last executing test programs: 4.081768488s ago: executing program 1 (id=979): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') fcntl$notify(r0, 0x402, 0x80000019) getdents(r0, &(0x7f0000001600)=""/4097, 0x1001) 3.960768384s ago: executing program 1 (id=969): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 3.958681864s ago: executing program 0 (id=971): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0xff, 0x1, 0x40, 0x8}, 0x20) 3.876549438s ago: executing program 4 (id=973): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) read(r0, 0x0, 0xfe90) 3.728132055s ago: executing program 4 (id=974): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x54, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x400000000001}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 3.215096531s ago: executing program 4 (id=976): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000180)=0x9, 0x4) 3.204332501s ago: executing program 1 (id=986): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0xff, 0x1, 0x40, 0x8}, 0x20) 3.203491821s ago: executing program 0 (id=977): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@init_itable}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x47a, &(0x7f0000000580)="$eJzs3LtvW9UfAPCvr+M06eOX/Ep5tLQQKIiKR9KkDzqwFIHEABISDEVMIUmrUrdBTZBoVUFhKCOqxI4YkfgLWCgLAiYkVtgRUoW6UJiMrn2vnaR2ErtOXOLPR3Jyjs+Jz/neR+7xOb4OoG+NpT8KETsj4teIGKlll1cYq/26fevKzN+3rswUolJ5489Ctd5ft67M5FXzv9tRy1Qqq7R77e2I6XJ57mKWn1g8/97EwmCWOzN3YerEwtEjBwaPTx3rSpy70r7u+3B+/95X3rr+2syp6+/8+HXa351Z+dI4umWstnWberLbjfXYriXpwkAPO0JbihGR7q5S9fwfiWIM18tG4uVPeto5YENVKkllW+viqxVgC0sH6kA/yi/06fvf/LFJQ497ws2TUZ/HuJ09aiUDkWR1Stl7pI0wFhGnrv7zxamhWr7ftj8AsPlunIyIZ5uN/5J4YEm9/2VrQ6MR8f+I2B0R90XEnoi4P6Ja98GIeKjN9leukNw5/qmMdBTYOqXjvxeyta3l47989BejxSy3qxp/qXD6bHnucLZNDkVpW5qfbLxkaWUb3730y2et2q+P/7JH2n76u1Ej+WNgxQTd7PTidKxcp+vQzY8j9g004h+qx1+oj3nTdvZGxL4O2zj79Ff7W5WtHf8qujAor3wZ8VRt/1+NZfu/sXUL9fXJS5efO3t++sxcdX3yxNEjk88fnzo2MRTlucMT+VFxp59+vvZ6q/bvKv4uuHmjEtubHv/1+EcLQxELly6fq67XLrTfxrXfPm35nqbT43+w8GY1na8YfzC9uHhxMmKw8Oqdz081/jbP5/XT4//Qwebn/+5obImHIyI9iA9ExCMR8WjW98ci4vGIOLhK/D+8+MS77ce/yqx8F6Xxz661/2Pp/l8zcTkilj1TPPf9N+3Hn0v3/9Fq6lD2TP7/bzXr6mlHRzMAAAD89yTVz8AXkvF6OknGx2uf4d8T25Py/MLiM6fn378wW/us/GiUkqUzXfl86GQ2N5znp1bkj2Tzxp8Xh6v58Zn58myPY4d+t6PF+Z/6vdjr3gEbzv1a0L+c/wDQf1z/oX85/6F/NTv/P+pBP4DNt8b1f3iz+gFsPuN/6F8tzv8NvfEauDe4/kNfanZvfDEiyklalNZY543060oMR3deZ6slBrv2gt8OtvVdDXeRiOSe2HRbKFGKpkUD6/4yiw4T25oW9fo/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHf8GwAA//9GpNdY") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3.01444915s ago: executing program 1 (id=978): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x428, 0x358, 0x358, 0x428, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x10, [0x40, 0x37, 0x32, 0x2a, 0x2, 0x2d, 0x29, 0x17, 0x23, 0x1c, 0xe, 0x38, 0xb, 0x22, 0x27, 0xd], 0x2, 0x4b, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x520) 2.601925891s ago: executing program 1 (id=980): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.601612281s ago: executing program 4 (id=981): syz_mount_image$xfs(&(0x7f0000005a00), &(0x7f0000009640)='./bus\x00', 0x18040, &(0x7f0000000100)={[{@lazytime}, {@dax_never}, {@quota}, {@prjquota}, {@grpquota}, {@bsdgroups}, {@dax}]}, 0x4, 0x9736, &(0x7f0000012d80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.278329177s ago: executing program 3 (id=984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) 2.068196227s ago: executing program 3 (id=987): setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, 0x0, 0x0) 2.056526028s ago: executing program 0 (id=988): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) 1.874174427s ago: executing program 2 (id=989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 1.827273169s ago: executing program 3 (id=990): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0xff, 0x1, 0x40, 0x8}, 0x20) 1.648830818s ago: executing program 3 (id=992): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, 0x0, 0x0) close(r0) 1.587981291s ago: executing program 2 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008020", @ANYRES32=0x0, @ANYRESOCT], 0x24}}, 0x0) 1.400116771s ago: executing program 3 (id=994): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100070001000000feffffff14000100fec4"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.3993688s ago: executing program 2 (id=1004): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 1.237577978s ago: executing program 1 (id=995): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.122328114s ago: executing program 0 (id=996): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) 975.958361ms ago: executing program 4 (id=997): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 972.331501ms ago: executing program 3 (id=1008): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x44, 0x554a, &(0x7f00000058c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000001c0)=0x3) 951.090183ms ago: executing program 2 (id=998): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x2, @private1, 0x10000bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000800000001, 0x2, 0x3}}}, 0x118) 691.224295ms ago: executing program 2 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x3c, r1, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 363.771052ms ago: executing program 4 (id=1000): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@init_itable}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x47a, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 362.962672ms ago: executing program 0 (id=1012): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000002fc0)=""/4096, 0x1000) 362.354562ms ago: executing program 2 (id=1001): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000001080)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 0s ago: executing program 0 (id=1002): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) kernel console output (not intermixed with test programs): syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 86.986925][ T4637] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 87.091613][ T26] audit: type=1326 audit(1773782452.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 87.144436][ T26] audit: type=1326 audit(1773782452.242:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 87.196423][ T4647] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.276789][ T26] audit: type=1326 audit(1773782452.242:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 87.366905][ T26] audit: type=1326 audit(1773782452.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 87.438317][ T26] audit: type=1326 audit(1773782452.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 87.511359][ T4655] loop1: detected capacity change from 0 to 2048 [ 87.544524][ T4656] sctp: [Deprecated]: syz.3.115 (pid 4656) Use of int in max_burst socket option deprecated. [ 87.544524][ T4656] Use struct sctp_assoc_value instead [ 87.575720][ T4660] loop2: detected capacity change from 0 to 256 [ 87.579971][ T4658] binder: 4657:4658 ioctl 541b 0 returned -22 [ 87.622561][ T4655] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.725410][ T4660] FAT-fs (loop2): Directory bread(block 64) failed [ 87.736444][ T4660] FAT-fs (loop2): Directory bread(block 65) failed [ 87.764091][ T4660] FAT-fs (loop2): Directory bread(block 66) failed [ 87.786298][ T4660] FAT-fs (loop2): Directory bread(block 67) failed [ 87.815719][ T4660] FAT-fs (loop2): Directory bread(block 68) failed [ 87.837358][ T4660] FAT-fs (loop2): Directory bread(block 69) failed [ 87.871013][ T4660] FAT-fs (loop2): Directory bread(block 70) failed [ 87.892117][ T4660] FAT-fs (loop2): Directory bread(block 71) failed [ 87.904603][ T4660] FAT-fs (loop2): Directory bread(block 72) failed [ 87.939688][ T4660] FAT-fs (loop2): Directory bread(block 73) failed [ 88.230031][ T4674] loop0: detected capacity change from 0 to 2048 [ 88.250436][ T4674] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 88.298015][ T4674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.953577][ T4697] loop2: detected capacity change from 0 to 2048 [ 88.979281][ T4697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.204099][ T4679] loop1: detected capacity change from 0 to 32768 [ 89.323942][ T4679] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 89.365784][ T4679] JBD2: Ignoring recovery information on journal [ 89.580153][ T4679] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 89.666637][ T4710] sctp: [Deprecated]: syz.2.140 (pid 4710) Use of int in max_burst socket option deprecated. [ 89.666637][ T4710] Use struct sctp_assoc_value instead [ 89.715847][ T26] audit: type=1800 audit(1773782455.012:9): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.128" name="file2" dev="loop1" ino=17058 res=0 errno=0 [ 89.912539][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 90.050414][ T4723] loop0: detected capacity change from 0 to 512 [ 90.137259][ T4723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.210136][ T4723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.243854][ T4723] EXT4-fs (loop0): 1 truncate cleaned up [ 90.250745][ T4723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.381987][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 90.394008][ T26] audit: type=1326 audit(1773782455.692:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efbb9c799 code=0x7ffc0000 [ 90.416956][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.492679][ T26] audit: type=1326 audit(1773782455.692:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9efbb9c799 code=0x7ffc0000 [ 90.516255][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.579500][ T4734] loop0: detected capacity change from 0 to 2048 [ 90.638143][ T4734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.854879][ T4726] loop4: detected capacity change from 0 to 32768 [ 90.990277][ T4751] loop3: detected capacity change from 0 to 512 [ 91.035723][ T4751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.041881][ T4726] XFS (loop4): Mounting V5 Filesystem [ 91.060379][ T4751] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.162031][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 91.232910][ T4726] XFS (loop4): Ending clean mount [ 91.432138][ T4726] syz.4.149 (4726) used greatest stack depth: 20336 bytes left [ 91.556861][ T4273] XFS (loop4): Unmounting Filesystem [ 91.862751][ T4771] loop3: detected capacity change from 0 to 2048 [ 91.911819][ T4771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.137959][ T4781] netlink: 68 bytes leftover after parsing attributes in process `syz.1.171'. [ 92.186146][ T4781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'. [ 92.723527][ T4797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.761622][ T4779] loop2: detected capacity change from 0 to 40427 [ 92.777436][ T4797] team0: Port device bond1 added [ 92.809245][ T4779] F2FS-fs (loop2): invalid crc value [ 92.889428][ T4779] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.058828][ T4779] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 93.100054][ T4779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.373358][ T4267] syz-executor: attempt to access beyond end of device [ 93.373358][ T4267] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.525645][ T4812] loop4: detected capacity change from 0 to 8192 [ 93.576866][ T4812] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.359270][ T4833] loop4: detected capacity change from 0 to 64 [ 94.532131][ T4833] syz.4.193: attempt to access beyond end of device [ 94.532131][ T4833] loop4: rw=0, sector=412, nr_sectors = 2 limit=64 [ 94.616876][ T4833] Trying to free block not in datazone [ 94.625179][ T4833] syz.4.193: attempt to access beyond end of device [ 94.625179][ T4833] loop4: rw=0, sector=412, nr_sectors = 2 limit=64 [ 94.625532][ T4833] Buffer I/O error on dev loop4, logical block 206, async page read [ 94.625788][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 94.625799][ T26] audit: type=1800 audit(1773782459.922:13): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.193" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 94.760185][ T4823] loop3: detected capacity change from 0 to 32768 [ 94.803475][ T4823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.189 (4823) [ 94.817806][ T4823] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.817889][ T4823] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 94.817962][ T4823] BTRFS info (device loop3): using free space tree [ 94.981853][ T4823] BTRFS info (device loop3): enabling ssd optimizations [ 95.338848][ T4843] loop2: detected capacity change from 0 to 40427 [ 95.368393][ T4295] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 95.382799][ T4843] F2FS-fs (loop2): invalid crc value [ 95.407686][ T4843] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.469023][ T4280] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.496400][ T4843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.917225][ T125] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.117588][ T125] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 96.151029][ T125] usb 2-1: config 0 has no interface number 0 [ 96.159064][ T125] usb 2-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 96.176019][ T4877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.206074][ T125] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.231187][ T125] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.265975][ T125] usb 2-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 96.296634][ T125] usb 2-1: config 0 interface 16 has no altsetting 0 [ 96.304196][ T125] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 96.341341][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.363531][ T4871] loop4: detected capacity change from 0 to 32768 [ 96.373894][ T125] usb 2-1: config 0 descriptor?? [ 96.392161][ T4877] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.438029][ T4877] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.490224][ T4877] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.533429][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.586356][ T4878] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.586707][ T4871] XFS (loop4): Mounting V5 Filesystem [ 96.679847][ T4871] XFS (loop4): Ending clean mount [ 96.817937][ T125] uclogic 0003:5543:004D.0003: interface is invalid, ignoring [ 97.006576][ T4273] XFS (loop4): Unmounting Filesystem [ 97.063422][ T4268] usb 2-1: USB disconnect, device number 2 [ 97.135495][ T4875] usb 1-1: USB disconnect, device number 2 [ 97.625319][ T4914] loop3: detected capacity change from 0 to 256 [ 97.698640][ T4914] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 98.206168][ T4920] loop1: detected capacity change from 0 to 32768 [ 98.234523][ T4920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.217 (4920) [ 98.307732][ T4920] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.343051][ T4920] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.386362][ T4920] BTRFS info (device loop1): metadata ratio 2 [ 98.397080][ T4920] BTRFS info (device loop1): allowing degraded mounts [ 98.405061][ T4920] BTRFS info (device loop1): force zlib compression, level 3 [ 98.437906][ T4920] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.443919][ T4934] loop3: detected capacity change from 0 to 64 [ 98.456296][ T4920] BTRFS info (device loop1): use zstd compression, level 3 [ 98.501066][ T4920] BTRFS info (device loop1): force clearing of disk cache [ 98.525376][ T4920] BTRFS info (device loop1): allowing degraded mounts [ 98.553821][ T4920] BTRFS info (device loop1): max_inline at 0 [ 98.586404][ T4920] BTRFS info (device loop1): using free space tree [ 98.895475][ T4920] BTRFS info (device loop1): enabling ssd optimizations [ 98.912168][ T4956] netlink: 236 bytes leftover after parsing attributes in process `syz.2.226'. [ 98.927825][ T4920] BTRFS info (device loop1): rebuilding free space tree [ 99.031363][ T26] audit: type=1800 audit(1773782464.332:14): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 99.237229][ T4966] Bluetooth: MGMT ver 1.22 [ 99.713010][ T4266] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.936293][ T4985] loop4: detected capacity change from 0 to 512 [ 100.088354][ T4985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.112419][ T4985] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.303805][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 100.312367][ T26] audit: type=1326 audit(1773782465.612:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52bed9c799 code=0x0 [ 100.346793][ T4996] loop1: detected capacity change from 0 to 2048 [ 100.394633][ T4996] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.449287][ T5003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.903106][ T5012] loop4: detected capacity change from 0 to 256 [ 100.992857][ T5014] loop3: detected capacity change from 0 to 1024 [ 101.096102][ T5012] FAT-fs (loop4): Directory bread(block 64) failed [ 101.102839][ T5014] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 101.120087][ T5012] FAT-fs (loop4): Directory bread(block 65) failed [ 101.152966][ T5012] FAT-fs (loop4): Directory bread(block 66) failed [ 101.152970][ T5014] syz.3.250: attempt to access beyond end of device [ 101.152970][ T5014] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 101.186122][ T5012] FAT-fs (loop4): Directory bread(block 67) failed [ 101.193253][ T5012] FAT-fs (loop4): Directory bread(block 68) failed [ 101.241021][ T5012] FAT-fs (loop4): Directory bread(block 69) failed [ 101.269073][ T5014] Buffer I/O error on dev loop3, logical block 458752, async page read [ 101.276309][ T5012] FAT-fs (loop4): Directory bread(block 70) failed [ 101.309365][ T5014] syz.3.250: attempt to access beyond end of device [ 101.309365][ T5014] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 101.332823][ T5012] FAT-fs (loop4): Directory bread(block 71) failed [ 101.333481][ T5014] Buffer I/O error on dev loop3, logical block 458752, async page read [ 101.356084][ T5012] FAT-fs (loop4): Directory bread(block 72) failed [ 101.373267][ T5020] Bluetooth: MGMT ver 1.22 [ 101.391326][ T5012] FAT-fs (loop4): Directory bread(block 73) failed [ 101.406528][ T5010] loop1: detected capacity change from 0 to 32768 [ 101.802109][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 101.855462][ T5030] sg_write: process 121 (syz.3.260) changed security contexts after opening file descriptor, this is not allowed. [ 101.886259][ T4879] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 102.089120][ T4879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.121230][ T4879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.152504][ T4879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.200107][ T4879] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 102.223720][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 102.248392][ T4879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.273230][ T4879] usb 3-1: config 0 descriptor?? [ 102.456591][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'. [ 102.711564][ T4879] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 102.733527][ T4879] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 102.761265][ T4879] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 102.786039][ T4879] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 102.815591][ T4879] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 102.840637][ T5032] loop4: detected capacity change from 0 to 32768 [ 102.846031][ T4879] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 102.865995][ T4879] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 102.926468][ T4879] cypress 0003:04B4:0001.0004: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.2-1/input0 [ 102.966381][ T4879] usb 3-1: USB disconnect, device number 3 [ 103.039704][ T5032] XFS (loop4): Mounting V5 Filesystem [ 103.152791][ T5032] XFS (loop4): Ending clean mount [ 103.212975][ T5066] fido_id[5066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 103.317558][ T4273] XFS (loop4): Unmounting Filesystem [ 103.440951][ T5071] mkiss: ax0: crc mode is auto. [ 103.456826][ T5056] loop0: detected capacity change from 0 to 32768 [ 103.584326][ T5054] loop3: detected capacity change from 0 to 32768 [ 103.649246][ T5054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.269 (5054) [ 103.652465][ T5074] loop2: detected capacity change from 0 to 512 [ 103.740806][ T5074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.758865][ T5054] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.816093][ T5054] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 103.842994][ T5074] EXT4-fs (loop2): 1 truncate cleaned up [ 103.876067][ T5054] BTRFS info (device loop3): using free space tree [ 103.880336][ T5074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.127667][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 104.194587][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 104.235815][ T5054] BTRFS info (device loop3): enabling ssd optimizations [ 104.496347][ T4313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.530181][ T4280] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.707688][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.725010][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.747562][ T4313] usb 3-1: New USB device found, idVendor=046d, idProduct=0026, bcdDevice= 0.00 [ 104.777308][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.782155][ T5081] loop0: detected capacity change from 0 to 32768 [ 104.822547][ T4313] usb 3-1: config 0 descriptor?? [ 105.137694][ T5120] sctp: [Deprecated]: syz.3.282 (pid 5120) Use of int in maxseg socket option. [ 105.137694][ T5120] Use struct sctp_assoc_value instead [ 105.201504][ T5084] loop1: detected capacity change from 0 to 32768 [ 105.252319][ T4313] hid-generic 0003:046D:0026.0005: hidraw0: USB HID v0.00 Device [HID 046d:0026] on usb-dummy_hcd.2-1/input0 [ 105.451415][ T5118] usb 3-1: USB disconnect, device number 4 [ 105.600001][ T5126] fido_id[5126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 106.285554][ T5157] loop4: detected capacity change from 0 to 1024 [ 106.302738][ T5157] EXT4-fs: Ignoring removed orlov option [ 106.331632][ T5157] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 106.455334][ T5160] loop2: detected capacity change from 0 to 2048 [ 106.465226][ T5160] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.565409][ T5163] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.880903][ T5152] loop1: detected capacity change from 0 to 32768 [ 106.888854][ T4313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.004910][ T5152] XFS (loop1): Mounting V5 Filesystem [ 107.087748][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.100508][ T5186] sock: sock_timestamping_bind_phc: sock not bind to device [ 107.173772][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.265977][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.303272][ T4313] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 107.318509][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.344208][ T4313] usb 1-1: config 0 descriptor?? [ 107.353979][ T5152] XFS (loop1): Ending clean mount [ 107.393225][ T5152] XFS (loop1): Quotacheck needed: Please wait. [ 107.536449][ T5152] XFS (loop1): Quotacheck: Done. [ 107.673810][ T5203] netlink: 'syz.4.318': attribute type 3 has an invalid length. [ 107.698846][ T4266] XFS (loop1): Unmounting Filesystem [ 107.761925][ T4313] hid-rmi 0003:0461:4E72.0006: unbalanced collection at end of report description [ 107.806782][ T4313] hid-rmi 0003:0461:4E72.0006: parse failed [ 107.823637][ T4313] hid-rmi: probe of 0003:0461:4E72.0006 failed with error -22 [ 107.962730][ T5118] usb 1-1: USB disconnect, device number 3 [ 108.226646][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 108.831927][ T5234] loop4: detected capacity change from 0 to 4096 [ 109.050984][ T5244] loop2: detected capacity change from 0 to 256 [ 109.123818][ T5244] exfat: Deprecated parameter 'utf8' [ 109.168327][ T5244] exfat: Deprecated parameter 'utf8' [ 109.173958][ T5244] exfat: Deprecated parameter 'utf8' [ 109.187156][ T4313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.233671][ T5244] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 109.397982][ T4313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.428458][ T4313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.458684][ T4313] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.492016][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.516678][ T4313] usb 2-1: SerialNumber: syz [ 109.532512][ T5255] loop4: detected capacity change from 0 to 4096 [ 109.585723][ T5259] loop0: detected capacity change from 0 to 1024 [ 109.661000][ T5259] hfsplus: invalid length 32517 has been corrected to 255 [ 109.755042][ T5259] hfsplus: invalid length 32517 has been corrected to 255 [ 109.769475][ T4313] usb 2-1: 0:2 : does not exist [ 109.798178][ T5263] loop3: detected capacity change from 0 to 512 [ 109.822245][ T5259] hfsplus: invalid length 32517 has been corrected to 255 [ 109.852640][ T4313] usb 2-1: USB disconnect, device number 3 [ 109.927039][ T5263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.939085][ T9] hfsplus: b-tree write err: -5, ino 25 [ 109.960524][ T5268] netlink: 56 bytes leftover after parsing attributes in process `syz.4.347'. [ 109.978699][ T9] hfsplus: b-tree write err: -5, ino 4 [ 109.985265][ T9] hfsplus: b-tree write err: -5, ino 2 [ 109.991316][ T5263] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.136648][ T5263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.167544][ T4904] udevd[4904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.185557][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.216105][ T5263] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 110.254008][ T5263] EXT4-fs: Cannot change journaled quota options when quota turned on [ 110.392888][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 110.603298][ T5261] loop2: detected capacity change from 0 to 32768 [ 110.689997][ T5261] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.345 (5261) [ 110.770991][ T5286] loop4: detected capacity change from 0 to 256 [ 110.778696][ T5261] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.804367][ T5261] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.850498][ T5261] BTRFS info (device loop2): setting nodatacow, compression disabled [ 110.869336][ T5286] FAT-fs (loop4): Directory bread(block 64) failed [ 110.896731][ T5286] FAT-fs (loop4): Directory bread(block 65) failed [ 110.904057][ T5286] FAT-fs (loop4): Directory bread(block 66) failed [ 110.911211][ T5261] BTRFS info (device loop2): force clearing of disk cache [ 110.964120][ T5261] BTRFS info (device loop2): enabling ssd optimizations [ 110.972473][ T5286] FAT-fs (loop4): Directory bread(block 67) failed [ 110.981675][ T5261] BTRFS info (device loop2): using spread ssd allocation scheme [ 111.014018][ T5286] FAT-fs (loop4): Directory bread(block 68) failed [ 111.026576][ T5261] BTRFS info (device loop2): turning off barriers [ 111.036583][ T5286] FAT-fs (loop4): Directory bread(block 69) failed [ 111.054027][ T5261] BTRFS info (device loop2): disabling free space tree [ 111.061730][ T5286] FAT-fs (loop4): Directory bread(block 70) failed [ 111.069083][ T5261] BTRFS info (device loop2): not using ssd optimizations [ 111.083462][ T5286] FAT-fs (loop4): Directory bread(block 71) failed [ 111.105398][ T5261] BTRFS info (device loop2): not using spread ssd allocation scheme [ 111.114805][ T5286] FAT-fs (loop4): Directory bread(block 72) failed [ 111.136411][ T5286] FAT-fs (loop4): Directory bread(block 73) failed [ 111.149437][ T5290] loop3: detected capacity change from 0 to 4096 [ 111.245402][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.262665][ T5276] loop1: detected capacity change from 0 to 32768 [ 111.427354][ T5276] XFS (loop1): Mounting V5 Filesystem [ 111.503904][ T5261] BTRFS info (device loop2): rebuilding free space tree [ 111.595725][ T5276] XFS (loop1): Ending clean mount [ 111.639615][ T5261] BTRFS info (device loop2): disabling free space tree [ 111.716164][ T5261] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.768629][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 111.821351][ T4266] XFS (loop1): Unmounting Filesystem [ 111.840965][ T5261] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.878630][ T26] audit: type=1326 audit(1773782477.172:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5331 comm="syz.0.365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52bed9c799 code=0x0 [ 111.896288][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 112.085123][ T4267] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.240795][ T4904] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (4904) [ 112.291084][ T4875] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 112.334371][ T5342] loop4: detected capacity change from 0 to 512 [ 112.480501][ T4875] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 112.536546][ T4875] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.580356][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 112.592502][ T4875] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.607453][ T4875] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 112.630679][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 112.657151][ T4875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.695270][ T4875] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 112.696294][ T5349] netlink: 'syz.4.372': attribute type 12 has an invalid length. [ 112.723688][ T4875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.757093][ T4875] usb 4-1: config 0 descriptor?? [ 112.911256][ T5353] exfat: Deprecated parameter 'utf8' [ 112.956140][ T5353] exfat: Deprecated parameter 'namecase' [ 113.050814][ T5353] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 113.177978][ T4875] hid-alps 0003:044E:120C.0007: unbalanced delimiter at end of report description [ 113.188919][ T4875] hid-alps 0003:044E:120C.0007: parse failed [ 113.195551][ T4875] hid-alps: probe of 0003:044E:120C.0007 failed with error -22 [ 113.329061][ T5364] exfat: Deprecated parameter 'namecase' [ 113.348548][ T5364] exfat: Deprecated parameter 'namecase' [ 113.379919][ T5343] usb 4-1: USB disconnect, device number 2 [ 113.406199][ T5367] device bridge0 entered promiscuous mode [ 113.412879][ T5364] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 113.427438][ T5367] device macsec1 entered promiscuous mode [ 113.446784][ T5369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.475109][ T5364] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 113.564881][ T5369] EXT4-fs (loop1): 1 truncate cleaned up [ 113.589891][ T5369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.671180][ T5369] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.382: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 113.736018][ T5369] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 113.794124][ T5369] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.382: Deleting old file: nlink 4, error=-117 [ 113.846453][ T5379] EXT4-fs: inline encryption not supported [ 113.902188][ T5375] set_capacity_and_notify: 5 callbacks suppressed [ 113.902203][ T5375] loop2: detected capacity change from 0 to 4096 [ 113.940145][ T5379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.961657][ T5375] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 114.024950][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 114.216101][ T5375] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 114.237532][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 114.274481][ T5375] ntfs3: loop2: ino=0, attr_set_size [ 114.324877][ T5375] ntfs3: loop2: ino=0, attr_set_size [ 114.337100][ T5390] Illegal XDP return value 1410743756 on prog (id 16) dev N/A, expect packet loss! [ 114.528475][ T5396] loop1: detected capacity change from 0 to 64 [ 115.054018][ T5409] loop2: detected capacity change from 0 to 4096 [ 115.078227][ T5412] loop3: detected capacity change from 0 to 4096 [ 115.085635][ T5409] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 115.128902][ T5419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.404'. [ 115.145492][ T5419] netlink: 56 bytes leftover after parsing attributes in process `syz.1.404'. [ 115.230154][ T5409] ntfs3: loop2: ino=1c, "file0" attr_set_size [ 115.233293][ T5412] ntfs: volume version 3.1. [ 115.238489][ T5409] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 115.385440][ T4267] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 115.402845][ T5423] loop1: detected capacity change from 0 to 128 [ 115.413034][ T4267] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 115.453832][ T5423] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.930974][ T5437] loop0: detected capacity change from 0 to 256 [ 115.961843][ T5437] exfat: Deprecated parameter 'namecase' [ 115.989970][ T5437] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 116.156367][ T4877] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.240850][ T5450] loop0: detected capacity change from 0 to 256 [ 116.255021][ T5451] loop1: detected capacity change from 0 to 512 [ 116.288743][ T5450] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 116.298799][ T5451] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.420: iget: bad i_size value: 38620345925642 [ 116.338908][ T5451] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.420: couldn't read orphan inode 15 (err -117) [ 116.353791][ T4877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.374284][ T4877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.396283][ T5451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.407433][ T4877] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.426096][ T4877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.435774][ T4877] usb 3-1: SerialNumber: syz [ 116.446647][ T5450] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 116.585784][ T26] audit: type=1326 audit(1773782481.882:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 116.618625][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 116.653807][ T4877] usb 3-1: 0:2 : does not exist [ 116.685338][ T26] audit: type=1326 audit(1773782481.922:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 116.716205][ T4877] usb 3-1: unit 255 not found! [ 116.749935][ T26] audit: type=1326 audit(1773782481.922:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 116.797299][ T4877] usb 3-1: USB disconnect, device number 5 [ 116.844316][ T26] audit: type=1326 audit(1773782481.922:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 116.878584][ T26] audit: type=1326 audit(1773782481.922:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 116.913439][ T5460] loop1: detected capacity change from 0 to 4096 [ 116.943997][ T26] audit: type=1326 audit(1773782481.922:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.037209][ T4904] udevd[4904]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.066047][ T5465] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.081314][ T5445] loop3: detected capacity change from 0 to 32768 [ 117.096767][ T26] audit: type=1326 audit(1773782481.922:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.140051][ T26] audit: type=1326 audit(1773782481.922:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.224522][ T26] audit: type=1326 audit(1773782481.922:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.232790][ T5471] /dev/loop0: Can't open blockdev [ 117.247913][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.248475][ T26] audit: type=1326 audit(1773782481.922:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.284648][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.308573][ T26] audit: type=1326 audit(1773782481.922:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.310214][ T5474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.332789][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.370810][ T5445] XFS (loop3): Mounting V5 Filesystem [ 117.396594][ T5474] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.472568][ T26] audit: type=1326 audit(1773782481.922:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.498223][ T26] audit: type=1326 audit(1773782481.922:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f52bed9c799 code=0x7ffc0000 [ 117.526430][ T5460] syz.1.423 (5460) used greatest stack depth: 19832 bytes left [ 117.565300][ T5445] XFS (loop3): Ending clean mount [ 117.589641][ T5445] XFS (loop3): Quotacheck needed: Please wait. [ 117.719433][ T5445] XFS (loop3): Quotacheck: Done. [ 117.832366][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 117.884828][ T4280] XFS (loop3): Unmounting Filesystem [ 117.898841][ T5490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.432'. [ 118.065996][ T5488] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 118.116445][ T5488] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 118.187037][ T5492] FAT-fs (loop4): codepage cp86 not found [ 118.204547][ T5488] ntfs: volume version 3.1. [ 118.491041][ T5501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'. [ 118.556270][ T4989] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.602675][ T5504] hfsplus: bad catalog entry type [ 118.664362][ T4347] hfsplus: b-tree write err: -5, ino 25 [ 118.676818][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 118.682824][ T4347] hfsplus: b-tree write err: -5, ino 2 [ 118.751744][ T5509] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 118.776282][ T4989] usb 3-1: Using ep0 maxpacket: 16 [ 118.797928][ T4989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.797987][ T4989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.798008][ T4989] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.798065][ T4989] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.798088][ T4989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.800773][ T4989] usb 3-1: config 0 descriptor?? [ 119.209681][ T4989] microsoft 0003:045E:07DA.0008: unknown main item tag 0xd [ 119.209764][ T4989] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 119.209786][ T4989] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 119.210390][ T4989] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 119.211726][ T4989] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 119.211755][ T4989] microsoft 0003:045E:07DA.0008: no inputs found [ 119.211768][ T4989] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 119.415973][ T4989] usb 3-1: USB disconnect, device number 6 [ 119.503515][ T5523] fido_id[5523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 119.509875][ T5511] set_capacity_and_notify: 4 callbacks suppressed [ 119.509889][ T5511] loop1: detected capacity change from 0 to 32768 [ 120.189725][ T5540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.452'. [ 121.672370][ T5558] loop3: detected capacity change from 0 to 32768 [ 121.738871][ T5558] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 121.739553][ T5558] XFS (loop3): Mounting V5 Filesystem [ 121.851869][ T5563] loop0: detected capacity change from 0 to 40427 [ 121.870182][ T5558] XFS (loop3): Ending clean mount [ 121.895662][ T5558] XFS (loop3): Quotacheck needed: Please wait. [ 121.924920][ T5563] F2FS-fs (loop0): invalid crc value [ 121.979371][ T5563] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.013436][ T5558] XFS (loop3): Quotacheck: Done. [ 122.135659][ T4280] XFS (loop3): Unmounting Filesystem [ 122.161529][ T5563] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.219443][ T5519] syz.4.446 (5519): drop_caches: 3 [ 122.654867][ T5579] loop1: detected capacity change from 0 to 32768 [ 122.714130][ T5579] [ 122.714130][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.714130][ T5579] [ 122.825004][ T5579] [ 122.825004][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.825004][ T5579] [ 122.901446][ T5579] [ 122.901446][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.901446][ T5579] [ 122.955062][ T5579] [ 122.955062][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.955062][ T5579] [ 123.012851][ T5579] [ 123.012851][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.012851][ T5579] [ 123.041002][ T5579] [ 123.041002][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.041002][ T5579] [ 123.053237][ T5579] [ 123.053237][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.053237][ T5579] [ 123.115155][ T107] [ 123.115155][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.115155][ T107] [ 123.156402][ T5579] [ 123.156402][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.156402][ T5579] [ 123.193343][ T5579] [ 123.193343][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.193343][ T5579] [ 123.225723][ T5611] loop3: detected capacity change from 0 to 1024 [ 123.233324][ T5579] [ 123.233324][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.233324][ T5579] [ 123.287337][ T5579] [ 123.287337][ T5579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.287337][ T5579] [ 123.329562][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 123.329579][ T26] audit: type=1800 audit(1773782488.622:30): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.483" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 123.388692][ T107] [ 123.388692][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.388692][ T107] [ 123.427258][ T4266] [ 123.427258][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.427258][ T4266] [ 123.479936][ T4266] [ 123.479936][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.479936][ T4266] [ 123.579581][ T41] hfsplus: b-tree write err: -5, ino 25 [ 123.612381][ T41] hfsplus: b-tree write err: -5, ino 4 [ 123.635123][ T41] hfsplus: b-tree write err: -5, ino 2 [ 123.672122][ T41] hfsplus: b-tree write err: -5, ino 20 [ 123.731410][ T5619] netlink: 84 bytes leftover after parsing attributes in process `syz.4.488'. [ 123.774403][ T5619] netlink: 84 bytes leftover after parsing attributes in process `syz.4.488'. [ 123.774449][ T5619] netlink: 84 bytes leftover after parsing attributes in process `syz.4.488'. [ 123.952165][ T5626] loop1: detected capacity change from 0 to 64 [ 124.262230][ T5636] loop1: detected capacity change from 0 to 64 [ 124.585292][ T5642] loop1: detected capacity change from 0 to 16 [ 124.677864][ T5642] erofs: (device loop1): mounted with root inode @ nid 36. [ 124.752356][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 124.886686][ T5652] sp0: Synchronizing with TNC [ 125.064868][ T5657] loop3: detected capacity change from 0 to 256 [ 125.274505][ T5634] loop4: detected capacity change from 0 to 40427 [ 125.318434][ T5634] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 125.395263][ T5634] F2FS-fs (loop4): invalid crc value [ 125.429564][ T5634] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.530927][ T5634] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 125.769282][ T4273] syz-executor: attempt to access beyond end of device [ 125.769282][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.794485][ T5673] loop2: detected capacity change from 0 to 1024 [ 125.842922][ T5673] EXT4-fs: Ignoring removed bh option [ 125.862433][ T5673] EXT4-fs: inline encryption not supported [ 125.912227][ T5673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 125.962741][ T5673] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.511: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.995603][ T5673] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 126.006076][ T5673] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.511: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.041789][ T5673] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 126.088553][ T5673] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.511: Failed to acquire dquot type 0 [ 126.104649][ T5658] loop1: detected capacity change from 0 to 40427 [ 126.111535][ T5662] loop0: detected capacity change from 0 to 32768 [ 126.157168][ T5673] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 126.189834][ T5658] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 126.219353][ T5658] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.245652][ T5673] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.511: mark_inode_dirty error [ 126.259676][ T5658] F2FS-fs (loop1): invalid crc value [ 126.263531][ T5673] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 126.279794][ T5673] EXT4-fs (loop2): 1 orphan inode deleted [ 126.288391][ T5673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.328759][ T5662] XFS (loop0): Mounting V5 Filesystem [ 126.341165][ T11] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.363276][ T5658] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.468475][ T5662] XFS (loop0): Ending clean mount [ 126.505272][ T5662] XFS (loop0): Quotacheck needed: Please wait. [ 126.505530][ T11] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 126.560087][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 126.582527][ T5662] XFS (loop0): Quotacheck: Done. [ 126.594206][ T5658] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 126.605654][ T5673] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.511: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.644877][ T5658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.645153][ T5673] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 126.824947][ T4278] XFS (loop0): Unmounting Filesystem [ 126.867634][ T4266] syz-executor: attempt to access beyond end of device [ 126.867634][ T4266] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.907303][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 127.121099][ T5695] Bluetooth: MGMT ver 1.22 [ 127.221571][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 127.343569][ T5699] loop2: detected capacity change from 0 to 128 [ 127.448193][ T5699] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 127.485254][ T5699] FAT-fs (loop2): Filesystem has been set read-only [ 127.575109][ T5703] program syz.0.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.749706][ T5691] loop3: detected capacity change from 0 to 40427 [ 127.813811][ T5691] F2FS-fs (loop3): invalid crc value [ 127.854574][ T5691] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.960249][ T5691] F2FS-fs (loop3): Start checkpoint disabled! [ 127.976080][ T5691] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 128.277287][ T9] kworker/u4:0: attempt to access beyond end of device [ 128.277287][ T9] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 128.462673][ T5726] loop0: detected capacity change from 0 to 1024 [ 128.531180][ T5728] loop1: detected capacity change from 0 to 1764 [ 128.549306][ T5726] EXT4-fs: Ignoring removed orlov option [ 128.575138][ T5732] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.647649][ T5726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.812061][ T5742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.538'. [ 128.856450][ T5742] sch_fq: defrate 4294967295 ignored. [ 128.911174][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 129.123480][ T5751] netlink: 'syz.2.541': attribute type 8 has an invalid length. [ 129.572166][ T5769] EXT4-fs: Ignoring removed nobh option [ 129.606315][ T5769] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.659895][ T5763] set_capacity_and_notify: 1 callbacks suppressed [ 129.659911][ T5763] loop1: detected capacity change from 0 to 8192 [ 129.678990][ T5769] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.547: ea_inode file size=0 entry size=6 [ 129.695608][ T5769] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.547: iget: bad extra_isize 90 (inode size 256) [ 129.746099][ T5769] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.547: error while reading EA inode 11 err=-117 [ 129.761324][ T5769] EXT4-fs (loop0): 1 orphan inode deleted [ 129.772262][ T5763] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.818232][ T5769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.843040][ T5763] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 129.861067][ T5763] REISERFS (device loop1): using ordered data mode [ 129.870233][ T5763] reiserfs: using flush barriers [ 129.880094][ T5763] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.898090][ T5763] REISERFS (device loop1): checking transaction log (loop1) [ 129.928480][ T5763] REISERFS (device loop1): Using r5 hash to sort names [ 129.939984][ T5763] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 130.063986][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 130.083109][ T5747] loop3: detected capacity change from 0 to 40427 [ 130.086188][ T5343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.123044][ T5747] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 130.188251][ T5747] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.225134][ T5747] F2FS-fs (loop3): invalid crc value [ 130.270575][ T5747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.282459][ T5782] loop0: detected capacity change from 0 to 256 [ 130.287859][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.332204][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.375965][ T5343] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 130.416155][ T5782] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.428397][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.467248][ T5747] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.486414][ T5747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.491022][ T5343] usb 5-1: config 0 descriptor?? [ 130.826548][ T4347] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 130.892092][ T4347] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 130.964616][ T5796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.560'. [ 131.006845][ T5796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.560'. [ 131.027378][ T5799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.560'. [ 131.147328][ T5343] hid-led: probe of 0003:27B8:01ED.0009 failed with error -71 [ 131.186006][ T5343] usb 5-1: USB disconnect, device number 4 [ 131.754332][ T5816] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 131.756380][ T5814] device veth1_macvtap left promiscuous mode [ 131.873462][ T5817] device veth1_macvtap entered promiscuous mode [ 131.907164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.946632][ T5804] loop1: detected capacity change from 0 to 32768 [ 132.090920][ T5804] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 132.179009][ T5806] loop2: detected capacity change from 0 to 40427 [ 132.259288][ T5806] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 132.296345][ T5806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.390261][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 132.409906][ T5806] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.412468][ T5838] syz.0.576 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.618776][ T5806] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.657351][ T5806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.960709][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968027][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.174515][ T5829] loop3: detected capacity change from 0 to 32768 [ 133.181482][ T4989] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.242460][ T5829] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 133.388617][ T4989] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 133.411509][ T4989] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 133.426214][ T4875] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.449674][ T4989] usb 5-1: config 220 has no interface number 2 [ 133.469130][ T4989] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 133.500487][ T4989] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 133.521645][ T4904] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 133.541224][ T4989] usb 5-1: config 220 interface 0 has no altsetting 0 [ 133.566603][ T4989] usb 5-1: config 220 interface 76 has no altsetting 0 [ 133.580669][ T5851] loop1: detected capacity change from 0 to 32768 [ 133.609152][ T4989] usb 5-1: config 220 interface 1 has no altsetting 0 [ 133.627720][ T4875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.651103][ T4875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.653760][ T4989] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.675538][ T4875] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 133.717538][ T4875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.744675][ T4989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.754260][ T4875] usb 1-1: config 0 descriptor?? [ 133.778273][ T4989] usb 5-1: Product: syz [ 133.797977][ T4989] usb 5-1: Manufacturer: syz [ 133.802820][ T4989] usb 5-1: SerialNumber: syz [ 134.067341][ T4989] usb 5-1: selecting invalid altsetting 0 [ 134.105745][ T4989] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 134.124680][ T4989] usb 5-1: No valid video chain found. [ 134.177654][ T4989] usb 5-1: selecting invalid altsetting 0 [ 134.203399][ T4875] hid-led 0003:1D34:000A.000A: unknown main item tag 0x0 [ 134.206245][ T4989] usbtest: probe of 5-1:220.1 failed with error -22 [ 134.217911][ T4875] hid-led 0003:1D34:000A.000A: unknown main item tag 0x0 [ 134.217939][ T4875] hid-led 0003:1D34:000A.000A: unknown main item tag 0x0 [ 134.335846][ T4989] usb 5-1: USB disconnect, device number 5 [ 134.397670][ T4875] hid-led: probe of 0003:1D34:000A.000A failed with error -71 [ 134.429785][ T4875] usb 1-1: USB disconnect, device number 4 [ 134.581576][ T5875] trusted_key: encrypted_key: keylen parameter is missing [ 134.965075][ T5892] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.174803][ T5900] loop1: detected capacity change from 0 to 1024 [ 135.631679][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 135.741780][ T5917] loop0: detected capacity change from 0 to 4096 [ 135.763266][ T5921] tipc: Started in network mode [ 135.792582][ T5921] tipc: Node identity 1, cluster identity 4711 [ 135.816004][ T5921] tipc: Node number set to 1 [ 135.816859][ T5917] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 135.822329][ T5921] tipc: Cannot configure node identity twice [ 135.947621][ T5917] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 136.267525][ T5915] loop4: detected capacity change from 0 to 32768 [ 136.312348][ T5915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.612 (5915) [ 136.381103][ T5929] loop1: detected capacity change from 0 to 4096 [ 136.403964][ T5915] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.433171][ T5929] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 136.443086][ T5915] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 136.463671][ T5915] BTRFS info (device loop4): using free space tree [ 136.593156][ T5923] loop3: detected capacity change from 0 to 40427 [ 136.611163][ T5923] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 136.660122][ T5923] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 136.699499][ T5923] F2FS-fs (loop3): invalid crc value [ 136.724096][ T5915] BTRFS info (device loop4): enabling ssd optimizations [ 136.768922][ T5923] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.851761][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.876510][ T48] Bluetooth: hci4: command 0x0411 tx timeout [ 136.896154][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.908263][ T5923] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 136.915841][ T5923] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.947612][ T5923] syz.3.616: attempt to access beyond end of device [ 136.947612][ T5923] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.086372][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 137.094953][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.155975][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.183255][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.246204][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.255852][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.363657][ T7] usb 1-1: config 0 descriptor?? [ 137.823540][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000B/input/input5 [ 137.927098][ T7] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 138.003824][ T7] usb 1-1: USB disconnect, device number 5 [ 138.204741][ T26] audit: type=1326 audit(1773782503.502:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 138.263726][ T5975] fido_id[5975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 138.326067][ T26] audit: type=1326 audit(1773782503.532:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 138.429995][ T5971] loop1: detected capacity change from 0 to 32768 [ 138.441531][ T26] audit: type=1326 audit(1773782503.532:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 138.453300][ T5971] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.629 (5971) [ 138.478829][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.478913][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.556732][ T26] audit: type=1326 audit(1773782503.532:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 138.682176][ T5971] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 138.692416][ T26] audit: type=1326 audit(1773782503.542:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 138.778909][ T5988] loop0: detected capacity change from 0 to 256 [ 138.796717][ T5971] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 138.843206][ T26] audit: type=1326 audit(1773782503.542:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 138.850275][ T5971] BTRFS info (device loop1): using free space tree [ 138.947661][ T5988] FAT-fs (loop0): Directory bread(block 64) failed [ 138.955131][ T5988] FAT-fs (loop0): Directory bread(block 65) failed [ 138.977428][ T26] audit: type=1326 audit(1773782503.542:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 139.018148][ T5988] FAT-fs (loop0): Directory bread(block 66) failed [ 139.039913][ T5998] loop4: detected capacity change from 0 to 256 [ 139.084457][ T5988] FAT-fs (loop0): Directory bread(block 67) failed [ 139.110516][ T5971] BTRFS info (device loop1): enabling ssd optimizations [ 139.136750][ T5988] FAT-fs (loop0): Directory bread(block 68) failed [ 139.140235][ T5998] exfat: Deprecated parameter 'utf8' [ 139.165148][ T5998] exfat: Deprecated parameter 'namecase' [ 139.172102][ T5998] exfat: Deprecated parameter 'namecase' [ 139.193956][ T5998] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 139.196034][ T5988] FAT-fs (loop0): Directory bread(block 69) failed [ 139.276635][ T5988] FAT-fs (loop0): Directory bread(block 70) failed [ 139.284183][ T5988] FAT-fs (loop0): Directory bread(block 71) failed [ 139.366660][ T5988] FAT-fs (loop0): Directory bread(block 72) failed [ 139.373964][ T5988] FAT-fs (loop0): Directory bread(block 73) failed [ 139.659117][ T6023] loop3: detected capacity change from 0 to 2048 [ 139.712793][ T4266] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 139.728370][ T6023] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 139.788508][ T6028] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.142103][ T6030] loop0: detected capacity change from 0 to 4096 [ 140.278115][ T6035] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.347295][ T4904] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4904) [ 140.351302][ T6030] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 140.567622][ T6030] Remounting filesystem read-only [ 140.818479][ T4278] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 141.010503][ T26] audit: type=1326 audit(1773782506.312:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726b99c799 code=0x7ffc0000 [ 141.122581][ T26] audit: type=1326 audit(1773782506.312:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726b99c799 code=0x7ffc0000 [ 141.262857][ T26] audit: type=1326 audit(1773782506.312:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f726b99c799 code=0x7ffc0000 [ 141.604392][ T6047] loop3: detected capacity change from 0 to 32768 [ 141.721264][ T6047] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 141.819034][ T6047] JBD2: Ignoring recovery information on journal [ 141.843751][ T6059] loop0: detected capacity change from 0 to 40427 [ 141.857663][ T6059] F2FS-fs (loop0): invalid crc value [ 141.866503][ T6059] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.910602][ T6059] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 141.920890][ T6059] F2FS-fs (loop0): Start checkpoint disabled! [ 141.966600][ T6059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 142.033842][ T6081] loop2: detected capacity change from 0 to 1024 [ 142.050585][ T6047] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.078218][ T6081] EXT4-fs: Ignoring removed bh option [ 142.226843][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.260509][ T6069] loop1: detected capacity change from 0 to 32768 [ 142.343031][ T6069] XFS (loop1): Mounting V5 Filesystem [ 142.382000][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 142.478329][ T6069] XFS (loop1): Ending clean mount [ 142.578483][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 142.720176][ T4266] XFS (loop1): Unmounting Filesystem [ 143.065614][ T6112] device ipip0 entered promiscuous mode [ 143.120275][ T6112] team0: Device ipip0 is of different type [ 143.694265][ T6123] loop0: detected capacity change from 0 to 8192 [ 143.913393][ T6138] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 143.952088][ T6134] loop3: detected capacity change from 0 to 4096 [ 143.956032][ T4502] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.060532][ T6120] loop2: detected capacity change from 0 to 32768 [ 144.172142][ T6120] XFS (loop2): Mounting V5 Filesystem [ 144.177986][ T4502] usb 2-1: Using ep0 maxpacket: 16 [ 144.201438][ T4502] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.243816][ T4502] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.264361][ T4502] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.272505][ T4502] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 144.342384][ T4502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.391766][ T4502] usb 2-1: config 0 descriptor?? [ 144.454203][ T6120] XFS (loop2): Ending clean mount [ 144.522183][ T6120] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 144.561336][ T6120] XFS (loop2): Unmount and run xfs_repair [ 144.585315][ T6120] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 144.611845][ T6120] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 144.653414][ T6120] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 144.692436][ T6120] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 144.714822][ T6120] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 144.734689][ T6120] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 144.749521][ T6157] loop3: detected capacity change from 0 to 1024 [ 144.799483][ T6120] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 144.832336][ T6120] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 144.864875][ T6120] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 144.868116][ T4502] nzxt-smart2 0003:1E71:2009.000C: item fetching failed at offset 4/5 [ 144.905580][ T6120] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 144.925223][ T4502] nzxt-smart2: probe of 0003:1E71:2009.000C failed with error -22 [ 144.945264][ T4347] hfsplus: b-tree write err: -5, ino 25 [ 144.954750][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 144.974119][ T6120] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 144.986059][ T4347] hfsplus: b-tree write err: -5, ino 2 [ 144.998400][ T4347] hfsplus: b-tree write err: -5, ino 26 [ 145.043483][ T6120] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 145.104920][ T4502] usb 2-1: USB disconnect, device number 4 [ 145.177771][ T4267] XFS (loop2): Unmounting Filesystem [ 145.345037][ T6163] loop0: detected capacity change from 0 to 512 [ 145.407152][ T6163] EXT4-fs (loop0): orphan cleanup on readonly fs [ 145.415283][ T6163] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.695: inode has both inline data and extents flags [ 145.616238][ T6163] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.695: couldn't read orphan inode 15 (err -117) [ 145.656179][ T6163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.743017][ T6163] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 145.896486][ T6172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.941863][ T6172] team0: Port device bond1 added [ 145.982461][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 146.097939][ T6177] loop4: detected capacity change from 0 to 32768 [ 146.131006][ T6177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.702 (6177) [ 146.163033][ T6177] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.197112][ T6177] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 146.217123][ T6181] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 146.250128][ T6177] BTRFS info (device loop4): using free space tree [ 146.566750][ T4502] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.611979][ T6177] BTRFS info (device loop4): enabling ssd optimizations [ 146.785519][ T4502] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.844169][ T4502] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.885407][ T4502] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.922665][ T4502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.966850][ T6189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.967925][ T46] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 147.041841][ T6217] set_capacity_and_notify: 1 callbacks suppressed [ 147.041856][ T6217] loop0: detected capacity change from 0 to 512 [ 147.173577][ T6185] loop2: detected capacity change from 0 to 32768 [ 147.262117][ T6217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.282239][ T6185] XFS (loop2): Mounting V5 Filesystem [ 147.296859][ T6217] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.441631][ T6185] XFS (loop2): Ending clean mount [ 147.553087][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 147.559097][ T4267] XFS (loop2): Unmounting Filesystem [ 147.568028][ T7] usb 4-1: USB disconnect, device number 3 [ 147.570683][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.496130][ T4502] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 148.502486][ T6254] loop3: detected capacity change from 0 to 2048 [ 148.521999][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.723'. [ 148.540744][ T6254] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.602865][ T6261] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.707961][ T4502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.746157][ T4502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.788343][ T4502] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 148.865570][ T4502] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 148.915971][ T4502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.948740][ T4502] usb 2-1: config 0 descriptor?? [ 148.950471][ T6271] mkiss: ax0: crc mode is auto. [ 149.037748][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 149.064614][ T4903] udevd[4903]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 149.089951][ T4904] udevd[4904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 149.368948][ T4502] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 149.406017][ T4502] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 149.413700][ T4502] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 149.426023][ T4502] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 149.433615][ T4502] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 149.489640][ T4502] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 149.516344][ T4502] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 149.538440][ T4502] cypress 0003:04B4:0001.000D: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 149.595688][ T4502] usb 2-1: USB disconnect, device number 5 [ 149.673795][ T6268] loop4: detected capacity change from 0 to 32768 [ 149.842576][ T6285] fido_id[6285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.125585][ T6275] loop3: detected capacity change from 0 to 32768 [ 150.336021][ T6275] XFS (loop3): Mounting V5 Filesystem [ 150.458356][ T6275] XFS (loop3): Ending clean mount [ 150.544543][ T6287] loop0: detected capacity change from 0 to 32768 [ 150.585260][ T6287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.736 (6287) [ 150.628478][ T6317] loop1: detected capacity change from 0 to 256 [ 150.675172][ T4280] XFS (loop3): Unmounting Filesystem [ 150.682469][ T6287] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.704769][ T6287] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 150.733816][ T6317] FAT-fs (loop1): Directory bread(block 64) failed [ 150.741341][ T6287] BTRFS info (device loop0): using free space tree [ 150.754145][ T6317] FAT-fs (loop1): Directory bread(block 65) failed [ 150.805861][ T6317] FAT-fs (loop1): Directory bread(block 66) failed [ 150.814713][ T6317] FAT-fs (loop1): Directory bread(block 67) failed [ 150.825116][ T6317] FAT-fs (loop1): Directory bread(block 68) failed [ 150.852201][ T6317] FAT-fs (loop1): Directory bread(block 69) failed [ 150.886505][ T6317] FAT-fs (loop1): Directory bread(block 70) failed [ 150.897663][ T6317] FAT-fs (loop1): Directory bread(block 71) failed [ 150.912843][ T6317] FAT-fs (loop1): Directory bread(block 72) failed [ 150.920763][ T6317] FAT-fs (loop1): Directory bread(block 73) failed [ 150.981788][ T6333] loop2: detected capacity change from 0 to 64 [ 151.054885][ T6287] BTRFS info (device loop0): enabling ssd optimizations [ 151.351091][ T4278] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.083992][ T6355] loop0: detected capacity change from 0 to 256 [ 152.127285][ T6355] exfat: Deprecated parameter 'utf8' [ 152.148739][ T6355] exfat: Deprecated parameter 'utf8' [ 152.154560][ T6355] exfat: Deprecated parameter 'utf8' [ 152.193450][ T6355] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 152.284752][ T6341] loop1: detected capacity change from 0 to 32768 [ 152.394569][ T6341] XFS (loop1): Mounting V5 Filesystem [ 152.410116][ T6349] loop2: detected capacity change from 0 to 32768 [ 152.436508][ T6240] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.498915][ T6341] XFS (loop1): Ending clean mount [ 152.648337][ T6240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.672577][ T6240] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.700391][ T6240] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.714946][ T4266] XFS (loop1): Unmounting Filesystem [ 152.737032][ T6240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.754136][ T6240] usb 4-1: SerialNumber: syz [ 152.997724][ T6240] usb 4-1: 0:2 : does not exist [ 153.051370][ T6240] usb 4-1: USB disconnect, device number 4 [ 153.113227][ T6385] loop4: detected capacity change from 0 to 256 [ 153.152600][ T6385] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 153.318132][ T4904] udevd[4904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.349828][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 153.766065][ T6404] netlink: 'syz.2.785': attribute type 3 has an invalid length. [ 153.774899][ T6401] loop4: detected capacity change from 0 to 4096 [ 153.812948][ T6401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.866228][ T4497] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.876276][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 153.954020][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 154.067480][ T4497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.106281][ T4497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.156891][ T4497] usb 1-1: New USB device found, idVendor=046d, idProduct=0026, bcdDevice= 0.00 [ 154.206004][ T4497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.237357][ T4497] usb 1-1: config 0 descriptor?? [ 154.478506][ T6399] loop1: detected capacity change from 0 to 32768 [ 154.570377][ T6405] loop3: detected capacity change from 0 to 32768 [ 154.663179][ T4497] hid-generic 0003:046D:0026.000E: hidraw0: USB HID v0.00 Device [HID 046d:0026] on usb-dummy_hcd.0-1/input0 [ 154.721426][ T6405] XFS (loop3): Mounting V5 Filesystem [ 154.743017][ T6422] loop2: detected capacity change from 0 to 256 [ 154.770246][ T6413] loop4: detected capacity change from 0 to 40427 [ 154.859255][ T6405] XFS (loop3): Ending clean mount [ 154.866483][ T6413] F2FS-fs (loop4): invalid crc value [ 154.875772][ T4497] usb 1-1: USB disconnect, device number 6 [ 154.879928][ T6422] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 154.927920][ T6413] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.118839][ T6413] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 155.144010][ T4280] XFS (loop3): Unmounting Filesystem [ 155.152157][ T6427] fido_id[6427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 155.186533][ T6413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.458064][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 155.471049][ T4273] syz-executor: attempt to access beyond end of device [ 155.471049][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.846207][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 155.895519][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 155.909417][ T6450] netlink: 'syz.3.786': attribute type 12 has an invalid length. [ 155.946318][ T4313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.148008][ T4313] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.175291][ T4313] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 156.207594][ T4313] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.222957][ T6461] loop2: detected capacity change from 0 to 512 [ 156.246552][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.270602][ T6444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.311536][ T6461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.368792][ T6461] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.558084][ T6461] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.654786][ T4313] usb 2-1: USB disconnect, device number 6 [ 156.656671][ T6461] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 156.671662][ T6461] EXT4-fs: Cannot change journaled quota options when quota turned on [ 156.819966][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 156.952652][ T6458] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 157.091213][ T6471] set_capacity_and_notify: 1 callbacks suppressed [ 157.091229][ T6471] loop0: detected capacity change from 0 to 40427 [ 157.137213][ T6471] F2FS-fs (loop0): invalid crc value [ 157.188779][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 157.188795][ T26] audit: type=1326 audit(1773782522.492:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 157.237720][ T6471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.303801][ T26] audit: type=1326 audit(1773782522.562:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 157.341452][ T4904] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 157.436487][ T26] audit: type=1326 audit(1773782522.562:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 157.440138][ T6471] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 157.524541][ T26] audit: type=1326 audit(1773782522.572:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 157.548062][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.577657][ T6471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.610259][ T6489] device ipip0 entered promiscuous mode [ 157.649063][ T6489] team0: Device ipip0 is of different type [ 157.676282][ T26] audit: type=1326 audit(1773782522.572:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 157.700385][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.809261][ T26] audit: type=1326 audit(1773782522.572:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 157.833265][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.911884][ T26] audit: type=1326 audit(1773782522.572:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 157.935916][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.957159][ T4278] syz-executor: attempt to access beyond end of device [ 157.957159][ T4278] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.069032][ T26] audit: type=1326 audit(1773782522.572:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 158.086316][ T6500] loop1: detected capacity change from 0 to 256 [ 158.197300][ T26] audit: type=1326 audit(1773782522.572:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 158.246830][ T6500] exfat: Deprecated parameter 'namecase' [ 158.306832][ T26] audit: type=1326 audit(1773782522.572:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1f39c799 code=0x7ffc0000 [ 158.312083][ T6500] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 158.332848][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.499654][ T6506] loop3: detected capacity change from 0 to 256 [ 158.542380][ T6506] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 158.575789][ T6491] loop4: detected capacity change from 0 to 32768 [ 158.616429][ T6506] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 158.640466][ T6491] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.808 (6491) [ 158.722802][ T6491] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.786295][ T6491] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 158.818334][ T6491] BTRFS info (device loop4): using free space tree [ 158.833253][ T6513] loop2: detected capacity change from 0 to 512 [ 158.957870][ T6513] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.819: iget: bad i_size value: 38620345925642 [ 158.999657][ T6491] BTRFS info (device loop4): enabling ssd optimizations [ 159.067600][ T6513] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.819: couldn't read orphan inode 15 (err -117) [ 159.104419][ T6513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.146695][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.225373][ T6539] loop0: detected capacity change from 0 to 64 [ 159.441857][ T6540] loop1: detected capacity change from 0 to 4096 [ 159.629692][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 159.741185][ T6542] loop0: detected capacity change from 0 to 512 [ 159.842350][ T6542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.922159][ T6542] EXT4-fs (loop0): 1 truncate cleaned up [ 159.949452][ T6542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.970016][ T6549] /dev/loop0: Can't open blockdev [ 160.016456][ T6542] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.824: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 160.040956][ T4989] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.052162][ T6542] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 160.080841][ T6546] loop1: detected capacity change from 0 to 4096 [ 160.094167][ T6542] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.824: Deleting old file: nlink 4, error=-117 [ 160.119555][ T6546] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 160.178688][ T6546] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 160.188418][ T6533] loop3: detected capacity change from 0 to 32768 [ 160.215789][ T6546] ntfs3: loop1: ino=0, attr_set_size [ 160.243899][ T4989] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.256671][ T6546] ntfs3: loop1: ino=0, attr_set_size [ 160.264481][ T4989] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.276805][ T4989] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.287945][ T4989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.299554][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 160.315706][ T6544] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.432947][ T6533] XFS (loop3): Mounting V5 Filesystem [ 160.515991][ T4877] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.619269][ T6533] XFS (loop3): Ending clean mount [ 160.685212][ T6561] hfsplus: invalid length 32517 has been corrected to 255 [ 160.754407][ T4989] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 160.768951][ T6561] hfsplus: invalid length 32517 has been corrected to 255 [ 160.772620][ T6239] usb 5-1: USB disconnect, device number 6 [ 160.790529][ T4877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.806256][ T4989] XFS (loop3): Unmount and run xfs_repair [ 160.806367][ T4877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.815795][ T4877] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.835879][ T6561] hfsplus: invalid length 32517 has been corrected to 255 [ 160.843261][ T4877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.854474][ T4877] usb 3-1: SerialNumber: syz [ 160.922228][ T4989] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 160.967581][ T4989] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 160.986489][ T46] hfsplus: b-tree write err: -5, ino 25 [ 161.002590][ T4989] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 161.003126][ T46] hfsplus: b-tree write err: -5, ino 4 [ 161.021624][ T4989] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 161.022306][ T46] hfsplus: b-tree write err: -5, ino 2 [ 161.061832][ T4989] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 161.085971][ T4989] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 161.095672][ T4989] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 161.119762][ T4877] usb 3-1: 0:2 : does not exist [ 161.127459][ T4989] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 161.160917][ T4989] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 161.191298][ T6533] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 161.194676][ T4877] usb 3-1: USB disconnect, device number 7 [ 161.218671][ T6566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.248607][ T6533] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 161.273377][ T6533] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 161.310192][ T4280] XFS (loop3): Unmounting Filesystem [ 161.317145][ T6566] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.508499][ T4903] udevd[4903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.555138][ T6563] XFS (loop0): Mounting V5 Filesystem [ 161.649330][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 161.796304][ T6563] XFS (loop0): Ending clean mount [ 161.816399][ T6563] XFS (loop0): Quotacheck needed: Please wait. [ 161.910859][ T6563] XFS (loop0): Quotacheck: Done. [ 162.090188][ T4278] XFS (loop0): Unmounting Filesystem [ 162.238272][ T4989] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.436118][ T4989] usb 5-1: Using ep0 maxpacket: 16 [ 162.444391][ T4989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.487102][ T4989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.518828][ T4989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.566221][ T4989] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.611573][ T4989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.643474][ T4989] usb 5-1: config 0 descriptor?? [ 162.744433][ T6594] device bridge0 entered promiscuous mode [ 162.752206][ T6594] device macsec1 entered promiscuous mode [ 162.762104][ T6585] set_capacity_and_notify: 4 callbacks suppressed [ 162.762120][ T6585] loop3: detected capacity change from 0 to 32768 [ 162.779956][ T6588] loop2: detected capacity change from 0 to 32768 [ 162.815778][ T6588] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.834 (6588) [ 162.873945][ T6585] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 162.896266][ T6588] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.931171][ T6588] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 162.941669][ T6592] loop1: detected capacity change from 0 to 32768 [ 162.976570][ T6588] BTRFS info (device loop2): using free space tree [ 162.993313][ T6592] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.838 (6592) [ 163.101786][ T4989] microsoft 0003:045E:07DA.000F: unknown main item tag 0xd [ 163.131883][ T4989] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 163.140172][ T4989] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 163.160545][ T4989] microsoft 0003:045E:07DA.000F: No inputs registered, leaving [ 163.170919][ T6597] loop0: detected capacity change from 0 to 4096 [ 163.214152][ T4258] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 163.242352][ T4989] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 163.300941][ T6588] BTRFS info (device loop2): enabling ssd optimizations [ 163.380588][ T4989] microsoft 0003:045E:07DA.000F: no inputs found [ 163.422197][ T4989] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 163.435046][ T4260] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4260) [ 163.485453][ T4989] usb 5-1: USB disconnect, device number 7 [ 163.613016][ T4267] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.658026][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'. [ 163.904314][ T6622] fido_id[6622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 163.931538][ T6625] loop3: detected capacity change from 0 to 4096 [ 163.973995][ T6627] loop2: detected capacity change from 0 to 256 [ 164.037185][ T6627] exfat: Deprecated parameter 'utf8' [ 164.043389][ T6627] exfat: Deprecated parameter 'namecase' [ 164.062106][ T6628] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.119546][ T6627] exfat: Deprecated parameter 'namecase' [ 164.180815][ T6627] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 164.296127][ T6631] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 164.379696][ T6631] Remounting filesystem read-only [ 164.515758][ T4280] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 164.776111][ T4877] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.963461][ T6652] loop3: detected capacity change from 0 to 128 [ 164.978034][ T4877] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.995760][ T4877] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.019905][ T6652] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.033830][ T4877] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.076065][ T4877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.113253][ T6639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.300803][ T6643] loop1: detected capacity change from 0 to 32768 [ 165.457270][ T6665] loop0: detected capacity change from 0 to 4096 [ 165.504530][ T6643] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 165.518551][ T4877] usb 3-1: USB disconnect, device number 8 [ 165.543278][ T6665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.553675][ T6643] XFS (loop1): Mounting V5 Filesystem [ 165.715421][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 165.723503][ T6643] XFS (loop1): Ending clean mount [ 165.800521][ T6643] XFS (loop1): Quotacheck needed: Please wait. [ 165.931842][ T6643] XFS (loop1): Quotacheck: Done. [ 166.070744][ T4266] XFS (loop1): Unmounting Filesystem [ 166.146232][ T4277] Bluetooth: hci4: link tx timeout [ 166.157704][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.227880][ T6688] loop2: detected capacity change from 0 to 1024 [ 166.333319][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 166.333337][ T26] audit: type=1800 audit(1773782531.632:57): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.869" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 166.474997][ T11] hfsplus: b-tree write err: -5, ino 25 [ 166.498177][ T11] hfsplus: b-tree write err: -5, ino 4 [ 166.521970][ T11] hfsplus: b-tree write err: -5, ino 2 [ 166.539091][ T11] hfsplus: b-tree write err: -5, ino 20 [ 167.129960][ T6681] XFS (loop0): Mounting V5 Filesystem [ 167.228759][ T6681] XFS (loop0): Ending clean mount [ 167.499729][ T6692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.868 (6692) [ 167.525314][ T6710] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 167.549841][ T4278] XFS (loop0): Unmounting Filesystem [ 167.551344][ T6692] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.567639][ T6692] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 167.577554][ T6692] BTRFS info (device loop1): using free space tree [ 167.641829][ T6710] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 167.711247][ T6692] BTRFS info (device loop1): enabling ssd optimizations [ 167.730013][ T6710] ntfs3: loop4: ino=0, attr_set_size [ 167.755592][ T6710] ntfs3: loop4: ino=0, attr_set_size [ 168.236214][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 168.265413][ T6742] set_capacity_and_notify: 4 callbacks suppressed [ 168.265430][ T6742] loop4: detected capacity change from 0 to 64 [ 168.532134][ T6697] syz.2.871 (6697): drop_caches: 3 [ 168.538492][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.065315][ T6752] loop0: detected capacity change from 0 to 4096 [ 169.066028][ T5118] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.233566][ T6755] loop1: detected capacity change from 0 to 4096 [ 169.279299][ T5118] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.317599][ T6755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.370970][ T5118] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.456559][ T5118] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.472729][ T5118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.550211][ T6745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.642100][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 169.806518][ T6770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.889'. [ 169.841984][ T6770] sch_fq: defrate 4294967295 ignored. [ 170.046519][ T4313] usb 3-1: USB disconnect, device number 9 [ 170.167754][ T6761] loop0: detected capacity change from 0 to 32768 [ 170.215242][ T6761] XFS (loop0): Mounting V5 Filesystem [ 170.274381][ T6761] XFS (loop0): Ending clean mount [ 170.456502][ T4278] XFS (loop0): Unmounting Filesystem [ 170.472225][ T6783] loop4: detected capacity change from 0 to 4096 [ 170.545473][ T6788] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.583470][ T6783] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 170.638753][ T6783] Remounting filesystem read-only [ 170.802961][ T4273] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 171.131924][ T6785] loop3: detected capacity change from 0 to 32768 [ 171.155196][ T6785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.891 (6785) [ 171.232945][ T6802] loop4: detected capacity change from 0 to 512 [ 171.292085][ T6802] EXT4-fs: Ignoring removed nobh option [ 171.338285][ T6785] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.354994][ T6802] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.372302][ T6785] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 171.436094][ T6785] BTRFS info (device loop3): using free space tree [ 171.448197][ T6802] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.900: ea_inode file size=0 entry size=6 [ 171.495827][ T6802] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.900: iget: bad extra_isize 90 (inode size 256) [ 171.543164][ T6802] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.900: error while reading EA inode 11 err=-117 [ 171.685518][ T6802] EXT4-fs (loop4): 1 orphan inode deleted [ 171.748212][ T6802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.775326][ T6785] BTRFS info (device loop3): enabling ssd optimizations [ 171.821968][ T6832] loop1: detected capacity change from 0 to 256 [ 171.920197][ T6832] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.970971][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 172.026297][ T4280] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.257180][ T6835] loop0: detected capacity change from 0 to 4096 [ 172.280574][ T4903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4903) [ 172.300004][ T6835] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 172.423851][ T6808] loop2: detected capacity change from 0 to 32768 [ 172.605700][ T6808] XFS (loop2): Mounting V5 Filesystem [ 172.633681][ T6835] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 172.674808][ T6846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.907'. [ 172.693530][ T4277] Bluetooth: hci4: link tx timeout [ 172.704721][ T6846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.907'. [ 172.727692][ T6850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.907'. [ 172.736566][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.780527][ T6808] XFS (loop2): Ending clean mount [ 172.789503][ T6835] ntfs3: loop0: ino=0, attr_set_size [ 172.841221][ T6835] ntfs3: loop0: ino=0, attr_set_size [ 173.003260][ T4267] XFS (loop2): Unmounting Filesystem [ 173.115436][ T6836] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.904 (6836) [ 173.212959][ T6836] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.260995][ T6836] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 173.324544][ T6836] BTRFS info (device loop4): setting nodatacow, compression disabled [ 173.348230][ T4988] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.378878][ T6836] BTRFS info (device loop4): force clearing of disk cache [ 173.408144][ T6836] BTRFS info (device loop4): enabling ssd optimizations [ 173.415341][ T6836] BTRFS info (device loop4): using spread ssd allocation scheme [ 173.471719][ T6836] BTRFS info (device loop4): turning off barriers [ 173.487338][ T6836] BTRFS info (device loop4): disabling free space tree [ 173.496421][ T6836] BTRFS info (device loop4): not using ssd optimizations [ 173.505982][ T6836] BTRFS info (device loop4): not using spread ssd allocation scheme [ 173.566225][ T4988] usb 4-1: Using ep0 maxpacket: 32 [ 173.574027][ T4988] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 173.625971][ T4988] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.653741][ T6859] set_capacity_and_notify: 1 callbacks suppressed [ 173.653758][ T6859] loop0: detected capacity change from 0 to 4096 [ 173.685982][ T4988] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.686825][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.914'. [ 173.693163][ T4988] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 173.693193][ T4988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.782364][ T4988] usb 4-1: config 0 descriptor?? [ 173.804169][ T6875] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.878569][ T6836] BTRFS info (device loop4): rebuilding free space tree [ 173.923806][ T6836] BTRFS info (device loop4): disabling free space tree [ 173.950309][ T6836] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.967491][ T6836] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.213300][ T4988] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 174.241923][ T4988] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 174.253557][ T4988] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 174.263310][ T4988] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 174.272545][ T4988] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 174.285613][ T4988] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 174.309419][ T4273] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.383336][ T4988] corsair-cpro: probe of 0003:1B1C:0C10.0010 failed with error -90 [ 174.429926][ T4988] usb 4-1: USB disconnect, device number 5 [ 174.710566][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 174.764384][ T6895] fido_id[6895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 174.973690][ T6880] loop1: detected capacity change from 0 to 40427 [ 174.992852][ T6880] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 175.016667][ T6899] loop4: detected capacity change from 0 to 4096 [ 175.021968][ T6880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 175.052956][ T6899] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 175.089700][ T6880] F2FS-fs (loop1): invalid crc value [ 175.135999][ T6899] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 175.155854][ T6880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.206392][ T6899] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 175.231464][ T6899] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 175.284195][ T6894] loop2: detected capacity change from 0 to 32768 [ 175.306199][ T6899] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 175.350268][ T6880] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 175.370220][ T6899] ntfs: volume version 3.1. [ 175.381356][ T6880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 175.402452][ T6894] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.424383][ T6899] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 175.466868][ T6894] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 175.503885][ T6899] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 175.525776][ T6894] BTRFS info (device loop2): using free space tree [ 175.558746][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 175.575678][ T6899] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 175.672616][ T6899] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 175.687637][ T6899] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 175.732848][ T6894] BTRFS info (device loop2): enabling ssd optimizations [ 175.811180][ T4267] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.824597][ T6020] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 175.854132][ T6020] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 176.150906][ T6938] netlink: 84 bytes leftover after parsing attributes in process `syz.3.933'. [ 176.216568][ T6938] netlink: 84 bytes leftover after parsing attributes in process `syz.3.933'. [ 176.247161][ T6938] netlink: 84 bytes leftover after parsing attributes in process `syz.3.933'. [ 176.477926][ T6940] loop2: detected capacity change from 0 to 4096 [ 176.577189][ T6945] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.925694][ T6955] loop3: detected capacity change from 0 to 16 [ 176.969432][ T6955] erofs: (device loop3): mounted with root inode @ nid 36. [ 176.994833][ T6957] loop0: detected capacity change from 0 to 512 [ 177.054121][ T6936] loop4: detected capacity change from 0 to 32768 [ 177.071691][ T6960] loop1: detected capacity change from 0 to 256 [ 177.083500][ T6936] [ 177.083500][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.083500][ T6936] [ 177.089512][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 177.108576][ T6936] [ 177.108576][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.108576][ T6936] [ 177.170363][ T6936] [ 177.170363][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.170363][ T6936] [ 177.204768][ T6936] [ 177.204768][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.204768][ T6936] [ 177.225733][ T6936] [ 177.225733][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.225733][ T6936] [ 177.311660][ T6936] [ 177.311660][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.311660][ T6936] [ 177.396279][ T6957] FAT-fs (loop0): codepage cp86 not found [ 177.409095][ T6936] [ 177.409095][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.409095][ T6936] [ 177.493694][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.940'. [ 177.505777][ T107] [ 177.505777][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.505777][ T107] [ 177.576664][ T6936] [ 177.576664][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.576664][ T6936] [ 177.606700][ T6936] [ 177.606700][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.606700][ T6936] [ 177.655633][ T6936] [ 177.655633][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.655633][ T6936] [ 177.673003][ T6936] [ 177.673003][ T6936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.673003][ T6936] [ 177.727080][ T107] [ 177.727080][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.727080][ T107] [ 177.830384][ T4273] [ 177.830384][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.830384][ T4273] [ 177.850647][ T6975] loop3: detected capacity change from 0 to 1024 [ 177.862104][ T4273] [ 177.862104][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.862104][ T4273] [ 177.874670][ T6975] EXT4-fs: Ignoring removed orlov option [ 177.899258][ T6971] ntfs: volume version 3.1. [ 177.971162][ T6975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 178.201016][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 178.424211][ T6020] hfsplus: b-tree write err: -5, ino 25 [ 178.438575][ T6020] hfsplus: b-tree write err: -5, ino 4 [ 178.458622][ T6020] hfsplus: b-tree write err: -5, ino 2 [ 178.495862][ T6020] hfsplus: b-tree write err: -5, ino 20 [ 178.497989][ T6985] ntfs: volume version 3.1. [ 178.601274][ T6992] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.659926][ T6995] set_capacity_and_notify: 4 callbacks suppressed [ 178.659943][ T6995] loop4: detected capacity change from 0 to 256 [ 179.440326][ T7016] loop2: detected capacity change from 0 to 1024 [ 179.464769][ T7016] EXT4-fs: Ignoring removed orlov option [ 179.552022][ T7016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 179.554048][ T7018] loop1: detected capacity change from 0 to 1024 [ 179.752863][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 179.773917][ T11] hfsplus: b-tree write err: -5, ino 25 [ 179.783355][ T11] hfsplus: b-tree write err: -5, ino 4 [ 179.801623][ T11] hfsplus: b-tree write err: -5, ino 2 [ 179.841090][ T11] hfsplus: b-tree write err: -5, ino 20 [ 179.854666][ T7009] loop0: detected capacity change from 0 to 32768 [ 179.980772][ T7009] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 180.013135][ T7009] XFS (loop0): Mounting V5 Filesystem [ 180.081275][ T7009] XFS (loop0): Ending clean mount [ 180.090990][ T7009] XFS (loop0): Quotacheck needed: Please wait. [ 180.142668][ T7009] XFS (loop0): Quotacheck: Done. [ 180.175987][ T6240] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.290652][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.968'. [ 180.331823][ T4278] XFS (loop0): Unmounting Filesystem [ 180.373308][ T6240] usb 3-1: Using ep0 maxpacket: 32 [ 180.396750][ T6240] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 180.443612][ T6240] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.455004][ T6240] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.468704][ T6240] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 180.485135][ T6240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.508837][ T6240] usb 3-1: config 0 descriptor?? [ 180.603329][ T7038] loop3: detected capacity change from 0 to 8192 [ 180.681470][ T7038] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 180.752013][ T7038] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 180.777378][ T7038] REISERFS (device loop3): using ordered data mode [ 180.784402][ T7038] reiserfs: using flush barriers [ 180.847366][ T7038] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.896549][ T7038] REISERFS (device loop3): checking transaction log (loop3) [ 180.927887][ T7038] REISERFS (device loop3): Using r5 hash to sort names [ 180.942794][ T6240] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 180.967158][ T7038] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 180.982556][ T6240] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 181.002075][ T6240] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 181.036214][ T6240] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 181.044101][ T6240] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 181.072695][ T6240] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 181.179227][ T6240] corsair-cpro: probe of 0003:1B1C:0C10.0011 failed with error -90 [ 181.197659][ T7053] loop0: detected capacity change from 0 to 1024 [ 181.214831][ T6240] usb 3-1: USB disconnect, device number 10 [ 181.249597][ T7053] EXT4-fs: Ignoring removed bh option [ 181.272009][ T7053] EXT4-fs: inline encryption not supported [ 181.410901][ T7053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 181.429371][ T7055] fido_id[7055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 181.483230][ T7053] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.977: lblock 2 mapped to illegal pblock 2 (length 1) [ 181.486724][ T7061] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.561393][ T7053] __quota_error: 34 callbacks suppressed [ 181.561410][ T7053] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 181.602916][ T7053] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.977: lblock 0 mapped to illegal pblock 48 (length 1) [ 181.652843][ T7053] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 181.668253][ T7053] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.977: Failed to acquire dquot type 0 [ 181.686831][ T7053] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 181.728287][ T7053] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.977: mark_inode_dirty error [ 181.795216][ T7053] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 181.852507][ T7053] EXT4-fs (loop0): 1 orphan inode deleted [ 181.878371][ T7053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.888761][ T46] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 181.944617][ T46] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 181.996440][ T46] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 0 [ 182.068471][ T7053] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.977: lblock 0 mapped to illegal pblock 48 (length 1) [ 182.131367][ T7053] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 182.253980][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 182.644113][ T7081] loop0: detected capacity change from 0 to 8192 [ 182.708340][ T7081] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 182.744456][ T7064] loop4: detected capacity change from 0 to 32768 [ 182.822478][ T7081] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 182.834140][ T7081] REISERFS (device loop0): using ordered data mode [ 182.841784][ T7081] reiserfs: using flush barriers [ 182.859177][ T7081] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.887571][ T7064] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 182.897128][ T7081] REISERFS (device loop0): checking transaction log (loop0) [ 182.908518][ T7081] REISERFS (device loop0): Using r5 hash to sort names [ 182.936616][ T7081] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 182.946383][ T7064] XFS (loop4): Mounting V5 Filesystem [ 183.122311][ T7064] XFS (loop4): Ending clean mount [ 183.133232][ T7064] XFS (loop4): Quotacheck needed: Please wait. [ 183.200197][ T7064] XFS (loop4): Quotacheck: Done. [ 183.365228][ T4273] XFS (loop4): Unmounting Filesystem [ 183.386425][ T4988] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.609853][ T4988] usb 2-1: Using ep0 maxpacket: 32 [ 183.647473][ T4988] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 183.691481][ T4988] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.712332][ T4988] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.732599][ T4988] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 183.759763][ T4988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.784796][ T4988] usb 2-1: config 0 descriptor?? [ 183.852145][ T7118] device veth1_macvtap left promiscuous mode [ 183.899810][ T7118] device veth1_macvtap entered promiscuous mode [ 183.907511][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.013860][ T7122] loop0: detected capacity change from 0 to 64 [ 184.039291][ T7122] hfs: unable to locate alternate MDB [ 184.053318][ T7124] loop4: detected capacity change from 0 to 1024 [ 184.060824][ T7122] hfs: continuing without an alternate MDB [ 184.075730][ T26] audit: type=1800 audit(1773782549.372:60): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1012" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 184.107947][ T7124] EXT4-fs: Ignoring removed bh option [ 184.137698][ T7124] EXT4-fs: inline encryption not supported [ 184.165002][ T7109] loop3: detected capacity change from 0 to 40427 [ 184.176485][ T7124] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 184.201631][ T7109] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 184.209053][ T4988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 184.220140][ T7109] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 184.254307][ T7124] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.1000: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.275770][ T7109] F2FS-fs (loop3): invalid crc value [ 184.301538][ T4988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 184.325742][ T4988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 184.347605][ T7124] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 184.382828][ T7109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 184.390032][ T7124] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.1000: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.402660][ T7120] loop2: detected capacity change from 0 to 32768 [ 184.412269][ T4988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 184.431305][ T4988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 184.448404][ T4988] corsair-cpro 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 184.461570][ T7124] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 184.482168][ T7124] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1000: Failed to acquire dquot type 0 [ 184.510051][ T6020] hfs: new node 0 already hashed? [ 184.515724][ T6020] ------------[ cut here ]------------ [ 184.521594][ T6020] WARNING: CPU: 0 PID: 6020 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 184.531306][ T6020] Modules linked in: [ 184.535488][ T6020] CPU: 0 PID: 6020 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 184.535545][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.535557][ T6020] Workqueue: writeback wb_workfn (flush-7:0) [ 184.560340][ T6020] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 184.566570][ T6020] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 184.567585][ T4988] corsair-cpro: probe of 0003:1B1C:0C10.0012 failed with error -90 [ 184.587115][ T6020] RSP: 0018:ffffc9000c656e80 EFLAGS: 00010246 [ 184.587145][ T6020] RAX: 000000000000001f RBX: ffff88807a4b20e0 RCX: 3b52ee44ec8a2500 [ 184.587159][ T6020] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 184.587170][ T6020] RBP: 0000000000000000 R08: ffffc9000c656b87 R09: 1ffff920018cad70 [ 184.587182][ T6020] R10: dffffc0000000000 R11: fffff520018cad71 R12: 0000000000000000 [ 184.587194][ T6020] R13: ffff88807a4b2000 R14: ffff888027ee3100 R15: dffffc0000000000 [ 184.587206][ T6020] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 184.587220][ T6020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.587233][ T6020] CR2: 0000001b2f91bff8 CR3: 0000000029081000 CR4: 00000000003506f0 [ 184.587249][ T6020] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.587260][ T6020] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.587273][ T6020] Call Trace: [ 184.587291][ T6020] [ 184.587304][ T6020] hfs_bmap_alloc+0x53d/0x5d0 [ 184.587341][ T6020] ? hfs_bmap_reserve+0x420/0x420 [ 184.587376][ T6020] hfs_btree_inc_height+0xfd/0xac0 [ 184.587407][ T6020] ? hfs_brec_insert+0x6f6/0xbd0 [ 184.587438][ T6020] ? hfs_brec_insert+0xbd0/0xbd0 [ 184.587467][ T6020] ? do_raw_spin_unlock+0x11d/0x230 [ 184.587491][ T6020] hfs_brec_insert+0x744/0xbd0 [ 184.587535][ T6020] ? hfs_brec_keylen+0x350/0x350 [ 184.587569][ T6020] __hfs_ext_write_extent+0x2a1/0x470 [ 184.587599][ T6020] hfs_ext_write_extent+0x17b/0x200 [ 184.587624][ T6020] ? verify_lock_unused+0x140/0x140 [ 184.587648][ T6020] ? hfs_ext_keycmp+0x310/0x310 [ 184.587679][ T6020] ? writeback_sb_inodes+0x46b/0x1850 [ 184.587713][ T6020] hfs_write_inode+0xd8/0xa20 [ 184.587741][ T6020] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 184.587772][ T6020] ? __writeback_single_inode+0x4ae/0x1160 [ 184.587800][ T6020] ? __lock_acquire+0x7d10/0x7d10 [ 184.587822][ T6020] ? do_raw_spin_lock+0x128/0x2f0 [ 184.587840][ T6020] ? __rwlock_init+0x140/0x140 [ 184.587864][ T6020] __writeback_single_inode+0x75b/0x1160 [ 184.603640][ T7124] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 184.611517][ T6020] writeback_sb_inodes+0xb30/0x1850 [ 184.611582][ T6020] ? queue_io+0x5a0/0x5a0 [ 184.611617][ T6020] ? rcu_is_watching+0x11/0xa0 [ 184.639781][ T4988] usb 2-1: USB disconnect, device number 7 [ 184.646503][ T6020] wb_writeback+0x482/0xd50 [ 184.646552][ T6020] ? percpu_ref_tryget+0x250/0x250 [ 184.646576][ T6020] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 184.646611][ T6020] ? _raw_spin_unlock_irq+0x1f/0x40 [ 184.646638][ T6020] wb_workfn+0x423/0xee0 [ 184.646676][ T6020] ? inode_wait_for_writeback+0x220/0x220 [ 184.646713][ T6020] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 184.646740][ T6020] ? read_lock_is_recursive+0x10/0x10 [ 184.646763][ T6020] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.646783][ T6020] ? _raw_spin_unlock+0x40/0x40 [ 184.646805][ T6020] ? _raw_spin_unlock_irq+0x1f/0x40 [ 184.646828][ T6020] ? process_one_work+0x7b0/0x1160 [ 184.646848][ T6020] process_one_work+0x8a2/0x1160 [ 184.646885][ T6020] ? worker_detach_from_pool+0x240/0x240 [ 184.646910][ T6020] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.646930][ T6020] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.646947][ T6020] ? kthread_data+0x4b/0xc0 [ 184.646977][ T6020] worker_thread+0xaa2/0x1270 [ 184.647016][ T6020] ? __kthread_parkme+0x162/0x1c0 [ 184.647047][ T6020] kthread+0x29d/0x330 [ 184.647064][ T6020] ? worker_clr_flags+0x1a0/0x1a0 [ 184.647084][ T6020] ? kthread_blkcg+0xd0/0xd0 [ 184.647103][ T6020] ret_from_fork+0x1f/0x30 [ 184.647139][ T6020] [ 184.647149][ T6020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.647159][ T6020] CPU: 0 PID: 6020 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 184.647177][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.647188][ T6020] Workqueue: writeback wb_workfn (flush-7:0) [ 184.647211][ T6020] Call Trace: [ 184.647216][ T6020] [ 184.647222][ T6020] dump_stack_lvl+0x188/0x24e [ 184.647244][ T6020] ? memcpy+0x3c/0x60 [ 184.647258][ T6020] ? show_regs_print_info+0x12/0x12 [ 184.647279][ T6020] ? load_image+0x400/0x400 [ 184.647309][ T6020] panic+0x2e5/0x730 [ 184.647330][ T6020] ? bpf_jit_dump+0xd0/0xd0 [ 184.647354][ T6020] ? ret_from_fork+0x1f/0x30 [ 184.647378][ T6020] __warn+0x2f8/0x4f0 [ 184.647401][ T6020] ? hfs_bnode_create+0x37a/0x400 [ 184.647425][ T6020] ? hfs_bnode_create+0x37a/0x400 [ 184.647446][ T6020] report_bug+0x2ba/0x4f0 [ 184.647467][ T6020] ? hfs_bnode_create+0x37a/0x400 [ 184.647493][ T6020] handle_bug+0x3a/0x70 [ 184.647514][ T6020] exc_invalid_op+0x16/0x40 [ 184.647535][ T6020] asm_exc_invalid_op+0x16/0x20 [ 184.647554][ T6020] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 184.647577][ T6020] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 184.647592][ T6020] RSP: 0018:ffffc9000c656e80 EFLAGS: 00010246 [ 184.647607][ T6020] RAX: 000000000000001f RBX: ffff88807a4b20e0 RCX: 3b52ee44ec8a2500 [ 184.647619][ T6020] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 184.647630][ T6020] RBP: 0000000000000000 R08: ffffc9000c656b87 R09: 1ffff920018cad70 [ 184.647642][ T6020] R10: dffffc0000000000 R11: fffff520018cad71 R12: 0000000000000000 [ 184.647654][ T6020] R13: ffff88807a4b2000 R14: ffff888027ee3100 R15: dffffc0000000000 [ 184.647686][ T6020] hfs_bmap_alloc+0x53d/0x5d0 [ 184.647713][ T6020] ? hfs_bmap_reserve+0x420/0x420 [ 184.647748][ T6020] hfs_btree_inc_height+0xfd/0xac0 [ 184.647770][ T6020] ? hfs_brec_insert+0x6f6/0xbd0 [ 184.647797][ T6020] ? hfs_brec_insert+0xbd0/0xbd0 [ 184.647823][ T6020] ? do_raw_spin_unlock+0x11d/0x230 [ 184.647844][ T6020] hfs_brec_insert+0x744/0xbd0 [ 184.647884][ T6020] ? hfs_brec_keylen+0x350/0x350 [ 184.647915][ T6020] __hfs_ext_write_extent+0x2a1/0x470 [ 184.647943][ T6020] hfs_ext_write_extent+0x17b/0x200 [ 184.647966][ T6020] ? verify_lock_unused+0x140/0x140 [ 184.647987][ T6020] ? hfs_ext_keycmp+0x310/0x310 [ 184.648014][ T6020] ? writeback_sb_inodes+0x46b/0x1850 [ 184.648042][ T6020] hfs_write_inode+0xd8/0xa20 [ 184.648068][ T6020] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 184.648097][ T6020] ? __writeback_single_inode+0x4ae/0x1160 [ 184.648122][ T6020] ? __lock_acquire+0x7d10/0x7d10 [ 184.648140][ T6020] ? do_raw_spin_lock+0x128/0x2f0 [ 184.648159][ T6020] ? __rwlock_init+0x140/0x140 [ 184.648183][ T6020] __writeback_single_inode+0x75b/0x1160 [ 184.648211][ T6020] writeback_sb_inodes+0xb30/0x1850 [ 184.648257][ T6020] ? queue_io+0x5a0/0x5a0 [ 184.648292][ T6020] ? rcu_is_watching+0x11/0xa0 [ 184.648322][ T6020] wb_writeback+0x482/0xd50 [ 184.648356][ T6020] ? percpu_ref_tryget+0x250/0x250 [ 184.648377][ T6020] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 184.648415][ T6020] ? _raw_spin_unlock_irq+0x1f/0x40 [ 184.648437][ T6020] wb_workfn+0x423/0xee0 [ 184.648472][ T6020] ? inode_wait_for_writeback+0x220/0x220 [ 184.648505][ T6020] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 184.648529][ T6020] ? read_lock_is_recursive+0x10/0x10 [ 184.648549][ T6020] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.648567][ T6020] ? _raw_spin_unlock+0x40/0x40 [ 184.648587][ T6020] ? _raw_spin_unlock_irq+0x1f/0x40 [ 184.648608][ T6020] ? process_one_work+0x7b0/0x1160 [ 184.648626][ T6020] process_one_work+0x8a2/0x1160 [ 184.648657][ T6020] ? worker_detach_from_pool+0x240/0x240 [ 184.648680][ T6020] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.648697][ T6020] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.648715][ T6020] ? kthread_data+0x4b/0xc0 [ 184.648741][ T6020] worker_thread+0xaa2/0x1270 [ 184.648776][ T6020] ? __kthread_parkme+0x162/0x1c0 [ 184.648804][ T6020] kthread+0x29d/0x330 [ 184.648818][ T6020] ? worker_clr_flags+0x1a0/0x1a0 [ 184.648835][ T6020] ? kthread_blkcg+0xd0/0xd0 [ 184.648857][ T6020] ret_from_fork+0x1f/0x30 [ 184.648890][ T6020] [ 184.660811][ T6020] Kernel Offset: disabled [ 185.417556][ T6020] Rebooting in 86400 seconds..