135][ T131] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1807.155498][ T131] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.199927][ T2285] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9081'. [ 1807.250902][T12122] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1807.284209][T12122] usb 5-1: config 0 has no interface number 0 [ 1807.292813][T12122] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1807.331342][T12122] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1807.373633][T12122] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1807.434317][T12122] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1807.490726][ T131] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1807.502722][T12122] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1807.536554][T12122] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1807.540442][ T131] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.600787][T12122] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1807.664595][T12122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.692654][T12122] usb 5-1: config 0 descriptor?? [ 1807.721634][ T2278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1807.756169][ T2278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1807.802860][ T131] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1807.872279][ T131] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.932653][T12122] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1808.115445][T12122] usb 5-1: USB disconnect, device number 52 [ 1808.146321][ T2301] loop6: detected capacity change from 0 to 64 [ 1808.217904][T12122] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1808.832771][T19677] hfs: node 4:3 still has 2 user(s)! [ 1808.845217][ T131] bridge_slave_1: left allmulticast mode [ 1808.851099][ T131] bridge_slave_1: left promiscuous mode [ 1808.978235][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.158334][ T131] bridge_slave_0: left allmulticast mode [ 1809.244141][ T131] bridge_slave_0: left promiscuous mode [ 1809.250870][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.395018][ T131] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1809.934590][T12122] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1810.191795][T12122] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1810.218876][T12122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.238627][T12122] usb 4-1: Product: syz [ 1810.275307][T12122] usb 4-1: Manufacturer: syz [ 1810.286255][T12122] usb 4-1: SerialNumber: syz [ 1810.328391][T12122] usb 4-1: config 0 descriptor?? [ 1810.391970][T12122] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1810.540645][ T131] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1811.053374][T12122] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1811.083891][T12122] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1811.111137][T12122] usb 4-1: USB disconnect, device number 44 [ 1811.221585][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1811.292517][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1811.309670][ T131] bond0 (unregistering): Released all slaves [ 1811.374268][ T2338] bridge0: port 3(ipvlan2) entered blocking state [ 1811.381841][ T2338] bridge0: port 3(ipvlan2) entered disabled state [ 1811.402097][ T2338] ipvlan2: entered allmulticast mode [ 1811.409017][ T2338] bridge0: entered allmulticast mode [ 1811.418254][ T2338] ipvlan2: left allmulticast mode [ 1811.423842][ T2338] bridge0: left allmulticast mode [ 1812.239662][ T2379] loop3: detected capacity change from 0 to 256 [ 1812.639082][ T2379] FAT-fs (loop3): Directory bread(block 64) failed [ 1812.681528][ T2379] FAT-fs (loop3): Directory bread(block 65) failed [ 1812.724845][ T2379] FAT-fs (loop3): Directory bread(block 66) failed [ 1812.783788][ T2379] FAT-fs (loop3): Directory bread(block 67) failed [ 1812.791287][ T2379] FAT-fs (loop3): Directory bread(block 68) failed [ 1812.832633][ T131] hsr_slave_0: left promiscuous mode [ 1812.876407][ T2379] FAT-fs (loop3): Directory bread(block 69) failed [ 1812.885663][ T2391] tmpfs: Cannot change global quota limit on remount [ 1812.903135][ T131] hsr_slave_1: left promiscuous mode [ 1812.925105][ T2379] FAT-fs (loop3): Directory bread(block 70) failed [ 1812.931918][ T2379] FAT-fs (loop3): Directory bread(block 71) failed [ 1812.985858][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1812.993499][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1813.025338][ T2394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9101'. [ 1813.048183][ T2379] FAT-fs (loop3): Directory bread(block 72) failed [ 1813.049099][ T2394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9101'. [ 1813.088962][ T2379] FAT-fs (loop3): Directory bread(block 73) failed [ 1813.101675][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.164867][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.398842][ T131] veth1_macvtap: left promiscuous mode [ 1813.444527][ T131] veth0_macvtap: left promiscuous mode [ 1813.450603][ T131] veth1_vlan: left promiscuous mode [ 1813.474736][ T131] veth0_vlan: left promiscuous mode [ 1813.783466][T29571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1813.796905][T29571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1813.816866][T29571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1813.848338][T29571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1813.892780][T29571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1814.625626][ T2429] loop6: detected capacity change from 0 to 64 [ 1814.965540][ T131] pim6reg (unregistering): left allmulticast mode [ 1815.117660][T19677] hfs: node 4:3 still has 1 user(s)! [ 1815.936707][ T131] team0 (unregistering): Port device team_slave_1 removed [ 1815.949317][T29571] Bluetooth: hci1: command tx timeout [ 1816.038709][ T131] team0 (unregistering): Port device team_slave_0 removed [ 1816.331578][ T2451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9110'. [ 1816.576710][ T2398] tipc: Enabling of bearer rejected, failed to enable media [ 1817.037810][ T2459] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:2046x16 (0x33524742, 8, 0, 0, 0) [ 1817.056420][ T2405] lo speed is unknown, defaulting to 1000 [ 1817.091798][ T2405] xfrm0 speed is unknown, defaulting to 1000 [ 1817.425535][ T2472] syz_tun: entered promiscuous mode [ 1817.472759][ T2472] macvtap1: entered promiscuous mode [ 1817.596619][ T2472] syz_tun: left promiscuous mode [ 1818.024985][T29571] Bluetooth: hci1: command tx timeout [ 1818.053034][ T131] IPVS: stop unused estimator thread 0... [ 1818.642406][ T2517] sp0: Synchronizing with TNC [ 1818.705661][ T2515] [U] è [ 1820.115241][T29571] Bluetooth: hci1: command tx timeout [ 1820.200161][ T2405] chnl_net:caif_netlink_parms(): no params data found [ 1820.945407][ T2639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9131'. [ 1820.973231][ T2639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9131'. [ 1822.226387][T29571] Bluetooth: hci1: command tx timeout [ 1822.399573][ T2686] loop6: detected capacity change from 0 to 128 [ 1822.526602][ T2686] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1822.626977][ T2686] ext4 filesystem being mounted at /723/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1823.101625][T19677] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1823.152727][ T2716] xt_hashlimit: size too large, truncated to 1048576 [ 1823.237293][ T2405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.272806][ T2405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.303422][ T2405] bridge_slave_0: entered allmulticast mode [ 1823.341322][ T2405] bridge_slave_0: entered promiscuous mode [ 1823.427386][ T2405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.444729][ T2405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.452683][ T2405] bridge_slave_1: entered allmulticast mode [ 1823.520863][ T2405] bridge_slave_1: entered promiscuous mode [ 1823.727696][ T2735] loop3: detected capacity change from 0 to 256 [ 1823.761404][ T2741] loop6: detected capacity change from 0 to 256 [ 1823.832239][ T2741] exfat: Deprecated parameter 'utf8' [ 1823.868839][ T2735] FAT-fs (loop3): Directory bread(block 517) failed [ 1823.878984][ T2741] exfat: Deprecated parameter 'utf8' [ 1823.919913][ T2735] FAT-fs (loop3): Directory bread(block 518) failed [ 1823.935103][ T2741] exfat: Deprecated parameter 'namecase' [ 1823.955557][ T2735] FAT-fs (loop3): Directory bread(block 519) failed [ 1823.994856][ T1195] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1824.008399][ T2735] FAT-fs (loop3): Directory bread(block 520) failed [ 1824.028996][ T2735] FAT-fs (loop3): Directory bread(block 521) failed [ 1824.081906][ T2735] FAT-fs (loop3): Directory bread(block 522) failed [ 1824.095516][ T2405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1824.136171][ T2735] FAT-fs (loop3): Directory bread(block 523) failed [ 1824.143235][ T2735] FAT-fs (loop3): Directory bread(block 524) failed [ 1824.153728][ T2741] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1824.218285][ T2405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1824.237268][ T1195] usb 5-1: Using ep0 maxpacket: 16 [ 1824.246105][ T2735] FAT-fs (loop3): Directory bread(block 525) failed [ 1824.253168][ T2735] FAT-fs (loop3): Directory bread(block 526) failed [ 1824.312407][ T1195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.381345][ T1195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.444184][ T1195] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1824.519224][ T1195] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1824.564196][ T1195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.650220][ T1195] usb 5-1: config 0 descriptor?? [ 1824.739387][ T2405] team0: Port device team_slave_0 added [ 1824.961319][ T2405] team0: Port device team_slave_1 added [ 1825.350149][ T1195] microsoft 0003:045E:07DA.0027: item 0 4 0 11 parsing failed [ 1825.464352][ T1195] microsoft 0003:045E:07DA.0027: parse failed [ 1825.471076][ T1195] microsoft 0003:045E:07DA.0027: probe with driver microsoft failed with error -22 [ 1825.676380][ T1195] usb 5-1: USB disconnect, device number 53 [ 1825.690099][ T2405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1825.771728][T28065] ===================================================== [ 1825.783819][T28065] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820 [ 1825.792801][T28065] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1825.799603][T28065] n_tty_receive_buf_common+0x1a59/0x2610 [ 1825.808707][T28065] n_tty_receive_buf2+0x4c/0x60 [ 1825.813795][T28065] tty_ldisc_receive_buf+0xc6/0x2c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1825.819507][T28065] tty_port_default_receive_buf+0xd7/0x1a0 [ 1825.825821][T28065] flush_to_ldisc+0x43e/0xe40 [ 1825.830813][T28065] process_scheduled_works+0xb21/0x1e30 [ 1825.839812][T28065] worker_thread+0xede/0x1580 [ 1825.844822][T28065] kthread+0x53f/0x600 [ 1825.849255][T28065] ret_from_fork+0x20f/0x910 [ 1825.854238][T28065] ret_from_fork_asm+0x1a/0x30 [ 1825.859228][T28065] [ 1825.861650][T28065] Uninit was stored to memory at: [ 1825.870528][T28065] n_tty_receive_buf_standard+0xe74/0xc820 [ 1825.876708][T28065] n_tty_receive_buf_common+0x1a59/0x2610 [ 1825.882718][T28065] n_tty_receive_buf2+0x4c/0x60 [ 1825.888323][T28065] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1825.893763][T28065] tty_port_default_receive_buf+0xd7/0x1a0 [ 1825.902848][T28065] flush_to_ldisc+0x43e/0xe40 [ 1825.907890][T28065] process_scheduled_works+0xb21/0x1e30 [ 1825.913689][T28065] worker_thread+0xede/0x1580 [ 1825.918850][T28065] kthread+0x53f/0x600 [ 1825.923163][T28065] ret_from_fork+0x20f/0x910 [ 1825.931113][T28065] ret_from_fork_asm+0x1a/0x30 [ 1825.936244][T28065] [ 1825.938677][T28065] Uninit was created at: [ 1825.943235][T28065] __kmalloc_noprof+0x486/0x1680 [ 1825.948581][T28065] __tty_buffer_request_room+0x3d4/0x7a0 [ 1825.957636][T28065] __tty_insert_flip_string_flags+0x157/0x6e0 [ 1825.964140][T28065] uart_insert_char+0x368/0x930 [ 1825.969353][T28065] serial8250_read_char+0x1ba/0x670 [ 1825.975097][T28065] serial8250_handle_irq+0x930/0x1110 [ 1825.980785][T28065] serial8250_default_handle_irq+0x116/0x370 [ 1825.990134][T28065] serial8250_interrupt+0xcb/0x420 [ 1825.995588][T28065] __handle_irq_event_percpu+0x13c/0xf90 [ 1826.001590][T28065] handle_irq_event+0xe0/0x2a0 [ 1826.006651][T28065] handle_edge_irq+0x2a9/0xb30 [ 1826.011718][T28065] __common_interrupt+0x9d/0x180 [ 1826.020122][T28065] common_interrupt+0x94/0xb0 [ 1826.025157][T28065] asm_common_interrupt+0x2b/0x40 [ 1826.030378][T28065] [ 1826.032908][T28065] CPU: 0 UID: 0 PID: 28065 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.047517][T28065] Tainted: [L]=SOFTLOCKUP [ 1826.052055][T28065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1826.062379][T28065] Workqueue: events_unbound flush_to_ldisc [ 1826.068643][T28065] ===================================================== [ 1826.078703][T28065] Disabling lock debugging due to kernel taint [ 1826.170597][ T2405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.347089][ T2405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.433382][ T2405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.494192][ T2405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.593023][ T2405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.241086][ T2405] hsr_slave_0: entered promiscuous mode [ 1827.339542][ T2405] hsr_slave_1: entered promiscuous mode [ 1827.356159][T28065] Kernel panic - not syncing: kmsan.panic set ... [ 1827.362835][T28065] CPU: 0 UID: 0 PID: 28065 Comm: kworker/u8:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1827.374188][T28065] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1827.379857][T28065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1827.390088][T28065] Workqueue: events_unbound flush_to_ldisc [ 1827.396180][T28065] Call Trace: [ 1827.399578][T28065] [ 1827.402631][T28065] __dump_stack+0x26/0x30 [ 1827.407176][T28065] dump_stack_lvl+0x50/0x1c0 [ 1827.411975][T28065] ? dump_stack+0x12/0x25 [ 1827.416510][T28065] dump_stack+0x1e/0x25 [ 1827.420874][T28065] vpanic+0x7b4/0x1430 [ 1827.425187][T28065] panic+0x15d/0x160 [ 1827.429406][T28065] kmsan_report+0x31a/0x320 [ 1827.434164][T28065] ? __msan_warning+0x1b/0x30 [ 1827.439071][T28065] ? n_tty_receive_buf_standard+0xe7b/0xc820 [ 1827.445279][T28065] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 1827.451405][T28065] ? n_tty_receive_buf2+0x4c/0x60 [ 1827.456635][T28065] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1827.462258][T28065] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1827.468514][T28065] ? flush_to_ldisc+0x43e/0xe40 [ 1827.473602][T28065] ? process_scheduled_works+0xb21/0x1e30 [ 1827.479538][T28065] ? worker_thread+0xede/0x1580 [ 1827.484592][T28065] ? kthread+0x53f/0x600 [ 1827.489055][T28065] ? ret_from_fork+0x20f/0x910 [ 1827.494022][T28065] ? ret_from_fork_asm+0x1a/0x30 [ 1827.499178][T28065] ? ret_from_fork_asm+0x1a/0x30 [ 1827.504355][T28065] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1827.510977][T28065] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1827.517298][T28065] ? __mutex_unlock_slowpath+0x3f7/0x530 [ 1827.523218][T28065] ? kmsan_get_metadata+0x146/0x160 [ 1827.528661][T28065] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1827.534711][T28065] ? n_tty_receive_char+0x1223/0x14f0 [ 1827.540281][T28065] ? __wake_up+0x29d/0x2f0 [ 1827.544950][T28065] ? kmsan_get_metadata+0xf1/0x160 [ 1827.550296][T28065] __msan_warning+0x1b/0x30 [ 1827.555058][T28065] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1827.561150][T28065] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1827.567709][T28065] ? kmsan_get_metadata+0xf1/0x160 [ 1827.573053][T28065] ? advisor_target_scan_time_store+0x100/0x180 [ 1827.579533][T28065] n_tty_receive_buf_common+0x1a59/0x2610 [ 1827.585543][T28065] n_tty_receive_buf2+0x4c/0x60 [ 1827.590577][T28065] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1827.596320][T28065] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1827.601779][T28065] tty_port_default_receive_buf+0xd7/0x1a0 [ 1827.607832][T28065] flush_to_ldisc+0x43e/0xe40 [ 1827.612752][T28065] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1827.619409][T28065] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1827.624843][T28065] process_scheduled_works+0xb21/0x1e30 [ 1827.630645][T28065] worker_thread+0xede/0x1580 [ 1827.635548][T28065] kthread+0x53f/0x600 [ 1827.639827][T28065] ? __pfx_worker_thread+0x10/0x10 [ 1827.645135][T28065] ? __pfx_kthread+0x10/0x10 [ 1827.649932][T28065] ret_from_fork+0x20f/0x910 [ 1827.654711][T28065] ? __switch_to+0x51c/0x750 [ 1827.659670][T28065] ? __pfx_kthread+0x10/0x10 [ 1827.664464][T28065] ret_from_fork_asm+0x1a/0x30 [ 1827.669484][T28065] [ 1827.673257][T28065] Kernel Offset: disabled [ 1827.677666][T28065] Rebooting in 86400 seconds..