last executing test programs: 11m25.146338086s ago: executing program 1 (id=3828): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=cp869,umask=00000000000000000000401,part=0x0000000000002420,iocharset=maccenteuro,dir_umask=00000000000000000000220,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x4, 0x337, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 11m24.903944523s ago: executing program 1 (id=3830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 11m24.571476403s ago: executing program 1 (id=3835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc}, 0x94) 11m24.313470705s ago: executing program 1 (id=3837): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001bc0)={[{@keep_last_dots}, {@sys_tz}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@errors_remount}, {@gid}, {@namecase}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x1, 0x1529, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) 11m23.902408481s ago: executing program 1 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11m23.516821514s ago: executing program 1 (id=3849): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000800)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) 11m23.139842626s ago: executing program 32 (id=3849): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000800)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) 8m11.958998412s ago: executing program 2 (id=7184): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) 8m11.753495653s ago: executing program 2 (id=7188): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) 8m11.566826968s ago: executing program 2 (id=7192): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x601, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m11.437609753s ago: executing program 2 (id=7195): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file1\x00', 0x8080, &(0x7f0000000c40)=ANY=[], 0xfe, 0x158, &(0x7f0000000040)="$eJzs0E9LKlEYBvDnMHPV+8crF25gQSa0aEhMmbBWURoJQjZQuGlTYBMJipFQrsKIdi2Cti6soJX4FSxrYymEfYk2rl0WR8ciCPwAPb/NMM953+fAWZpravAChy50LWYzu3tmLmdueVeNeHTtpVoNy9wGoPPpvDd/EwZ25FcF2keAjO+cwHYqbU4lsw450w4DGoDIbyzIPCizf8Avmf3HO7mvjQO1od6+/kU2bWUjKhBx9TLZ93oBTMg+O4BU2rRbnfmir1J+WGnUY/7J61EFJzHf2A/rrJ97zFM9Onz1x60gYd5fIiLk3nOg7n8KVMqtZiO+bMwD0PUZARSCoZbx2IiFCmdQN+z7wLoABD7uscHtURMOHAvgvNvVvhVOALVSx8j8nS1Z9zsOFC8g8sXkpiL/fwKKBtF/DhsGEIMGiIiIiIiIiIiIiIiIiIjo23gLAAD//03YXHc=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 8m11.255206558s ago: executing program 2 (id=7199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}]}, 0x54}}, 0x0) 8m10.982527424s ago: executing program 2 (id=7203): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@hyper, 0x1000000}) 8m10.571740951s ago: executing program 33 (id=7203): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@hyper, 0x1000000}) 8m0.346072474s ago: executing program 5 (id=7313): r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000180)={0xf0f044, 0x5}) 8m0.216281874s ago: executing program 5 (id=7314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) 8m0.021063489s ago: executing program 5 (id=7315): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000240)={0x80, 0x6, 0xc8, 0x0, 0x9, 0x3e}) 7m59.892558585s ago: executing program 5 (id=7316): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f00000010c0)=ANY=[@ANYBLOB='nls=cp863,decompose,umask=00000000000000000010000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465636f6d706f73652c00acdb50a352b211e5ceaed3e7a8c1731ef4c9512076cc4d573109eadda119088c8af27fda66847216b40d34ab7a25771158753d5ee6febab0d623e193a2f58059d92935253b97ee99dd"], 0x1, 0x6b9, &(0x7f0000000a00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 7m59.591274875s ago: executing program 5 (id=7317): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="e6", 0x1}], 0x1, &(0x7f0000000180)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x8, 0x3, 0x5c, 0x8, 0xfffffffa, 0x2, 0x2}}], 0x30, 0x4004855}, 0x24000052) 7m59.027393794s ago: executing program 5 (id=7320): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)='\v\x00\x00\x00', 0x4}], 0x1) 7m58.483984264s ago: executing program 34 (id=7320): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)='\v\x00\x00\x00', 0x4}], 0x1) 5m31.594332653s ago: executing program 7 (id=9815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) 5m31.365133997s ago: executing program 7 (id=9820): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="f6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1, &(0x7f0000002540)=[{0x10, 0x1, 0x1}], 0x10}}], 0x2, 0x0) 5m31.162239842s ago: executing program 7 (id=9822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 5m30.961949045s ago: executing program 7 (id=9825): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@dmask={'dmask', 0x3d, 0x4ae}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@sys_tz}, {@errors_remount}, {}, {}, {@gid}, {@utf8}, {@sys_tz}, {@sys_tz}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m30.656540378s ago: executing program 7 (id=9828): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x18, 0x84, 0x0, '\x00'}], 0x18}, 0xd1) 5m29.922652775s ago: executing program 7 (id=9839): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x4}}, 0x10) 5m29.414342086s ago: executing program 35 (id=9839): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x4}}, 0x10) 3.462407504s ago: executing program 6 (id=15541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)="1a", 0x1}], 0x1, &(0x7f0000003040)=[{0x10, 0x1, 0x85}], 0x10}}], 0x1, 0x4004000) 3.301467671s ago: executing program 0 (id=15545): r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000000000000007000000f603"], 0x28}}], 0x2, 0x0) 3.150692729s ago: executing program 6 (id=15548): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000c00)="50fc", 0x2}], 0x1, 0x0, 0x0, 0x52}, 0x8880) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f00000003c0)=""/71, 0x4d}, 0x9}], 0x1, 0x40010000, 0x0) 3.007041562s ago: executing program 0 (id=15550): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000000100)={[{@nobarrier}, {@nodatasum}, {@compress_force}, {@rescue={'rescue', 0x3d, 'ignorebadroots'}}, {@barrier}, {@rescue={'rescue', 0x3d, 'ignoremetacsums'}}, {@acl}, {@nodiscard}]}, 0xfb, 0x513e, &(0x7f000000f380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x400000}) 2.985623835s ago: executing program 3 (id=15552): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) 2.872037771s ago: executing program 6 (id=15553): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x200, 0x1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.778875389s ago: executing program 3 (id=15554): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e20, @empty}, {0x2, 0x4e22, @multicast2}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0xfffffffffffffffd, 0x1}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfeff, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 2.754585103s ago: executing program 6 (id=15555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd70d2fcdbdf250700000012000200fc0000000000000000000000000000010800040064000000070003"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) 2.492008124s ago: executing program 6 (id=15557): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0xb1d, &(0x7f0000000100)={0x0, 0x786e, 0x0, 0x1, 0x179}) io_uring_setup(0x41af, &(0x7f0000000080)={0x0, 0x60cb, 0x24, 0x2, 0x67, 0x0, r0}) 2.414369328s ago: executing program 3 (id=15558): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040)=0xb, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 2.256787753s ago: executing program 6 (id=15560): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x2) 2.170232188s ago: executing program 3 (id=15561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 2.006006227s ago: executing program 3 (id=15563): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e27, @local}, 0x10) connect$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2, 0x1}, 0x74) 1.876417573s ago: executing program 3 (id=15565): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 1.339919112s ago: executing program 8 (id=15569): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab", 0x1) 1.312152955s ago: executing program 4 (id=15570): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="f309"]) 1.248482594s ago: executing program 4 (id=15571): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x206700, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(r0, 0x0, 0x0) 1.105345285s ago: executing program 4 (id=15572): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(r0) 1.083750081s ago: executing program 0 (id=15573): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb}) 931.276157ms ago: executing program 4 (id=15574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 807.742618ms ago: executing program 8 (id=15575): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x897070391c29d2fa}}, 0x14) 771.088907ms ago: executing program 4 (id=15576): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0xfff7bdff) 694.009223ms ago: executing program 8 (id=15577): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 558.922558ms ago: executing program 8 (id=15578): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000000c0), 0xfdef) fcntl$setpipe(r0, 0x407, 0x9) 523.414002ms ago: executing program 4 (id=15579): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x9, '='}, @local=@item_4={0x3, 0x2, 0x1, "dc758d1d"}]}}, 0x0}, 0x0) 452.631836ms ago: executing program 0 (id=15580): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 376.66493ms ago: executing program 8 (id=15581): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0xffffff36) 310.685994ms ago: executing program 0 (id=15582): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 3.189121ms ago: executing program 0 (id=15583): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x2c020400) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x267) 0s ago: executing program 8 (id=15584): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) kernel console output (not intermixed with test programs): has no interface number 0 [ 1041.018844][ T180] hfsplus: b-tree write err: -5, ino 17 [ 1041.025170][ T803] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1041.033567][ T5999] hid-generic 0003:0925:8066.0001: unbalanced collection at end of report description [ 1041.090883][ T5999] hid-generic 0003:0925:8066.0001: probe with driver hid-generic failed with error -22 [ 1041.094601][ T803] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1041.158480][ T803] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1041.194266][ T803] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1041.208847][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.227860][ T803] usb 4-1: Product: syz [ 1041.237447][ T5210] usb 5-1: USB disconnect, device number 3 [ 1041.258831][ T803] usb 4-1: Manufacturer: syz [ 1041.263482][ T803] usb 4-1: SerialNumber: syz [ 1041.299705][ T803] usb 4-1: config 0 descriptor?? [ 1041.388694][ T9669] netlink: 'syz.6.14441': attribute type 1 has an invalid length. [ 1041.398079][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14441'. [ 1041.532855][ T10] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1041.711715][ T9690] loop6: detected capacity change from 0 to 512 [ 1041.721579][ T10] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 1041.739120][ T10] usb 9-1: config 0 has no interface number 0 [ 1041.739554][ T9690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1041.745326][ T10] usb 9-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 1041.772141][ T803] appletouch 4-1:0.85: Failed to request geyser raw mode [ 1041.783676][ T803] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1041.792462][ T10] usb 9-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 1041.807210][ T10] usb 9-1: config 0 interface 48 has no altsetting 0 [ 1041.835227][ T803] usb 4-1: USB disconnect, device number 36 [ 1041.857085][ T9690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.889571][ T10] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1041.909999][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.925669][ T10] usb 9-1: Product: syz [ 1041.930896][ T10] usb 9-1: Manufacturer: syz [ 1041.935513][ T10] usb 9-1: SerialNumber: syz [ 1041.964028][ T10] usb 9-1: config 0 descriptor?? [ 1041.986043][T22991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.195199][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1042.451736][ T9741] loop6: detected capacity change from 0 to 512 [ 1042.478064][ T9741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 1042.486958][ T9741] System zones: 1-12 [ 1042.491260][ T9741] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.14459: Directory hole found for htree index block 0 [ 1042.509653][ T9741] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1042.516161][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1042.527103][ T9741] EXT4-fs (loop6): Remounting filesystem read-only [ 1042.531708][ C0] EXT4-fs (loop6): initial error at time 1006: dx_probe:791: inode 2 [ 1042.546281][ C0] EXT4-fs (loop6): last error at time 1006: dx_probe:791: inode 2 [ 1042.556542][ T9741] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 1042.566306][ T9741] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1042.593917][ T9741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.622894][ T9751] use of bytesused == 0 is deprecated and will be removed in the future, [ 1042.635584][ T10] gspca_stk1135: reg_w 0x0 err -71 [ 1042.638497][ T9751] use the actual size instead. [ 1042.641758][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.663529][ T10] gspca_stk1135: Sensor write failed [ 1042.674376][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.687773][ T10] gspca_stk1135: Sensor write failed [ 1042.693107][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.714625][ T10] gspca_stk1135: Sensor read failed [ 1042.723344][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.731016][ T10] gspca_stk1135: Sensor read failed [ 1042.736257][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 1042.745726][T22991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.778314][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.803574][ T10] gspca_stk1135: Sensor read failed [ 1042.817563][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.822035][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14466'. [ 1042.831363][ T10] gspca_stk1135: Sensor read failed [ 1042.850142][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.863448][ T10] gspca_stk1135: Sensor write failed [ 1042.890549][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1042.897039][ T10] gspca_stk1135: Sensor write failed [ 1042.907801][ T10] stk1135 9-1:0.48: probe with driver stk1135 failed with error -71 [ 1042.967587][ T10] usb 9-1: USB disconnect, device number 22 [ 1043.294634][ T9802] loop0: detected capacity change from 0 to 256 [ 1043.307105][ T9802] vfat: Bad value for 'uid' [ 1043.314726][ T9802] vfat: Bad value for 'uid' [ 1043.777416][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14488'. [ 1044.733250][ T9913] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14512'. [ 1044.844396][ T9871] loop8: detected capacity change from 0 to 32768 [ 1044.875725][T29608] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1044.888982][ T9871] (syz.8.14500,9871,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1044.917825][ T9871] (syz.8.14500,9871,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1044.967048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1044.984909][ T9871] JBD2: Ignoring recovery information on journal [ 1045.007448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1045.018198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 1045.071482][T29608] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1045.129489][T29608] usb 5-1: config 0 interface 0 altsetting 69 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1045.153502][ T9871] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1045.171311][T29608] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1045.186409][T29608] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1045.225918][T29608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.256874][T29608] usb 5-1: config 0 descriptor?? [ 1045.271702][ T9898] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1045.369007][T29185] ocfs2: Unmounting device (7,8) on (node local) [ 1045.658881][ T9949] loop6: detected capacity change from 0 to 1024 [ 1045.682418][ T9949] EXT4-fs: Ignoring removed mblk_io_submit option [ 1045.741923][T29608] kye 0003:0458:5015.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1045.811319][T29608] kye 0003:0458:5015.0002: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 1045.842953][T29608] kye 0003:0458:5015.0002: tablet-enabling feature report not found [ 1045.862453][T29608] kye 0003:0458:5015.0002: tablet enabling failed [ 1045.984441][ T9957] loop3: detected capacity change from 0 to 4096 [ 1046.006602][ T5210] usb 5-1: USB disconnect, device number 4 [ 1046.141892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1046.258229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1046.297067][ T9991] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1046.564068][T10009] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14534'. [ 1046.771131][ T5210] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1046.835298][T29608] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1046.861782][T10017] loop8: detected capacity change from 0 to 4096 [ 1046.871762][T10017] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1046.942497][ T5210] usb 7-1: Using ep0 maxpacket: 32 [ 1046.952290][ T5210] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1046.975956][ T5210] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1046.988445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1047.007266][ T5210] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1047.052027][T29608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1047.062372][ T5210] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1047.081763][ T5210] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1047.094791][T29608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.102866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1047.113422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 1047.122556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1047.125273][T29608] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1047.189603][T29608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.217487][ T5210] usb 7-1: Product: syz [ 1047.224083][ T5210] usb 7-1: Manufacturer: syz [ 1047.239639][ T5210] usb 7-1: SerialNumber: syz [ 1047.240215][T29608] usb 4-1: config 0 descriptor?? [ 1047.318299][ T5210] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input82 [ 1047.329242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 1047.340688][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1047.449899][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14541'. [ 1047.509170][ T5999] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1047.534554][ T5210] usb 7-1: USB disconnect, device number 25 [ 1047.587300][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888043daa000 (15)(macvlan2) start [ 1047.612434][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888043daa000 (8)(macvlan2) end [ 1047.616972][ T5210] appletouch 7-1:1.0: input: appletouch disconnected [ 1047.631434][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888043daa000 (8)(macvlan2) start [ 1047.657758][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888043daa000 (6)(macvlan2) end [ 1047.690027][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888043daa000 (3)(macvlan2) start [ 1047.729084][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888043daa000 (3)(macvlan2) end [ 1047.747098][ T5999] usb 9-1: Using ep0 maxpacket: 8 [ 1047.773296][ T5999] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1047.783935][ T5999] usb 9-1: config 0 has no interface number 0 [ 1047.795871][T29608] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 1047.805490][T29608] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 1047.816255][ T5999] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1047.837834][T29608] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 1047.845192][ T5999] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1047.859940][T29608] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 1047.881815][T29608] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 1047.889285][ T5999] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1047.914937][T29608] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 1047.922683][T29608] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 1047.930198][ T5999] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1047.960401][T29608] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1047.989817][ T5999] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1047.998937][ T5999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.014855][T29608] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 1048.035221][T29608] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 1048.053721][T29608] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -71 [ 1048.063343][ T5999] usb 9-1: config 0 descriptor?? [ 1048.097663][ T5999] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1048.122245][T29608] usb 4-1: USB disconnect, device number 37 [ 1048.166862][T10073] fido_id[10073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1048.671429][ T5210] usb 9-1: USB disconnect, device number 23 [ 1048.724003][ T5210] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1048.826371][T10136] can0: slcan on ttynull. [ 1048.922562][T10133] can0 (unregistered): slcan off ttynull. [ 1048.976407][T10152] netlink: 768 bytes leftover after parsing attributes in process `syz.4.14560'. [ 1049.059895][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14561'. [ 1049.453410][T10190] loop3: detected capacity change from 0 to 512 [ 1049.482054][T10190] EXT4-fs: Ignoring removed oldalloc option [ 1049.512833][T10190] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1049.543509][T10190] EXT4-fs (loop3): 1 truncate cleaned up [ 1049.610613][T10190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.697077][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.936374][ T5210] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1050.043197][T10235] usb usb1: check_ctrlrecip: process 10235 (syz.6.14576) requesting ep 01 but needs 81 [ 1050.133908][ T5210] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.170750][ T5210] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.195235][ T5210] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1050.205047][ T5210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1050.213072][ T5210] usb 9-1: SerialNumber: syz [ 1050.374189][ T803] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1050.465678][ T5210] usb 9-1: 0:2 : does not exist [ 1050.568704][ T803] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1050.600881][ T5210] usb 9-1: USB disconnect, device number 24 [ 1050.608024][ T803] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1050.634912][ T803] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1050.675082][ T803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.689759][ T6797] udevd[6797]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.721626][T10241] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1050.764679][ T803] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1051.071341][ T803] usb 7-1: USB disconnect, device number 26 [ 1051.812202][T10407] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 1051.835712][T10407] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1051.860832][T10404] loop3: detected capacity change from 0 to 128 [ 1051.879650][T10404] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1051.920542][T10412] loop8: detected capacity change from 0 to 1024 [ 1051.927350][T10404] hpfs: filesystem error: improperly stopped [ 1051.942522][T10404] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1051.978829][T10404] hpfs: You really don't want any checks? You are crazy... [ 1052.011560][T10404] hpfs: hpfs_map_sector(): read error [ 1052.016992][T10404] hpfs: code page support is disabled [ 1052.023272][T10404] hpfs: hpfs_map_4sectors(): unaligned read [ 1052.052425][T10404] hpfs: hpfs_map_4sectors(): unaligned read [ 1052.074611][T10404] hpfs: filesystem error: unable to find root dir [ 1052.099982][T15632] hfsplus: b-tree write err: -5, ino 25 [ 1052.108228][T15632] hfsplus: b-tree write err: -5, ino 4 [ 1052.113812][T15632] hfsplus: b-tree write err: -5, ino 2 [ 1052.486223][T10449] loop3: detected capacity change from 0 to 128 [ 1052.543497][T10449] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1052.625985][T10467] loop0: detected capacity change from 0 to 256 [ 1052.643974][T10467] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1052.697378][ T5827] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1053.028272][T10488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14624'. [ 1053.062489][T10488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14624'. [ 1053.224899][T10471] loop6: detected capacity change from 0 to 32768 [ 1053.239527][T10495] netlink: 'syz.0.14627': attribute type 7 has an invalid length. [ 1053.254998][T10496] loop3: detected capacity change from 0 to 1764 [ 1053.272122][T10471] (syz.6.14620,10471,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1053.286050][T10495] netlink: 'syz.0.14627': attribute type 8 has an invalid length. [ 1053.301140][T10471] (syz.6.14620,10471,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1053.336691][T10495] netlink: 209816 bytes leftover after parsing attributes in process `syz.0.14627'. [ 1053.350253][T10471] JBD2: Ignoring recovery information on journal [ 1053.532439][T10471] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1053.674167][T10471] (syz.6.14620,10471,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1053.697499][T10515] loop3: detected capacity change from 0 to 1024 [ 1053.730783][T10471] (syz.6.14620,10471,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1053.804907][T10471] (syz.6.14620,10471,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1053.847578][T15620] hfsplus: b-tree write err: -5, ino 25 [ 1053.853916][T15620] hfsplus: b-tree write err: -5, ino 4 [ 1053.873578][T15620] hfsplus: b-tree write err: -5, ino 2 [ 1053.891236][T10471] (syz.6.14620,10471,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1053.898925][T10471] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 4 [ 1053.945352][T10471] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1053.975872][T10534] loop0: detected capacity change from 0 to 1024 [ 1053.989830][T10471] (syz.6.14620,10471,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1054.018091][T10471] (syz.6.14620,10471,1):ocfs2_mknod:318 ERROR: status = -5 [ 1054.021720][T10517] (syz.6.14620,10517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1054.041822][T10471] (syz.6.14620,10471,1):ocfs2_mknod:506 ERROR: status = -5 [ 1054.138490][T10517] (syz.6.14620,10517,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1054.138890][T10534] hfsplus: b-tree write err: -5, ino 2 [ 1054.168954][T10471] (syz.6.14620,10471,1):ocfs2_create:679 ERROR: status = -5 [ 1054.226974][T10517] (syz.6.14620,10517,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1054.263502][T10517] (syz.6.14620,10517,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1054.294617][T10517] Quota error (device loop6): find_next_id: Can't read quota tree block 4 [ 1054.308760][T15625] hfsplus: b-tree write err: -5, ino 25 [ 1054.314512][T15625] hfsplus: b-tree write err: -5, ino 4 [ 1054.329750][T15625] hfsplus: b-tree write err: -5, ino 2 [ 1054.340493][T10517] (syz.6.14620,10517,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 1054.351868][T15625] hfsplus: b-tree write err: -5, ino 26 [ 1054.505157][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14641'. [ 1054.515065][T22991] ocfs2: Unmounting device (7,6) on (node local) [ 1054.554014][T10559] Zero length message leads to an empty skb [ 1054.631227][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88807a9f0000 (6)(pimreg0) start [ 1054.691076][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88807a9f0000 (3)(pimreg0) end [ 1054.736547][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88807a9f0000 (3)(pimreg0) start [ 1054.773097][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88807a9f0000 (3)(pimreg0) end [ 1054.791289][T10575] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14646'. [ 1054.832168][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88807a9f0000 (3)(pimreg0) start [ 1054.892692][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88807a9f0000 (3)(pimreg0) end [ 1054.913819][T10578] loop0: detected capacity change from 0 to 256 [ 1054.991604][T10578] FAT-fs (loop0): Directory bread(block 64) failed [ 1055.056310][T10578] FAT-fs (loop0): Directory bread(block 65) failed [ 1055.062962][T10578] FAT-fs (loop0): Directory bread(block 66) failed [ 1055.108863][T10578] FAT-fs (loop0): Directory bread(block 67) failed [ 1055.149292][T10578] FAT-fs (loop0): Directory bread(block 68) failed [ 1055.184665][T10578] FAT-fs (loop0): Directory bread(block 69) failed [ 1055.192112][T10578] FAT-fs (loop0): Directory bread(block 70) failed [ 1055.233004][T10578] FAT-fs (loop0): Directory bread(block 71) failed [ 1055.247663][T10545] loop3: detected capacity change from 0 to 40427 [ 1055.271093][T10578] FAT-fs (loop0): Directory bread(block 72) failed [ 1055.277665][T10578] FAT-fs (loop0): Directory bread(block 73) failed [ 1055.455564][T10545] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1055.538220][T10545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1055.648438][ T29] audit: type=1804 audit(1018.553:4058): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.14639" name="/newroot/2928/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 1055.721750][ T5827] syz-executor: attempt to access beyond end of device [ 1055.721750][ T5827] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1055.738025][T10627] loop0: detected capacity change from 0 to 16 [ 1055.745439][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1055.745475][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.745486][ T5827] Call Trace: [ 1055.745494][ T5827] [ 1055.745501][ T5827] dump_stack_lvl+0xe8/0x150 [ 1055.745532][ T5827] f2fs_handle_critical_error+0x37c/0x540 [ 1055.745564][ T5827] f2fs_write_end_io+0xcdb/0xff0 [ 1055.745604][ T5827] __submit_merged_bio+0x256/0x700 [ 1055.745636][ T5827] __submit_merged_write_cond+0x3c9/0x4e0 [ 1055.745685][ T5827] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1055.745740][ T5827] f2fs_write_data_pages+0x2975/0x35e0 [ 1055.745804][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1055.745843][ T5827] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.745891][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 1055.745920][ T5827] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.745959][ T5827] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.745987][ T5827] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.746020][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 1055.746040][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1055.746060][ T5827] do_writepages+0x32e/0x550 [ 1055.746096][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 1055.746120][ T5827] filemap_fdatawrite+0x1e9/0x2f0 [ 1055.746149][ T5827] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1055.746220][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 1055.746244][ T5827] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1055.746279][ T5827] f2fs_write_checkpoint+0x9df/0x26a0 [ 1055.746334][ T5827] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1055.746412][ T5827] kill_f2fs_super+0x314/0x720 [ 1055.746438][ T5827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1055.746476][ T5827] ? lockdep_hardirqs_on+0x7a/0x110 [ 1055.746515][ T5827] deactivate_locked_super+0xbc/0x130 [ 1055.746545][ T5827] cleanup_mnt+0x437/0x4d0 [ 1055.746564][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1055.746591][ T5827] task_work_run+0x1d9/0x270 [ 1055.746615][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 1055.746648][ T5827] exit_to_user_mode_loop+0xed/0x480 [ 1055.746669][ T5827] ? rcu_is_watching+0x15/0xb0 [ 1055.746698][ T5827] do_syscall_64+0x32d/0xf80 [ 1055.746721][ T5827] ? trace_irq_disable+0x3b/0x150 [ 1055.746738][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.746757][ T5827] ? clear_bhb_loop+0x40/0x90 [ 1055.746779][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.746798][ T5827] RIP: 0033:0x7f34c1d9d897 [ 1055.746816][ T5827] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1055.746830][ T5827] RSP: 002b:00007ffe8a60a5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1055.746851][ T5827] RAX: 0000000000000000 RBX: 00007f34c1e31ef0 RCX: 00007f34c1d9d897 [ 1055.746864][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a60a670 [ 1055.746875][ T5827] RBP: 00007ffe8a60a670 R08: 00007ffe8a60b670 R09: 00000000ffffffff [ 1055.746887][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8a60b700 [ 1055.746899][ T5827] R13: 00007f34c1e31ef0 R14: 00000000000f8ae2 R15: 00007ffe8a60b740 [ 1055.746932][ T5827] [ 1055.769629][ T5827] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1056.071237][T10627] erofs (device loop0): mounted with root inode @ nid 36. [ 1056.393367][ T5999] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1056.522986][T10661] loop6: detected capacity change from 0 to 256 [ 1056.575034][ T5999] usb 5-1: Using ep0 maxpacket: 8 [ 1056.583894][ T5999] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1056.596083][ T5999] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1056.606074][T10661] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 1056.616479][ T5999] usb 5-1: string descriptor 0 read error: -22 [ 1056.639086][ T5999] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1056.676087][ T5999] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1056.727802][ T5999] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1056.737679][ T5999] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1056.738036][ T5999] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1056.738092][ T5999] usb 5-1: media controller created [ 1056.751045][ T5999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1056.943551][ T5999] zl10353_read_register: readreg error (reg=127, ret==0) [ 1056.947820][T10688] loop8: detected capacity change from 0 to 2048 [ 1056.959268][T10688] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1057.014865][ T6797] udevd[6797]: incorrect nilfs2 checksum on /dev/loop8 [ 1057.033240][T10683] loop3: detected capacity change from 0 to 4096 [ 1057.037020][ T5999] usb 5-1: USB disconnect, device number 5 [ 1057.106848][ T6797] udevd[6797]: incorrect nilfs2 checksum on /dev/loop8 [ 1057.272822][T10712] loop6: detected capacity change from 0 to 256 [ 1057.361382][T10712] FAT-fs (loop6): Directory bread(block 64) failed [ 1057.390688][T10712] FAT-fs (loop6): Directory bread(block 65) failed [ 1057.397358][T10712] FAT-fs (loop6): Directory bread(block 66) failed [ 1057.430114][T10712] FAT-fs (loop6): Directory bread(block 67) failed [ 1057.436894][T10712] FAT-fs (loop6): Directory bread(block 68) failed [ 1057.453185][T10712] FAT-fs (loop6): Directory bread(block 69) failed [ 1057.466554][T10712] FAT-fs (loop6): Directory bread(block 70) failed [ 1057.502966][T10712] FAT-fs (loop6): Directory bread(block 71) failed [ 1057.537690][T10712] FAT-fs (loop6): Directory bread(block 72) failed [ 1057.544299][T10712] FAT-fs (loop6): Directory bread(block 73) failed [ 1057.715923][T10743] blktrace: Concurrent blktraces are not allowed on sg0 [ 1057.819664][T10752] loop8: detected capacity change from 0 to 128 [ 1057.843232][T10752] FAT-fs (loop8): Directory bread(block 524322) failed [ 1057.859809][T10752] FAT-fs (loop8): Directory bread(block 524323) failed [ 1057.875591][T10752] FAT-fs (loop8): Directory bread(block 524324) failed [ 1057.883220][T10752] FAT-fs (loop8): Directory bread(block 524325) failed [ 1057.896218][T10752] FAT-fs (loop8): Directory bread(block 524326) failed [ 1057.905185][T10752] FAT-fs (loop8): Directory bread(block 524327) failed [ 1057.912478][T10752] FAT-fs (loop8): Directory bread(block 524328) failed [ 1057.912577][T10758] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1057.919362][T10752] FAT-fs (loop8): Directory bread(block 524329) failed [ 1058.022331][ T29] audit: type=1326 audit(1020.770:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.8.14691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb05759c629 code=0x0 [ 1058.509916][T10775] loop6: detected capacity change from 0 to 32768 [ 1058.644882][T10790] loop3: detected capacity change from 0 to 256 [ 1058.681081][T10790] exfat: Deprecated parameter 'utf8' [ 1058.690645][T10790] exfat: Deprecated parameter 'utf8' [ 1058.697702][T10790] exfat: Deprecated parameter 'utf8' [ 1058.725223][T10790] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1059.405269][T10807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.14703 (10807) [ 1059.445005][T10807] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1059.459894][T10807] BTRFS info (device loop8): using sha256 checksum algorithm [ 1059.473435][T10832] exfat: Deprecated parameter 'namecase' [ 1059.487404][T10832] exfat: Deprecated parameter 'namecase' [ 1059.503906][T10832] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1059.572146][T10807] BTRFS info (device loop8): enabling ssd optimizations [ 1059.577545][ T29] audit: type=1326 audit(1022.220:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.603385][ T29] audit: type=1326 audit(1022.238:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.604511][T10807] BTRFS info (device loop8): turning on async discard [ 1059.626152][ T29] audit: type=1326 audit(1022.238:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.655818][ T29] audit: type=1326 audit(1022.257:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.678207][ T29] audit: type=1326 audit(1022.257:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.717400][T10807] BTRFS info (device loop8): enabling free space tree [ 1059.773313][ T29] audit: type=1326 audit(1022.257:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.860425][T10858] sp0: Synchronizing with TNC [ 1059.872284][ T29] audit: type=1326 audit(1022.257:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.919303][T10857] [U] [ 1059.940822][ T29] audit: type=1326 audit(1022.257:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1059.971087][ T29] audit: type=1326 audit(1022.257:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1060.000465][T29185] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1060.020208][ T29] audit: type=1326 audit(1022.257:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.3.14712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1d9c629 code=0x7ffc0000 [ 1060.455483][ T5210] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1060.533734][T10894] set_capacity_and_notify: 2 callbacks suppressed [ 1060.533753][T10894] loop6: detected capacity change from 0 to 16 [ 1060.566027][T10894] erofs (device loop6): mounted with root inode @ nid 36. [ 1060.585759][T10894] syz.6.14721: attempt to access beyond end of device [ 1060.585759][T10894] loop6: rw=8912896, sector=8, nr_sectors = 24 limit=16 [ 1060.606717][T10894] syz.6.14721: attempt to access beyond end of device [ 1060.606717][T10894] loop6: rw=8388608, sector=16, nr_sectors = 8 limit=16 [ 1060.630039][ T5210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1060.656704][ T5210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1060.670406][ T5210] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1060.680441][ T5210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.717230][ T5210] usb 4-1: config 0 descriptor?? [ 1060.729575][T10875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1061.188613][ T5210] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0 [ 1061.215045][ T5210] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0 [ 1061.233281][ T5210] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0 [ 1061.254866][ T5210] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0 [ 1061.262668][ T5210] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0 [ 1061.277910][ T5210] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0 [ 1061.306306][ T5210] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0 [ 1061.342980][ T5210] lenovo 0003:17EF:6067.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 1061.465870][T29608] usb 4-1: USB disconnect, device number 38 [ 1061.511111][T10946] fido_id[10946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1061.531562][T10965] loop6: detected capacity change from 0 to 64 [ 1061.628109][T10970] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14739'. [ 1061.772432][T10979] loop6: detected capacity change from 0 to 256 [ 1061.842883][T10984] sp0: Synchronizing with TNC [ 1061.868049][T10981] [U] ` [ 1062.202333][T10968] loop0: detected capacity change from 0 to 32768 [ 1062.208829][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1062.218646][T10968] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.14738 (10968) [ 1062.256127][T10968] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1062.270762][T10968] BTRFS info (device loop0): using sha256 checksum algorithm [ 1062.346145][T10968] BTRFS info (device loop0): rebuilding free space tree [ 1062.362554][T10968] BTRFS info (device loop0): disabling free space tree [ 1062.370722][ T5210] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1062.379525][T29608] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1062.391526][T10968] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1062.404759][ T10] usb 7-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid maxpacket 57464, setting to 64 [ 1062.426992][T10968] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1062.437488][ T10] usb 7-1: config 2 interface 0 has no altsetting 0 [ 1062.456915][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1062.487894][T10968] BTRFS info (device loop0): setting nodatasum [ 1062.494316][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.505209][T10968] BTRFS info (device loop0): setting nodatacow [ 1062.517919][ T10] usb 7-1: Product: syz [ 1062.522373][T10968] BTRFS info (device loop0): turning off barriers [ 1062.528831][T10968] BTRFS info (device loop0): force clearing of disk cache [ 1062.548433][ T10] usb 7-1: Manufacturer: syz [ 1062.559242][ T10] usb 7-1: SerialNumber: syz [ 1062.566108][ T5210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.596802][T29608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1062.609977][T29608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1062.611661][ T5831] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1062.635053][ T5210] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1062.655001][T29608] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1062.657423][ T5210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.679168][T29608] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1062.691298][T29608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.708972][T11026] loop8: detected capacity change from 0 to 32768 [ 1062.714448][T29608] usb 5-1: config 0 descriptor?? [ 1062.737050][ T5210] usb 4-1: config 0 descriptor?? [ 1062.743227][T11011] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1062.842150][ T10] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22 [ 1062.871638][ T10] usb 7-1: USB disconnect, device number 27 [ 1063.198299][ T5210] waltop 0003:172F:0501.0005: unbalanced collection at end of report description [ 1063.199800][T29608] uclogic 0003:28BD:0078.0006: interface is invalid, ignoring [ 1063.230189][ T5210] waltop 0003:172F:0501.0005: probe with driver waltop failed with error -22 [ 1063.437446][ T5210] usb 4-1: USB disconnect, device number 39 [ 1063.470457][T29608] usb 5-1: USB disconnect, device number 6 [ 1063.644004][T11073] loop8: detected capacity change from 0 to 32768 [ 1063.685544][T11073] ERROR: (device loop8): dbAllocAG: unable to allocate blocks [ 1063.685544][T11073] [ 1063.698576][T11073] ERROR: (device loop8): remounting filesystem as read-only [ 1063.706861][T11073] ERROR: (device loop8): dbDiscardAG: -EIO [ 1063.706861][T11073] [ 1064.071922][T11117] loop6: detected capacity change from 0 to 16 [ 1064.092573][T11117] erofs (device loop6): mounted with root inode @ nid 36. [ 1064.113495][T11117] erofs (device loop6): readahead error at folio 2 @ nid 89 [ 1064.132303][ T2121] erofs (device loop6): failed to decompress (shifted) -EOPNOTSUPP @ pa 4096 size 4096 => 4868 [ 1064.144539][T11117] erofs (device loop6): failed to decompress (shifted) -EOPNOTSUPP @ pa 4096 size 4096 => 4868 [ 1064.170995][T11117] erofs (device loop6): read error -95 @ 1 of nid 89 [ 1064.881058][T11164] sp0: Synchronizing with TNC [ 1065.159179][ T5999] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1065.314108][T11182] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1065.341155][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 1065.349296][ T5999] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1065.351442][T11182] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1065.362553][ T5999] usb 4-1: config 1 has no interface number 0 [ 1065.380807][ T5999] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1065.397134][T11186] loop6: detected capacity change from 0 to 4096 [ 1065.402134][ T5999] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1065.423958][T11188] dummy0: entered promiscuous mode [ 1065.444869][ T5999] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1065.445395][T11186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.456119][ T5999] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1065.477391][T11188] dummy0: left promiscuous mode [ 1065.486464][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888033f3e000 (15)(macsec1) start [ 1065.492966][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.512371][ T5999] usb 4-1: Product: syz [ 1065.516571][ T5999] usb 4-1: Manufacturer: syz [ 1065.521759][ T5999] usb 4-1: SerialNumber: syz [ 1065.531213][T11170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1065.544287][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888033f3e000 (3)(macsec1) end [ 1065.565356][T11170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1065.602734][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888033f3e000 (3)(macsec1) start [ 1065.656946][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888033f3e000 (3)(macsec1) end [ 1065.690615][T11186] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.14778: bg 0: block 363: padding at end of block bitmap is not set [ 1065.708241][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888033f3e000 (3)(macsec1) start [ 1065.726168][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888033f3e000 (3)(macsec1) end [ 1065.761593][T11186] fs-verity (loop6, inode 15): ext4_end_enable_verity() failed with err -117 [ 1065.810677][T22991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.930943][T11209] MTD: Couldn't look up 'mountinfo': -2 [ 1066.022631][T11170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1066.030697][T11170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1066.297297][ T5999] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1066.324818][ T5999] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1066.349200][ T5999] usb 4-1: USB disconnect, device number 40 [ 1066.490336][T11252] loop0: detected capacity change from 0 to 256 [ 1066.569464][T11252] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1066.640665][T11252] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 1066.809772][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14800'. [ 1066.820377][ T5999] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1066.999819][ T5999] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.027260][ T5999] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1067.027291][ T5999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.043082][ T5999] usb 9-1: config 0 descriptor?? [ 1067.322198][T11321] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1067.330063][T11321] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1067.353691][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88805a66a000 (11)(ipvlan2) start [ 1067.390506][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88805a66a000 (3)(ipvlan2) end [ 1067.429265][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88805a66a000 (3)(ipvlan2) start [ 1067.449080][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88805a66a000 (3)(ipvlan2) end [ 1067.466500][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88805a66a000 (3)(ipvlan2) start [ 1067.484492][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88805a66a000 (3)(ipvlan2) end [ 1067.501090][ T5999] logitech 0003:046D:C295.0007: hidraw0: USB HID v0.02 Device [HID 046d:c295] on usb-dummy_hcd.8-1/input0 [ 1067.534604][ T5999] logitech 0003:046D:C295.0007: no inputs found [ 1067.702678][ T10] usb 9-1: USB disconnect, device number 25 [ 1067.933426][T11323] loop0: detected capacity change from 0 to 32768 [ 1067.999061][T11323] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1068.158016][T11345] loop6: detected capacity change from 0 to 32768 [ 1068.199410][T11345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14815 (11345) [ 1068.255404][T11345] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.283126][T11345] BTRFS info (device loop6): using sha256 checksum algorithm [ 1068.331375][ T5831] ocfs2: Unmounting device (7,0) on (node local) [ 1068.472856][T11345] BTRFS info (device loop6): enabling ssd optimizations [ 1068.499650][T11345] BTRFS info (device loop6): turning on async discard [ 1068.526486][T11345] BTRFS info (device loop6): enabling free space tree [ 1068.590884][T11345] BTRFS info (device loop6): Snapshot src from another FS [ 1068.680632][T22991] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.910920][T11413] loop6: detected capacity change from 0 to 64 [ 1069.063291][T11383] loop8: detected capacity change from 0 to 32768 [ 1069.092868][T11383] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.14823 (11383) [ 1069.141700][T11383] BTRFS info (device loop8): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1069.200436][T11383] BTRFS info (device loop8): using crc32c checksum algorithm [ 1069.254437][T11430] loop6: detected capacity change from 0 to 2048 [ 1069.320525][T11430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1069.479046][T11383] BTRFS info (device loop8): enabling ssd optimizations [ 1069.495808][T11383] BTRFS info (device loop8): turning on async discard [ 1069.531959][T11383] BTRFS info (device loop8): enabling free space tree [ 1069.729154][T11460] veth1_macvtap: entered promiscuous mode [ 1069.788990][T29185] BTRFS info (device loop8): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1069.972177][T11478] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14843'. [ 1070.100508][T11485] loop3: detected capacity change from 0 to 1024 [ 1070.139955][T11485] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 1070.299242][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14846'. [ 1070.348491][T11496] gre0: Master is either lo or non-ether device [ 1070.890330][T11529] netlink: 104 bytes leftover after parsing attributes in process `syz.8.14857'. [ 1071.709366][T11559] loop3: detected capacity change from 0 to 32768 [ 1071.735508][T11559] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1071.800607][T11559] XFS (loop3): Ending clean mount [ 1071.831056][T11559] XFS (loop3): Quotacheck needed: Please wait. [ 1071.970332][T11559] XFS (loop3): Quotacheck: Done. [ 1072.057236][T11567] loop6: detected capacity change from 0 to 32768 [ 1072.116766][ T5827] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1072.118829][T11567] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1072.297407][T11567] XFS (loop6): Ending clean mount [ 1072.338627][T11567] XFS (loop6): Quotacheck needed: Please wait. [ 1072.345337][ T5999] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1072.400725][T11567] XFS (loop6): Quotacheck: Done. [ 1072.523251][T22991] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1072.535561][ T5999] usb 9-1: Using ep0 maxpacket: 16 [ 1072.542543][ T5999] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.564997][ T5999] usb 9-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1072.578654][ T5999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.623913][ T5999] usb 9-1: config 0 descriptor?? [ 1073.092795][ T5999] sunplus 0003:04FC:05D8.0008: reserved main item tag 0xd [ 1073.100212][ T5999] sunplus 0003:04FC:05D8.0008: unexpected long global item [ 1073.108041][ T5999] sunplus 0003:04FC:05D8.0008: probe with driver sunplus failed with error -22 [ 1073.235459][T11646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1073.323784][ T5999] usb 9-1: USB disconnect, device number 26 [ 1073.603675][T11674] netlink: 'syz.4.14890': attribute type 29 has an invalid length. [ 1073.613717][T11674] netlink: 'syz.4.14890': attribute type 29 has an invalid length. [ 1073.648645][T11676] mkiss: ax0: crc mode is auto. [ 1073.946873][T11695] loop3: detected capacity change from 0 to 4096 [ 1073.965684][T11695] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1073.976651][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14898'. [ 1074.025314][T11695] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1074.087682][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1074.087700][ T29] audit: type=1326 audit(1035.802:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.187468][ T29] audit: type=1326 audit(1035.802:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.258385][ T29] audit: type=1326 audit(1035.802:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.334940][ T29] audit: type=1326 audit(1035.802:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.372501][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14904'. [ 1074.426497][ T29] audit: type=1326 audit(1035.820:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.540013][ T29] audit: type=1326 audit(1035.820:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.594817][ T29] audit: type=1326 audit(1035.820:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.625584][ T29] audit: type=1326 audit(1035.830:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.653403][ T29] audit: type=1326 audit(1035.830:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.701977][ T29] audit: type=1326 audit(1035.839:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.14901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f33c559c629 code=0x7ffc0000 [ 1074.761950][ T5999] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1074.945714][ T5999] usb 5-1: Using ep0 maxpacket: 16 [ 1074.994758][ T5999] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1075.003864][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.022734][ T5999] usb 5-1: Product: syz [ 1075.027024][ T5999] usb 5-1: Manufacturer: syz [ 1075.031633][ T5999] usb 5-1: SerialNumber: syz [ 1075.073894][ T5999] usb 5-1: config 0 descriptor?? [ 1075.087936][T11776] loop0: detected capacity change from 0 to 8 [ 1075.096870][ T5999] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1075.427007][T11799] loop3: detected capacity change from 0 to 1024 [ 1075.460602][T11799] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.14927: Failed to acquire dquot type 0 [ 1075.472646][T11799] loop3: lost filesystem error report for type 5 error -117 [ 1075.473438][T11799] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, [ 1075.480846][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1075.480867][ C0] EXT4-fs (loop3): initial error at time 1037: ext4_acquire_dquot:7003 [ 1075.480889][ C0] EXT4-fs (loop3): last error at time 1037: ext4_acquire_dquot:7003 [ 1075.513115][T11799] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1075.534309][T11799] EXT4-fs (loop3): 1 truncate cleaned up [ 1075.556076][T11799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.621152][T11799] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.14927: Failed to acquire dquot type 0 [ 1075.669316][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.724785][T11809] loop8: detected capacity change from 0 to 128 [ 1075.766865][ T5999] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 1075.776409][T11809] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1075.800507][T11809] hpfs: filesystem error: improperly stopped [ 1075.806549][T11809] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1075.820966][ T5999] usb 5-1: USB disconnect, device number 7 [ 1075.861798][T11809] hpfs: You really don't want any checks? You are crazy... [ 1075.880086][T11763] loop6: detected capacity change from 0 to 40427 [ 1075.891892][T11809] hpfs: hpfs_map_sector(): read error [ 1075.905105][T11809] hpfs: code page support is disabled [ 1075.911532][T11809] hpfs: hpfs_map_4sectors(): unaligned read [ 1075.917578][T11763] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 1075.926729][T11763] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1075.946964][T11809] hpfs: hpfs_map_4sectors(): unaligned read [ 1075.954922][T11809] hpfs: filesystem error: unable to find root dir [ 1075.965205][T11763] F2FS-fs (loop6): invalid crc value [ 1076.091395][T11763] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1076.129742][T11763] F2FS-fs (loop6): Start checkpoint disabled! [ 1076.136938][T11763] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1076.161402][T11763] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1076.168482][T11763] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1076.262770][T15632] kworker/u8:13: attempt to access beyond end of device [ 1076.262770][T15632] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1076.279013][T15632] CPU: 0 UID: 0 PID: 15632 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1076.279039][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1076.279051][T15632] Workqueue: writeback wb_workfn (flush-7:6) [ 1076.279081][T15632] Call Trace: [ 1076.279090][T15632] [ 1076.279098][T15632] dump_stack_lvl+0xe8/0x150 [ 1076.279126][T15632] f2fs_handle_critical_error+0x37c/0x540 [ 1076.279158][T15632] f2fs_write_end_io+0xcdb/0xff0 [ 1076.279196][T15632] __submit_merged_bio+0x256/0x700 [ 1076.279228][T15632] __submit_merged_write_cond+0x3c9/0x4e0 [ 1076.279261][T15632] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1076.279312][T15632] f2fs_write_data_pages+0x2975/0x35e0 [ 1076.279368][T15632] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1076.279407][T15632] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1076.279465][T15632] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1076.279515][T15632] ? __lock_acquire+0x6b5/0x2cf0 [ 1076.279558][T15632] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1076.279577][T15632] do_writepages+0x32e/0x550 [ 1076.279606][T15632] ? reacquire_held_locks+0x104/0x190 [ 1076.279629][T15632] ? writeback_sb_inodes+0x477/0x1a20 [ 1076.279655][T15632] __writeback_single_inode+0x133/0x11a0 [ 1076.279678][T15632] ? do_raw_spin_unlock+0xf5/0x210 [ 1076.279701][T15632] writeback_sb_inodes+0x992/0x1a20 [ 1076.279753][T15632] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1076.279771][T15632] ? do_raw_spin_lock+0x12b/0x2f0 [ 1076.279831][T15632] ? rcu_is_watching+0x15/0xb0 [ 1076.279840][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14936'. [ 1076.279863][T15632] wb_writeback+0x456/0xb70 [ 1076.279885][T15632] ? queue_io+0x1f1/0x4a0 [ 1076.279911][T15632] ? __pfx_wb_writeback+0x10/0x10 [ 1076.279930][T15632] ? do_raw_spin_lock+0x12b/0x2f0 [ 1076.279966][T15632] wb_workfn+0x414/0xf50 [ 1076.279988][T15632] ? look_up_lock_class+0x57/0x110 [ 1076.280025][T15632] ? __pfx_wb_workfn+0x10/0x10 [ 1076.280047][T15632] ? do_raw_spin_lock+0x12b/0x2f0 [ 1076.280069][T15632] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1076.280109][T15632] ? process_one_work+0x87c/0x1650 [ 1076.280131][T15632] process_one_work+0x949/0x1650 [ 1076.280165][T15632] ? preempt_schedule_common+0xd0/0xd0 [ 1076.280196][T15632] ? __pfx_process_one_work+0x10/0x10 [ 1076.280215][T15632] ? do_raw_spin_lock+0x12b/0x2f0 [ 1076.280252][T15632] worker_thread+0xb46/0x1140 [ 1076.280285][T15632] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1076.280322][T15632] kthread+0x388/0x470 [ 1076.280341][T15632] ? __pfx_worker_thread+0x10/0x10 [ 1076.280362][T15632] ? __pfx_kthread+0x10/0x10 [ 1076.280387][T15632] ret_from_fork+0x51e/0xb90 [ 1076.280414][T15632] ? __pfx_ret_from_fork+0x10/0x10 [ 1076.280435][T15632] ? __switch_to+0xc7d/0x1450 [ 1076.280460][T15632] ? __pfx_kthread+0x10/0x10 [ 1076.280479][T15632] ret_from_fork_asm+0x1a/0x30 [ 1076.280514][T15632] [ 1076.280522][T15632] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1076.704788][ T5930] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1076.865313][ T5930] usb 9-1: Using ep0 maxpacket: 16 [ 1076.886828][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.906247][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.917149][ T5930] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1076.927072][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.945566][T11870] loop6: detected capacity change from 0 to 1024 [ 1076.957423][ T5930] usb 9-1: config 0 descriptor?? [ 1077.065625][T15625] hfsplus: b-tree write err: -5, ino 25 [ 1077.072171][T15625] hfsplus: b-tree write err: -5, ino 4 [ 1077.077865][T15625] hfsplus: b-tree write err: -5, ino 2 [ 1077.423491][ T5930] gt683r_led 0003:1770:FF00.0009: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.8-1/input0 [ 1077.659499][ T5930] usb 9-1: USB disconnect, device number 27 [ 1077.692338][ T5999] gt683r_led 0003:1770:FF00.0009: failed to send set report request: -19 [ 1077.782167][T11936] tipc: Started in network mode [ 1077.787384][T11936] tipc: Node identity 00000000000000000000007ade000001, cluster identity 4711 [ 1077.797720][T11936] tipc: Enabling of bearer rejected, failed to enable media [ 1077.950892][T11949] usb usb9: usbfs: process 11949 (syz.3.14961) did not claim interface 4 before use [ 1078.058527][T11954] loop3: detected capacity change from 0 to 1024 [ 1078.655895][T12003] CIFS mount error: No usable UNC path provided in device string! [ 1078.655895][T12003] [ 1078.681334][T12003] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1078.818021][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14982'. [ 1079.280088][T12049] loop6: detected capacity change from 0 to 128 [ 1079.310867][T12049] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1079.393449][T12010] loop8: detected capacity change from 0 to 32768 [ 1079.417316][T22991] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1079.488153][T12010] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1079.562568][T12010] XFS (loop8): Ending clean mount [ 1079.597058][T12010] XFS (loop8): Quotacheck needed: Please wait. [ 1079.772317][T12010] XFS (loop8): Quotacheck: Done. [ 1079.779648][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14997'. [ 1079.835574][T12087] netlink: 'syz.0.14998': attribute type 10 has an invalid length. [ 1079.840095][T29185] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1079.907303][T12094] netlink: 'syz.0.14998': attribute type 10 has an invalid length. [ 1079.985569][T12094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14998'. [ 1080.262763][T12111] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15000'. [ 1080.495140][T12124] loop6: detected capacity change from 0 to 2048 [ 1080.534390][T12124] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1080.564873][T12124] NILFS (loop6): mounting unchecked fs [ 1080.597873][T12124] NILFS (loop6): recovery complete [ 1080.613060][T12134] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1080.983224][T12150] loop6: detected capacity change from 0 to 64 [ 1081.090290][T12119] loop3: detected capacity change from 0 to 32768 [ 1081.119637][T12119] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1081.145828][T12119] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1081.215554][T12119] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 1081.263127][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1081.286647][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1081.472354][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 173ms [ 1081.490915][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 1081.504955][T12119] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1081.638715][T12182] loop6: detected capacity change from 0 to 512 [ 1081.682190][T12119] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1081.713763][T12182] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1081.766097][T12182] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.15025: inode has both inline data and extents flags [ 1081.801102][T12182] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1081.801446][T12182] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.15025: couldn't read orphan inode 15 (err -117) [ 1081.810661][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1081.810681][ C1] EXT4-fs (loop6): initial error at time 1043: ext4_orphan_get:1391: inode 15 [ 1081.810711][ C1] EXT4-fs (loop6): last error at time 1043: ext4_orphan_get:1391: inode 15 [ 1081.954162][T12182] loop6: lost filesystem error report for type 5 error -117 [ 1081.956118][T12182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.048331][T12182] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 1082.084406][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15030'. [ 1082.114366][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1082.114384][ T29] audit: type=1800 audit(1043.303:4098): pid=12182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15025" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1082.120686][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15032'. [ 1082.146420][T12207] bond0: option lp_interval: invalid value (18446744073709551612) [ 1082.169289][ T5827] syz-executor: attempt to access beyond end of device [ 1082.169289][ T5827] loop3: rw=8400897, sector=68719479080, nr_sectors = 8 limit=32768 [ 1082.190327][T12207] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1082.192776][T22991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.198187][ T5827] Buffer I/O error on dev loop3, logical block 8589934885, lost async page write [ 1082.232321][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1082.246867][ T5827] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 1082.271600][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1082.271625][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.271637][ T5827] Call Trace: [ 1082.271645][ T5827] [ 1082.271652][ T5827] dump_stack_lvl+0xe8/0x150 [ 1082.271683][ T5827] gfs2_withdraw+0xc3/0x1b0 [ 1082.271707][ T5827] gfs2_ail1_flush+0x990/0xfd0 [ 1082.271751][ T5827] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 1082.271789][ T5827] empty_ail1_list+0x1b3/0x330 [ 1082.271816][ T5827] ? __pfx_empty_ail1_list+0x10/0x10 [ 1082.271882][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 1082.271906][ T5827] gfs2_log_flush+0x1e20/0x2510 [ 1082.271941][ T5827] ? __pfx_gfs2_log_flush+0x10/0x10 [ 1082.271966][ T5827] ? call_rcu+0x644/0x890 [ 1082.271990][ T5827] ? lockdep_hardirqs_on+0x7a/0x110 [ 1082.272018][ T5827] gfs2_kill_sb+0x5c/0x430 [ 1082.272045][ T5827] deactivate_locked_super+0xbc/0x130 [ 1082.272073][ T5827] cleanup_mnt+0x437/0x4d0 [ 1082.272090][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.272115][ T5827] task_work_run+0x1d9/0x270 [ 1082.272138][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 1082.272169][ T5827] exit_to_user_mode_loop+0xed/0x480 [ 1082.272188][ T5827] ? rcu_is_watching+0x15/0xb0 [ 1082.272214][ T5827] do_syscall_64+0x32d/0xf80 [ 1082.272235][ T5827] ? trace_irq_disable+0x3b/0x150 [ 1082.272247][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.272264][ T5827] ? clear_bhb_loop+0x40/0x90 [ 1082.272284][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.272301][ T5827] RIP: 0033:0x7f34c1d9d897 [ 1082.272318][ T5827] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1082.272331][ T5827] RSP: 002b:00007ffe8a60a5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1082.272350][ T5827] RAX: 0000000000000000 RBX: 00007f34c1e31ef0 RCX: 00007f34c1d9d897 [ 1082.272362][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a60a670 [ 1082.272373][ T5827] RBP: 00007ffe8a60a670 R08: 00007ffe8a60b670 R09: 00000000ffffffff [ 1082.272385][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8a60b700 [ 1082.272396][ T5827] R13: 00007f34c1e31ef0 R14: 00000000000feb35 R15: 00007ffe8a60b740 [ 1082.272424][ T5827] [ 1082.272430][ T5827] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1082.361061][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888041978000 (17)(veth0_macvtap) start [ 1082.543231][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888041978000 (19)(veth0_macvtap) end [ 1082.560307][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888041978000 (19)(veth0_macvtap) start [ 1082.616389][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888041978000 (17)(veth0_macvtap) end [ 1082.637048][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888041978000 (17)(veth0_macvtap) start [ 1082.696888][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888041978000 (11)(veth0_macvtap) end [ 1082.737890][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888036d64000 (5)(macvtap0) start [ 1082.790556][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888036d64000 (5)(macvtap0) end [ 1082.821178][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888036d64000 (4)(macvtap0) start [ 1082.857258][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888036d64000 (4)(macvtap0) end [ 1082.875701][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888036d64000 (4)(macvtap0) start [ 1082.926726][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888036d64000 (4)(macvtap0) end [ 1082.960880][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88802c990000 (8)(veth1_macvtap) start [ 1082.993994][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88802c990000 (8)(veth1_macvtap) end [ 1083.028315][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15039'. [ 1083.033832][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88802c990000 (8)(veth1_macvtap) start [ 1083.062784][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88802c990000 (8)(veth1_macvtap) end [ 1083.081760][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88802c990000 (8)(veth1_macvtap) start [ 1083.102408][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88802c990000 (8)(veth1_macvtap) end [ 1083.128524][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888044d4a000 (4)(macsec0) start [ 1083.148749][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888044d4a000 (4)(macsec0) end [ 1083.166122][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888044d4a000 (4)(macsec0) start [ 1083.184281][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888044d4a000 (4)(macsec0) end [ 1083.215388][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888044d4a000 (4)(macsec0) start [ 1083.235213][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888044d4a000 (4)(macsec0) end [ 1083.321729][T12266] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1083.427559][T12272] vivid-007: disconnect [ 1083.436242][T12271] vivid-007: reconnect [ 1083.642643][T12290] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 1083.661675][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15053'. [ 1083.685288][T12293] syz_tun: entered promiscuous mode [ 1083.704432][T12293] syz_tun: left promiscuous mode [ 1083.732036][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88804e7ec000 (14)(macsec0) start [ 1083.761702][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88804e7ec000 (4)(macsec0) end [ 1083.780495][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88804e7ec000 (4)(macsec0) start [ 1083.798232][ T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1083.806238][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88804e7ec000 (4)(macsec0) end [ 1083.826319][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88804e7ec000 (3)(macsec0) start [ 1083.843586][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88804e7ec000 (3)(macsec0) end [ 1083.977971][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1083.994945][ T10] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1084.004671][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.015472][ T10] usb 9-1: config 0 descriptor?? [ 1084.060820][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1084.072457][T12312] fuse: Bad value for 'user_id' [ 1084.077408][T12312] fuse: Bad value for 'user_id' [ 1084.163960][T12315] loop6: detected capacity change from 0 to 4096 [ 1084.177887][T12315] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1084.187370][T12315] ntfs3(loop6): ino=3, mi_enum_attr [ 1084.235538][T12315] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1084.252305][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1084.263716][T12315] ntfs3(loop6): ino=1f, "file2" failed to open parent directory r=5 to update [ 1084.276837][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1084.290249][ T24] usb 5-1: config 0 has no interface number 0 [ 1084.296563][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1084.326850][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1084.327676][T15620] ntfs3(loop6): ino=1f, failed to open parent directory r=5 to update [ 1084.339191][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.353395][ T24] usb 5-1: Product: syz [ 1084.357713][ T24] usb 5-1: Manufacturer: syz [ 1084.380817][ T24] usb 5-1: SerialNumber: syz [ 1084.399193][ T24] usb 5-1: config 0 descriptor?? [ 1084.410814][T12301] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1084.470522][ T10] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 1084.483993][ T10] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 1084.487700][T12327] loop6: detected capacity change from 0 to 256 [ 1084.491887][ T10] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 1084.506247][T12327] exfat: Deprecated parameter 'namecase' [ 1084.518661][T12327] exfat: Deprecated parameter 'utf8' [ 1084.524267][ T10] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 1084.541215][ T10] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 1084.542166][T12327] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1084.549687][ T10] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 1084.594808][ T10] samsung 0003:0419:0600.000A: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.8-1/input0 [ 1084.642252][T12301] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1084.706495][ T10] usb 9-1: USB disconnect, device number 28 [ 1085.079792][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1085.097205][ T24] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1085.122736][ T24] usb 5-1: USB disconnect, device number 8 [ 1085.466004][T12401] xt_hashlimit: size too large, truncated to 1048576 [ 1085.745613][T12398] loop6: detected capacity change from 0 to 32768 [ 1085.785169][T12398] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1085.787626][T12416] loop0: detected capacity change from 0 to 1024 [ 1085.811972][T12416] hfsplus: b-tree write err: -5, ino 2 [ 1085.826462][T12416] hfsplus: b-tree write err: -5, ino 2 [ 1085.875400][T15632] hfsplus: b-tree write err: -5, ino 25 [ 1085.900500][T15632] hfsplus: b-tree write err: -5, ino 4 [ 1085.906213][T15632] hfsplus: b-tree write err: -5, ino 2 [ 1085.920832][T12398] XFS (loop6): Ending clean mount [ 1085.930062][T12398] XFS (loop6): Quotacheck needed: Please wait. [ 1086.026768][T12398] XFS (loop6): Quotacheck: Done. [ 1086.116381][T22991] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1086.173567][T12443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15088'. [ 1086.210392][T12443] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 1086.221991][T12446] loop8: detected capacity change from 0 to 128 [ 1086.237292][T12449] loop0: detected capacity change from 0 to 128 [ 1086.258543][T12449] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1086.345099][T12446] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1086.346562][T12449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.378451][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15089'. [ 1086.447262][T12446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.693538][T12472] netlink: 104 bytes leftover after parsing attributes in process `syz.8.15091'. [ 1086.886729][T12489] loop6: detected capacity change from 0 to 512 [ 1086.956705][T12489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.130586][T22991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.637719][T12502] loop0: detected capacity change from 0 to 40427 [ 1087.648818][T12502] F2FS-fs: heap/no_heap options were deprecated [ 1087.657847][T12502] F2FS-fs (loop0): build fault injection rate: 19 [ 1087.666653][T12502] F2FS-fs (loop0): build fault injection type: 0x364 [ 1087.674943][T12502] F2FS-fs (loop0): invalid crc value [ 1087.808430][T12502] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1087.835500][T12502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1087.865769][T12502] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=30303030, run fsck to fix. [ 1087.913530][T12502] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=30303030, run fsck to fix. [ 1087.945034][ T2121] Bluetooth: hci1: Unable to find connection for big 0xff [ 1087.955903][ T5831] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_write_data_summaries+0xd5/0x730 [ 1087.977002][ T5930] gfs2: fsid=syz:syz.0: file system withdrawn [ 1088.507349][T12559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15113'. [ 1088.694307][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15119'. [ 1088.943155][T12593] netlink: 'syz.8.15123': attribute type 29 has an invalid length. [ 1089.565827][ T5930] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1089.575527][T12628] netlink: 'syz.3.15133': attribute type 32 has an invalid length. [ 1089.597898][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15133'. [ 1089.645358][T12628] bond3: Setting coupled_control to off (0) [ 1089.665274][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1089.712802][T12622] loop8: detected capacity change from 0 to 32768 [ 1089.728044][ T5930] usb 7-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 1089.744106][T12622] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 1089.744701][ T5930] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1089.775580][T12622] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1089.811734][ T5930] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 1089.837651][T12622] XFS (loop8): Ending clean mount [ 1089.852800][T12622] XFS (loop8): Quotacheck needed: Please wait. [ 1089.859859][ T24] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1089.886963][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.895139][ T5930] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1089.906984][T12622] XFS (loop8): Quotacheck: Done. [ 1089.919052][ T24] usb 5-1: Product: syz [ 1089.923259][ T24] usb 5-1: Manufacturer: syz [ 1089.928344][ T5930] usb 7-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1089.961211][ T24] usb 5-1: SerialNumber: syz [ 1089.970265][T29185] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1089.982519][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.003735][ T24] usb 5-1: config 0 descriptor?? [ 1090.012321][ T5930] usb 7-1: config 0 descriptor?? [ 1090.040469][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1090.050169][T12684] loop3: detected capacity change from 0 to 1024 [ 1090.080705][T12684] EXT4-fs: Ignoring removed oldalloc option [ 1090.088334][T12684] EXT4-fs: Ignoring removed bh option [ 1090.119357][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1090.152682][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1090.158126][T12684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.189794][ T24] usb 5-1: media controller created [ 1090.217505][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.344165][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.362677][ T24] DVB: Unable to find symbol mt352_attach() [ 1090.448480][ T24] DVB: Unable to find symbol nxt6000_attach() [ 1090.455597][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1090.485641][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input83 [ 1090.500868][ T5930] elecom 0003:056E:00FD.000B: item fetching failed at offset 3/5 [ 1090.518995][ T5930] elecom 0003:056E:00FD.000B: probe with driver elecom failed with error -22 [ 1090.533125][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 1090.559852][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1090.578062][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 1090.584295][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 1090.593663][ T24] usb 5-1: USB disconnect, device number 9 [ 1090.691861][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1090.779732][ T5930] usb 7-1: USB disconnect, device number 28 [ 1091.810371][T12812] Cannot find add_set index 0 as target [ 1091.844974][T12814] ALSA: seq fatal error: cannot create timer (-19) [ 1092.029007][T12827] CUSE: unknown device info "KJ H+ۤ@Lhn" [ 1092.059097][T12785] loop8: detected capacity change from 0 to 32768 [ 1092.072965][T12827] CUSE: unknown device info "n(3նi>f[_ٮ,<_eF" [ 1092.091857][T12785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15149 (12785) [ 1092.117454][T12827] CUSE: unknown device info "3ܟ,̘" [ 1092.131680][T12827] CUSE: unknown device info "J2B Z !e/J+-na4D|G$5O~q [ 1092.131680][T12827] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1092.151263][T12833] netlink: 52 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1092.175182][T12785] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1092.190230][T12785] BTRFS info (device loop8): using sha256 checksum algorithm [ 1092.192607][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1092.202037][T12827] CUSE: unknown device info "!To}ݝ&|L+Uoa/KjcYPϲ"FstV:׌E gJ<@c4TMM|" [ 1092.249528][T12827] CUSE: DEVNAME unspecified [ 1092.357591][T12785] BTRFS info (device loop8): enabling ssd optimizations [ 1092.409632][T12785] BTRFS info (device loop8): turning on async discard [ 1092.452147][T12785] BTRFS info (device loop8): enabling free space tree [ 1092.773994][T29185] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1093.643560][T12868] loop6: detected capacity change from 0 to 32768 [ 1093.793373][T12868] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1093.820455][T12868] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1093.926466][T12868] XFS (loop6): Ending clean mount [ 1093.997162][T12868] XFS (loop6): Quotacheck needed: Please wait. [ 1094.113945][ T180] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 1094.197297][ T180] XFS (loop6): Unmount and run xfs_repair [ 1094.203074][ T180] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1094.253312][ T180] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1094.282575][ T180] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1094.305828][ T180] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1094.338507][ T180] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1094.375294][ T180] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1094.406347][ T180] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1094.432429][ T180] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1094.457623][ T180] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1094.504670][ T180] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 8 error 74 [ 1094.545438][ T180] loop6: lost filesystem error report for type 5 error -117 [ 1094.564529][T12868] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1094.622482][T12868] loop6: lost filesystem error report for type 5 error -117 [ 1094.734565][T22991] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1094.788940][T22991] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 1094.984908][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15200'. [ 1095.184575][T12991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1095.202091][T12991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1095.274647][T12991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1095.286651][T12991] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1095.324874][T13007] loop6: detected capacity change from 0 to 512 [ 1095.340002][T12991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1095.361508][T12991] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1095.417995][T13007] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1095.456743][T13007] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1095.464838][T13007] System zones: 0-1, 15-15, 18-18, 34-34 [ 1095.508366][T13007] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1095.515519][T13007] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1095.525894][T13007] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1095.540806][T13007] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1095.548155][T13007] EXT4-fs (loop6): 1 truncate cleaned up [ 1095.557469][T13007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1095.587817][T13007] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 1095.606321][T13007] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 1095.663424][T22991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.933942][T12998] loop3: detected capacity change from 0 to 32768 [ 1096.042215][T12998] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1096.318952][T13052] loop6: detected capacity change from 0 to 8 [ 1096.450924][ T5827] ocfs2: Unmounting device (7,3) on (node local) [ 1096.499222][T13021] loop8: detected capacity change from 0 to 32768 [ 1096.537022][T13061] netlink: 'syz.6.15219': attribute type 5 has an invalid length. [ 1096.580159][T13021] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1096.722281][T13021] XFS (loop8): Ending clean mount [ 1096.795036][T13021] XFS (loop8): Quotacheck needed: Please wait. [ 1096.842632][T13043] loop0: detected capacity change from 0 to 32768 [ 1096.963971][T13043] JBD2: Ignoring recovery information on journal [ 1097.045730][T13092] netlink: 'syz.4.15225': attribute type 1 has an invalid length. [ 1097.053763][T13092] netlink: 'syz.4.15225': attribute type 3 has an invalid length. [ 1097.063146][T13092] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15225'. [ 1097.092547][T13021] XFS (loop8): Quotacheck: Done. [ 1097.155670][T13043] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1097.273527][T13043] grow_buffers: requested out-of-range block 1008806316530991136 for device loop0 [ 1097.307245][T13043] (syz.0.15215,13043,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 1097.315725][T13043] (syz.0.15215,13043,0):ocfs2_trim_mainbm:7632 ERROR: status = -12 [ 1097.344145][T29185] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1097.369779][ T2121] Bluetooth: hci3: command 0x0406 tx timeout [ 1097.400767][T13101] loop3: detected capacity change from 0 to 4096 [ 1097.459306][ T2121] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.512670][T13081] loop6: detected capacity change from 0 to 32768 [ 1097.519571][T13101] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1097.542635][ T2121] Bluetooth: hci1: command 0x0406 tx timeout [ 1097.646761][T13081] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1097.690985][T13101] ntfs3(loop3): Failed to load $Extend (-22). [ 1097.697131][T13101] ntfs3(loop3): Failed to initialize $Extend. [ 1097.751306][T13081] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1097.805575][ T5831] ocfs2: Unmounting device (7,0) on (node local) [ 1097.879112][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15228'. [ 1097.888996][T13119] openvswitch: netlink: nsh attr 3575 is out of range max 3 [ 1097.890186][T13081] XFS (loop6): Ending clean mount [ 1098.003723][T13081] XFS (loop6): Quotacheck needed: Please wait. [ 1098.107610][T13081] XFS (loop6): Quotacheck: Done. [ 1098.151827][T13133] loop3: detected capacity change from 0 to 128 [ 1098.276944][T22991] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1099.155373][ T5210] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1099.345762][ T5210] usb 9-1: Using ep0 maxpacket: 16 [ 1099.356894][T13209] loop3: detected capacity change from 0 to 64 [ 1099.384637][ T5210] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1099.405879][ T5210] usb 9-1: config 0 has no interface number 0 [ 1099.419502][ T29] audit: type=1326 audit(1059.495:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6968d9c629 code=0x7ffc0000 [ 1099.441782][ T5210] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1099.441819][ T5210] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1099.485702][ T5210] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1099.492106][ T29] audit: type=1326 audit(1059.542:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6968d9c629 code=0x7ffc0000 [ 1099.536198][ T5210] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1099.584082][ T5210] usb 9-1: Product: syz [ 1099.593672][ T2121] Bluetooth: hci3: command 0x0406 tx timeout [ 1099.614727][ T5210] usb 9-1: SerialNumber: syz [ 1099.633722][ T5210] usb 9-1: config 0 descriptor?? [ 1099.681595][ T2121] Bluetooth: hci2: command 0x0406 tx timeout [ 1099.705440][ T29] audit: type=1326 audit(1059.542:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6968d9c629 code=0x7ffc0000 [ 1099.730902][ T5210] cm109 9-1:0.8: invalid payload size 1024, expected 4 [ 1099.740291][ T5210] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input84 [ 1099.751967][ T29] audit: type=1326 audit(1059.542:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6968d9c629 code=0x7ffc0000 [ 1099.782213][ T2121] Bluetooth: hci1: command 0x0406 tx timeout [ 1099.794274][ T29] audit: type=1326 audit(1059.551:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6968d9c629 code=0x7ffc0000 [ 1099.816739][ T29] audit: type=1326 audit(1059.551:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6968d9c629 code=0x7ffc0000 [ 1100.002524][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1100.010532][ T24] usb 9-1: USB disconnect, device number 29 [ 1100.013216][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1100.023392][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1100.070328][ T24] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1100.345664][ T24] IPVS: starting estimator thread 0... [ 1100.470158][T13271] IPVS: using max 32 ests per chain, 76800 per kthread [ 1100.669720][T13239] loop3: detected capacity change from 0 to 32768 [ 1100.730198][T13239] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1100.976328][T13239] XFS (loop3): Ending clean mount [ 1101.016911][T13239] XFS (loop3): Quotacheck needed: Please wait. [ 1101.161187][T13239] XFS (loop3): Quotacheck: Done. [ 1101.232792][T13332] loop6: detected capacity change from 0 to 128 [ 1101.372189][ T5827] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1102.288259][T13405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15295'. [ 1102.458512][ T5210] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1102.635901][ T5210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.660986][ T5210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.669609][T13410] loop8: detected capacity change from 0 to 32768 [ 1102.685106][ T5210] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1102.685136][ T5210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.694944][ T5210] usb 7-1: config 0 descriptor?? [ 1103.107863][T13460] loop3: detected capacity change from 0 to 256 [ 1103.114406][T13461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15315'. [ 1103.149653][T13461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15315'. [ 1103.168648][T13460] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1103.354967][ T5210] hid-led 0003:0FC5:B080.000C: probe with driver hid-led failed with error -71 [ 1103.374169][ T5210] usb 7-1: USB disconnect, device number 29 [ 1103.532088][T13486] loop8: detected capacity change from 0 to 1024 [ 1103.718181][ T29] audit: type=1326 audit(1063.517:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1103.773525][ T29] audit: type=1326 audit(1063.517:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1103.836738][T13471] loop3: detected capacity change from 0 to 40427 [ 1103.837672][ T29] audit: type=1326 audit(1063.517:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1103.846600][T13471] F2FS-fs (loop3): invalid crc value [ 1103.895954][ T29] audit: type=1326 audit(1063.517:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1103.924066][ T29] audit: type=1326 audit(1063.517:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1103.949001][ T29] audit: type=1326 audit(1063.517:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1104.071374][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15322'. [ 1104.083108][ T29] audit: type=1326 audit(1063.517:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1104.120444][T13471] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1104.153453][ T29] audit: type=1326 audit(1063.517:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13492 comm="syz.8.15319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05759c629 code=0x7ffc0000 [ 1104.169449][T13471] F2FS-fs (loop3): Start checkpoint disabled! [ 1104.183450][T13471] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1104.191698][T13471] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1104.774275][T13504] loop6: detected capacity change from 0 to 40427 [ 1104.825910][T13504] F2FS-fs (loop6): Image doesn't support compression [ 1104.841599][T13504] F2FS-fs (loop6): build fault injection rate: 690 [ 1104.865863][T13504] F2FS-fs (loop6): invalid crc value [ 1104.870933][T13542] loop3: detected capacity change from 0 to 256 [ 1104.927942][ T29] audit: type=1800 audit(1064.640:4113): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15325" name="file1" dev="loop3" ino=1048811 res=0 errno=0 [ 1104.929359][T13542] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 1105.031032][T13549] loop8: detected capacity change from 0 to 256 [ 1105.047645][T13549] exfat: Deprecated parameter 'namecase' [ 1105.056963][T13542] FAT-fs (loop3): Filesystem has been set read-only [ 1105.135650][T13504] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1105.145697][T13509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1105.154460][T13549] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1105.173508][T13509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1105.190346][T13509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1105.200856][T13504] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1105.887006][T13594] IPVS: Error connecting to the multicast addr [ 1106.102227][T13614] netlink: 'syz.4.15353': attribute type 58 has an invalid length. [ 1106.161443][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15353'. [ 1106.287188][T13636] loop3: detected capacity change from 0 to 1024 [ 1106.404503][ T9] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1106.521009][ T2121] Bluetooth: hci3: command 0x0406 tx timeout [ 1106.565820][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1106.586985][ T9] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.606572][ T9] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1106.626980][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1106.634045][ T9] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1106.644315][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.665459][ T9] usb 7-1: config 0 descriptor?? [ 1106.745510][ T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1106.911038][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1106.919712][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.937872][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.947727][ T24] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1106.970134][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.983584][ T24] usb 9-1: config 0 descriptor?? [ 1107.143809][ T9] hid-alps 0003:044E:120C.000D: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.6-1/input0 [ 1107.369636][ T5930] usb 7-1: USB disconnect, device number 30 [ 1107.376307][ T2121] Bluetooth: hci1: command 0x0406 tx timeout [ 1107.382699][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 1107.434300][ T24] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 1107.453308][ T24] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 1107.475877][ T24] zydacron 0003:13EC:0006.000E: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.8-1/input0 [ 1107.516747][ T29] audit: type=1800 audit(1067.072:4114): pid=13714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15373" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1107.665043][ T5930] usb 9-1: USB disconnect, device number 30 [ 1108.113014][T13756] loop3: detected capacity change from 0 to 64 [ 1108.567802][T13776] loop0: detected capacity change from 0 to 8192 [ 1108.692084][T13776] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1109.055593][T13817] loop8: detected capacity change from 0 to 1024 [ 1109.166752][T13825] team_slave_0: entered promiscuous mode [ 1109.173782][T13825] team_slave_1: entered promiscuous mode [ 1109.179565][T13825] dummy0: entered promiscuous mode [ 1109.180216][T13779] loop6: detected capacity change from 0 to 32768 [ 1109.185799][T13825] bridge0: entered promiscuous mode [ 1109.214005][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1109.226998][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1109.235229][T13825] macvlan2: entered promiscuous mode [ 1109.244801][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1109.272194][T13825] team0: entered promiscuous mode [ 1109.277154][T13779] (syz.6.15391,13779,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1109.310644][T13825] macsec0: entered promiscuous mode [ 1109.318666][T13779] (syz.6.15391,13779,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1109.363841][T13825] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1109.457557][T13779] JBD2: Ignoring recovery information on journal [ 1109.464371][ T5210] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1109.586367][T13779] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1109.671085][ T5210] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1109.707726][T13863] vivid-007: disconnect [ 1109.733705][T13861] vivid-007: reconnect [ 1109.734810][ T5210] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1109.772959][ T5210] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1109.811730][ T5210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1109.819605][ T5210] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1109.877750][ T5210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.908752][ T5210] usb 5-1: config 0 descriptor?? [ 1109.931910][T13830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1109.974217][T13880] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1109.991913][T22991] ocfs2: Unmounting device (7,6) on (node local) [ 1110.155756][T13891] netlink: 'syz.0.15419': attribute type 3 has an invalid length. [ 1110.177500][T13891] netlink: 'syz.0.15419': attribute type 1 has an invalid length. [ 1110.185365][T13891] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15419'. [ 1110.211659][ T5210] usbhid 5-1:0.0: can't add hid device: -71 [ 1110.233250][ T5210] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1110.272235][ T5210] usb 5-1: USB disconnect, device number 10 [ 1111.035037][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15432'. [ 1111.045858][T13955] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1111.278209][ T5930] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1111.461501][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1111.481509][ T5930] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1111.491142][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.516453][ T5930] usb 4-1: config 0 descriptor?? [ 1111.522129][T13954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1111.570073][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15443'. [ 1111.675631][T13991] netlink: 'syz.8.15444': attribute type 1 has an invalid length. [ 1112.005305][T14010] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 1112.011118][ T5930] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1112.031930][T14012] loop0: detected capacity change from 0 to 256 [ 1112.036481][ T5930] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1112.049940][T14012] exfat: Deprecated parameter 'utf8' [ 1112.055605][T14012] exfat: Deprecated parameter 'namecase' [ 1112.059430][ T5930] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1112.068665][T14012] exfat: Deprecated parameter 'namecase' [ 1112.077094][ T5930] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1112.095400][ T5930] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1112.137012][ T5930] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1112.171073][T14012] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1112.275067][ T5930] usb 4-1: USB disconnect, device number 41 [ 1112.295813][T14020] fido_id[14020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1112.725443][T14028] syz.6.15454 (14028): drop_caches: 2 [ 1112.737415][T14028] syz.6.15454 (14028): drop_caches: 2 [ 1112.783074][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15460'. [ 1113.142172][T14088] loop0: detected capacity change from 0 to 1024 [ 1113.245858][T29608] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1113.246242][T15627] hfsplus: b-tree write err: -5, ino 25 [ 1113.273071][T15627] hfsplus: b-tree write err: -5, ino 4 [ 1113.279024][T15627] hfsplus: b-tree write err: -5, ino 2 [ 1113.409915][T29608] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.432037][T29608] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.451962][T14108] sch_tbf: peakrate 127 is lower than or equals to rate 4294934529 ! [ 1113.458251][T29608] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1113.469121][T29608] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1113.490287][T29608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.516864][T29608] usb 4-1: config 0 descriptor?? [ 1113.978041][T29608] mcp2200 0003:04D8:00DF.0010: USB HID v0.08 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 1114.220045][T29608] usb 4-1: USB disconnect, device number 42 [ 1114.577450][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15492'. [ 1114.609911][T14168] netlink: 2 bytes leftover after parsing attributes in process `syz.8.15492'. [ 1115.159279][T14200] futex_wake_op: syz.3.15504 tries to shift op by 32; fix this program [ 1115.252168][T14205] wg2 speed is unknown, defaulting to 1000 [ 1115.799558][T14238] loop6: detected capacity change from 0 to 64 [ 1116.076081][T14218] loop0: detected capacity change from 0 to 32768 [ 1116.107793][T14218] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1116.122232][T14218] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1116.256310][T14218] XFS (loop0): Ending clean mount [ 1116.325979][T14218] XFS (loop0): Quotacheck needed: Please wait. [ 1116.380132][T14267] loop8: detected capacity change from 0 to 1024 [ 1116.387488][T14267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1116.417452][ T180] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 1116.488794][ T180] XFS (loop0): Unmount and run xfs_repair [ 1116.494577][ T180] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1116.506781][T14267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.508737][T14205] lo speed is unknown, defaulting to 1000 [ 1116.560772][T14276] loop6: detected capacity change from 0 to 4096 [ 1116.572255][ T180] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1116.617190][ T180] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1116.630158][T29185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.645727][T14282] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1116.666854][ T180] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1116.679824][ T180] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1116.718282][ T180] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1116.757622][ T180] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1116.783976][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1116.814989][ T180] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1116.845875][ T180] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1116.865930][ T180] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 8 error 74 [ 1116.891537][T14276] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.' [ 1116.911801][ T180] loop0: lost filesystem error report for type 5 error -117 [ 1116.955692][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1116.985095][T14291] xt_hashlimit: size too large, truncated to 1048576 [ 1116.993458][T14218] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1116.993541][T14276] Remounting filesystem read-only [ 1117.004667][T14218] loop0: lost filesystem error report for type 5 error -117 [ 1117.049628][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1117.072876][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.103492][ T24] usb 5-1: Product: syz [ 1117.111934][ T24] usb 5-1: Manufacturer: syz [ 1117.136658][ T24] usb 5-1: SerialNumber: syz [ 1117.158924][ T24] usb 5-1: config 0 descriptor?? [ 1117.178174][ T5831] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1117.205065][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 1117.239312][ T5831] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 1117.381421][T14302] usb usb8: usbfs: process 14302 (syz.6.15529) did not claim interface 0 before use [ 1117.877585][ T24] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input86 [ 1117.976543][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888029e84000 (11)(erspan0) start [ 1118.000753][ T24] usb 5-1: USB disconnect, device number 11 [ 1118.024453][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff888029e84000 (4)(erspan0) end [ 1118.074822][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888029e84000 (4)(erspan0) start [ 1118.077022][T14356] loop3: detected capacity change from 0 to 64 [ 1118.119906][T14358] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15536'. [ 1118.182376][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff888029e84000 (3)(erspan0) end [ 1118.264789][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888029e84000 (3)(erspan0) start [ 1118.355623][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff888029e84000 (3)(erspan0) end [ 1118.418650][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88807b23e000 (3)(gretap0) start [ 1118.468294][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88807b23e000 (3)(gretap0) end [ 1118.491268][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88807b23e000 (3)(gretap0) start [ 1118.511140][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88807b23e000 (3)(gretap0) end [ 1118.583534][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88807b23e000 (3)(gretap0) start [ 1118.621619][T14395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15544'. [ 1118.652882][T15632] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88807b23e000 (3)(gretap0) end [ 1118.762803][T14400] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 9 out of range (51000000..2150000000) [ 1118.984473][T14406] loop8: detected capacity change from 0 to 4096 [ 1119.017690][T14406] ntfs3: Bad value for 'gid' [ 1119.069962][T14406] ntfs3: Bad value for 'gid' [ 1119.222723][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff8880b38f4000 (42)(bond6) start [ 1119.225000][T14418] bond6 (unregistering): Released all slaves [ 1119.277545][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15555'. [ 1119.306318][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff8880b38f4000 (14)(bond6) end [ 1119.408075][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff8880b38f4000 (3)(bond6) start [ 1119.493731][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff8880b38f4000 (3)(bond6) end [ 1119.540019][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff8880b38f4000 (3)(bond6) start [ 1119.575330][T15620] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff8880b38f4000 (3)(bond6) end [ 1119.770287][T14415] loop0: detected capacity change from 0 to 32768 [ 1119.784853][T14516] tipc: Enabling of bearer rejected, failed to enable media [ 1119.795249][T14415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15550 (14415) [ 1119.947584][T14415] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1119.967933][T14415] BTRFS info (device loop0 state S): using crc32c checksum algorithm [ 1120.081353][T15627] BTRFS warning (device loop0 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 1120.136106][T15632] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored [ 1120.188088][T15620] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored [ 1120.229247][T14415] BTRFS error (device loop0 state ES): failed to load root free space [ 1120.270840][T14550] loop8: detected capacity change from 0 to 1024 [ 1120.278840][T15627] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored [ 1120.319921][T14415] BTRFS info (device loop0 state ES): enabling ssd optimizations [ 1120.340256][T14550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.343821][T14415] BTRFS info (device loop0 state ES): enabling free space tree [ 1120.365640][T14415] BTRFS info (device loop0 state ES): ignoring bad roots [ 1120.375198][T14415] BTRFS info (device loop0 state ES): ignoring meta csums [ 1120.386445][T14415] BTRFS info (device loop0 state ES): force zlib compression, level 3 [ 1120.412054][ T5210] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1120.446431][T14550] EXT4-fs error (device loop8): ext4_get_first_dir_block:3550: inode #11: comm syz.8.15566: directory missing '..' [ 1120.495078][T14415] BTRFS warning (device loop0 state ES): failed to trim 1 block group(s), first error -5 [ 1120.572488][T29185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.593890][T14562] program syz.4.15570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1120.605805][ T5210] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1120.653982][ T5210] usb 4-1: config 1 has no interface number 0 [ 1120.671075][ T5210] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1120.693520][ T5210] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1120.706901][ T5210] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.725705][ T5210] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1120.741879][ T5210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.769648][ T5210] usb 4-1: Product: syz [ 1120.799057][ T5210] usb 4-1: Manufacturer: syz [ 1120.816424][ T5210] usb 4-1: SerialNumber: syz [ 1120.824598][ T5831] BTRFS info (device loop0 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1120.829607][T14544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1121.131325][T14544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1121.413836][ T5210] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1121.473923][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15580'. [ 1121.487394][T14607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.585903][ T5210] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 1121.592568][ T5210] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 1121.624760][ T5210] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 1121.634522][T14615] loop0: detected capacity change from 0 to 2048 [ 1121.637531][ T5210] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 1121.668245][T14615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.682091][ T5210] usb 4-1: USB disconnect, device number 43 [ 1121.691303][ T5210] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 1121.706198][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88808e410000 (6)(wwan0) start [ 1121.723113][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1121.769567][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880223d0000 (12)(syz2) rdma_ndev=ffff88807d208000 (21)(wg2) cookie=ffff88808e410000 (3)(wwan0) end [ 1121.790717][ T29] audit: type=1800 audit(1080.429:4115): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15582" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1121.802226][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88808e410000 (3)(wwan0) start [ 1121.861503][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078d60000 (14)(!yz!) rdma_ndev=ffff888029504000 (19)(team_slave_0) cookie=ffff88808e410000 (3)(wwan0) end [ 1121.884563][ T180] [ 1121.886919][ T180] ====================================================== [ 1121.888405][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88808e410000 (3)(wwan0) start [ 1121.893930][ T180] WARNING: possible circular locking dependency detected [ 1121.893952][ T180] syzkaller #0 Not tainted [ 1121.893962][ T180] ------------------------------------------------------ [ 1121.893969][ T180] kworker/u8:6/180 is trying to acquire lock: [ 1121.893978][ T180] ffff8880615213f8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1121.894028][ T180] [ 1121.894028][ T180] but task is already holding lock: [ 1121.917925][T15625] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d7b8000 (14)(syz1) rdma_ndev=ffff888036926000 (16)(bond_slave_0) cookie=ffff88808e410000 (3)(wwan0) end [ 1121.922311][ T180] ffff888041c64b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1121.979087][ T180] [ 1121.979087][ T180] which lock already depends on the new lock. [ 1121.979087][ T180] [ 1121.989471][ T180] [ 1121.989471][ T180] the existing dependency chain (in reverse order) is: [ 1121.998467][ T180] [ 1121.998467][ T180] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1122.006880][ T180] percpu_down_read_internal+0x48/0x1c0 [ 1122.012940][ T180] ext4_writepages+0x205/0x3b0 [ 1122.018214][ T180] do_writepages+0x32e/0x550 [ 1122.023405][ T180] __writeback_single_inode+0x133/0x11a0 [ 1122.029542][ T180] writeback_single_inode+0x4ac/0xdc0 [ 1122.035414][ T180] write_inode_now+0x1c2/0x290 [ 1122.040680][ T180] iput+0x8c1/0xe80 [ 1122.044994][ T180] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1122.050879][ T180] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1122.057278][ T180] __ext4_expand_extra_isize+0x30d/0x400 [ 1122.063418][ T180] __ext4_mark_inode_dirty+0x45c/0x730 [ 1122.069381][ T180] ext4_evict_inode+0x7a1/0xeb0 [ 1122.074736][ T180] evict+0x61e/0xb10 [ 1122.079137][ T180] ext4_orphan_cleanup+0xc38/0x1470 [ 1122.084843][ T180] ext4_fill_super+0x59ff/0x6320 [ 1122.090284][ T180] get_tree_bdev_flags+0x431/0x4f0 [ 1122.095900][ T180] vfs_get_tree+0x92/0x2a0 [ 1122.100822][ T180] do_new_mount+0x341/0xd30 [ 1122.105830][ T180] __se_sys_mount+0x31d/0x420 [ 1122.111014][ T180] do_syscall_64+0x14d/0xf80 [ 1122.116110][ T180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.122506][ T180] [ 1122.122506][ T180] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1122.130046][ T180] __lock_acquire+0x15a5/0x2cf0 [ 1122.135404][ T180] lock_acquire+0xf0/0x2e0 [ 1122.140323][ T180] down_write+0x96/0x200 [ 1122.145066][ T180] ext4_destroy_inline_data+0x28/0xe0 [ 1122.150943][ T180] ext4_do_writepages+0x51e/0x46e0 [ 1122.156554][ T180] ext4_writepages+0x241/0x3b0 [ 1122.161821][ T180] do_writepages+0x32e/0x550 [ 1122.166918][ T180] __writeback_single_inode+0x133/0x11a0 [ 1122.173058][ T180] writeback_sb_inodes+0x992/0x1a20 [ 1122.178762][ T180] wb_writeback+0x456/0xb70 [ 1122.183771][ T180] wb_workfn+0x414/0xf50 [ 1122.188513][ T180] process_one_work+0x949/0x1650 [ 1122.193957][ T180] worker_thread+0xb46/0x1140 [ 1122.199138][ T180] kthread+0x388/0x470 [ 1122.203705][ T180] ret_from_fork+0x51e/0xb90 [ 1122.208812][ T180] ret_from_fork_asm+0x1a/0x30 [ 1122.214076][ T180] [ 1122.214076][ T180] other info that might help us debug this: [ 1122.214076][ T180] [ 1122.224280][ T180] Possible unsafe locking scenario: [ 1122.224280][ T180] [ 1122.231705][ T180] CPU0 CPU1 [ 1122.237053][ T180] ---- ---- [ 1122.242438][ T180] rlock(&sbi->s_writepages_rwsem); [ 1122.247707][ T180] lock(&ei->xattr_sem); [ 1122.254540][ T180] lock(&sbi->s_writepages_rwsem); [ 1122.262239][ T180] lock(&ei->xattr_sem); [ 1122.266552][ T180] [ 1122.266552][ T180] *** DEADLOCK *** [ 1122.266552][ T180] [ 1122.274673][ T180] 3 locks held by kworker/u8:6/180: [ 1122.279847][ T180] #0: ffff888020a98948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 1122.290453][ T180] #1: ffffc90002f97c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 1122.302264][ T180] #2: ffff888041c64b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1122.312685][ T180] [ 1122.312685][ T180] stack backtrace: [ 1122.318555][ T180] CPU: 1 UID: 0 PID: 180 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1122.318571][ T180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1122.318580][ T180] Workqueue: writeback wb_workfn (flush-7:0) [ 1122.318599][ T180] Call Trace: [ 1122.318607][ T180] [ 1122.318614][ T180] dump_stack_lvl+0xe8/0x150 [ 1122.318632][ T180] print_circular_bug+0x2e1/0x300 [ 1122.318654][ T180] check_noncircular+0x12e/0x150 [ 1122.318675][ T180] __lock_acquire+0x15a5/0x2cf0 [ 1122.318695][ T180] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.318713][ T180] lock_acquire+0xf0/0x2e0 [ 1122.318733][ T180] ? ext4_destroy_inline_data+0x28/0xe0 [ 1122.318755][ T180] down_write+0x96/0x200 [ 1122.318767][ T180] ? ext4_destroy_inline_data+0x28/0xe0 [ 1122.318784][ T180] ? __pfx_down_write+0x10/0x10 [ 1122.318799][ T180] ext4_destroy_inline_data+0x28/0xe0 [ 1122.318818][ T180] ext4_do_writepages+0x51e/0x46e0 [ 1122.318831][ T180] ? unwind_next_frame+0xa5/0x23c0 [ 1122.318852][ T180] ? ret_from_fork_asm+0x1a/0x30 [ 1122.318864][ T180] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1122.318879][ T180] ? arch_stack_walk+0x11b/0x150 [ 1122.318893][ T180] ? ret_from_fork_asm+0x1a/0x30 [ 1122.318906][ T180] ? stack_trace_save+0xa9/0x100 [ 1122.318919][ T180] ? kmem_cache_free+0x187/0x630 [ 1122.318934][ T180] ? stack_depot_save_flags+0x33/0x810 [ 1122.318947][ T180] ? addrconf_dad_work+0xac4/0x14c0 [ 1122.318961][ T180] ? process_one_work+0x8a0/0x1650 [ 1122.318977][ T180] ? look_up_lock_class+0x57/0x110 [ 1122.318994][ T180] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1122.319006][ T180] ? kasan_save_free_info+0x46/0x50 [ 1122.319026][ T180] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.319043][ T180] ? ret_from_fork_asm+0x1a/0x30 [ 1122.319065][ T180] ext4_writepages+0x241/0x3b0 [ 1122.319083][ T180] ? __pfx_ext4_writepages+0x10/0x10 [ 1122.319103][ T180] ? do_raw_spin_unlock+0xf5/0x210 [ 1122.319117][ T180] ? __pfx_ext4_writepages+0x10/0x10 [ 1122.319134][ T180] do_writepages+0x32e/0x550 [ 1122.319154][ T180] ? reacquire_held_locks+0x104/0x190 [ 1122.319171][ T180] ? writeback_sb_inodes+0x477/0x1a20 [ 1122.319189][ T180] __writeback_single_inode+0x133/0x11a0 [ 1122.319206][ T180] ? do_raw_spin_unlock+0xf5/0x210 [ 1122.319220][ T180] writeback_sb_inodes+0x992/0x1a20 [ 1122.319242][ T180] ? unwind_next_frame+0xa5/0x23c0 [ 1122.319262][ T180] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1122.319277][ T180] ? do_raw_spin_lock+0x12b/0x2f0 [ 1122.319301][ T180] ? rcu_is_watching+0x15/0xb0 [ 1122.319321][ T180] wb_writeback+0x456/0xb70 [ 1122.319338][ T180] ? queue_io+0x1f1/0x4a0 [ 1122.319355][ T180] ? __pfx_wb_writeback+0x10/0x10 [ 1122.319370][ T180] ? do_raw_spin_lock+0x12b/0x2f0 [ 1122.319388][ T180] wb_workfn+0x414/0xf50 [ 1122.319402][ T180] ? look_up_lock_class+0x57/0x110 [ 1122.319422][ T180] ? __pfx_wb_workfn+0x10/0x10 [ 1122.319437][ T180] ? do_raw_spin_unlock+0xf5/0x210 [ 1122.319451][ T180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1122.319472][ T180] ? process_one_work+0x87c/0x1650 [ 1122.319489][ T180] process_one_work+0x949/0x1650 [ 1122.319511][ T180] ? __pfx_process_one_work+0x10/0x10 [ 1122.319526][ T180] ? do_raw_spin_lock+0x12b/0x2f0 [ 1122.319543][ T180] worker_thread+0xb46/0x1140 [ 1122.319568][ T180] kthread+0x388/0x470 [ 1122.319582][ T180] ? __pfx_worker_thread+0x10/0x10 [ 1122.319597][ T180] ? __pfx_kthread+0x10/0x10 [ 1122.319610][ T180] ret_from_fork+0x51e/0xb90 [ 1122.319628][ T180] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.319643][ T180] ? __switch_to+0xc7d/0x1450 [ 1122.319659][ T180] ? __pfx_kthread+0x10/0x10 [ 1122.319672][ T180] ret_from_fork_asm+0x1a/0x30 [ 1122.319688][ T180] [ 1122.689568][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.700515][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1122.706581][ T5210] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1122.709571][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.710436][ T180] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1122.743111][ T24] usb 5-1: config 0 descriptor?? [ 1122.748270][ T180] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 1122.762654][ T180] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1122.762654][ T180] [ 1122.773571][ T180] EXT4-fs (loop0): Total free blocks count 0 [ 1122.779599][ T180] EXT4-fs (loop0): Free/Dirty block details [ 1122.788383][ T180] EXT4-fs (loop0): free_blocks=66060288 [ 1122.795563][ T180] EXT4-fs (loop0): dirty_blocks=208 [ 1122.800886][ T180] EXT4-fs (loop0): Block reservation details [ 1122.807130][ T180] EXT4-fs (loop0): i_reserved_data_blocks=13 [ 1122.816621][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.199380][ T24] logitech 0003:046D:C293.0011: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 1123.215014][ T24] logitech 0003:046D:C293.0011: no inputs found [ 1123.417771][ T24] usb 5-1: USB disconnect, device number 12