last executing test programs: 2m34.699816248s ago: executing program 1 (id=520): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m33.418747753s ago: executing program 1 (id=536): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffff}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m32.604193258s ago: executing program 1 (id=546): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0xf}) fallocate(r0, 0x0, 0x0, 0x400001) 2m32.502355541s ago: executing program 1 (id=548): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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") creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2013000, 0x0) 2m32.248151514s ago: executing program 1 (id=552): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES8, @ANYBLOB="00000000000000be59"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) 2m31.712027013s ago: executing program 1 (id=559): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x47}) 2m31.600935247s ago: executing program 32 (id=559): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x47}) 2m30.204243717s ago: executing program 3 (id=580): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0xfffffff9, 0x0, 0x0, 0x0, 0x4}) 2m30.068043984s ago: executing program 3 (id=582): r0 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_mark(r0, 0x249, 0x20, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 2m29.941684071s ago: executing program 3 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 2m29.643774259s ago: executing program 3 (id=589): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x808, 0x0) 2m29.484922679s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2m28.532091922s ago: executing program 3 (id=605): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffe}, 0x94) ioctl(r0, 0xfffff000, &(0x7f0000000000)) 2m28.39007185s ago: executing program 33 (id=605): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffe}, 0x94) ioctl(r0, 0xfffff000, &(0x7f0000000000)) 2m12.172354826s ago: executing program 0 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x7c}}, 0x0) 2m12.027816055s ago: executing program 0 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f00000013c0)={@void, @val={0x3, 0x4, 0x8, 0xe057, 0x19, 0xc}, @eth={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "b6", "1ef10e", 0x0, "d40a0b0c0fed539ccb6c264de6a1afb15acdbd2b1b4a97"}}}}}}, 0x37) 2m11.864028176s ago: executing program 0 (id=774): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044102, &(0x7f0000000080)) 2m11.772027438s ago: executing program 0 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 2m11.748498721s ago: executing program 0 (id=779): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x1}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x82c) 2m11.334153144s ago: executing program 0 (id=788): unshare(0x22020600) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 2m11.034584143s ago: executing program 34 (id=788): unshare(0x22020600) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 4.692007337s ago: executing program 2 (id=2582): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x98e1, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000300)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0) 4.395445565s ago: executing program 2 (id=2590): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203110902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x6, 0x11, 0x0, 0x0}, {0x5, 0x4e01, 0x36, &(0x7f00000017c0)="166e2a32055dbea94d2028f1d68b71716589b27cd2b4eb72634a3e2356e600ea1eb98c2b876db8d684337b0caa6625e6bd6712cec64f"}, {0xf, 0x810, 0x0, 0x0}], 0x3}) 2.272037018s ago: executing program 4 (id=2621): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 2.211732846s ago: executing program 4 (id=2622): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000000010d, 0x8000000011, &(0x7f0000000000)="9a6dc2af", 0x4) 2.133959975s ago: executing program 4 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 2.010211912s ago: executing program 4 (id=2626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) 1.79361484s ago: executing program 4 (id=2630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010f00000000000000000500000008000300fc"], 0x1c}}, 0x0) 1.641790949s ago: executing program 4 (id=2634): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7c}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xaa}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x9}, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.514880885s ago: executing program 6 (id=2635): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x29, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0xce21, @dev}, 0x10, 0x0}, 0x20008040) 1.350325946s ago: executing program 2 (id=2637): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x2}}, 0x10) 1.24307671s ago: executing program 2 (id=2638): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x48, 0x5) 1.059786704s ago: executing program 2 (id=2640): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@phonet={0x23, 0xb, 0x0, 0x42}, 0x80, 0x0}, 0x2404e051) 951.614468ms ago: executing program 2 (id=2641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4b}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 828.041174ms ago: executing program 6 (id=2643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r1, 0x401, 0x3, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 745.845854ms ago: executing program 6 (id=2645): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000029c0), 0x20002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000002a00)=0x1) 692.217161ms ago: executing program 6 (id=2647): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) syz_emit_ethernet(0xa2, &(0x7f0000000680)={@random="613a7cd840b0", @local, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "1fd72b", 0x64, 0x2f, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3d}, {[@dstopts={0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xd, 0x1, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x2, 0x1, 0x1, 0x0, 0x6, 0x5}, 0x2, {0x5, 0x5, 0x1, 0xb, 0x0, 0x0, 0x2, 0x1, 0x1}}}}}}}}}, 0x0) 625.47903ms ago: executing program 6 (id=2650): r0 = syz_io_uring_setup(0x2068, &(0x7f0000000100)={0x0, 0x40000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x3, 0x7fffffff, {}, 0x5, 0x6, 0x1, {0x0, 0x0, r0}}) io_uring_enter(r0, 0x19c0, 0x1b79, 0x0, 0x0, 0x0) 555.566519ms ago: executing program 7 (id=2651): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r1, r0, 0x0, 0x80009) 540.565521ms ago: executing program 6 (id=2653): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000880)={0x0, 0x6, 0xf, {0xf, 0x10, "3d91419da546052dcdcf01abdc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 501.684766ms ago: executing program 7 (id=2654): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000400', @ANYRESDEC], 0x0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:'], 0x9) 410.984587ms ago: executing program 7 (id=2655): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xb92c, 0x1, 0xffffffff, 0x1f2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 351.256905ms ago: executing program 7 (id=2657): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x69e, &(0x7f00000008c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 284.020094ms ago: executing program 5 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x531, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffe0}}}, 0x24}}, 0x0) 275.413575ms ago: executing program 5 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_cmd={0x9, 0x7, 0x7, 0x0, 0x80, 0x5, 0x1, 0x5, 0xfc, 0x5, 0x7ff, 0x6, 0x401, 0xee, 0x1c, 0x7, [0x4, 0x1]}}) 254.561768ms ago: executing program 5 (id=2660): chdir(0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fgetxattr(r0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0) 168.061138ms ago: executing program 5 (id=2661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000d08000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 166.125958ms ago: executing program 5 (id=2662): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) 155.40491ms ago: executing program 7 (id=2663): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000002c0)) 63.564812ms ago: executing program 7 (id=2664): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 0s ago: executing program 5 (id=2665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x200003}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 4.463510][ T6526] XFS (loop7): Unmounting Filesystem [ 164.719856][ T8675] loop5: detected capacity change from 0 to 512 [ 164.941691][ T8675] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 164.965739][ T8675] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.548693][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'. [ 165.737347][ T8717] loop7: detected capacity change from 0 to 24 [ 165.776983][ T8716] loop2: detected capacity change from 0 to 2048 [ 165.801394][ T8717] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 165.849096][ T8716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.881421][ T8717] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 165.923226][ T8719] loop5: detected capacity change from 0 to 4096 [ 166.052680][ T8719] NILFS (loop5): invalid segment: Checksum error in segment payload [ 166.076028][ T8719] NILFS (loop5): trying rollback from an earlier position [ 166.183803][ T8719] NILFS (loop5): recovery complete [ 166.242931][ T8725] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.370243][ T8736] loop7: detected capacity change from 0 to 512 [ 166.488029][ T8736] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.562801][ T8736] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.605098][ T13] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.718539][ T8748] loop6: detected capacity change from 0 to 32768 [ 166.848910][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 166.895659][ T8748] XFS (loop6): Mounting V5 Filesystem [ 166.964189][ T8773] netlink: 328 bytes leftover after parsing attributes in process `syz.7.1462'. [ 166.965415][ T13] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.017361][ T8748] XFS (loop6): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 167.029498][ T13] usb 5-1: config 0 has no interface number 0 [ 167.110842][ T13] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.113796][ T8748] XFS (loop6): Starting recovery (logdev: internal) [ 167.141470][ T13] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.142072][ T4247] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 167.210919][ T4247] XFS (loop6): Unmount and run xfs_repair [ 167.224258][ T4247] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 167.242392][ T4247] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 167.259527][ T4247] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 167.287462][ T4247] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 167.295427][ T13] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.300028][ T4247] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 167.312861][ T13] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 167.323717][ T4247] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 167.343634][ T4247] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 167.355135][ T13] usb 5-1: Product: syz [ 167.364915][ T4247] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.366120][ T13] usb 5-1: SerialNumber: syz [ 167.380135][ T4247] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.393222][ T13] usb 5-1: config 0 descriptor?? [ 167.398585][ T8748] XFS (loop6): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74 [ 167.441525][ T13] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 167.496235][ T13] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input18 [ 167.736188][ T8786] loop7: detected capacity change from 0 to 4096 [ 167.804495][ T8786] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 167.825278][ T13] usb 5-1: USB disconnect, device number 14 [ 167.835142][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.842135][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 167.893796][ T13] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 168.021146][ T8788] loop6: detected capacity change from 0 to 1024 [ 168.143909][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 168.599382][ T8815] loop7: detected capacity change from 0 to 1024 [ 168.672006][ T8822] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1483'. [ 168.681532][ T8822] tipc: Started in network mode [ 168.692637][ T8822] tipc: Node identity 7f000001, cluster identity 4711 [ 168.699974][ T8822] tipc: Enabling of bearer rejected, failed to enable media [ 168.818166][ T8824] sctp: [Deprecated]: syz.4.1496 (pid 8824) Use of int in maxseg socket option. [ 168.818166][ T8824] Use struct sctp_assoc_value instead [ 168.982433][ T8834] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 169.039082][ T8837] loop4: detected capacity change from 0 to 512 [ 169.064363][ T8837] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 169.084681][ T8837] UDF-fs: Scanning with blocksize 512 failed [ 169.086309][ T8833] loop7: detected capacity change from 0 to 4096 [ 169.103777][ T8837] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 169.111677][ T8837] UDF-fs: Scanning with blocksize 1024 failed [ 169.124873][ T8837] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 169.132962][ T8837] UDF-fs: Scanning with blocksize 2048 failed [ 169.138935][ T8808] loop5: detected capacity change from 0 to 32768 [ 169.148679][ T8837] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 169.161836][ T8837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.211602][ T8808] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1478 (8808) [ 169.274863][ T8808] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 169.314241][ T8808] BTRFS info (device loop5): using free space tree [ 169.323826][ T8808] BTRFS info (device loop5): has skinny extents [ 169.337575][ T8833] ntfs3: loop7: failed to convert name for inode 1e. [ 169.574237][ T8808] BTRFS info (device loop5): enabling ssd optimizations [ 169.781692][ T8861] loop7: detected capacity change from 0 to 32768 [ 170.299451][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1505'. [ 170.340250][ T8861] XFS (loop7): Mounting V5 Filesystem [ 170.377978][ T8892] netlink: 'syz.4.1507': attribute type 6 has an invalid length. [ 170.441073][ T5476] kernel write not supported for file /input/mouse0 (pid: 5476 comm: kworker/0:9) [ 170.504723][ T8900] program syz.6.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.550436][ T8861] XFS (loop7): Ending clean mount [ 170.564310][ T8905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.588592][ T8861] XFS (loop7): Quotacheck needed: Please wait. [ 170.661823][ T8861] XFS (loop7): Quotacheck: Done. [ 170.697709][ T8861] XFS (loop7): Unmounting Filesystem [ 170.959638][ T8913] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1515'. [ 171.028967][ T8903] loop2: detected capacity change from 0 to 32768 [ 171.095546][ T8907] loop5: detected capacity change from 0 to 32768 [ 171.460767][ T8923] loop2: detected capacity change from 0 to 1024 [ 171.668009][ T8933] loop7: detected capacity change from 0 to 2048 [ 171.785564][ T8933] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.854632][ T8933] UDF-fs: error (device loop7): udf_rename: failed to find renamed entry again in directory (ino 1376) [ 172.065330][ T8955] loop5: detected capacity change from 0 to 2048 [ 172.122066][ T8962] loop7: detected capacity change from 0 to 1024 [ 172.235866][ T8955] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.295181][ T8955] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.402642][ T8955] fs-verity (loop5, inode 18): Unknown hash algorithm number: 0 [ 172.537408][ T8977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1544'. [ 172.660678][ T8952] loop6: detected capacity change from 0 to 32768 [ 172.733575][ T8952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1532 (8952) [ 172.793431][ T8988] binder: 8987:8988 ioctl c0306201 200000000480 returned -14 [ 172.801749][ T8952] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 172.834163][ T8952] BTRFS info (device loop6): turning off barriers [ 172.856056][ T8952] BTRFS info (device loop6): setting nodatasum [ 172.865671][ T8952] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 172.880854][ T8990] openvswitch: netlink: nsh attribute has 60 unknown bytes. [ 172.915228][ T8990] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.925380][ T8952] BTRFS info (device loop6): use zstd compression, level 3 [ 172.932650][ T8952] BTRFS info (device loop6): using free space tree [ 172.985026][ T8952] BTRFS info (device loop6): has skinny extents [ 173.321305][ T8999] loop4: detected capacity change from 0 to 32768 [ 173.373849][ T8999] ERROR: (device loop4): diWrite: ixpxd invalid [ 173.373849][ T8999] [ 173.475199][ T8999] ERROR: (device loop4): remounting filesystem as read-only [ 173.503026][ T8999] ERROR: (device loop4): txCommit: [ 173.503026][ T8999] [ 173.603652][ T9017] loop7: detected capacity change from 0 to 32768 [ 173.808806][ T9017] XFS (loop7): Mounting V5 Filesystem [ 173.877932][ T9017] XFS (loop7): Ending clean mount [ 173.912396][ T9017] XFS (loop7): Quotacheck needed: Please wait. [ 173.945196][ T9035] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 174.024161][ T9017] XFS (loop7): Quotacheck: Done. [ 174.050175][ T9044] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.1562'. [ 174.107006][ T6526] XFS (loop7): Unmounting Filesystem [ 174.345340][ T9035] usb 6-1: config 0 interface 0 has no altsetting 0 [ 174.352796][ T9035] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 174.362587][ T9035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.374886][ T9035] usb 6-1: config 0 descriptor?? [ 174.517392][ T9046] loop6: detected capacity change from 0 to 32768 [ 174.696682][ T9060] loop7: detected capacity change from 0 to 4096 [ 174.782376][ T9060] NILFS (loop7): invalid segment: Checksum error in segment payload [ 174.840255][ T9060] NILFS (loop7): trying rollback from an earlier position [ 174.873007][ T9035] acrux 0003:1A34:0802.0015: hidraw0: USB HID v0.04 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 174.906991][ T9035] acrux 0003:1A34:0802.0015: no inputs found [ 174.919579][ T9060] NILFS (loop7): recovery complete [ 174.936285][ T9067] loop4: detected capacity change from 0 to 4096 [ 174.943470][ T9035] acrux 0003:1A34:0802.0015: Failed to enable force feedback support, error: -19 [ 174.975238][ T9073] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.062257][ T9067] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 175.081619][ T9035] usb 6-1: USB disconnect, device number 8 [ 175.328694][ T4195] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 175.333780][ T9081] fido_id[9081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 175.359508][ T4195] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 175.385509][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 175.667676][ T9107] loop5: detected capacity change from 0 to 64 [ 175.754045][ T9107] hfs: request for non-existent node 24 in B*Tree [ 175.777770][ T9107] hfs: request for non-existent node 24 in B*Tree [ 175.855497][ T5482] Bluetooth: hci4: command 0x0406 tx timeout [ 175.855683][ T9036] Bluetooth: hci1: command 0x0406 tx timeout [ 176.122314][ T9100] loop2: detected capacity change from 0 to 32768 [ 176.214917][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'. [ 176.232654][ T9100] XFS (loop2): Mounting V5 Filesystem [ 176.244556][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.253621][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.282068][ T9139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.347439][ T9100] XFS (loop2): Ending clean mount [ 176.421969][ T9149] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 176.512968][ T4184] XFS (loop2): Unmounting Filesystem [ 176.580747][ T9160] loop5: detected capacity change from 0 to 1024 [ 176.709296][ T9153] loop4: detected capacity change from 0 to 4096 [ 176.818630][ T9153] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 176.829297][ T5846] hfsplus: b-tree write err: -5, ino 4 [ 176.902080][ T9153] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 177.390819][ T9194] loop6: detected capacity change from 0 to 256 [ 177.501276][ T9194] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 177.565634][ T9203] netlink: 'syz.4.1631': attribute type 5 has an invalid length. [ 177.582870][ T9204] netlink: 'syz.2.1632': attribute type 8 has an invalid length. [ 177.623904][ T9204] netlink: 'syz.2.1632': attribute type 3 has an invalid length. [ 177.667552][ T9204] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1632'. [ 177.865714][ T9220] loop2: detected capacity change from 0 to 1024 [ 177.916165][ T9220] EXT4-fs (loop2): inline encryption not supported [ 177.954387][ T9220] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.015851][ T9220] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8857c028, mo2=0002] [ 178.034892][ T9220] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,debug,errors=remount-ro,. Quota mode: writeback. [ 178.173318][ T9224] loop4: detected capacity change from 0 to 32768 [ 178.259515][ T9224] JBD2: Ignoring recovery information on journal [ 178.278327][ T9224] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 178.295298][ T9224] JBD2: bad block at offset 32 [ 178.325998][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1647'. [ 178.388635][ T9212] loop5: detected capacity change from 0 to 32768 [ 178.414078][ T9224] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 178.462246][ T9212] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 178.479884][ T9212] JBD2: Ignoring recovery information on journal [ 178.492123][ T9224] (syz.4.1641,9224,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "heartbeat=nonek=00000000000000000000007" or missing value [ 178.596902][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 178.646565][ T9248] loop2: detected capacity change from 0 to 1024 [ 178.678473][ T9248] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 178.693308][ T9248] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #32: comm syz.2.1648: iget: special inode unallocated [ 178.729111][ T9212] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 178.800804][ T9248] EXT4-fs (loop2): no journal found [ 178.818768][ T9248] EXT4-fs (loop2): can't get journal size [ 178.916228][ T9248] EXT4-fs (loop2): filesystem is read-only [ 178.952675][ T9248] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 179.014378][ T9251] loop7: detected capacity change from 0 to 32768 [ 179.057008][ T9251] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 179.071542][ T9251] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 179.104489][ T9251] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 179.116429][ T5476] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 179.134928][ T5476] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 179.222844][ T9258] loop6: detected capacity change from 0 to 64 [ 179.261772][ T5476] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 126ms [ 179.274903][ T5476] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 179.295842][ T9251] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 179.305383][ T9038] Bluetooth: hci0: command 0x0411 tx timeout [ 179.423611][ T9258] hfs: bad catalog entry type 0 [ 179.553264][ T9266] loop2: detected capacity change from 0 to 16 [ 179.653975][ T9266] erofs: (device loop2): mounted with root inode @ nid 36. [ 179.693024][ T26] audit: type=1326 audit(1768818739.183:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.1670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4335631cb9 code=0x0 [ 179.706848][ T9266] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 179.779923][ T9266] attempt to access beyond end of device [ 179.779923][ T9266] loop2: rw=0, want=64, limit=16 [ 179.857946][ T9266] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 179.908196][ T9212] (syz.5.1646,9212,0):ocfs2_remount:640 ERROR: Cannot enable inode64 on remount [ 179.943601][ T5778] ocfs2: Unmounting device (7,5) on (node local) [ 180.272133][ T9286] loop2: detected capacity change from 0 to 256 [ 180.304206][ T9288] loop5: detected capacity change from 0 to 16 [ 180.321768][ T9278] loop4: detected capacity change from 0 to 32768 [ 180.341137][ T9286] FAT-fs (loop2): Directory bread(block 64) failed [ 180.347989][ T9286] FAT-fs (loop2): Directory bread(block 65) failed [ 180.354788][ T9286] FAT-fs (loop2): Directory bread(block 66) failed [ 180.357535][ T9288] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 180.362193][ T9286] FAT-fs (loop2): Directory bread(block 67) failed [ 180.376094][ T9286] FAT-fs (loop2): Directory bread(block 68) failed [ 180.382739][ T9286] FAT-fs (loop2): Directory bread(block 69) failed [ 180.391526][ T9286] FAT-fs (loop2): Directory bread(block 70) failed [ 180.395639][ T9278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1664 (9278) [ 180.400179][ T9286] FAT-fs (loop2): Directory bread(block 71) failed [ 180.431758][ T9288] erofs: (device loop5): mounted with root inode @ nid 36. [ 180.435997][ T9286] FAT-fs (loop2): Directory bread(block 72) failed [ 180.450425][ T9286] FAT-fs (loop2): Directory bread(block 73) failed [ 180.467061][ T9288] CIFS mount error: No usable UNC path provided in device string! [ 180.467061][ T9288] [ 180.492508][ T9278] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 180.536267][ T9278] BTRFS info (device loop4): force clearing of disk cache [ 180.543473][ T9278] BTRFS info (device loop4): enabling auto defrag [ 180.575339][ T9288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 180.593347][ T9278] BTRFS info (device loop4): enabling ssd optimizations [ 180.611200][ T9278] BTRFS info (device loop4): max_inline at 0 [ 180.630322][ T9278] BTRFS info (device loop4): enabling disk space caching [ 180.694203][ T9278] BTRFS info (device loop4): disk space caching is enabled [ 180.719013][ T9278] BTRFS info (device loop4): has skinny extents [ 180.970491][ T9300] loop5: detected capacity change from 0 to 4096 [ 181.059804][ T9300] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 181.061040][ T9322] loop6: detected capacity change from 0 to 512 [ 181.106012][ T9300] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 181.110130][ T9278] BTRFS info (device loop4): clearing free space tree [ 181.123848][ T9278] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.137893][ T9323] loop2: detected capacity change from 0 to 1024 [ 181.141346][ T9300] ntfs3: loop5: ino=1e, "file1" encrypted i/o not supported [ 181.144560][ T9278] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.159555][ T9322] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 181.245372][ T9322] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 181.265301][ T9294] loop7: detected capacity change from 0 to 40427 [ 181.320897][ T9322] EXT4-fs (loop6): 1 truncate cleaned up [ 181.329734][ T9322] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 181.331932][ T9294] F2FS-fs (loop7): Invalid segment count (1) [ 181.376087][ T151] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 181.382780][ T5778] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 181.385542][ T9294] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 181.405137][ T5778] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 181.412124][ T5778] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 181.417127][ T9294] F2FS-fs (loop7): invalid crc value [ 181.424121][ T9] hfsplus: b-tree write err: -5, ino 4 [ 181.487593][ T6650] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 181.494781][ T9294] F2FS-fs (loop7): Found nat_bits in checkpoint [ 181.494820][ T5778] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 181.822481][ T9294] F2FS-fs (loop7): recover fsync data on readonly fs [ 181.849790][ T9294] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 181.901280][ T9340] loop2: detected capacity change from 0 to 512 [ 181.911644][ T9294] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 182.014471][ T9294] F2FS-fs (loop7): Try to recover all the superblocks, ret: 0 [ 182.054540][ T9294] F2FS-fs (loop7): switch extent_cache option is not allowed [ 182.162188][ T9340] EXT4-fs (loop2): Ignoring removed bh option [ 182.276985][ T9340] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 182.325524][ T9340] EXT4-fs (loop2): 1 truncate cleaned up [ 182.331295][ T9340] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 182.641549][ T9334] loop5: detected capacity change from 0 to 32768 [ 182.770416][ T9334] jfs_lookup: dtSearch returned -5 [ 182.920543][ T9378] loop7: detected capacity change from 0 to 256 [ 182.974876][ T9376] loop2: detected capacity change from 0 to 4096 [ 183.039067][ T9376] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 183.111544][ T9376] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 183.153435][ T9376] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 183.186873][ T9390] xt_HMARK: spi-set and port-set can't be combined [ 183.200152][ T9376] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 183.285269][ T9376] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 183.347481][ T9376] ntfs: volume version 3.1. [ 183.380602][ T9376] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 183.419682][ T9376] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 183.454155][ T9376] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 183.476419][ T9376] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 183.501275][ T9408] device wlan0 entered promiscuous mode [ 183.581793][ T9407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.605234][ T1107] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 183.910813][ T9428] loop2: detected capacity change from 0 to 1024 [ 183.985278][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.005095][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.026014][ T6650] hfsplus: b-tree write err: -5, ino 4 [ 184.028715][ T1107] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 184.052513][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.085938][ T1107] usb 5-1: config 0 descriptor?? [ 184.108628][ T9434] loop7: detected capacity change from 0 to 512 [ 184.135193][ T9038] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 184.147033][ T9434] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 184.287872][ T9443] loop6: detected capacity change from 0 to 16 [ 184.365815][ T9443] erofs: (device loop6): mounted with root inode @ nid 36. [ 184.381578][ T9443] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 184.405439][ T9038] usb 6-1: Using ep0 maxpacket: 16 [ 184.430607][ T9443] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 184.565303][ T9038] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.570313][ T1107] hid (null): invalid report_count 480642924 [ 184.580949][ T9038] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.584513][ T1107] hid-u2fzero 0003:10C4:8ACF.0016: invalid report_count 480642924 [ 184.609118][ T1107] hid-u2fzero 0003:10C4:8ACF.0016: item 0 4 1 9 parsing failed [ 184.619709][ T1107] hid-u2fzero: probe of 0003:10C4:8ACF.0016 failed with error -22 [ 184.716390][ T9456] loop6: detected capacity change from 0 to 512 [ 184.780247][ T9038] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.794406][ T9038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.808380][ T9038] usb 6-1: Product: syz [ 184.813505][ T9038] usb 6-1: Manufacturer: syz [ 184.818179][ T1107] usb 5-1: USB disconnect, device number 15 [ 184.836252][ T9038] usb 6-1: SerialNumber: syz [ 184.852473][ T9456] EXT4-fs (loop6): 1 orphan inode deleted [ 184.859768][ T9456] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,noquota,init_itable,dax=never,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 184.886250][ T9456] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.235249][ T9038] usb 6-1: 0:2 : does not exist [ 185.262836][ T9038] usb 6-1: USB disconnect, device number 9 [ 185.453189][ T9481] loop6: detected capacity change from 0 to 32768 [ 185.508317][ T4544] udevd[4544]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.556969][ T9481] XFS (loop6): Mounting V5 Filesystem [ 185.586152][ T9034] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 185.586884][ T9481] XFS (loop6): Ending clean mount [ 185.601528][ T9481] XFS (loop6): Quotacheck needed: Please wait. [ 185.650975][ T9481] XFS (loop6): Quotacheck: Done. [ 185.681733][ T9495] netlink: 'syz.4.1763': attribute type 5 has an invalid length. [ 185.862637][ T9034] usb 8-1: Using ep0 maxpacket: 16 [ 185.915393][ T9508] loop5: detected capacity change from 0 to 4096 [ 185.957001][ T9508] __ntfs_warning: 7 callbacks suppressed [ 185.957018][ T9508] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 185.999204][ T9512] autofs4:pid:9512:autofs_fill_super: called with bogus options [ 186.015454][ T9034] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.035996][ T9034] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 186.072644][ T9034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.096398][ T9508] ntfs: volume version 3.1. [ 186.106486][ T9034] usb 8-1: config 0 descriptor?? [ 186.114192][ T9514] loop4: detected capacity change from 0 to 1024 [ 186.163464][ T9508] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 186.182240][ T9508] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 186.186094][ T9514] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.237820][ T9514] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #11: comm syz.4.1760: directory missing '..' [ 186.476518][ T9524] loop5: detected capacity change from 0 to 128 [ 186.562895][ T9520] loop4: detected capacity change from 0 to 32768 [ 186.581558][ T9034] kye 0003:0458:5011.0017: hidraw0: USB HID v0.0b Device [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 186.593599][ T9524] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.609176][ T9034] kye 0003:0458:5011.0017: tablet-enabling feature report not found [ 186.613903][ T9524] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.618095][ T9034] kye 0003:0458:5011.0017: tablet enabling failed [ 186.681424][ T9520] XFS (loop4): Mounting V5 Filesystem [ 186.694935][ T9524] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 186.842363][ T9034] usb 8-1: USB disconnect, device number 3 [ 186.921872][ T9520] XFS (loop4): Ending clean mount [ 186.941239][ T9520] XFS (loop4): Quotacheck needed: Please wait. [ 186.955974][ T5902] XFS (loop6): Unmounting Filesystem [ 187.063858][ T9544] loop5: detected capacity change from 0 to 256 [ 187.067241][ T9520] XFS (loop4): Quotacheck: Done. [ 187.141172][ T4195] XFS (loop4): Unmounting Filesystem [ 187.200703][ T9544] FAT-fs (loop5): Directory bread(block 64) failed [ 187.236609][ T9544] FAT-fs (loop5): Directory bread(block 65) failed [ 187.260971][ T9544] FAT-fs (loop5): Directory bread(block 66) failed [ 187.271683][ T9544] FAT-fs (loop5): Directory bread(block 67) failed [ 187.293399][ T9544] FAT-fs (loop5): Directory bread(block 68) failed [ 187.300329][ T9544] FAT-fs (loop5): Directory bread(block 69) failed [ 187.333507][ T9544] FAT-fs (loop5): Directory bread(block 70) failed [ 187.375834][ T9544] FAT-fs (loop5): Directory bread(block 71) failed [ 187.391095][ T9544] FAT-fs (loop5): Directory bread(block 72) failed [ 187.427539][ T9544] FAT-fs (loop5): Directory bread(block 73) failed [ 187.680937][ T9552] loop7: detected capacity change from 0 to 4096 [ 187.840172][ T9567] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.933431][ T9571] loop2: detected capacity change from 0 to 2048 [ 188.011777][ T9579] loop5: detected capacity change from 0 to 256 [ 188.048572][ T9583] 9pnet: p9_fd_create_unix (9583): problem connecting socket: éq‰Y’3aK: -111 [ 188.091998][ T9585] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.123865][ T9571] NILFS error (device loop2): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 188.160094][ T9579] FAT-fs (loop5): Directory bread(block 64) failed [ 188.161117][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 188.174591][ T9579] FAT-fs (loop5): Directory bread(block 65) failed [ 188.216095][ T9579] FAT-fs (loop5): Directory bread(block 66) failed [ 188.227866][ T9579] FAT-fs (loop5): Directory bread(block 67) failed [ 188.230653][ T9571] Remounting filesystem read-only [ 188.254866][ T9579] FAT-fs (loop5): Directory bread(block 68) failed [ 188.275142][ T9579] FAT-fs (loop5): Directory bread(block 69) failed [ 188.281771][ T9579] FAT-fs (loop5): Directory bread(block 70) failed [ 188.325066][ T9579] FAT-fs (loop5): Directory bread(block 71) failed [ 188.374356][ T9579] FAT-fs (loop5): Directory bread(block 72) failed [ 188.401785][ T4184] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 188.427690][ T9579] FAT-fs (loop5): Directory bread(block 73) failed [ 188.714909][ T9600] loop2: detected capacity change from 0 to 4096 [ 188.850889][ T9600] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 189.036933][ T4184] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 189.038442][ T9589] loop7: detected capacity change from 0 to 32768 [ 189.049844][ T4184] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 189.073593][ T4184] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 189.085141][ T5367] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 189.112680][ T9589] [ 189.112680][ T9589] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.112680][ T9589] [ 189.134348][ T9589] ERROR: (device loop7): diWrite: ixpxd invalid [ 189.134348][ T9589] [ 189.171534][ T9589] ERROR: (device loop7): txCommit: [ 189.171534][ T9589] [ 189.192850][ T9621] ERROR: (device loop7): diWrite: ixpxd invalid [ 189.192850][ T9621] [ 189.209144][ T9621] ERROR: (device loop7): txCommit: [ 189.209144][ T9621] [ 189.277818][ T6526] [ 189.277818][ T6526] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.277818][ T6526] [ 189.315157][ T6526] [ 189.315157][ T6526] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.315157][ T6526] [ 189.358041][ T5367] usb 6-1: Using ep0 maxpacket: 8 [ 189.515313][ T5367] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.564915][ T5367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.578684][ T5367] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 189.598177][ T5367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.622901][ T5367] usb 6-1: config 0 descriptor?? [ 189.894465][ T9641] loop7: detected capacity change from 0 to 32768 [ 189.901094][ T9038] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 189.987615][ T9658] loop4: detected capacity change from 0 to 512 [ 190.022899][ T9658] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.080936][ T9658] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1820: invalid indirect mapped block 4294967295 (level 1) [ 190.101402][ T9658] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1820: invalid indirect mapped block 4294967295 (level 1) [ 190.109028][ T5367] uclogic 0003:5543:0042.0018: unbalanced collection at end of report description [ 190.125886][ T5367] uclogic 0003:5543:0042.0018: parse failed [ 190.130702][ T9658] EXT4-fs (loop4): 2 truncates cleaned up [ 190.132039][ T5367] uclogic: probe of 0003:5543:0042.0018 failed with error -22 [ 190.139474][ T9658] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000009e81,init_itable=0x0000000000000025,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 190.177603][ T9658] EXT4-fs warning (device loop4): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 190.215263][ T9038] usb 7-1: Using ep0 maxpacket: 16 [ 190.323969][ T5367] usb 6-1: USB disconnect, device number 10 [ 190.355464][ T9038] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.383537][ T9038] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.394412][ T9038] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 190.404888][ T9038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.421000][ T9038] usb 7-1: config 0 descriptor?? [ 190.583724][ T9674] loop4: detected capacity change from 0 to 512 [ 190.620353][ T9674] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.759045][ T9680] loop4: detected capacity change from 0 to 256 [ 190.815239][ T9036] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 190.864661][ T9680] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 190.952396][ T9038] ntrig 0003:1B96:0008.0019: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.6-1/input0 [ 190.959960][ T9680] exFAT-fs (loop4): hint_cluster is invalid (17) [ 191.098570][ T9036] usb 8-1: Using ep0 maxpacket: 16 [ 191.160824][ T9038] usb 7-1: USB disconnect, device number 9 [ 191.225387][ T9036] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.247263][ T9697] loop4: detected capacity change from 0 to 4096 [ 191.255128][ T9036] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.285204][ T9036] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.310286][ T9698] fido_id[9698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 191.338916][ T9036] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.353846][ T9702] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.364884][ T9036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.422849][ T9036] usb 8-1: config 0 descriptor?? [ 191.709697][ T9722] loop4: detected capacity change from 0 to 512 [ 191.754935][ T9724] wireguard: wg0: Could not create IPv4 socket [ 191.811588][ T9722] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1848: inode #1: comm syz.4.1848: iget: illegal inode # [ 191.865580][ T9722] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1848: error while reading EA inode 1 err=-117 [ 191.903930][ T9722] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1848: inode #1: comm syz.4.1848: iget: illegal inode # [ 191.927023][ T9036] microsoft 0003:045E:07DA.001A: report is too long [ 191.933714][ T9036] microsoft 0003:045E:07DA.001A: item 0 4 0 8 parsing failed [ 191.955507][ T9036] microsoft 0003:045E:07DA.001A: parse failed [ 191.959041][ T9722] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1848: error while reading EA inode 1 err=-117 [ 191.961654][ T9036] microsoft: probe of 0003:045E:07DA.001A failed with error -22 [ 192.044600][ T9731] loop6: detected capacity change from 0 to 64 [ 192.049948][ T9722] EXT4-fs (loop4): 1 orphan inode deleted [ 192.058029][ T9722] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 192.136574][ T9720] loop5: detected capacity change from 0 to 40427 [ 192.147378][ T5476] usb 8-1: USB disconnect, device number 4 [ 192.184519][ T9720] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.336829][ T9720] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 192.388684][ T9720] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 192.581145][ T5778] attempt to access beyond end of device [ 192.581145][ T5778] loop5: rw=2049, want=45104, limit=40427 [ 192.784250][ T9757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.837879][ T9761] loop7: detected capacity change from 0 to 1024 [ 192.920860][ T9761] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #3: block 2: comm syz.7.1866: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.055405][ T9761] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 193.113473][ T9761] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #3: block 48: comm syz.7.1866: lblock 0 mapped to illegal pblock 48 (length 1) [ 193.181671][ T9761] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 193.208834][ T9761] EXT4-fs error (device loop7): ext4_acquire_dquot:6209: comm syz.7.1866: Failed to acquire dquot type 0 [ 193.241404][ T9761] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 193.281289][ T9761] EXT4-fs error (device loop7): ext4_evict_inode:282: inode #11: comm syz.7.1866: mark_inode_dirty error [ 193.318086][ T9761] EXT4-fs warning (device loop7): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 193.360115][ T9761] EXT4-fs (loop7): 1 orphan inode deleted [ 193.385290][ T151] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.405330][ T9761] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 193.416625][ T9777] QAT: Invalid ioctl 21531 [ 193.462313][ T151] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 193.495056][ T151] EXT4-fs error (device loop7): ext4_release_dquot:6245: comm kworker/u4:2: Failed to release dquot type 0 [ 193.510519][ T9745] loop4: detected capacity change from 0 to 32768 [ 193.535261][ T9780] loop5: detected capacity change from 0 to 512 [ 193.574640][ T9761] EXT4-fs (loop7): Ignoring removed orlov option [ 193.619984][ T9761] EXT4-fs (loop7): can't enable nombcache during remount [ 193.659736][ T9764] loop6: detected capacity change from 0 to 32768 [ 193.679083][ T9780] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1874: invalid indirect mapped block 10 (level 1) [ 193.723328][ T6526] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 193.742369][ T9745] XFS (loop4): Mounting V5 Filesystem [ 193.756525][ T6526] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 193.781507][ T6526] EXT4-fs error (device loop7): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 193.826514][ T9764] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 193.875167][ T9780] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1874: invalid indirect mapped block 8 (level 1) [ 193.899256][ T9801] loop2: detected capacity change from 0 to 8192 [ 193.995889][ T9745] XFS (loop4): Ending clean mount [ 194.007287][ T5902] ocfs2: Unmounting device (7,6) on (node local) [ 194.067619][ T9780] EXT4-fs (loop5): 1 truncate cleaned up [ 194.073973][ T9801] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 194.084074][ T4195] XFS (loop4): Unmounting Filesystem [ 194.086734][ T9805] loop7: detected capacity change from 0 to 256 [ 194.131821][ T9801] REISERFS (device loop2): using ordered data mode [ 194.153223][ T9780] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.184757][ T26] audit: type=1800 audit(1768818753.673:15): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1878" name="file1" dev="loop7" ino=1048742 res=0 errno=0 [ 194.190577][ T9801] reiserfs: using flush barriers [ 194.253753][ T9801] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.259202][ T9802] [U] ¦ [ 194.274872][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.282698][ T9805] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 194.282755][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.286510][ T9801] REISERFS (device loop2): checking transaction log (loop2) [ 194.352964][ T9801] REISERFS (device loop2): Using r5 hash to sort names [ 194.360675][ T9801] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 194.385540][ T9801] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 194.477589][ T9801] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 194.523177][ T9801] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 194.603689][ T9812] loop7: detected capacity change from 0 to 1024 [ 194.603861][ T9801] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 194.741274][ T9801] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 194.817224][ T9812] hfsplus: small file entry [ 194.904823][ T151] hfsplus: b-tree write err: -5, ino 4 [ 194.961853][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 194.975457][ T9824] device gretap0 entered promiscuous mode [ 195.075139][ T5478] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 195.124677][ T9832] loop4: detected capacity change from 0 to 65 [ 195.182251][ T9836] netlink: 'syz.7.1896': attribute type 5 has an invalid length. [ 195.210316][ T9832] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 195.386257][ T1107] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 195.446418][ T5478] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 195.473483][ T9842] loop4: detected capacity change from 0 to 8192 [ 195.481821][ T5478] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.497697][ T9842] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 195.508201][ T9842] REISERFS (device loop4): using ordered data mode [ 195.516491][ T9842] reiserfs: using flush barriers [ 195.519363][ T5478] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.532424][ T9842] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.569883][ T9842] REISERFS (device loop4): checking transaction log (loop4) [ 195.592493][ T9847] wireguard: wg0: Could not create IPv4 socket [ 195.609851][ T5478] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 195.665876][ T9834] loop2: detected capacity change from 0 to 32768 [ 195.675415][ T1107] usb 6-1: Using ep0 maxpacket: 16 [ 195.686482][ T5478] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 195.688335][ T9842] REISERFS (device loop4): Using r5 hash to sort names [ 195.703112][ T9842] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 195.740782][ T5478] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.747801][ T9834] XFS (loop2): Mounting V5 Filesystem [ 195.795242][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.840895][ T5478] usb 7-1: config 0 descriptor?? [ 195.849426][ T9861] loop7: detected capacity change from 0 to 256 [ 195.928344][ T1107] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 195.963809][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.010094][ T1107] usb 6-1: config 0 descriptor?? [ 196.019401][ T9834] XFS (loop2): Ending clean mount [ 196.101750][ T4184] XFS (loop2): Unmounting Filesystem [ 196.228080][ T9871] loop7: detected capacity change from 0 to 1024 [ 196.243824][ T9871] EXT4-fs (loop7): inline encryption not supported [ 196.270380][ T9871] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.346221][ T9871] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 196.397558][ T9871] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 196.417059][ T5478] holtek_kbd 0003:04D9:A055.001B: item fetching failed at offset 0/1 [ 196.426046][ T5478] holtek_kbd: probe of 0003:04D9:A055.001B failed with error -22 [ 196.437933][ T9034] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 196.465892][ T9875] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.516774][ T1107] creative-sb0540 0003:041E:3100.001C: unknown main item tag 0x2 [ 196.531731][ T9875] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: writeback. [ 196.535764][ T1107] creative-sb0540 0003:041E:3100.001C: item fetching failed at offset 4/5 [ 196.563738][ T1107] creative-sb0540 0003:041E:3100.001C: parse failed [ 196.570822][ T1107] creative-sb0540: probe of 0003:041E:3100.001C failed with error -22 [ 196.639558][ T1107] usb 7-1: USB disconnect, device number 10 [ 196.699318][ T9884] loop7: detected capacity change from 0 to 128 [ 196.721478][ T5367] usb 6-1: USB disconnect, device number 11 [ 196.722808][ T9884] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 196.747549][ T9034] usb 5-1: Using ep0 maxpacket: 16 [ 196.747586][ T9884] hpfs: filesystem error: improperly stopped [ 196.759616][ T9884] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 196.767792][ T9884] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 196.778363][ T9884] hpfs: You really don't want any checks? You are crazy... [ 196.786565][ T9884] hpfs: hpfs_map_sector(): read error [ 196.792051][ T9884] hpfs: code page support is disabled [ 196.798649][ T9884] hpfs: hpfs_map_4sectors(): unaligned read [ 196.804650][ T9884] hpfs: hpfs_map_4sectors(): unaligned read [ 196.811331][ T9884] hpfs: filesystem error: unable to find root dir [ 196.896705][ T9034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.909408][ T9034] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 196.921022][ T9034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.942242][ T9034] usb 5-1: config 0 descriptor?? [ 196.987332][ T9890] loop7: detected capacity change from 0 to 1024 [ 197.327609][ T9892] loop7: detected capacity change from 0 to 32768 [ 197.400779][ T9892] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.1917 (9892) [ 197.452447][ T9034] hkems 0003:2006:0118.001D: ignoring exceeding usage max [ 197.484726][ T9034] hkems 0003:2006:0118.001D: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 197.502921][ T9034] hkems 0003:2006:0118.001D: no inputs found [ 197.509525][ T9034] hkems 0003:2006:0118.001D: force feedback init failed [ 197.530869][ T9892] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 197.555268][ T9892] BTRFS info (device loop7): turning off barriers [ 197.561738][ T9892] BTRFS info (device loop7): enabling ssd optimizations [ 197.611790][ T9913] loop5: detected capacity change from 0 to 256 [ 197.622284][ T9892] BTRFS info (device loop7): using spread ssd allocation scheme [ 197.660614][ T9892] BTRFS info (device loop7): not using ssd optimizations [ 197.667369][ T9034] usb 5-1: USB disconnect, device number 16 [ 197.692851][ T9892] BTRFS info (device loop7): not using spread ssd allocation scheme [ 197.702967][ T9913] FAT-fs (loop5): Directory bread(block 64) failed [ 197.723873][ T9892] BTRFS info (device loop7): enabling all of the rescue options [ 197.745148][ T9913] FAT-fs (loop5): Directory bread(block 65) failed [ 197.761163][ T9913] FAT-fs (loop5): Directory bread(block 66) failed [ 197.768656][ T9892] BTRFS info (device loop7): ignoring data csums [ 197.775310][ T9913] FAT-fs (loop5): Directory bread(block 67) failed [ 197.779348][ T9892] BTRFS info (device loop7): ignoring bad roots [ 197.790464][ T9892] BTRFS info (device loop7): disabling log replay at mount time [ 197.793338][ T9913] FAT-fs (loop5): Directory bread(block 68) failed [ 197.799233][ T9892] BTRFS info (device loop7): force zlib compression, level 3 [ 197.817583][ T9913] FAT-fs (loop5): Directory bread(block 69) failed [ 197.824375][ T9892] BTRFS info (device loop7): enabling ssd optimizations [ 197.835648][ T9913] FAT-fs (loop5): Directory bread(block 70) failed [ 197.842219][ T9913] FAT-fs (loop5): Directory bread(block 71) failed [ 197.861452][ T9892] BTRFS info (device loop7): using spread ssd allocation scheme [ 197.869493][ T9913] FAT-fs (loop5): Directory bread(block 72) failed [ 197.890916][ T9892] BTRFS info (device loop7): using free space tree [ 197.891025][ T9913] FAT-fs (loop5): Directory bread(block 73) failed [ 197.898340][ T9892] BTRFS info (device loop7): has skinny extents [ 198.173542][ T9919] loop6: detected capacity change from 0 to 32768 [ 198.390413][ T9954] loop5: detected capacity change from 0 to 1764 [ 198.644436][ T9919] XFS (loop6): Mounting V5 Filesystem [ 198.732423][ T9919] XFS (loop6): Ending clean mount [ 198.799776][ T9958] loop7: detected capacity change from 0 to 8192 [ 198.822974][ T9965] loop5: detected capacity change from 0 to 2048 [ 198.840365][ T5902] XFS (loop6): Unmounting Filesystem [ 198.861819][ T9958] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 198.875216][ T9958] REISERFS (device loop7): using ordered data mode [ 198.881782][ T9958] reiserfs: using flush barriers [ 198.930480][ T9969] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.954830][ T9958] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.025663][ T9958] REISERFS (device loop7): checking transaction log (loop7) [ 199.108171][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 199.248994][ T9958] REISERFS (device loop7): Using tea hash to sort names [ 199.279328][ T9958] REISERFS warning (device loop7): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 199.292408][ T9958] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 199.294711][ T9980] loop5: detected capacity change from 0 to 64 [ 199.416738][ T9980] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 199.523535][ T9983] loop4: detected capacity change from 0 to 512 [ 199.782246][ T9983] attempt to access beyond end of device [ 199.782246][ T9983] loop4: rw=2051, want=28736, limit=512 [ 199.864417][ T9989] FAT-fs (loop4): FAT read failed (blocknr 128) [ 200.392919][T10019] loop5: detected capacity change from 0 to 1024 [ 200.428787][T10019] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 200.438660][T10019] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 200.449742][T10019] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: inode #32: comm syz.5.1962: iget: special inode unallocated [ 200.463054][T10019] EXT4-fs (loop5): no journal found [ 200.468307][T10019] EXT4-fs (loop5): can't get journal size [ 200.517307][T10019] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 200.682473][T10010] loop4: detected capacity change from 0 to 40427 [ 200.782249][T10010] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 200.818273][T10010] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 200.866709][T10010] F2FS-fs (loop4): invalid crc value [ 200.893508][T10026] loop2: detected capacity change from 0 to 32768 [ 200.949066][T10010] F2FS-fs (loop4): Found nat_bits in checkpoint [ 200.960507][T10026] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 200.968848][T10026] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 200.983094][T10026] gfs2: fsid=syz:syz.s: journal 0 mapped with 10 extents in 0ms [ 200.997076][T10026] attempt to access beyond end of device [ 200.997076][T10026] loop2: rw=0, want=8521215115264, limit=32768 [ 201.008972][T10026] attempt to access beyond end of device [ 201.008972][T10026] loop2: rw=0, want=36020000925943856, limit=32768 [ 201.067798][T10026] gfs2: fsid=syz:syz.s: Error parsing journal for spectator mount. [ 201.220673][T10010] F2FS-fs (loop4): Start checkpoint disabled! [ 201.280520][T10010] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 201.283710][T10040] loop5: detected capacity change from 0 to 64 [ 201.345165][ T5478] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 201.615304][ T5478] usb 7-1: Using ep0 maxpacket: 8 [ 201.655403][ T5478] usb 7-1: too many configurations: 16, using maximum allowed: 8 [ 201.808721][T10037] loop2: detected capacity change from 0 to 32768 [ 201.903971][T10059] loop5: detected capacity change from 0 to 4096 [ 201.906805][T10037] [ 201.906805][T10037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.906805][T10037] [ 201.962301][T10037] ERROR: (device loop2): ea_get: invalid ea.flag [ 201.962301][T10037] [ 201.982661][T10037] ERROR: (device loop2): remounting filesystem as read-only [ 202.000828][T10037] ERROR: (device loop2): ea_get: invalid ea.flag [ 202.000828][T10037] [ 202.061971][T10059] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 202.084745][T10067] syz.7.1993 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 202.171836][T10069] loop2: detected capacity change from 0 to 1024 [ 202.281978][T10069] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.1983: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.312594][T10069] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 202.363869][T10073] loop7: detected capacity change from 0 to 4096 [ 202.371711][T10069] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.1983: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.387667][T10069] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 202.396608][T10069] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.1983: Failed to acquire dquot type 0 [ 202.408746][T10069] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 202.419119][T10069] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.1983: mark_inode_dirty error [ 202.431854][T10069] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 202.442358][T10069] EXT4-fs (loop2): 1 orphan inode deleted [ 202.448292][T10069] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 202.472330][ T5478] usb 7-1: New USB device found, idVendor=0b48, idProduct=3006, bcdDevice=4f.64 [ 202.482700][ T5478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.518691][T10073] ntfs: volume version 3.1. [ 202.523034][ T5478] usb 7-1: Product: syz [ 202.557522][ T5478] usb 7-1: Manufacturer: syz [ 202.566290][ T5478] usb 7-1: SerialNumber: syz [ 202.574247][ T144] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.598880][ T5478] usb 7-1: config 0 descriptor?? [ 202.610903][ T144] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 202.621533][ T144] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 0 [ 202.644036][T10069] EXT4-fs (loop2): Ignoring removed orlov option [ 202.652905][ T5478] dvb-usb: found a 'Technotrend TT-connect S-2400' in warm state. [ 202.688995][T10079] device team_slave_0 entered promiscuous mode [ 202.695760][T10079] device team_slave_1 entered promiscuous mode [ 202.702939][T10069] EXT4-fs (loop2): can't enable nombcache during remount [ 202.716179][ T5478] dvb-usb: bulk message failed: -22 (4/0) [ 202.722562][ T5478] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 202.730681][T10079] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.764699][ T4184] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 202.795112][ T5478] dvb-usb: bulk message failed: -22 (5/0) [ 202.810766][ T5478] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 202.821857][ T4184] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 202.853407][ T4184] EXT4-fs error (device loop2): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 202.898066][ T5478] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.908262][T10030] dvb-usb: bulk message failed: -22 (7/0) [ 202.914512][T10030] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 202.952528][T10030] ttusb2: i2c transfer failed. [ 202.958029][ T5478] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400) [ 202.967606][ T5478] usb 7-1: media controller created [ 203.051950][ T5478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.119592][ T5478] usb 7-1: selecting invalid altsetting 3 [ 203.145152][ T5478] ttusb2: set interface to alts=3 failed [ 203.148068][T10095] loop2: detected capacity change from 0 to 64 [ 203.210021][ T5478] DVB: Unable to find symbol tda10086_attach() [ 203.216678][ T5478] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400' [ 203.244208][T10100] loop5: detected capacity change from 0 to 2048 [ 203.275768][ T5478] dvb-usb: bulk message failed: -22 (4/0) [ 203.281539][ T5478] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.298122][T10095] attempt to access beyond end of device [ 203.298122][T10095] loop2: rw=0, want=1026, limit=64 [ 203.311315][T10100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.368874][ T5478] dvb-usb: bulk message failed: -22 (5/0) [ 203.374647][ T5478] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.402260][T10095] Buffer I/O error on dev loop2, logical block 512, async page read [ 203.426938][T10095] attempt to access beyond end of device [ 203.426938][T10095] loop2: rw=0, want=113154, limit=64 [ 203.438662][ T5478] dvb-usb: Technotrend TT-connect S-2400 successfully initialized and connected. [ 203.468030][T10095] Buffer I/O error on dev loop2, logical block 56576, async page read [ 203.484775][ T5478] usb 7-1: USB disconnect, device number 11 [ 203.565889][ T5478] dvb-usb: Technotrend TT-connect S-2400 successfully deinitialized and disconnected. [ 203.765313][T10081] loop4: detected capacity change from 0 to 40427 [ 203.867512][T10081] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.962184][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2009'. [ 203.993285][T10081] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 204.058127][T10081] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 204.118987][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2010'. [ 204.317467][ T4195] attempt to access beyond end of device [ 204.317467][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 204.371860][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 204.519812][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 204.539288][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2018'. [ 204.575686][T10148] netlink: 'syz.7.2018': attribute type 18 has an invalid length. [ 205.222015][T10126] loop2: detected capacity change from 0 to 32768 [ 205.288440][T10180] loop5: detected capacity change from 0 to 1024 [ 205.310049][T10126] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 205.326974][T10126] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 205.352257][T10126] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 205.367340][T10180] EXT4-fs (loop5): inline encryption not supported [ 205.405270][T10180] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.535587][T10180] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 205.579771][T10126] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 205.598877][T10180] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 205.666108][T10191] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.684453][T10192] loop7: detected capacity change from 0 to 256 [ 205.826430][T10192] FAT-fs (loop7): Directory bread(block 64) failed [ 205.833101][T10191] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback. [ 205.862275][T10192] FAT-fs (loop7): Directory bread(block 65) failed [ 205.880135][T10192] FAT-fs (loop7): Directory bread(block 66) failed [ 205.941236][T10192] FAT-fs (loop7): Directory bread(block 67) failed [ 205.984388][T10192] FAT-fs (loop7): Directory bread(block 68) failed [ 206.004583][T10192] FAT-fs (loop7): Directory bread(block 69) failed [ 206.056327][T10192] FAT-fs (loop7): Directory bread(block 70) failed [ 206.063432][T10192] FAT-fs (loop7): Directory bread(block 71) failed [ 206.111951][T10192] FAT-fs (loop7): Directory bread(block 72) failed [ 206.145123][T10192] FAT-fs (loop7): Directory bread(block 73) failed [ 206.355162][T10209] loop2: detected capacity change from 0 to 512 [ 206.440845][T10181] loop4: detected capacity change from 0 to 40427 [ 206.551778][T10181] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.576755][T10209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 206.617390][T10209] System zones: 1-12 [ 206.651564][T10209] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.2046: Directory hole found for htree index block 0 [ 206.745322][ T9034] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 206.757045][T10181] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 206.780953][T10209] EXT4-fs (loop2): Remounting filesystem read-only [ 206.798492][T10209] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 206.806274][T10181] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.835513][T10232] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 206.841980][T10232] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 206.862604][T10209] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.2046: Directory hole found for htree index block 0 [ 206.879799][T10235] loop7: detected capacity change from 0 to 64 [ 206.910559][ T4195] attempt to access beyond end of device [ 206.910559][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 206.910645][T10232] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 206.935068][T10209] EXT4-fs (loop2): Remounting filesystem read-only [ 206.939878][T10232] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 206.941647][T10209] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 206.958464][T10232] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 207.005094][T10209] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 207.025271][T10232] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 207.039638][T10232] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 207.143336][T10209] EXT4-fs (loop2): Ignoring removed orlov option [ 207.160208][ T9034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.172369][T10209] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 207.204001][ T9034] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 207.224794][T10209] EXT4-fs (loop2): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,sb=0x00000000000050cf,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 207.239048][ T9034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.266764][ T9034] usb 7-1: config 0 descriptor?? [ 207.401966][T10243] loop5: detected capacity change from 0 to 136 [ 207.473602][T10245] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.483788][T10245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.491853][T10245] IPv6: NLM_F_CREATE should be set when creating new route [ 207.567606][T10243] Symlink component flag not implemented [ 207.638870][T10251] program syz.2.2063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.757113][ T9034] zeroplus 0003:0C12:0005.001E: unknown main item tag 0x5 [ 207.777171][ T9034] zeroplus 0003:0C12:0005.001E: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.6-1/input0 [ 207.802966][ T9034] zeroplus 0003:0C12:0005.001E: no inputs found [ 207.913431][T10264] loop5: detected capacity change from 0 to 4096 [ 207.969146][ T5367] usb 7-1: USB disconnect, device number 12 [ 207.987276][T10264] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 208.100788][T10265] fido_id[10265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 208.153995][ T9] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 208.172540][ T5778] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 208.200247][ T5778] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 208.220388][ T5778] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 208.250845][ T9] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 208.265355][T10273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.272820][ T5778] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 208.696963][T10283] loop7: detected capacity change from 0 to 40427 [ 208.717125][T10289] loop4: detected capacity change from 0 to 256 [ 208.759957][T10283] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 208.767309][T10283] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 208.780260][T10283] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x2 [ 208.805355][T10283] F2FS-fs (loop7): invalid crc value [ 208.823541][T10289] exfat: Deprecated parameter 'utf8' [ 208.825744][T10283] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 208.841551][T10289] exfat: Deprecated parameter 'utf8' [ 208.879750][T10283] F2FS-fs (loop7): recover fsync data on readonly fs [ 208.886890][T10289] exfat: Deprecated parameter 'utf8' [ 208.891687][T10283] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 208.899487][T10283] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 208.924645][T10289] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 209.229684][T10303] tipc: Started in network mode [ 209.263494][T10303] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 209.310432][T10303] tipc: Enabled bearer , priority 4 [ 209.380772][T10311] device team_slave_0 entered promiscuous mode [ 209.387050][T10311] device team_slave_1 entered promiscuous mode [ 209.430476][T10311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.917126][T10342] loop6: detected capacity change from 0 to 16 [ 209.975600][T10342] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 209.995307][T10318] loop5: detected capacity change from 0 to 32768 [ 210.073325][T10318] [ 210.073325][T10318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.073325][T10318] [ 210.113099][T10318] ERROR: (device loop5): ea_get: invalid ea.flag [ 210.113099][T10318] [ 210.132096][T10318] ERROR: (device loop5): remounting filesystem as read-only [ 210.144484][T10332] loop7: detected capacity change from 0 to 32768 [ 210.154415][T10318] ERROR: (device loop5): ea_get: invalid ea.flag [ 210.154415][T10318] [ 210.279963][T10354] device ip6_vti0 entered promiscuous mode [ 210.290842][T10332] XFS (loop7): Mounting V5 Filesystem [ 210.337947][ T5367] tipc: Node number set to 8432298 [ 210.456943][T10332] XFS (loop7): Ending clean mount [ 210.471209][T10332] XFS (loop7): Quotacheck needed: Please wait. [ 210.496198][T10364] loop4: detected capacity change from 0 to 64 [ 210.537600][ T1107] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 210.613339][T10332] XFS (loop7): Quotacheck: Done. [ 210.668596][ T6526] XFS (loop7): Unmounting Filesystem [ 210.785214][ T1107] usb 7-1: Using ep0 maxpacket: 8 [ 210.863235][T10370] loop4: detected capacity change from 0 to 8 [ 210.905223][ T1107] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.919559][ T1107] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 210.929753][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.956840][T10370] SQUASHFS error: zlib decompression failed, data probably corrupt [ 210.968703][ T1107] usb 7-1: config 0 descriptor?? [ 210.973941][T10370] SQUASHFS error: Failed to read block 0x9b: -5 [ 210.980550][T10370] SQUASHFS error: Unable to read metadata cache entry [99] [ 210.988695][T10370] SQUASHFS error: Unable to read inode 0x127 [ 211.007373][ T1107] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 211.061731][T10366] loop5: detected capacity change from 0 to 32768 [ 211.185432][T10366] XFS (loop5): Mounting V5 Filesystem [ 211.300372][T10366] XFS (loop5): Ending clean mount [ 211.311713][T10366] XFS (loop5): Quotacheck needed: Please wait. [ 211.353580][ T26] audit: type=1800 audit(1768818770.843:16): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2113" name="/newroot/468/bus/#2449//deleted" dev="tmpfs" ino=2449 res=0 errno=0 [ 211.376974][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.406219][T10366] XFS (loop5): Quotacheck: Done. [ 211.500517][ T5778] XFS (loop5): Unmounting Filesystem [ 211.594255][T10397] loop7: detected capacity change from 0 to 1024 [ 211.659268][ T1107] gspca_vc032x: reg_r err -71 [ 211.664505][ T1107] vc032x: probe of 7-1:0.0 failed with error -71 [ 211.673785][ T1107] usb 7-1: USB disconnect, device number 13 [ 211.773439][ T151] hfsplus: b-tree write err: -5, ino 4 [ 211.871319][T10402] loop7: detected capacity change from 0 to 1024 [ 211.930242][T10402] hfsplus: bad catalog entry type [ 211.971426][ T6650] hfsplus: b-tree write err: -5, ino 4 [ 212.253464][T10427] loop7: detected capacity change from 0 to 8 [ 212.272970][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2134'. [ 212.282567][T10427] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 212.300226][ T1107] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.340707][ T4544] udevd[4544]: incorrect cramfs checksum on /dev/loop7 [ 212.352414][T10427] cramfs: Error -3 while decompressing! [ 212.363938][T10427] cramfs: ffffffff963ea038(16)->ffff888057609000(4096) [ 212.378292][ T4544] udevd[4544]: incorrect cramfs checksum on /dev/loop7 [ 212.391679][ T9034] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 212.399226][T10433] netlink: 64691 bytes leftover after parsing attributes in process `syz.6.2136'. [ 212.400204][T10427] cramfs: Error -3 while decompressing! [ 212.420669][T10427] cramfs: ffffffff963ea038(16)->ffff888057609000(4096) [ 212.431454][ T26] audit: type=1800 audit(1768818771.923:17): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2133" name="file0" dev="loop7" ino=244 res=0 errno=0 [ 212.675605][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.705223][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.729786][ T1107] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 212.747042][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.779134][ T1107] usb 5-1: config 0 descriptor?? [ 212.835437][ T9034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.857571][ T9034] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 212.889685][ T9034] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 212.919467][ T9034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.938231][ T9034] usb 6-1: config 0 descriptor?? [ 213.061749][T10468] comedi: No check for data length of config insn id 131 is implemented [ 213.082283][T10471] loop2: detected capacity change from 0 to 512 [ 213.091950][T10468] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 213.118018][T10468] comedi: Assuming n=15 is correct [ 213.152915][T10471] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 213.173387][T10474] loop7: detected capacity change from 0 to 1024 [ 213.322259][T10481] loop2: detected capacity change from 0 to 128 [ 213.350981][T10481] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.372741][ T144] hfsplus: b-tree write err: -5, ino 4 [ 213.400639][T10481] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 213.418461][ T9034] kovaplus 0003:1E7D:2D50.0020: item fetching failed at offset 2/5 [ 213.463056][ T9034] kovaplus 0003:1E7D:2D50.0020: parse failed [ 213.475323][ T1107] hid-led: probe of 0003:0FC5:B080.001F failed with error -71 [ 213.498657][ T9034] kovaplus: probe of 0003:1E7D:2D50.0020 failed with error -22 [ 213.516678][ T1107] usb 5-1: USB disconnect, device number 17 [ 213.551854][ T144] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 213.661411][ T9034] usb 6-1: USB disconnect, device number 12 [ 214.104134][T10516] loop2: detected capacity change from 0 to 4096 [ 214.187373][T10516] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 214.290832][T10526] loop6: detected capacity change from 0 to 4096 [ 214.312217][T10516] ntfs3: loop2: failed to convert "c46c" to cp936 [ 214.352253][T10526] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 214.390679][T10526] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 214.459797][T10526] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 214.510906][T10526] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 214.574238][T10526] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 214.630516][T10526] ntfs: volume version 3.1. [ 214.649802][T10526] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 214.697061][T10526] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 214.763144][T10526] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 215.101742][T10566] loop4: detected capacity change from 0 to 1024 [ 215.198607][T10574] loop7: detected capacity change from 0 to 16 [ 215.227262][T10569] loop6: detected capacity change from 0 to 4096 [ 215.276811][ T144] hfsplus: b-tree write err: -5, ino 4 [ 215.299694][T10574] erofs: (device loop7): mounted with root inode @ nid 36. [ 215.349976][T10577] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.380573][T10574] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 215.458984][T10574] attempt to access beyond end of device [ 215.458984][T10574] loop7: rw=0, want=64, limit=16 [ 215.500660][T10569] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 215.513273][T10574] erofs: (device loop7): z_erofs_readpage: failed to read, err [-95] [ 215.813149][T10593] mkiss: ax0: crc mode is auto. [ 215.860664][T10588] loop4: detected capacity change from 0 to 8192 [ 215.910874][T10556] loop5: detected capacity change from 0 to 32768 [ 215.930655][T10588] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 216.005208][T10556] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 216.005208][T10556] [ 216.025177][T10588] REISERFS (device loop4): using ordered data mode [ 216.031774][T10588] reiserfs: using flush barriers [ 216.036497][T10556] non-latin1 character 0x3ff found in JFS file name [ 216.062836][T10588] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.084470][T10556] mount with iocharset=utf8 to access [ 216.131114][T10588] REISERFS (device loop4): checking transaction log (loop4) [ 216.154119][T10588] REISERFS (device loop4): Using r5 hash to sort names [ 216.191811][T10588] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 216.200416][T10582] loop2: detected capacity change from 0 to 32768 [ 216.745561][T10595] loop7: detected capacity change from 0 to 32768 [ 216.759252][T10618] loop5: detected capacity change from 0 to 64 [ 216.814488][T10600] loop6: detected capacity change from 0 to 32768 [ 216.825416][ T5367] Bluetooth: hci3: command 0x0406 tx timeout [ 216.859303][T10600] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2207 (10600) [ 216.893484][T10618] hfs: bad catalog entry type 0 [ 216.950183][T10595] XFS (loop7): Mounting V5 Filesystem [ 217.065180][T10600] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 217.074265][T10600] BTRFS info (device loop6): force clearing of disk cache [ 217.145465][T10600] BTRFS info (device loop6): enabling auto defrag [ 217.191938][T10636] loop4: detected capacity change from 0 to 1024 [ 217.201720][T10595] XFS (loop7): Ending clean mount [ 217.210120][T10600] BTRFS info (device loop6): enabling ssd optimizations [ 217.269737][T10600] BTRFS info (device loop6): max_inline at 0 [ 217.272919][T10636] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 217.325178][T10600] BTRFS info (device loop6): enabling disk space caching [ 217.326580][T10636] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.2217: iget: special inode unallocated [ 217.337631][T10600] BTRFS info (device loop6): disk space caching is enabled [ 217.406269][ T6526] XFS (loop7): Unmounting Filesystem [ 217.446936][T10636] EXT4-fs (loop4): no journal found [ 217.452182][T10636] EXT4-fs (loop4): can't get journal size [ 217.465727][T10600] BTRFS info (device loop6): has skinny extents [ 217.483402][T10647] loop5: detected capacity change from 0 to 512 [ 217.508921][T10636] EXT4-fs (loop4): filesystem is read-only [ 217.514786][T10636] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 217.589662][T10647] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2221: inode has both inline data and extents flags [ 217.658476][T10647] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2221: couldn't read orphan inode 15 (err -117) [ 217.692931][T10647] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 217.891185][T10667] netlink: 'syz.5.2222': attribute type 5 has an invalid length. [ 218.036372][T10600] BTRFS info (device loop6): clearing free space tree [ 218.057239][T10600] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.086797][T10679] loop4: detected capacity change from 0 to 256 [ 218.090975][T10600] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.359052][T10689] loop7: detected capacity change from 0 to 256 [ 218.383726][T10686] loop2: detected capacity change from 0 to 2048 [ 218.385725][T10689] exfat: Deprecated parameter 'utf8' [ 218.511440][T10694] loop4: detected capacity change from 0 to 1024 [ 218.516557][T10689] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 218.549251][T10686] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000002000,. Quota mode: writeback. [ 218.603036][T10686] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.663571][T10686] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2238: bg 0: block 345: padding at end of block bitmap is not set [ 218.683787][T10686] EXT4-fs (loop2): Remounting filesystem read-only [ 218.697478][T10686] EXT4-fs error (device loop2): ext4_xattr_block_set:2207: inode #12: comm syz.2.2238: bad block 0 [ 218.813608][T10694] hfsplus: hfsplus: Invalid key length: 30819 [ 218.826470][T10686] EXT4-fs (loop2): Remounting filesystem read-only [ 219.088691][T10703] loop6: detected capacity change from 0 to 1024 [ 219.201989][ T151] hfsplus: b-tree write err: -5, ino 4 [ 219.297234][T10709] loop7: detected capacity change from 0 to 4096 [ 219.339783][T10709] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 219.341455][T10723] loop4: detected capacity change from 0 to 512 [ 219.414461][T10709] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 219.439917][T10723] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 219.461122][T10723] EXT4-fs (loop4): invalid journal inode [ 219.472970][T10723] EXT4-fs (loop4): can't get journal size [ 219.560595][T10723] EXT4-fs (loop4): 1 truncate cleaned up [ 219.575222][ T6107] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 219.586082][T10723] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 219.622917][T10723] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 1073741833 (only 1 groups) [ 219.965219][ T6107] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 219.984044][ T6107] usb 7-1: config 0 has no interface number 0 [ 220.004315][ T6107] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 220.045108][ T6107] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 220.115229][ T6107] usb 7-1: config 0 interface 255 has no altsetting 0 [ 220.126261][ T6107] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 220.134969][T10755] loop7: detected capacity change from 0 to 4096 [ 220.155078][ T6107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.193158][ T6107] usb 7-1: config 0 descriptor?? [ 220.246186][ T6107] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 220.331023][T10759] loop5: detected capacity change from 0 to 8192 [ 220.418443][T10759] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 220.451186][T10759] REISERFS (device loop5): using ordered data mode [ 220.457960][T10759] reiserfs: using flush barriers [ 220.471336][T10759] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.495654][ T5367] usb 7-1: USB disconnect, device number 14 [ 220.525217][T10765] loop7: detected capacity change from 0 to 128 [ 220.549081][T10759] REISERFS (device loop5): checking transaction log (loop5) [ 220.580647][T10759] REISERFS (device loop5): Using r5 hash to sort names [ 220.599554][T10754] loop2: detected capacity change from 0 to 32768 [ 220.606742][T10759] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 220.630815][T10765] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 220.652637][T10754] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2256 (10754) [ 220.695128][T10765] hpfs: filesystem error: improperly stopped [ 220.701165][T10765] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 220.725489][T10765] hpfs: You really don't want any checks? You are crazy... [ 220.735522][T10765] hpfs: hpfs_map_sector(): read error [ 220.745371][T10765] hpfs: code page support is disabled [ 220.769981][T10765] hpfs: hpfs_map_4sectors(): unaligned read [ 220.785261][T10754] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 220.798259][T10765] hpfs: hpfs_map_4sectors(): unaligned read [ 220.804196][T10765] hpfs: filesystem error: unable to find root dir [ 220.813242][T10754] BTRFS info (device loop2): using free space tree [ 220.836973][T10754] BTRFS info (device loop2): has skinny extents [ 221.060476][T10760] loop4: detected capacity change from 0 to 40427 [ 221.094539][T10783] sp0: Synchronizing with TNC [ 221.114691][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2268'. [ 221.136837][T10760] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 221.144618][T10760] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 221.202304][T10796] loop5: detected capacity change from 0 to 256 [ 221.210409][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2268'. [ 221.227004][T10760] F2FS-fs (loop4): invalid crc value [ 221.263509][T10754] BTRFS info (device loop2): enabling ssd optimizations [ 221.287231][T10760] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.357616][T10754] BTRFS info (device loop2): Snapshot src from another FS [ 221.360429][T10808] loop7: detected capacity change from 0 to 4096 [ 221.420432][T10808] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 221.602200][ T4544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4544) [ 221.614121][T10760] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 221.628628][T10760] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.002220][T10824] loop6: detected capacity change from 0 to 2048 [ 222.061419][ T6526] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 222.110594][ T6526] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 222.130826][T10824] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.140553][ T6526] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 222.203353][T10824] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.298503][T10824] fs-verity (loop6, inode 18): Unknown hash algorithm number: 0 [ 222.711191][T10848] binder: 10844:10848 ioctl c0306201 200000000480 returned -14 [ 222.742186][T10849] loop4: detected capacity change from 0 to 2048 [ 222.747568][T10851] openvswitch: netlink: nsh attribute has 60 unknown bytes. [ 222.760338][T10833] loop7: detected capacity change from 0 to 32768 [ 222.791623][T10851] openvswitch: netlink: Actions may not be safe on all matching packets [ 222.838203][T10857] netlink: 134736 bytes leftover after parsing attributes in process `syz.5.2294'. [ 222.841199][T10833] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2280 (10833) [ 222.881981][T10858] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.942493][T10833] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 222.998572][T10833] BTRFS info (device loop7): turning off barriers [ 223.035430][T10833] BTRFS info (device loop7): setting nodatasum [ 223.066473][T10833] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.084793][T10866] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.2297'. [ 223.126097][T10833] BTRFS info (device loop7): use zstd compression, level 3 [ 223.134687][T10833] BTRFS info (device loop7): using free space tree [ 223.183457][T10833] BTRFS info (device loop7): has skinny extents [ 223.479029][T10904] genirq: Flags mismatch irq 10. 00000000 (das16m1) vs. 00000080 (virtio2) [ 223.562301][T10910] program syz.5.2310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.601096][T10912] loop6: detected capacity change from 0 to 1024 [ 223.776703][T10919] sctp: [Deprecated]: syz.5.2314 (pid 10919) Use of int in maxseg socket option. [ 223.776703][T10919] Use struct sctp_assoc_value instead [ 224.430974][T10921] loop5: detected capacity change from 0 to 32768 [ 224.461598][T10932] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2319'. [ 224.471712][T10932] tipc: Enabling of bearer rejected, failed to enable media [ 224.507188][T10933] loop6: detected capacity change from 0 to 4096 [ 224.551260][T10939] loop7: detected capacity change from 0 to 512 [ 224.586638][T10933] NILFS (loop6): invalid segment: Checksum error in segment payload [ 224.623668][T10933] NILFS (loop6): trying rollback from an earlier position [ 224.642035][T10933] NILFS (loop6): recovery complete [ 224.676763][T10921] XFS (loop5): Mounting V5 Filesystem [ 224.698671][T10939] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 224.735563][T10952] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.764414][T10939] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.801205][T10921] XFS (loop5): Ending clean mount [ 224.838715][T10921] XFS (loop5): Quotacheck needed: Please wait. [ 224.925771][T10921] XFS (loop5): Quotacheck: Done. [ 224.932943][T10921] XFS (loop5): Unmounting Filesystem [ 225.224950][T10966] loop7: detected capacity change from 0 to 1024 [ 225.283614][T10962] loop6: detected capacity change from 0 to 4096 [ 225.358852][T10962] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 225.498163][ T9] hfsplus: b-tree write err: -5, ino 4 [ 225.636453][T10968] loop6: detected capacity change from 0 to 512 [ 225.720738][T10977] loop4: detected capacity change from 0 to 2048 [ 225.737331][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2332'. [ 225.791029][T10968] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.792138][T10977] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.815425][T10968] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.218042][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 226.234100][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 226.254523][T11006] netlink: 'syz.2.2346': attribute type 11 has an invalid length. [ 226.441554][T11017] loop6: detected capacity change from 0 to 128 [ 226.473347][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2352'. [ 226.488793][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2351'. [ 226.547522][T11024] loop7: detected capacity change from 0 to 256 [ 226.643938][T11029] loop2: detected capacity change from 0 to 512 [ 226.654327][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 226.654342][ T26] audit: type=1800 audit(1768818786.153:18): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2364" name="file1" dev="loop7" ino=1048780 res=0 errno=0 [ 226.675162][T11024] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 226.722096][T11029] EXT4-fs (loop2): Ignoring removed oldalloc option [ 226.748466][T11029] EXT4-fs (loop2): Ignoring removed bh option [ 226.761645][T11029] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.2353: corrupted in-inode xattr [ 226.804717][T11029] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2353: couldn't read orphan inode 15 (err -117) [ 226.886043][T11029] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,abort,nombcache,noload,jqfmt=vfsv0,max_batch_time=0x0000000000000001,oldalloc,inode_readahead_blks=0x0000000002000000,bsdgroups,bh,,errors=continue. Quota mode: none. [ 226.900917][T11038] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2358'. [ 226.922754][ T26] audit: type=1800 audit(1768818786.423:19): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2353" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 227.227019][T11056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.360612][T11062] loop2: detected capacity change from 0 to 4096 [ 227.463448][T11072] loop6: detected capacity change from 0 to 128 [ 227.473423][T11074] loop5: detected capacity change from 0 to 1024 [ 227.490697][T11062] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 227.555580][T11072] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.576553][T11062] ntfs: volume version 3.1. [ 227.605072][T11072] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.644861][T11077] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2388'. [ 227.674512][T11077] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2388'. [ 227.687339][T11077] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2388'. [ 227.882554][T11089] loop7: detected capacity change from 0 to 1024 [ 228.079460][T11107] Invalid ELF header magic: != ELF [ 228.158007][T11111] loop5: detected capacity change from 0 to 64 [ 228.173695][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2394'. [ 228.200671][T11100] loop2: detected capacity change from 0 to 8192 [ 228.260565][T11100] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 228.288768][T11100] REISERFS (device loop2): using journaled data mode [ 228.340796][T11100] reiserfs: using flush barriers [ 228.414161][T11100] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.662241][T11100] REISERFS (device loop2): checking transaction log (loop2) [ 228.687023][T11100] REISERFS (device loop2): Using r5 hash to sort names [ 228.712760][T11133] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.719537][T11100] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.755579][T11133] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 228.782083][T11100] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 228.979574][T11141] loop7: detected capacity change from 0 to 256 [ 229.143177][T11139] loop5: detected capacity change from 0 to 32768 [ 229.199814][T11141] FAT-fs (loop7): Directory bread(block 64) failed [ 229.255334][T11141] FAT-fs (loop7): Directory bread(block 65) failed [ 229.261978][T11141] FAT-fs (loop7): Directory bread(block 66) failed [ 229.272959][T11139] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 229.281774][T11139] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 229.291780][T11139] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 229.291780][T11139] inode = 1 19 [ 229.291780][T11139] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 229.307556][T11141] FAT-fs (loop7): Directory bread(block 67) failed [ 229.310464][T11139] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 229.329507][T11139] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 229.338368][T11139] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 229.345080][T11139] gfs2: fsid=syz:syz.0: File system withdrawn [ 229.351159][T11139] CPU: 0 PID: 11139 Comm: syz.5.2407 Not tainted syzkaller #0 [ 229.358626][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.368700][T11139] Call Trace: [ 229.372010][T11139] [ 229.374968][T11139] dump_stack_lvl+0x188/0x250 [ 229.379662][T11139] ? kobject_uevent_env+0x371/0x890 [ 229.384893][T11139] ? show_regs_print_info+0x20/0x20 [ 229.390125][T11139] ? load_image+0x400/0x400 [ 229.394680][T11139] ? kobject_uevent_env+0x371/0x890 [ 229.394911][T11141] FAT-fs (loop7): Directory bread(block 68) failed [ 229.399909][T11139] ? lockref_put_or_lock+0x6e/0xb0 [ 229.399943][T11139] gfs2_withdraw+0x1149/0x1490 [ 229.399972][T11139] ? gfs2_lm+0x240/0x240 [ 229.399988][T11139] ? make_kgid+0x1c4/0x660 [ 229.425250][T11139] ? gfs2_consist_inode_i+0xc0/0xe0 [ 229.430476][T11139] gfs2_inode_refresh+0xb64/0xff0 [ 229.435536][T11139] ? gfs2_inode_metasync+0xf0/0xf0 [ 229.440670][T11139] ? __lock_acquire+0x7d10/0x7d10 [ 229.445725][T11139] inode_go_lock+0x127/0x470 [ 229.450338][T11139] do_promote+0x741/0xab0 [ 229.454712][T11139] finish_xmote+0x4df/0xb00 [ 229.459246][T11139] do_xmote+0x7b6/0x1120 [ 229.463531][T11139] gfs2_glock_nq+0xc7a/0x1550 [ 229.468246][T11139] init_journal+0xccc/0x22f0 [ 229.472865][T11139] ? end_bio_io_page+0x100/0x100 [ 229.477834][T11139] ? vsnprintf+0x1b21/0x1c20 [ 229.482465][T11139] ? snprintf+0xe5/0x140 [ 229.486740][T11139] ? init_journal+0x74d/0x22f0 [ 229.490627][T11141] FAT-fs (loop7): Directory bread(block 69) failed [ 229.491525][T11139] ? vscnprintf+0x80/0x80 [ 229.502453][T11139] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 229.507595][T11139] init_inodes+0xdb/0x320 [ 229.512048][T11139] gfs2_fill_super+0x16b2/0x1f00 [ 229.517023][T11139] ? gfs2_reconfigure+0xd30/0xd30 [ 229.522072][T11139] ? gfs2_glock_nq_num+0x82/0x1b0 [ 229.527130][T11139] ? sb_set_blocksize+0xa5/0xe0 [ 229.532013][T11139] get_tree_bdev+0x3f1/0x610 [ 229.535193][T11141] FAT-fs (loop7): Directory bread(block 70) failed [ 229.536626][T11139] ? gfs2_reconfigure+0xd30/0xd30 [ 229.548134][T11139] gfs2_get_tree+0x4d/0x1e0 [ 229.552659][T11139] vfs_get_tree+0x88/0x270 [ 229.557102][T11139] do_new_mount+0x24a/0xa40 [ 229.561644][T11139] __se_sys_mount+0x2e3/0x3d0 [ 229.566353][T11139] ? __x64_sys_mount+0xc0/0xc0 [ 229.571142][T11139] ? lockdep_hardirqs_on+0x94/0x140 [ 229.576370][T11139] ? __x64_sys_mount+0x1c/0xc0 [ 229.581149][T11139] do_syscall_64+0x4c/0xa0 [ 229.585569][T11139] ? clear_bhb_loop+0x30/0x80 [ 229.590257][T11139] ? clear_bhb_loop+0x30/0x80 [ 229.594956][T11139] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.595220][T11141] FAT-fs (loop7): Directory bread(block 71) failed [ 229.600876][T11139] RIP: 0033:0x7f1de2bf7f4a [ 229.611771][T11139] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.631397][T11139] RSP: 002b:00007f1de0e51e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.639033][T11141] FAT-fs (loop7): Directory bread(block 72) failed [ 229.639825][T11139] RAX: ffffffffffffffda RBX: 00007f1de0e51ee0 RCX: 00007f1de2bf7f4a [ 229.654278][T11139] RDX: 0000200000000000 RSI: 00002000000002c0 RDI: 00007f1de0e51ea0 [ 229.662269][T11139] RBP: 0000200000000000 R08: 00007f1de0e51ee0 R09: 0000000000000000 [ 229.663921][T11141] FAT-fs (loop7): Directory bread(block 73) failed [ 229.670265][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000002c0 [ 229.670283][T11139] R13: 00007f1de0e51ea0 R14: 00000000000126a0 R15: 00002000000003c0 [ 229.670309][T11139] [ 229.671367][T11139] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 229.752288][T11124] loop4: detected capacity change from 0 to 40427 [ 229.855080][T11124] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 229.912097][T11124] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 229.939000][T11124] F2FS-fs (loop4): invalid crc value [ 229.958779][T11124] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.063892][T11124] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 230.091773][T11124] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.392546][T11181] loop5: detected capacity change from 0 to 64 [ 230.886315][T11204] 9pnet: p9_fd_create_unix (11204): problem connecting socket: éq‰Y’3aK: -111 [ 231.057822][T11168] loop7: detected capacity change from 0 to 32768 [ 231.092612][ T4657] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.181006][T11168] XFS (loop7): Mounting V5 Filesystem [ 231.226521][T11200] loop2: detected capacity change from 0 to 32768 [ 231.311096][T11203] loop6: detected capacity change from 0 to 32768 [ 231.311490][T11168] XFS (loop7): Ending clean mount [ 231.352121][T11200] XFS (loop2): Mounting V5 Filesystem [ 231.375261][ T4657] usb 5-1: Using ep0 maxpacket: 16 [ 231.401663][T11203] [ 231.401663][T11203] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.401663][T11203] [ 231.472564][ T6526] XFS (loop7): Unmounting Filesystem [ 231.490709][T11203] ERROR: (device loop6): diWrite: ixpxd invalid [ 231.490709][T11203] [ 231.505403][ T4657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.528478][ T4657] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 231.537626][ T4657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.551661][T11224] loop5: detected capacity change from 0 to 512 [ 231.558595][T11203] ERROR: (device loop6): txCommit: [ 231.558595][T11203] [ 231.567278][ T4657] usb 5-1: config 0 descriptor?? [ 231.601345][T11225] ERROR: (device loop6): diWrite: ixpxd invalid [ 231.601345][T11225] [ 231.608045][T11200] XFS (loop2): Ending clean mount [ 231.613147][T11225] ERROR: (device loop6): txCommit: [ 231.613147][T11225] [ 231.747331][T11224] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.766680][ T5902] [ 231.766680][ T5902] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.766680][ T5902] [ 231.798340][ T4184] XFS (loop2): Unmounting Filesystem [ 231.801489][ T5902] [ 231.801489][ T5902] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.801489][ T5902] [ 232.108336][ T4657] creative-sb0540 0003:041E:3100.0021: unknown main item tag 0x2 [ 232.126911][ T4657] creative-sb0540 0003:041E:3100.0021: item fetching failed at offset 4/5 [ 232.156460][ T4657] creative-sb0540 0003:041E:3100.0021: parse failed [ 232.163316][ T4657] creative-sb0540: probe of 0003:041E:3100.0021 failed with error -22 [ 232.282778][ T5367] usb 5-1: USB disconnect, device number 18 [ 232.475292][ T9034] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 232.730134][T11256] loop6: detected capacity change from 0 to 1024 [ 232.756816][ T9034] usb 8-1: Using ep0 maxpacket: 8 [ 232.777967][T11246] loop5: detected capacity change from 0 to 32768 [ 232.810489][T11256] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.2453: lblock 2 mapped to illegal pblock 2 (length 1) [ 232.863684][T11256] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 232.887655][T11256] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.2453: lblock 0 mapped to illegal pblock 48 (length 1) [ 232.902380][ T9034] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.915389][ T9034] usb 8-1: config 0 interface 0 has no altsetting 0 [ 232.922017][ T9034] usb 8-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 232.931348][ T9034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.931588][T11256] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 232.948377][ T9034] usb 8-1: config 0 descriptor?? [ 232.971412][T11250] loop2: detected capacity change from 0 to 32768 [ 232.984510][T11256] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.2453: Failed to acquire dquot type 0 [ 233.006860][T11256] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 233.019728][T11256] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.2453: mark_inode_dirty error [ 233.032234][T11256] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 233.043111][T11256] EXT4-fs (loop6): 1 orphan inode deleted [ 233.063926][T11256] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 233.095416][ T4680] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 233.131832][ T4680] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 233.153931][T11263] sp0: Synchronizing with TNC [ 233.171386][ T4680] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:6: Failed to release dquot type 0 [ 233.297828][ T144] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 233.343513][ T144] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 233.399874][T11269] loop5: detected capacity change from 0 to 2048 [ 233.407142][ T144] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 0 [ 233.449081][ T9034] uclogic 0003:5543:0042.0022: unbalanced collection at end of report description [ 233.461312][ T5902] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 233.475362][ T9034] uclogic 0003:5543:0042.0022: parse failed [ 233.481679][ T9034] uclogic: probe of 0003:5543:0042.0022 failed with error -22 [ 233.508995][T11278] loop4: detected capacity change from 0 to 64 [ 233.522513][T11277] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.535594][ T5902] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 233.590087][ T5902] EXT4-fs error (device loop6): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 233.721535][ T4665] usb 8-1: USB disconnect, device number 5 [ 233.835479][T11292] sp0: Synchronizing with TNC [ 233.891948][ T9034] kernel write not supported for file /snd/seq (pid: 9034 comm: kworker/1:18) [ 234.004652][T11298] loop4: detected capacity change from 0 to 512 [ 234.104261][T11298] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 234.127993][T11302] loop5: detected capacity change from 0 to 1024 [ 234.143664][T11300] loop2: detected capacity change from 0 to 4096 [ 234.145583][T11298] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.278098][T11308] device wlan1 entered promiscuous mode [ 234.286568][T11298] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.4.2472: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 234.288416][T11302] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 234.332475][T11298] EXT4-fs (loop4): Remounting filesystem read-only [ 234.332779][T11288] loop6: detected capacity change from 0 to 32768 [ 234.349905][T11308] device macvtap1 entered promiscuous mode [ 234.359314][T11300] ntfs: (device loop2): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 234.359381][T11302] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.382074][T11298] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #12: comm syz.4.2472: directory missing '.' [ 234.396931][T11308] device wlan1 left promiscuous mode [ 234.407153][T11298] EXT4-fs (loop4): Remounting filesystem read-only [ 234.469851][ T26] audit: type=1800 audit(1768818793.963:20): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2474" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 234.470330][T11300] ntfs: volume version 3.1. [ 234.525752][T11288] XFS (loop6): Mounting V5 Filesystem [ 234.869129][T11288] XFS (loop6): Ending clean mount [ 234.893913][T11330] devpts: called with bogus options [ 235.073709][ T5902] XFS (loop6): Unmounting Filesystem [ 235.389469][T11354] loop2: detected capacity change from 0 to 256 [ 235.392312][T11321] loop4: detected capacity change from 0 to 40427 [ 235.485258][T11354] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 235.503085][T11321] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 235.542804][T11321] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 235.558817][T11354] [syz.2.2494/11354] FS: loop2 File: /file1 would truncate fibmap result [ 235.610919][T11321] F2FS-fs (loop4): invalid crc value [ 235.707373][T11321] F2FS-fs (loop4): Found nat_bits in checkpoint [ 235.908695][T11370] bridge_slave_0: default FDB implementation only supports local addresses [ 235.918871][T11321] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 235.939738][T11321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.151567][T11348] loop7: detected capacity change from 0 to 32768 [ 236.523670][T11396] loop5: detected capacity change from 0 to 8 [ 236.585701][T11396] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 236.613143][ T4303] udevd[4303]: incorrect cramfs checksum on /dev/loop5 [ 236.670841][ T4303] udevd[4303]: incorrect cramfs checksum on /dev/loop5 [ 236.822572][T11376] loop2: detected capacity change from 0 to 32768 [ 236.961225][T11376] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 236.979218][T11419] loop4: detected capacity change from 0 to 256 [ 237.022237][ T4184] (syz-executor,4184,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 237.056058][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 237.073180][T11419] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 237.139125][T11419] exFAT-fs (loop4): hint_cluster is invalid (1) [ 237.191162][T11419] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 237.248894][T11419] exFAT-fs (loop4): Filesystem has been set read-only [ 237.270891][T11427] loop7: detected capacity change from 0 to 1024 [ 237.297552][ T9034] Bluetooth: hci2: command 0x0406 tx timeout [ 237.304052][T11419] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805ff6a1e0 iblock : 9, err : -5) [ 237.333285][T11419] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 237.403910][T11419] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 237.520426][ T26] audit: type=1326 audit(1768818797.013:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.2.2532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f195079acb9 code=0x0 [ 237.684604][T11446] loop7: detected capacity change from 0 to 2048 [ 237.763708][T11446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.069204][T11471] loop5: detected capacity change from 0 to 512 [ 238.118846][T11471] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.226261][T11471] EXT4-fs (loop5): 1 truncate cleaned up [ 238.231954][T11471] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.233553][T11481] loop4: detected capacity change from 0 to 2048 [ 238.262508][T11471] EXT4-fs warning (device loop5): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 238.296805][T11481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.811445][T11509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2564'. [ 238.915214][T11516] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.915302][T11516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.915400][T11516] IPv6: NLM_F_CREATE should be set when creating new route [ 238.989856][T11518] loop4: detected capacity change from 0 to 64 [ 239.022918][T11522] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2570'. [ 239.388903][T11526] loop4: detected capacity change from 0 to 4096 [ 239.502511][T11501] loop5: detected capacity change from 0 to 32768 [ 239.529265][T11526] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 239.688655][ T4195] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 239.775283][T11552] hpfs: Bad magic ... probably not HPFS [ 239.798959][T11554] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 239.842910][T11554] qnx6: wrong signature (magic) in superblock #1. [ 239.855288][T11554] qnx6: unable to read the first superblock [ 239.942749][T11562] netlink: 'syz.4.2589': attribute type 16 has an invalid length. [ 239.981285][T11562] netlink: 'syz.4.2589': attribute type 2 has an invalid length. [ 239.996862][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2592'. [ 240.015197][T11562] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.2589'. [ 240.122386][T11572] loop4: detected capacity change from 0 to 512 [ 240.140095][T11574] tipc: Enabling of bearer rejected, failed to enable media [ 240.202168][T11572] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 240.226172][T11581] loop6: detected capacity change from 0 to 64 [ 240.233060][T11572] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 240.272941][T11572] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 240.332604][T11572] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 240.362233][T11572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 240.399841][T11572] System zones: 0-1, 15-15, 18-18, 34-34 [ 240.440039][T11572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 240.530364][T11572] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.2596: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 240.557073][T11572] EXT4-fs error (device loop4): ext4_quota_enable:6420: comm syz.4.2596: Bad quota inode: 4, type: 1 [ 240.600699][T11572] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 240.645102][T11572] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 240.655329][T11572] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,mblk_io_submit,jqfmt=vfsv0,nodiscard,nogrpid,dioread_lock,,errors=continue. Quota mode: writeback. [ 240.892896][T11601] device syz_tun entered promiscuous mode [ 240.917826][T11603] loop4: detected capacity change from 0 to 64 [ 240.929585][T11601] device macvtap1 entered promiscuous mode [ 240.944735][T11601] device syz_tun left promiscuous mode [ 241.060443][T11590] loop7: detected capacity change from 0 to 32768 [ 241.145532][T11590] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 241.145532][T11590] [ 241.721812][T11609] loop6: detected capacity change from 0 to 32768 [ 241.760730][T11628] loop7: detected capacity change from 0 to 512 [ 241.778131][T11626] loop4: detected capacity change from 0 to 4096 [ 241.810515][T11630] loop5: detected capacity change from 0 to 256 [ 241.814527][T11628] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 241.851144][T11626] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 241.869391][T11626] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 241.881213][T11628] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 241.882494][T11609] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.2610 (11609) [ 241.931293][T11628] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.952927][T11630] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 241.996555][T11609] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 242.024322][T11609] BTRFS info (device loop6): enabling ssd optimizations [ 242.103010][T11609] BTRFS info (device loop6): turning off barriers [ 242.115237][T11609] BTRFS info (device loop6): using free space tree [ 242.133566][T11609] BTRFS info (device loop6): has skinny extents [ 242.383537][T11662] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2627'. [ 242.384225][T11658] tipc: Enabling not permitted [ 242.395320][T11662] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2627'. [ 242.408596][T11658] tipc: Enabling of bearer rejected, failed to enable media [ 242.418745][T11662] netlink: 'syz.5.2627': attribute type 5 has an invalid length. [ 242.439671][T11662] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2627'. [ 242.650302][T11679] loop7: detected capacity change from 0 to 1024 [ 242.813265][T11683] loop5: detected capacity change from 0 to 8192 [ 242.829507][ T4680] hfsplus: b-tree write err: -5, ino 4 [ 242.860187][T11683] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 242.881092][T11683] REISERFS (device loop5): using ordered data mode [ 242.890395][T11683] reiserfs: using flush barriers [ 242.932120][T11683] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.035247][ T9034] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 243.050679][T11683] REISERFS (device loop5): checking transaction log (loop5) [ 243.098915][T11683] REISERFS (device loop5): Using r5 hash to sort names [ 243.125459][T11683] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 243.159868][T11683] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 243.324634][ T9034] usb 5-1: Using ep0 maxpacket: 16 [ 243.465291][ T9034] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 243.474585][ T9034] usb 5-1: config 0 has no interface number 0 [ 243.486926][ T9034] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 243.695454][ T9034] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 243.704576][ T9034] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 243.743179][ T9034] usb 5-1: Product: syz [ 243.762060][ T9034] usb 5-1: SerialNumber: syz [ 243.773864][ T9034] usb 5-1: config 0 descriptor?? [ 243.853792][ T9034] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 243.862250][ T9034] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input20 [ 244.031598][T11736] loop7: detected capacity change from 0 to 1024 [ 244.085098][ T2389] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 244.108230][T11736] hfsplus: small dir entry [ 244.267560][ T6107] usb 5-1: USB disconnect, device number 19 [ 244.285437][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 244.292436][ C1] ------------[ cut here ]------------ [ 244.297983][ C1] URB ffff88801e934d00 submitted while active [ 244.304197][T11749] loop7: detected capacity change from 0 to 512 [ 244.304600][ C1] WARNING: CPU: 1 PID: 9034 at drivers/usb/core/urb.c:378 usb_submit_urb+0xff2/0x1910 [ 244.319989][ C1] Modules linked in: [ 244.323897][ C1] CPU: 1 PID: 9034 Comm: kworker/1:18 Not tainted syzkaller #0 [ 244.331458][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.341529][ C1] Workqueue: rcu_gp srcu_invoke_callbacks [ 244.347279][ C1] RIP: 0010:usb_submit_urb+0xff2/0x1910 [ 244.352849][ C1] Code: cb c4 8a 89 ea e8 de c0 d6 03 e9 fb fb ff ff e8 94 b2 9c fb c6 05 ed 55 99 07 01 48 c7 c7 60 c9 c4 8a 48 89 de e8 8e db d2 03 <0f> 0b e9 84 f0 ff ff e8 72 b2 9c fb eb 21 e8 6b b2 9c fb 44 8b 6c [ 244.372458][ C1] RSP: 0018:ffffc90000dd0840 EFLAGS: 00010046 [ 244.378544][ C1] RAX: a1e631a27f655c00 RBX: ffff88801e934d00 RCX: 0000000000040000 [ 244.386528][ C1] RDX: ffffc90002349000 RSI: 0000000000005ecf RDI: 0000000000005ed0 [ 244.394512][ C1] RBP: 000000000000000f R08: ffff8880b912795b R09: 1ffff11017224f2b [ 244.402496][ C1] R10: dffffc0000000000 R11: ffffed1017224f2c R12: dffffc0000000000 [ 244.410462][ C1] R13: 0000000000000a20 R14: ffff88801e934d08 R15: ffff888025a56848 [ 244.418427][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 244.427361][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.433941][ C1] CR2: 00007fd81788fdac CR3: 0000000063319000 CR4: 00000000003506e0 [ 244.441908][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.449872][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.457842][ C1] Call Trace: [ 244.461140][ C1] [ 244.463976][ C1] ? _raw_spin_lock+0x40/0x40 [ 244.468650][ C1] ? dummy_timer+0x896/0x31e0 [ 244.473345][ C1] cm109_urb_irq_callback+0x701/0xc70 [ 244.478745][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 244.484135][ C1] dummy_timer+0x8a8/0x31e0 [ 244.488668][ C1] ? mark_lock+0x94/0x320 [ 244.492995][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.498995][ C1] ? dummy_free_streams+0x530/0x530 [ 244.504193][ C1] ? dummy_free_streams+0x530/0x530 [ 244.509388][ C1] call_timer_fn+0x17b/0x540 [ 244.513972][ C1] ? dummy_free_streams+0x530/0x530 [ 244.519167][ C1] ? __run_timers+0x7f0/0x7f0 [ 244.523845][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.529034][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 244.534225][ C1] ? dummy_free_streams+0x530/0x530 [ 244.539419][ C1] __run_timers+0x53a/0x7f0 [ 244.543925][ C1] ? detach_timer+0x2b0/0x2b0 [ 244.548592][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.554570][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 244.559507][ C1] run_timer_softirq+0x63/0xf0 [ 244.564277][ C1] handle_softirqs+0x339/0x830 [ 244.569035][ C1] ? do_softirq+0x142/0x210 [ 244.573534][ C1] ? do_softirq+0x210/0x210 [ 244.578041][ C1] do_softirq+0x142/0x210 [ 244.582361][ C1] [ 244.585280][ C1] [ 244.588225][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 244.593603][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 244.599577][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 244.604851][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 244.610132][ C1] ? local_bh_disable+0x20/0x20 [ 244.614978][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 244.620175][ C1] ? _local_bh_enable+0xa0/0xa0 [ 244.625016][ C1] ? swake_up_locked+0x64/0x110 [ 244.629862][ C1] ? complete+0x56/0xa0 [ 244.634013][ C1] srcu_invoke_callbacks+0x199/0x3c0 [ 244.639297][ C1] ? try_check_zero+0x340/0x340 [ 244.644145][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 244.650036][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.655228][ C1] process_one_work+0x85f/0x1010 [ 244.660178][ C1] ? worker_detach_from_pool+0x240/0x240 [ 244.665798][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 244.671078][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 244.676099][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 244.681646][ C1] ? wq_worker_running+0x97/0x170 [ 244.686663][ C1] worker_thread+0xaa6/0x1290 [ 244.691360][ C1] kthread+0x436/0x520 [ 244.695422][ C1] ? rcu_lock_release+0x20/0x20 [ 244.700260][ C1] ? kthread_blkcg+0xd0/0xd0 [ 244.704848][ C1] ret_from_fork+0x1f/0x30 [ 244.709266][ C1] [ 244.712282][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 244.719547][ C1] CPU: 1 PID: 9034 Comm: kworker/1:18 Not tainted syzkaller #0 [ 244.727087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.737144][ C1] Workqueue: rcu_gp srcu_invoke_callbacks [ 244.742872][ C1] Call Trace: [ 244.746144][ C1] [ 244.748982][ C1] dump_stack_lvl+0x188/0x250 [ 244.753791][ C1] ? show_regs_print_info+0x20/0x20 [ 244.758980][ C1] ? load_image+0x400/0x400 [ 244.763482][ C1] panic+0x2e5/0x810 [ 244.767370][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 244.771870][ C1] ? ret_from_fork+0x1f/0x30 [ 244.776456][ C1] ? usb_submit_urb+0xff2/0x1910 [ 244.781399][ C1] __warn+0x248/0x2b0 [ 244.785496][ C1] ? usb_submit_urb+0xff2/0x1910 [ 244.790446][ C1] report_bug+0x1b7/0x2e0 [ 244.794787][ C1] handle_bug+0x3a/0x70 [ 244.799060][ C1] exc_invalid_op+0x16/0x40 [ 244.803560][ C1] asm_exc_invalid_op+0x16/0x20 [ 244.808399][ C1] RIP: 0010:usb_submit_urb+0xff2/0x1910 [ 244.813936][ C1] Code: cb c4 8a 89 ea e8 de c0 d6 03 e9 fb fb ff ff e8 94 b2 9c fb c6 05 ed 55 99 07 01 48 c7 c7 60 c9 c4 8a 48 89 de e8 8e db d2 03 <0f> 0b e9 84 f0 ff ff e8 72 b2 9c fb eb 21 e8 6b b2 9c fb 44 8b 6c [ 244.833623][ C1] RSP: 0018:ffffc90000dd0840 EFLAGS: 00010046 [ 244.839686][ C1] RAX: a1e631a27f655c00 RBX: ffff88801e934d00 RCX: 0000000000040000 [ 244.847735][ C1] RDX: ffffc90002349000 RSI: 0000000000005ecf RDI: 0000000000005ed0 [ 244.855707][ C1] RBP: 000000000000000f R08: ffff8880b912795b R09: 1ffff11017224f2b [ 244.863847][ C1] R10: dffffc0000000000 R11: ffffed1017224f2c R12: dffffc0000000000 [ 244.871807][ C1] R13: 0000000000000a20 R14: ffff88801e934d08 R15: ffff888025a56848 [ 244.879795][ C1] ? _raw_spin_lock+0x40/0x40 [ 244.884489][ C1] ? dummy_timer+0x896/0x31e0 [ 244.889176][ C1] cm109_urb_irq_callback+0x701/0xc70 [ 244.894551][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 244.899923][ C1] dummy_timer+0x8a8/0x31e0 [ 244.904426][ C1] ? mark_lock+0x94/0x320 [ 244.908752][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.914750][ C1] ? dummy_free_streams+0x530/0x530 [ 244.919945][ C1] ? dummy_free_streams+0x530/0x530 [ 244.925133][ C1] call_timer_fn+0x17b/0x540 [ 244.929743][ C1] ? dummy_free_streams+0x530/0x530 [ 244.934932][ C1] ? __run_timers+0x7f0/0x7f0 [ 244.939608][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.944801][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 244.950000][ C1] ? dummy_free_streams+0x530/0x530 [ 244.955236][ C1] __run_timers+0x53a/0x7f0 [ 244.959741][ C1] ? detach_timer+0x2b0/0x2b0 [ 244.964414][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.970594][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 244.975442][ C1] run_timer_softirq+0x63/0xf0 [ 244.980236][ C1] handle_softirqs+0x339/0x830 [ 244.984996][ C1] ? do_softirq+0x142/0x210 [ 244.989499][ C1] ? do_softirq+0x210/0x210 [ 244.994000][ C1] do_softirq+0x142/0x210 [ 244.998322][ C1] [ 245.001277][ C1] [ 245.004195][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 245.009558][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 245.015531][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 245.020811][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 245.026098][ C1] ? local_bh_disable+0x20/0x20 [ 245.030944][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 245.036180][ C1] ? _local_bh_enable+0xa0/0xa0 [ 245.041020][ C1] ? swake_up_locked+0x64/0x110 [ 245.045865][ C1] ? complete+0x56/0xa0 [ 245.050016][ C1] srcu_invoke_callbacks+0x199/0x3c0 [ 245.055304][ C1] ? try_check_zero+0x340/0x340 [ 245.060168][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 245.066068][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 245.071264][ C1] process_one_work+0x85f/0x1010 [ 245.076215][ C1] ? worker_detach_from_pool+0x240/0x240 [ 245.081843][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 245.087125][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 245.092330][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 245.097866][ C1] ? wq_worker_running+0x97/0x170 [ 245.102883][ C1] worker_thread+0xaa6/0x1290 [ 245.107662][ C1] kthread+0x436/0x520 [ 245.111720][ C1] ? rcu_lock_release+0x20/0x20 [ 245.116561][ C1] ? kthread_blkcg+0xd0/0xd0 [ 245.121140][ C1] ret_from_fork+0x1f/0x30 [ 245.125648][ C1] [ 245.128991][ C1] Kernel Offset: disabled [ 245.133649][ C1] Rebooting in 86400 seconds..