last executing test programs: 11m15.778332748s ago: executing program 1 (id=4772): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bc9d0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f282828"], 0xe0}], 0x1}, 0x40040) 11m15.208690676s ago: executing program 1 (id=4778): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) 11m14.730864176s ago: executing program 1 (id=4783): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f0000000900), 0x4) 11m14.417885273s ago: executing program 1 (id=4787): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 11m14.097306246s ago: executing program 1 (id=4791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040004800000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe03, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 11m13.355248655s ago: executing program 1 (id=4800): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 11m12.895827027s ago: executing program 32 (id=4800): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 4.041414358s ago: executing program 5 (id=14556): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 4.036606326s ago: executing program 2 (id=14568): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB='errors=continue,iocharset=cp437,integrity,discard,iocharset=macgreek,discard=0x0000000000000005,errors=remount-ro,grpquota,\x00'], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") open$dir(&(0x7f0000000080)='./file0/file1\x00', 0xe101, 0x40) open(&(0x7f0000000040)='./file2\x00', 0x40, 0x80) 3.652421701s ago: executing program 5 (id=14558): r0 = eventfd2(0x2, 0x1) io_submit(0x0, 0xf000, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x7000000000000000, 0x0, 0x1, r0}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff000040000000000000000100008408"], 0x0, 0x42}, 0x28) 3.417374244s ago: executing program 5 (id=14561): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005880)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x32, 0x74, 0x74, 0x0]}}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x6d]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r0, &(0x7f00000001c0)=""/179, 0xb3, 0x4003c) 3.305580106s ago: executing program 6 (id=14562): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, r1, 0x8, 0x10}, [@NDA_LLADDR={0xa, 0x2, @random="fcfa3edf1c6b"}, @NDA_DST_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20024014) 3.12202002s ago: executing program 6 (id=14565): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.619006626s ago: executing program 2 (id=14571): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1210092, &(0x7f0000000500)=ANY=[], 0x5, 0x1531, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 2.494036089s ago: executing program 6 (id=14573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 2.235196693s ago: executing program 3 (id=14575): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 2.019752692s ago: executing program 6 (id=14577): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000001280)={0x500000, 0x4ffff, 0x2, 0xfffffffffffffffd, 0x1, 0x0, 0x2401}) 1.986829983s ago: executing program 3 (id=14578): r0 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="a23acdc1fa87547dbece7a52e7dffc2b", 0x10) 1.84247593s ago: executing program 5 (id=14580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001080), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000880)={0x14, r1, 0x1, 0x70bd24, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4040840) 1.686303795s ago: executing program 2 (id=14581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008080}, 0x6b7e369c4a37b0aa) 1.67012166s ago: executing program 0 (id=14583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f8500000006000000950000000000000094dd65e1029941c0624cece5e84a1ee06b3b0bd25739cd1388763c9b0e3037e51b81fbdfa57b7ee63fbcd64ff431"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.652050718s ago: executing program 3 (id=14584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.429261604s ago: executing program 4 (id=14585): openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.358277396s ago: executing program 2 (id=14586): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) 1.357153129s ago: executing program 3 (id=14587): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1.313036163s ago: executing program 6 (id=14588): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.124680932s ago: executing program 0 (id=14589): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="4c43f868", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d51234ba977bb9e5c12f8d834f13d6237d26460748d6933219def36c215585e1676d4abb63df6179cc6df0358301932726803805bf67fde6d452c67bcb02f2991be12424f93f66c56b7a592eed49b5d4e60fca4f541539cd053229ded13933833e015259ce6dfc263a1e0669a8396a76540b4fb154f459a60975891cf83a48c461876ebd0fcf5c92d9110b4c1bbaedc58428da5f480efea0da68dad35e8fb3b385f8", 0xa2}, {&(0x7f0000000500)="fd6ec59ad2f97407d3694c9a9c464b7e2099c74cb6085724bea4211eeb3263eaec4ed9a1f7f7f4c9a2522ab2fd99c61edad49100c9af2505a816b6306b52773fed6dc1bc77ebb8bd9b0067e03f008381fa24d54a21fc980b65d1cd1b29ebcd32d71be7427435e9308efcf5bed5852638d7a3c49dbad31924a6a3c003621be1d97497975f3ba10045c42426356cbaf28d5d60cf67b8b44f7b89f455f69eb92d14896937867b8e734309c2fbb9e0cd9070b805c407d4680bf3e0821b4dbaa2106d7c880efa73fbb92aabfc3987736a604191f6d33b7e76d842c83ecef971117cc69d41", 0xe2}, {&(0x7f0000000380)="6e15e198668be6d8090c62edfd048aa0ad33677954c81f0f6d4179c4572f4776af228c6f56b6c88bfaa312ffa6d5ffa6140dad7985e900e3898ef688992c992374f6e024c9cfafdede153a9f863e525de8e31eb633a6943d88695af1df1d39f88e76852c728b07ec30", 0x69}, {&(0x7f0000000100)="005858ec548b459ef291cf737fa0c04785936a8c75253d7208ba4ec75c69bbd6cba23fec1abf6ba5ff07d5e04341bbca62ea6774217764154909", 0x3a}], 0x4}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="1d9ceee49731604f5da9049e0b7bb7ce6e9dd0775991b98513ccec0638e0f8834068123e63009a2b52615c5eafeb8c2d15bffdc05a0fd14973e49ae4e19426a6812a47550ab06c9937e0e462bed0b2046ea7611b905c", 0x56}, {&(0x7f0000000980)="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", 0x908}], 0x2}}], 0x3, 0x2008000) 1.074442764s ago: executing program 4 (id=14590): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r0 = io_uring_setup(0xf09, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 927.228883ms ago: executing program 3 (id=14591): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 895.576295ms ago: executing program 0 (id=14592): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 788.994981ms ago: executing program 4 (id=14593): writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000240)="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", 0x179}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000290000000800000005000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}, 0x20044084) 788.758463ms ago: executing program 5 (id=14594): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @empty, 0x8000}, 0x1c, 0x0}}], 0x2, 0x4001c00) 692.350476ms ago: executing program 5 (id=14595): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_control_io(r0, 0x0, 0x0) 574.241723ms ago: executing program 4 (id=14596): r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) keyctl$set_timeout(0xf, r0, 0xfffffffffffffff9) 503.514984ms ago: executing program 0 (id=14597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000340)=@udp6=r1, 0x1}, 0x20) 365.275983ms ago: executing program 4 (id=14598): capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) 365.051607ms ago: executing program 2 (id=14599): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x1}, 0x2}, 0x18) 240.797002ms ago: executing program 0 (id=14600): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x17, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x0) 224.109878ms ago: executing program 2 (id=14601): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0x80000}, 0x2f) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 161.00634ms ago: executing program 4 (id=14602): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0x0, 0x1, 0x6, 0x5, 0x5, 0x4, 0x80000007, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x800, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004087, 0x0, 0xfffffff8]}) 114.288695ms ago: executing program 6 (id=14603): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) close(r0) 56.355428ms ago: executing program 3 (id=14604): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {}, {@nobarrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$eJzs3U1sHGf5APBn1uu1N5XcbZu0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRhN9Pmp13Zt6PZ57OvN6dbbQB/M9afDsmtyOJxQtvbaXbD3bqzQc79dWiHBFTEVGKKLdXkaxFJJ9FXI32Ev+X7sy7S/Yb542Hn354/v7H9fZWOV+y+qVh7Xa1hoywnS8xGxET+XpM5f36ux5vDvR3b6yuk07cacLOFYmDk9YasD1O8xHuW+BJdy9iYnKP/bWIUxExnb8PiHx2KB1zeIdurFkOAAAAnkwTB1V4/lE8iq2YOZ5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NmQtH8zMMmXUlGejaT4/f9Kvi9VqZxwvMN95YDjH9w8pkAAAAAAAAAA4Eh8kn9xf/ZRPIqtmCn2t5LsO//Xso3T2etz8V5sxFKsx8XYikZsxmasx3zE5ExXh5Wtxubm+vxgy19H2rLVat3LWy5ERG2g5cI+gZYO+cQBAAAAAAAA4Nn0k1iMmZMOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiURE+1VtpwuyrUolSNiOiIqab3tiD8V5afZn086AAAAADh61Xw9k/ynXWgl2Wf+l7PP/dPxXqzFZizHZjRjKW5kzwLan/pLf9+uNx/s1FfTZbDjb/9rrDiyHiNiIt7fZ+S5rMaZTovF+G58Py7EbFyL9ViOH0YjNmMpZqOankQ0Iolatf30olbEuXe8V3u2rvXHdrZv+9UskmrcjOUstotxvRLtxybZOaRjvto12h8qEX0jvp9mJ/lWbsQc3ej67/Wr/LlMrvX8iH0cjVp25pOdjMyluc+z8cLw3I95nfSPNB+lzjOo07ujpJv9IxU5/8E4OT/VXk2nLz/vzflhG/NRWn8mFqKUX30RL/fm/PYX77/Y2/jL//jLtVultZVbNzcuHOEpPY7ZgypMFoX+TNS7MvHK8Ksvz0QzzcT26JmY7N8xPWrLo1XJs5FNRSPOlt/JSo14resSfDduxFJcjrmYjysxF9+Ihah3rrB0OdOT13J9tTcn2b1WGpzfqkOCP/elrkq/OKDy8Urz8kJXXrtnulp2LN9z9Zcx13X1vTj86hv7r0A6/v/n5XSMn3b+4jwJejKRz81FdC8Nz8RvWunrRnNtZf1W4/aI453P1+lt+0Hv3Pzb0aPu/+t+GNLrJZ1xy9lWlpNqcb2kx17qRNubr0r+jUu7XWng2JnOsVrMxHJ8b987tZK/hxvsqX3sle5j/9ydOSv5+5viWM+7nHg3mtm7kD4HTtUAHLNTr5+qVB9W/1b9qPqz6q3qW9NvTl2Z+kIlJv9a/uPE70u/K30zeT0+ih/HzElHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4KNO3dXGs3m0nqnENP9ex63UNl3rOGFKB1YZ+e50TqMWsTwsZK8UDncc38aC9Xo21P8wtLj9vxJRAypU3ns4JOxr7GxC2keDqXDVqud1GxPa2KM5uWi1d51yrExHSuNpLzHHTe1exdEbaXR/Herp3k1um4Z4Bl3aXP19qWNO3e/urzaeGfpnaW1hSuXr1yuf33+a5duLjeX5tqvJx0lcBQ27tyd2GP3wC/dAgAAAAAAAAAAAE+O/P/+3/zc/5ihfECdyvrG3iOfPe5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5Si2/H5HYkMT93cS7dfrBTb6ZLUd6tWY6IUkQkP4pIPou4Gu0lal3dJfuN88bDTz88f//j+m5f5aJ+aVi70WznS8xGxES+PtjUHt0M9ne9q7/tzxVe0jnDNGHnisTBSftvAAAA//9u//cB") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 0 (id=14605): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') getdents64(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 37][ T5837] hub 6-1:0.132: bad descriptor, ignoring hub [ 1141.079315][T22579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.121066][ T5837] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1141.205884][ T5837] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input64 [ 1141.229414][T14763] usb 4-1: USB disconnect, device number 2 [ 1141.232025][ T7436] zydacron 0003:13EC:0006.0006: item fetching failed at offset 0/2 [ 1141.257945][T22579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13720: bg 0: block 234: padding at end of block bitmap is not set [ 1141.271669][ T7436] zydacron 0003:13EC:0006.0006: parse failed [ 1141.307391][ T7436] zydacron 0003:13EC:0006.0006: probe with driver zydacron failed with error -22 [ 1141.330879][T22579] EXT4-fs (loop4): Remounting filesystem read-only [ 1141.430531][ T7436] usb 1-1: USB disconnect, device number 124 [ 1141.557857][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.572319][T22618] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1141.810213][T22567] loop6: detected capacity change from 0 to 40427 [ 1141.853354][T22567] F2FS-fs (loop6): Corrupted extension count (33554469 + 1 > 64) [ 1141.863244][T22629] loop3: detected capacity change from 0 to 1024 [ 1141.871945][T22567] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1141.941359][T22567] F2FS-fs (loop6): invalid crc value [ 1142.095690][ T3199] hfsplus: b-tree write err: -5, ino 25 [ 1142.095860][ T3199] hfsplus: b-tree write err: -5, ino 4 [ 1142.095931][ T3199] hfsplus: b-tree write err: -5, ino 2 [ 1142.097522][ T3199] hfsplus: b-tree write err: -5, ino 22 [ 1142.230075][T22567] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1142.232943][T22567] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30 [ 1142.232972][T22567] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1142.454803][T22567] F2FS-fs (loop6): Try to recover all the superblocks, ret: 0 [ 1142.557016][T22654] loop5: detected capacity change from 0 to 4096 [ 1142.580883][T22654] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1142.657128][T22654] ntfs3(loop5): ino=19, mi_enum_attr [ 1142.673271][T22654] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1142.705769][T22654] ntfs3(loop5): failed to convert "c46c" to maccenteuro [ 1142.730301][T22654] ntfs3(loop5): ino=20, mi_enum_attr [ 1143.029645][T22687] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1143.282459][T22703] loop4: detected capacity change from 0 to 256 [ 1143.428694][T22706] loop2: detected capacity change from 0 to 4096 [ 1143.447097][T22703] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1143.520911][T22719] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1143.600427][T22706] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 1143.663290][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13749'. [ 1143.940360][T22737] loop6: detected capacity change from 0 to 512 [ 1144.003720][T22743] devtmpfs: Too few inodes for current use [ 1144.027851][T22737] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.13753: invalid indirect mapped block 256 (level 2) [ 1144.049713][T22737] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1144.060130][T22737] EXT4-fs (loop6): Remounting filesystem read-only [ 1144.068460][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1144.082459][ C0] EXT4-fs (loop6): initial error at time 1162560: ext4_free_branches:1023: inode 11 [ 1144.091975][ C0] EXT4-fs (loop6): last error at time 1162560: ext4_free_branches:1023: inode 11 [ 1144.130389][T22737] EXT4-fs (loop6): 2 truncates cleaned up [ 1144.138273][T22737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.201170][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.397031][T22764] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1144.452158][ T5837] usb 6-1: USB disconnect, device number 118 [ 1144.509363][T22768] hugetlbfs: Bad value for 'nr_inodes' [ 1144.549751][T22697] loop5: detected capacity change from 0 to 32768 [ 1144.581098][T22697] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13739 (22697) [ 1144.684660][T22697] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1144.735511][T22697] BTRFS info (device loop5): using sha256 checksum algorithm [ 1144.961277][T22697] BTRFS info (device loop5): rebuilding free space tree [ 1145.043873][T22697] BTRFS info (device loop5): disabling free space tree [ 1145.052965][T22824] loop6: detected capacity change from 0 to 512 [ 1145.076107][T22697] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1145.138560][T22825] macvtap0: entered promiscuous mode [ 1145.144008][T22697] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1145.144109][T22824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.176836][T22825] batadv0: entered promiscuous mode [ 1145.193095][T22697] BTRFS info (device loop5): checking UUID tree [ 1145.199606][T22825] macvtap0: entered allmulticast mode [ 1145.222429][T22825] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1145.258376][T22697] BTRFS info (device loop5): turning off barriers [ 1145.268064][T22697] BTRFS info (device loop5): force clearing of disk cache [ 1145.299567][T22697] BTRFS info (device loop5): use zstd compression, level 3 [ 1145.309719][T22825] batadv0: left promiscuous mode [ 1145.375382][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.582283][ T5833] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1145.659229][ T7436] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1145.671800][T22850] loop6: detected capacity change from 0 to 4096 [ 1145.698618][T22850] EXT4-fs: Ignoring removed bh option [ 1145.753943][T22850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.824089][T22864] loop0: detected capacity change from 0 to 512 [ 1145.844435][ T7436] usb 3-1: Using ep0 maxpacket: 32 [ 1145.871593][ T7436] usb 3-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.924820][ T7436] usb 3-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 1145.943266][T22850] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.6.13772: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1145.989761][ T7436] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1146.024386][T22850] EXT4-fs (loop6): Remounting filesystem read-only [ 1146.035852][T22864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.064487][ T7436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.138784][T22858] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1146.147224][ T7436] usb 3-1: Product: syz [ 1146.151407][ T7436] usb 3-1: Manufacturer: syz [ 1146.160633][T22806] F2FS-fs (loop3): invalid crc value [ 1146.202584][ T7436] usb 3-1: SerialNumber: syz [ 1146.210301][T22858] ntfs3(loop4): Failed to load $Extend (-22). [ 1146.246064][T22864] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.13776: resize_inode disabled but reserved GDT blocks non-zero [ 1146.262243][T22858] ntfs3(loop4): Failed to initialize $Extend. [ 1146.295943][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.493260][ T7436] usb 3-1: unit 2 not found! [ 1146.557741][T22806] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1146.606927][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.616430][T22806] F2FS-fs (loop3): Start checkpoint disabled! [ 1146.673353][T22806] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1146.682280][ T7436] usb 3-1: USB disconnect, device number 2 [ 1146.760701][T22806] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1146.847544][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1146.934974][ T3206] kworker/u8:14: attempt to access beyond end of device [ 1146.934974][ T3206] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1146.977979][ T3206] CPU: 0 UID: 0 PID: 3206 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.978019][ T3206] Tainted: [L]=SOFTLOCKUP [ 1146.978030][ T3206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1146.978046][ T3206] Workqueue: writeback wb_workfn (flush-7:3) [ 1146.978085][ T3206] Call Trace: [ 1146.978096][ T3206] [ 1146.978107][ T3206] dump_stack_lvl+0xe8/0x150 [ 1146.978146][ T3206] f2fs_handle_critical_error+0x37c/0x540 [ 1146.978188][ T3206] f2fs_write_end_io+0xcdb/0xff0 [ 1146.978255][ T3206] __submit_merged_bio+0x256/0x700 [ 1146.978297][ T3206] __submit_merged_write_cond+0x3c9/0x4e0 [ 1146.978340][ T3206] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1146.978389][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.978429][ T3206] f2fs_write_data_pages+0x2975/0x35e0 [ 1146.978507][ T3206] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1146.978559][ T3206] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1146.978621][ T3206] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1146.978681][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.978711][ T3206] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.978759][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.978793][ T3206] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1146.978832][ T3206] do_writepages+0x32e/0x550 [ 1146.978877][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.978906][ T3206] ? reacquire_held_locks+0x104/0x190 [ 1146.978943][ T3206] ? writeback_sb_inodes+0x477/0x1a20 [ 1146.978986][ T3206] __writeback_single_inode+0x133/0x11a0 [ 1146.979024][ T3206] ? do_raw_spin_unlock+0xf5/0x210 [ 1146.979057][ T3206] writeback_sb_inodes+0x992/0x1a20 [ 1146.979115][ T3206] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.979154][ T3206] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1146.979187][ T3206] ? do_raw_spin_lock+0x12b/0x2f0 [ 1146.979266][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.979295][ T3206] ? rcu_is_watching+0x15/0xb0 [ 1146.979331][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.979370][ T3206] wb_writeback+0x456/0xb70 [ 1146.979409][ T3206] ? queue_io+0x251/0x4a0 [ 1146.979452][ T3206] ? __pfx_wb_writeback+0x10/0x10 [ 1146.979483][ T3206] ? do_raw_spin_lock+0x12b/0x2f0 [ 1146.979529][ T3206] wb_workfn+0x414/0xf50 [ 1146.979560][ T3206] ? look_up_lock_class+0x57/0x110 [ 1146.979605][ T3206] ? __pfx_wb_workfn+0x10/0x10 [ 1146.979641][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.979671][ T3206] ? do_raw_spin_lock+0x12b/0x2f0 [ 1146.979700][ T3206] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1146.979727][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.979771][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.979804][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.979835][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.979868][ T3206] ? process_scheduled_works+0xa8d/0x18c0 [ 1146.979902][ T3206] ? process_scheduled_works+0xa8d/0x18c0 [ 1146.979937][ T3206] process_scheduled_works+0xb6e/0x18c0 [ 1146.980008][ T3206] ? __pfx_process_scheduled_works+0x10/0x10 [ 1146.980049][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.980078][ T3206] ? assign_work+0x3d5/0x5e0 [ 1146.980118][ T3206] worker_thread+0xa53/0xfc0 [ 1146.980173][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.980213][ T3206] kthread+0x388/0x470 [ 1146.980244][ T3206] ? __pfx_worker_thread+0x10/0x10 [ 1146.980277][ T3206] ? __pfx_kthread+0x10/0x10 [ 1146.980303][ T3206] ret_from_fork+0x51e/0xb90 [ 1146.980339][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.980369][ T3206] ? __pfx_ret_from_fork+0x10/0x10 [ 1146.980401][ T3206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.980430][ T3206] ? __switch_to+0xc7d/0x1450 [ 1146.980465][ T3206] ? __pfx_kthread+0x10/0x10 [ 1146.980491][ T3206] ret_from_fork_asm+0x1a/0x30 [ 1146.980549][ T3206] [ 1146.980559][ T3206] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1147.164193][ T29] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1147.298014][T22923] dummy0: entered allmulticast mode [ 1147.392083][T22923] dummy0: left allmulticast mode [ 1147.730501][ T29] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1147.763251][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.801881][ T29] usb 7-1: Product: syz [ 1147.819747][T22947] set_capacity_and_notify: 2 callbacks suppressed [ 1147.819770][T22947] loop2: detected capacity change from 0 to 128 [ 1147.826471][ T29] usb 7-1: Manufacturer: syz [ 1147.826503][ T29] usb 7-1: SerialNumber: syz [ 1147.851845][ T29] usb 7-1: config 0 descriptor?? [ 1147.887076][ T29] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 026 [ 1147.902511][T22950] netlink: 'syz.0.13789': attribute type 3 has an invalid length. [ 1147.953014][T22947] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1147.976256][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13789'. [ 1147.991220][T22959] loop4: detected capacity change from 0 to 64 [ 1148.003043][T22947] hpfs: filesystem error: improperly stopped [ 1148.051890][T22925] loop5: detected capacity change from 0 to 32768 [ 1148.065029][T22947] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1148.089699][T22925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13784 (22925) [ 1148.121502][T22947] hpfs: You really don't want any checks? You are crazy... [ 1148.167774][T22947] hpfs: hpfs_map_sector(): read error [ 1148.173216][T22947] hpfs: code page support is disabled [ 1148.200109][T22925] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1148.223577][T22947] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.243530][T22925] BTRFS info (device loop5): using crc32c checksum algorithm [ 1148.262003][T22947] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.285351][T22947] hpfs: filesystem error: unable to find root dir [ 1148.330212][T22947] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.338877][T22969] loop0: detected capacity change from 0 to 2048 [ 1148.353274][T22969] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1148.375900][T22947] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.402529][T22969] syz.0.13792: attempt to access beyond end of device [ 1148.402529][T22969] loop0: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1148.418122][T22984] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1148.471110][ T29] i2c i2c-1: failure reading functionality [ 1148.542514][T22925] BTRFS info (device loop5): enabling ssd optimizations [ 1148.549772][T22925] BTRFS info (device loop5): turning on flush-on-commit [ 1148.557646][T22925] BTRFS info (device loop5): enabling free space tree [ 1148.564872][T22925] BTRFS info (device loop5): enabling auto defrag [ 1148.566948][ T29] i2c i2c-1: connected i2c-tiny-usb device [ 1148.572555][T22925] BTRFS info (device loop5): use lzo compression, level 1 [ 1148.634449][T22925] BTRFS info (device loop5): max_inline set to 4096 [ 1148.662618][T22969] NILFS (loop0): error -2 truncating bmap (ino=16) [ 1148.669907][ T29] usb 7-1: USB disconnect, device number 26 [ 1148.718561][T23003] NILFS (loop0): error -2 truncating bmap (ino=16) [ 1148.908102][ T5833] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1148.921908][T23022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13798'. [ 1148.955241][T23022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13798'. [ 1149.047473][T23025] loop2: detected capacity change from 0 to 4096 [ 1149.138268][T23034] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1149.246880][ T30] audit: type=1800 audit(1162565.938:658): pid=23025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13799" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1149.394645][T23027] loop4: detected capacity change from 0 to 4096 [ 1149.723497][T23062] loop3: detected capacity change from 0 to 512 [ 1149.755931][T23062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1149.889720][T23062] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.13807: iget: bad extended attribute block 3153 [ 1149.922631][T23062] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1149.926632][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1149.942322][ C0] EXT4-fs (loop3): initial error at time 1162566: ext4_orphan_get:1391: inode 11 [ 1149.951527][ C0] EXT4-fs (loop3): last error at time 1162566: ext4_orphan_get:1391: inode 11 [ 1149.981160][T23062] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.13807: couldn't read orphan inode 11 (err -117) [ 1150.066308][T23062] loop3: lost filesystem error report for type 5 error -117 [ 1150.090418][T23062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.217342][T23062] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.13807: path /2213/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1150.501469][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.317557][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13824'. [ 1151.343970][T23148] loop0: detected capacity change from 0 to 512 [ 1151.390307][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13824'. [ 1151.431859][T23151] netlink: 'syz.5.13824': attribute type 15 has an invalid length. [ 1151.452407][T23148] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.13826: invalid indirect mapped block 4294967295 (level 1) [ 1151.565276][T23148] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1151.565916][T23148] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.13826: invalid indirect mapped block 4294967295 (level 1) [ 1151.574455][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1151.595761][ C1] EXT4-fs (loop0): initial error at time 1162568: ext4_free_branches:1023: inode 11 [ 1151.605223][ C1] EXT4-fs (loop0): last error at time 1162568: ext4_free_branches:1023: inode 11 [ 1151.642864][T23148] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1151.647918][T23148] EXT4-fs (loop0): 2 truncates cleaned up [ 1151.711261][T23168] loop2: detected capacity change from 0 to 1024 [ 1151.719725][T23148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.803882][T23168] hfsplus: bad catalog entry type [ 1151.861331][T23174] loop5: detected capacity change from 0 to 1024 [ 1151.912566][T23174] EXT4-fs: Ignoring removed bh option [ 1151.950318][ T3204] hfsplus: b-tree write err: -5, ino 25 [ 1151.962639][ T3204] hfsplus: b-tree write err: -5, ino 4 [ 1151.980146][T23174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.994441][ T3204] hfsplus: b-tree write err: -5, ino 2 [ 1152.000134][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.402152][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.644064][T23216] hfsplus: bad catalog entry type [ 1152.868598][ T3206] hfsplus: b-tree write err: -5, ino 25 [ 1152.895896][ T3206] hfsplus: b-tree write err: -5, ino 4 [ 1152.921228][ T3206] hfsplus: b-tree write err: -5, ino 2 [ 1153.395135][ T5837] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1153.596582][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 1153.634670][ T5837] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1153.687713][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.706547][T23280] set_capacity_and_notify: 1 callbacks suppressed [ 1153.706569][T23280] loop2: detected capacity change from 0 to 2048 [ 1153.736351][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.764341][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1153.816050][T23280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.841104][ T5837] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1153.877262][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.898536][ T5837] usb 4-1: config 0 descriptor?? [ 1153.975190][T23289] loop0: detected capacity change from 0 to 4096 [ 1154.057612][T23301] loop5: detected capacity change from 0 to 2048 [ 1154.129679][T23301] udf: Unknown parameter 'las' [ 1154.339722][ T5837] redragon 0003:0C45:760B.0007: unknown main item tag 0x6 [ 1154.370193][ T5837] redragon 0003:0C45:760B.0007: unexpected long global item [ 1154.402895][ T5837] redragon 0003:0C45:760B.0007: probe with driver redragon failed with error -22 [ 1154.473668][T23329] loop5: detected capacity change from 0 to 64 [ 1154.554602][ T29] usb 4-1: USB disconnect, device number 3 [ 1154.976407][ T29] IPVS: starting estimator thread 0... [ 1155.089590][T23371] IPVS: using max 25 ests per chain, 60000 per kthread [ 1155.115758][T23378] loop6: detected capacity change from 0 to 2048 [ 1155.156631][T23378] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1155.225564][ T5893] udevd[5893]: incorrect nilfs2 checksum on /dev/loop6 [ 1155.234178][T23385] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1155.642409][ T5837] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1155.818905][T23370] loop0: detected capacity change from 0 to 32768 [ 1155.832986][ T5837] usb 6-1: Using ep0 maxpacket: 32 [ 1155.850778][ T5837] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1155.879676][ T5837] usb 6-1: config 0 has no interface number 0 [ 1155.913442][T23420] loop3: detected capacity change from 0 to 4096 [ 1155.930640][ T5837] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1155.966876][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.984510][ T5837] usb 6-1: Product: syz [ 1156.005928][T23427] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1156.018306][ T5837] usb 6-1: Manufacturer: syz [ 1156.022928][ T5837] usb 6-1: SerialNumber: syz [ 1156.043293][ T5837] usb 6-1: config 0 descriptor?? [ 1156.062533][ T5837] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1156.077147][ T5837] usb 6-1: selecting invalid altsetting 1 [ 1156.083179][ T30] audit: type=1800 audit(1162573.108:659): pid=23420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13888" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1156.128082][ T5837] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1156.138741][ T5837] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1156.160509][T23369] loop2: detected capacity change from 0 to 32768 [ 1156.167413][ T5837] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1156.187054][ T5837] usb 6-1: media controller created [ 1156.221659][T23369] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1156.232644][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1156.293367][ T5837] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1156.301312][ T5837] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1156.309259][ T5837] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1156.377172][T23369] XFS (loop2): Ending clean mount [ 1156.385345][ T5837] usb 6-1: USB disconnect, device number 119 [ 1156.437095][T23369] XFS (loop2): Quotacheck needed: Please wait. [ 1156.581384][T23369] XFS (loop2): Quotacheck: Done. [ 1156.796495][T23483] loop4: detected capacity change from 0 to 128 [ 1156.801408][T23485] loop3: detected capacity change from 0 to 1024 [ 1156.859623][ T5821] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1156.917507][T23483] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1156.966752][T23483] hpfs: filesystem error: improperly stopped [ 1157.004618][T23483] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1157.024128][T23483] hpfs: You really don't want any checks? You are crazy... [ 1157.031698][T23483] hpfs: hpfs_map_sector(): read error [ 1157.071159][T23483] hpfs: code page support is disabled [ 1157.076698][T23483] hpfs: hpfs_map_4sectors(): unaligned read [ 1157.108173][T23483] hpfs: hpfs_map_4sectors(): unaligned read [ 1157.128741][ T3206] hfsplus: b-tree write err: -5, ino 25 [ 1157.134542][ T3206] hfsplus: b-tree write err: -5, ino 4 [ 1157.137841][T23483] hpfs: filesystem error: unable to find root dir [ 1157.185171][ T3206] hfsplus: b-tree write err: -5, ino 2 [ 1158.048915][T23540] netlink: 'syz.3.13909': attribute type 1 has an invalid length. [ 1158.071381][T23540] netlink: 216 bytes leftover after parsing attributes in process `syz.3.13909'. [ 1158.283224][T23499] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1158.331655][T23499] XFS (loop5): Ending clean mount [ 1158.379423][T23499] XFS (loop5): Quotacheck needed: Please wait. [ 1158.491987][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13915'. [ 1158.615215][T23499] XFS (loop5): Quotacheck: Done. [ 1158.626592][T23572] set_capacity_and_notify: 4 callbacks suppressed [ 1158.626611][T23572] loop4: detected capacity change from 0 to 512 [ 1158.681688][T23572] EXT4-fs: Ignoring removed oldalloc option [ 1158.777227][T23572] EXT4-fs (loop4): 1 truncate cleaned up [ 1158.789426][T23572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.976493][ T5833] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1159.235208][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.469522][T23608] loop4: detected capacity change from 0 to 512 [ 1159.513172][T23612] loop2: detected capacity change from 0 to 128 [ 1159.529316][T23608] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1159.566847][T23612] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1159.616461][T23608] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1159.636212][T23612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1159.729125][T23608] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.13923: Block bitmap for bg 0 marked uninitialized [ 1159.854116][T23608] loop4: lost filesystem error report for type 5 error -117 [ 1159.855208][T23608] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1159.862642][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1159.862666][ C0] EXT4-fs (loop4): initial error at time 1162577: ext4_read_block_bitmap_nowait:517 [ 1159.862696][ C0] EXT4-fs (loop4): last error at time 1162577: ext4_read_block_bitmap_nowait:517 [ 1159.951865][T23608] loop4: lost filesystem error report for type 5 error -117 [ 1159.952540][T23608] EXT4-fs (loop4): 1 orphan inode deleted [ 1159.973264][T23585] loop6: detected capacity change from 0 to 32768 [ 1160.025185][T23608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1160.078103][T23585] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.13918 (23585) [ 1160.203288][T23585] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1160.285358][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.297697][T23585] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 1160.452592][ T5837] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1160.626247][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1160.644178][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.682313][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1160.734226][T23679] netlink: 'syz.0.13938': attribute type 1 has an invalid length. [ 1160.753726][ T5837] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1160.780346][T23679] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13938'. [ 1160.785952][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.824270][T23679] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13938'. [ 1160.833365][ T5837] usb 4-1: Product: syz [ 1160.833390][ T5837] usb 4-1: Manufacturer: syz [ 1160.852644][T23585] BTRFS info (device loop6): enabling ssd optimizations [ 1160.860074][ T5837] usb 4-1: SerialNumber: syz [ 1160.900373][T23585] BTRFS info (device loop6): turning on flush-on-commit [ 1160.929399][ T5837] usb 4-1: selecting invalid altsetting 1 [ 1160.952009][ T5837] usb 4-1: unit 6 not found! [ 1160.958429][T23585] BTRFS info (device loop6): turning on async discard [ 1160.965219][T23585] BTRFS info (device loop6): enabling free space tree [ 1161.051023][T23585] BTRFS info (device loop6): force zlib compression, level 3 [ 1161.108706][T23585] BTRFS info (device loop6): max_inline set to 4096 [ 1161.379191][T23699] loop0: detected capacity change from 0 to 64 [ 1161.419135][ T5837] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1161.478716][ T5837] usb 4-1: USB disconnect, device number 4 [ 1161.584531][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.618740][T23670] loop4: detected capacity change from 0 to 32768 [ 1161.694436][T23585] BTRFS info (device loop6): balance: start -d -m [ 1161.768170][T23585] BTRFS info (device loop6): balance: canceled [ 1161.988917][T18439] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1162.082772][T23723] loop0: detected capacity change from 0 to 256 [ 1162.115640][T23723] exfat: Deprecated parameter 'utf8' [ 1162.169939][T23723] exfat: Deprecated parameter 'utf8' [ 1162.175323][T23723] exfat: Deprecated parameter 'utf8' [ 1162.317247][T23723] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1162.615313][T23744] loop4: detected capacity change from 0 to 256 [ 1162.644420][T23744] exfat: Deprecated parameter 'namecase' [ 1162.701641][T23744] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11ccab4c, utbl_chksum : 0xe619d30d) [ 1162.909434][T23761] loop2: detected capacity change from 0 to 256 [ 1163.023764][T23775] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1163.024712][T23761] FAT-fs (loop2): Directory bread(block 64) failed [ 1163.041010][T23753] loop6: detected capacity change from 0 to 4096 [ 1163.117601][T23761] FAT-fs (loop2): Directory bread(block 65) failed [ 1163.157680][T23761] FAT-fs (loop2): Directory bread(block 66) failed [ 1163.204196][T23761] FAT-fs (loop2): Directory bread(block 67) failed [ 1163.226509][T23761] FAT-fs (loop2): Directory bread(block 68) failed [ 1163.264044][T23761] FAT-fs (loop2): Directory bread(block 69) failed [ 1163.306964][T23761] FAT-fs (loop2): Directory bread(block 70) failed [ 1163.367557][T23761] FAT-fs (loop2): Directory bread(block 71) failed [ 1163.406200][T23761] FAT-fs (loop2): Directory bread(block 72) failed [ 1163.416984][T23786] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1163.442722][T23761] FAT-fs (loop2): Directory bread(block 73) failed [ 1163.702881][T23788] loop0: detected capacity change from 0 to 4096 [ 1163.799267][T23797] : entered promiscuous mode [ 1163.852695][T23802] loop6: detected capacity change from 0 to 256 [ 1164.152392][T23815] input: syz1 as /devices/virtual/input/input66 [ 1164.239213][T23773] loop3: detected capacity change from 0 to 32768 [ 1164.292385][T23773] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.13955 (23773) [ 1164.399724][T23773] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1164.464523][T23773] BTRFS info (device loop3): using blake2b checksum algorithm [ 1164.691085][T23773] BTRFS info (device loop3): enabling ssd optimizations [ 1164.741477][T23773] BTRFS info (device loop3): turning on async discard [ 1164.784025][T23773] BTRFS info (device loop3): enabling free space tree [ 1164.808845][T23773] BTRFS info (device loop3): use zstd compression, level 3 [ 1165.023716][T23871] loop6: detected capacity change from 0 to 1024 [ 1165.095403][T23871] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1165.161195][ T5822] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1165.292893][T23885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13980'. [ 1165.406878][T23892] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13981'. [ 1165.760980][T23821] loop0: detected capacity change from 0 to 40427 [ 1165.835030][T23821] F2FS-fs (loop0): Image doesn't support compression [ 1165.852003][T23821] F2FS-fs (loop0): build fault injection rate: 690 [ 1165.884135][T23821] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 1165.907182][T23821] F2FS-fs (loop0): invalid crc value [ 1166.053053][T23821] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1166.084056][T23821] F2FS-fs (loop0): Start checkpoint disabled! [ 1166.121185][T23821] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1166.124705][T23927] loop2: detected capacity change from 0 to 256 [ 1166.128624][T23821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1166.180810][T23929] vlan2: entered promiscuous mode [ 1166.185890][T23929] macvlan1: entered promiscuous mode [ 1166.381707][T23927] FAT-fs (loop2): Directory bread(block 64) failed [ 1166.416975][T23927] FAT-fs (loop2): Directory bread(block 65) failed [ 1166.442733][T23927] FAT-fs (loop2): Directory bread(block 66) failed [ 1166.471695][T23942] loop5: detected capacity change from 0 to 164 [ 1166.479500][T23927] FAT-fs (loop2): Directory bread(block 67) failed [ 1166.525983][ T3197] kworker/u8:10: attempt to access beyond end of device [ 1166.525983][ T3197] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1166.531251][T23927] FAT-fs (loop2): Directory bread(block 68) failed [ 1166.615060][T23927] FAT-fs (loop2): Directory bread(block 69) failed [ 1166.625096][ T3197] CPU: 0 UID: 0 PID: 3197 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.625136][ T3197] Tainted: [L]=SOFTLOCKUP [ 1166.625146][ T3197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1166.625162][ T3197] Workqueue: writeback wb_workfn (flush-7:0) [ 1166.625208][ T3197] Call Trace: [ 1166.625218][ T3197] [ 1166.625229][ T3197] dump_stack_lvl+0xe8/0x150 [ 1166.625268][ T3197] f2fs_handle_critical_error+0x37c/0x540 [ 1166.625310][ T3197] f2fs_write_end_io+0xcdb/0xff0 [ 1166.625375][ T3197] __submit_merged_bio+0x256/0x700 [ 1166.625419][ T3197] __submit_merged_write_cond+0x3c9/0x4e0 [ 1166.625466][ T3197] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1166.625525][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.625569][ T3197] f2fs_write_data_pages+0x2975/0x35e0 [ 1166.625656][ T3197] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1166.625714][ T3197] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1166.625787][ T3197] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1166.625854][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.625883][ T3197] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.625935][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.625969][ T3197] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1166.626007][ T3197] do_writepages+0x32e/0x550 [ 1166.626056][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.626085][ T3197] ? reacquire_held_locks+0x104/0x190 [ 1166.626123][ T3197] ? writeback_sb_inodes+0x477/0x1a20 [ 1166.626167][ T3197] __writeback_single_inode+0x133/0x11a0 [ 1166.626206][ T3197] ? do_raw_spin_unlock+0xf5/0x210 [ 1166.626240][ T3197] writeback_sb_inodes+0x992/0x1a20 [ 1166.626306][ T3197] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.626348][ T3197] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1166.626381][ T3197] ? do_raw_spin_lock+0x12b/0x2f0 [ 1166.626462][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.626499][ T3197] ? rcu_is_watching+0x15/0xb0 [ 1166.626536][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.626579][ T3197] wb_writeback+0x456/0xb70 [ 1166.626621][ T3197] ? queue_io+0x251/0x4a0 [ 1166.626668][ T3197] ? __pfx_wb_writeback+0x10/0x10 [ 1166.626700][ T3197] ? do_raw_spin_lock+0x12b/0x2f0 [ 1166.626751][ T3197] wb_workfn+0x414/0xf50 [ 1166.626785][ T3197] ? look_up_lock_class+0x57/0x110 [ 1166.626837][ T3197] ? __pfx_wb_workfn+0x10/0x10 [ 1166.626871][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.626901][ T3197] ? do_raw_spin_lock+0x12b/0x2f0 [ 1166.626933][ T3197] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1166.626961][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627000][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627036][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627068][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627103][ T3197] ? process_scheduled_works+0xa8d/0x18c0 [ 1166.627136][ T3197] ? process_scheduled_works+0xa8d/0x18c0 [ 1166.627174][ T3197] process_scheduled_works+0xb6e/0x18c0 [ 1166.627255][ T3197] ? __pfx_process_scheduled_works+0x10/0x10 [ 1166.627299][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627328][ T3197] ? assign_work+0x3d5/0x5e0 [ 1166.627371][ T3197] worker_thread+0xa53/0xfc0 [ 1166.627432][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627476][ T3197] kthread+0x388/0x470 [ 1166.627511][ T3197] ? __pfx_worker_thread+0x10/0x10 [ 1166.627544][ T3197] ? __pfx_kthread+0x10/0x10 [ 1166.627573][ T3197] ret_from_fork+0x51e/0xb90 [ 1166.627610][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627642][ T3197] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.627673][ T3197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.627703][ T3197] ? __switch_to+0xc7d/0x1450 [ 1166.627740][ T3197] ? __pfx_kthread+0x10/0x10 [ 1166.627768][ T3197] ret_from_fork_asm+0x1a/0x30 [ 1166.627831][ T3197] [ 1166.637751][T23946] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13994'. [ 1166.682482][ T3197] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1166.732803][T23927] FAT-fs (loop2): Directory bread(block 70) failed [ 1166.769169][T23946] openvswitch: netlink: Message has 6 unknown bytes. [ 1166.864451][T23927] FAT-fs (loop2): Directory bread(block 71) failed [ 1167.087799][T23927] FAT-fs (loop2): Directory bread(block 72) failed [ 1167.154968][T23927] FAT-fs (loop2): Directory bread(block 73) failed [ 1167.328981][T23958] loop6: detected capacity change from 0 to 4096 [ 1167.418080][T23958] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1167.628769][T23969] loop4: detected capacity change from 0 to 32768 [ 1167.645773][T23969] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.14001 (23969) [ 1167.684422][T23969] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1167.694588][T23969] BTRFS info (device loop4): using crc32c checksum algorithm [ 1167.801317][T23987] loop2: detected capacity change from 0 to 1024 [ 1167.873422][T23969] BTRFS info (device loop4): enabling ssd optimizations [ 1167.880415][T23969] BTRFS info (device loop4): turning on async discard [ 1167.889009][T23969] BTRFS info (device loop4): force clearing of disk cache [ 1167.896286][T23969] BTRFS info (device loop4): use zlib compression, level 3 [ 1167.913892][T23969] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1168.282688][ T29] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1168.303407][ T3197] hfsplus: b-tree write err: -5, ino 25 [ 1168.309107][ T3197] hfsplus: b-tree write err: -5, ino 4 [ 1168.334259][ T3197] hfsplus: b-tree write err: -5, ino 2 [ 1168.492348][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1168.529586][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.561393][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.597182][ T29] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1168.621639][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.656941][ T29] usb 6-1: config 0 descriptor?? [ 1168.861338][T24039] set_capacity_and_notify: 1 callbacks suppressed [ 1168.861361][T24039] loop6: detected capacity change from 0 to 1024 [ 1168.984142][T24039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.071379][ T29] hid (null): bogus close delimiter [ 1169.091998][T24039] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1169.140603][ T29] wacom 0003:056A:0084.0008: bogus close delimiter [ 1169.171069][ T29] wacom 0003:056A:0084.0008: item 0 4 2 10 parsing failed [ 1169.199893][T24039] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1169.215120][ T29] wacom 0003:056A:0084.0008: parse failed [ 1169.245295][ T29] wacom 0003:056A:0084.0008: probe with driver wacom failed with error -22 [ 1169.303125][ T29] usb 6-1: USB disconnect, device number 120 [ 1169.319597][T24011] loop0: detected capacity change from 0 to 32768 [ 1169.345435][T24011] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13995 (24011) [ 1169.464833][T24011] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1169.485946][T24011] BTRFS info (device loop0): using sha256 checksum algorithm [ 1169.531526][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.554176][T24071] loop2: detected capacity change from 0 to 256 [ 1169.605611][T24079] loop4: detected capacity change from 0 to 128 [ 1169.636021][T24071] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4711949a, utbl_chksum : 0xe619d30d) [ 1169.661561][T24023] loop3: detected capacity change from 0 to 32768 [ 1169.690372][T24079] FAT-fs (loop4): Directory bread(block 162) failed [ 1169.710510][T24011] BTRFS info (device loop0): enabling ssd optimizations [ 1169.712013][ T30] audit: type=1800 audit(1162587.417:660): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14015" name="file1" dev="loop2" ino=1048800 res=0 errno=0 [ 1169.730374][T24011] BTRFS info (device loop0): turning on async discard [ 1169.758790][T24011] BTRFS info (device loop0): enabling free space tree [ 1169.759493][T24079] FAT-fs (loop4): Directory bread(block 163) failed [ 1169.765554][T24011] BTRFS info (device loop0): enabling auto defrag [ 1169.787820][T24023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14006 (24023) [ 1169.835492][T24079] FAT-fs (loop4): Directory bread(block 164) failed [ 1169.845102][T24011] BTRFS info (device loop0): max_inline set to 4096 [ 1169.872060][T24023] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1169.893073][T24079] FAT-fs (loop4): Directory bread(block 165) failed [ 1169.911219][T24023] BTRFS info (device loop3): using crc32c checksum algorithm [ 1169.951833][T24094] loop5: detected capacity change from 0 to 16 [ 1169.976378][T24079] FAT-fs (loop4): Directory bread(block 166) failed [ 1169.976780][T24094] erofs (device loop5): mounted with root inode @ nid 36. [ 1170.007248][T24094] erofs (device loop5): per-inode big pcluster without sb feature for nid 89 [ 1170.026595][T24079] FAT-fs (loop4): Directory bread(block 167) failed [ 1170.028093][T24094] erofs (device loop5): per-inode big pcluster without sb feature for nid 89 [ 1170.033303][T24079] FAT-fs (loop4): Directory bread(block 168) failed [ 1170.042238][T24094] erofs (device loop5): readahead error at folio 3 @ nid 89 [ 1170.042266][T24094] erofs (device loop5): per-inode big pcluster without sb feature for nid 89 [ 1170.042287][T24094] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 1170.042309][T24094] erofs (device loop5): per-inode big pcluster without sb feature for nid 89 [ 1170.042329][T24094] erofs (device loop5): readahead error at folio 1 @ nid 89 [ 1170.042351][T24094] erofs (device loop5): per-inode big pcluster without sb feature for nid 89 [ 1170.042371][T24094] erofs (device loop5): readahead error at folio 0 @ nid 89 [ 1170.042406][T24094] erofs (device loop5): per-inode big pcluster without sb feature for nid 89 [ 1170.114192][T24094] erofs (device loop5): per-inode big pcluster without sb feature for nid 89 [ 1170.123660][T24094] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1170.131137][ T30] audit: type=1800 audit(1162587.868:661): pid=24094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.14017" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1170.151155][T24079] FAT-fs (loop4): Directory bread(block 169) failed [ 1170.166923][T24079] FAT-fs (loop4): Directory bread(block 162) failed [ 1170.173692][T24079] FAT-fs (loop4): Directory bread(block 163) failed [ 1170.180817][T24079] syz.4.14016: attempt to access beyond end of device [ 1170.180817][T24079] loop4: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 1170.194610][T24079] syz.4.14016: attempt to access beyond end of device [ 1170.194610][T24079] loop4: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 1170.274905][T24023] BTRFS info (device loop3): enabling ssd optimizations [ 1170.281897][T24023] BTRFS info (device loop3): turning on flush-on-commit [ 1170.343709][ T5820] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1170.378394][T24023] BTRFS info (device loop3): enabling free space tree [ 1170.385227][T24023] BTRFS info (device loop3): enabling auto defrag [ 1170.400535][T24115] loop6: detected capacity change from 0 to 4096 [ 1170.449076][T24023] BTRFS info (device loop3): use lzo compression, level 1 [ 1170.485466][T24023] BTRFS info (device loop3): max_inline set to 4096 [ 1170.551310][T24134] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1170.671198][T24130] loop4: detected capacity change from 0 to 4096 [ 1170.809618][T24141] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1170.875812][ T5822] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1170.973910][ T30] audit: type=1804 audit(1162588.729:662): pid=24130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.14020" name="/newroot/2391/file0/file0/file1" dev="loop4" ino=18 res=1 errno=0 [ 1171.013602][T24150] loop5: detected capacity change from 0 to 512 [ 1171.233916][T24150] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.14026: corrupted in-inode xattr: e_value size too large [ 1171.342198][T24150] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1171.342717][T24150] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.14026: couldn't read orphan inode 15 (err -117) [ 1171.351989][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1171.352012][ C1] EXT4-fs (loop5): initial error at time 1162589: ext4_iget_extra_inode:5025: inode 15 [ 1171.352051][ C1] EXT4-fs (loop5): last error at time 1162589: ext4_iget_extra_inode:5025: inode 15 [ 1171.473706][T24150] loop5: lost filesystem error report for type 5 error -117 [ 1171.494184][T24150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.719267][T24169] loop6: detected capacity change from 0 to 4096 [ 1171.849854][ T29] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1172.055067][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.065746][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.095081][ T29] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1172.128662][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1172.139230][ T29] usb 6-1: SerialNumber: syz [ 1172.335998][T24207] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1172.412894][ T29] usb 6-1: 0:2 : does not exist [ 1172.640476][ T29] usb 6-1: USB disconnect, device number 121 [ 1172.674119][ T5973] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1172.684887][T24227] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1172.771396][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.864562][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 1172.880600][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.932311][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.953906][ T5973] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1172.969423][ T5973] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1172.987712][ T5973] usb 3-1: Manufacturer: syz [ 1172.995512][ T5973] usb 3-1: config 0 descriptor?? [ 1173.203744][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.324163][T24265] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14046: invalid indirect mapped block 4294967295 (level 1) [ 1173.423094][ T5973] hid (null): unknown global tag 0xd [ 1173.443761][T24265] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1173.451591][T24265] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14046: invalid indirect mapped block 4294967295 (level 1) [ 1173.460830][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1173.460854][ C0] EXT4-fs (loop3): initial error at time 1162591: ext4_free_branches:1023: inode 11 [ 1173.460895][ C0] EXT4-fs (loop3): last error at time 1162591: ext4_free_branches:1023: inode 11 [ 1173.525010][ T5973] creative-sb0540 0003:041E:3100.0009: unknown global tag 0xd [ 1173.533983][T24277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1173.540823][ T5973] creative-sb0540 0003:041E:3100.0009: item 0 1 1 13 parsing failed [ 1173.554728][T24265] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1173.562897][ T5973] creative-sb0540 0003:041E:3100.0009: parse failed [ 1173.579044][ T5973] creative-sb0540 0003:041E:3100.0009: probe with driver creative-sb0540 failed with error -22 [ 1173.629251][T24265] EXT4-fs (loop3): 2 truncates cleaned up [ 1173.642339][T24265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.689866][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.750994][ T29] usb 3-1: USB disconnect, device number 3 [ 1173.874871][ T30] audit: type=1326 audit(1162591.805:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24300 comm="syz.4.14053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8bd9c799 code=0x7ffc0000 [ 1173.979195][ T30] audit: type=1326 audit(1162591.826:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24300 comm="syz.4.14053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8bd9c799 code=0x7ffc0000 [ 1174.049798][T24311] set_capacity_and_notify: 3 callbacks suppressed [ 1174.049817][T24311] loop6: detected capacity change from 0 to 2048 [ 1174.063055][ T30] audit: type=1326 audit(1162591.826:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24300 comm="syz.4.14053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4d8bd9c799 code=0x7ffc0000 [ 1174.064672][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.085349][ T30] audit: type=1326 audit(1162591.826:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24300 comm="syz.4.14053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8bd9c799 code=0x7ffc0000 [ 1174.171861][ T30] audit: type=1326 audit(1162591.836:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24300 comm="syz.4.14053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8bd9c799 code=0x7ffc0000 [ 1174.284170][ T30] audit: type=1326 audit(1162591.847:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24300 comm="syz.4.14053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4d8bd9c799 code=0x7ffc0000 [ 1174.314160][T24311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.330842][ T30] audit: type=1326 audit(1162591.847:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24300 comm="syz.4.14053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8bd9c799 code=0x7ffc0000 [ 1174.488536][T24325] loop5: detected capacity change from 0 to 1024 [ 1174.628963][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.770609][ T3199] hfsplus: b-tree write err: -5, ino 25 [ 1174.776379][ T3199] hfsplus: b-tree write err: -5, ino 4 [ 1174.785737][ T3199] hfsplus: b-tree write err: -5, ino 2 [ 1174.840801][T24340] loop3: detected capacity change from 0 to 4096 [ 1174.933068][T24340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.988113][T24356] netlink: 'syz.5.14065': attribute type 1 has an invalid length. [ 1175.065279][T24356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14065'. [ 1175.107597][T24356] netlink: 658 bytes leftover after parsing attributes in process `syz.5.14065'. [ 1175.129129][T24348] loop0: detected capacity change from 0 to 4096 [ 1175.160421][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1175.160440][ T30] audit: type=1800 audit(1162593.128:672): pid=24340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14062" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 1175.220676][T24356] netlink: 'syz.5.14065': attribute type 1 has an invalid length. [ 1175.240474][T24368] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1175.276151][T24369] Bluetooth: MGMT ver 1.23 [ 1175.295434][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.541117][T24381] loop6: detected capacity change from 0 to 512 [ 1175.579449][T24381] EXT4-fs: Ignoring removed mblk_io_submit option [ 1175.619231][T24381] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1175.671859][T24381] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1175.733312][T24381] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1175.741534][ T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1175.741569][T24401] loop2: detected capacity change from 0 to 512 [ 1175.750255][T24399] loop4: detected capacity change from 0 to 256 [ 1175.782604][T24397] macsec1: entered promiscuous mode [ 1175.805052][T24381] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.14073: Invalid block bitmap block 0 in block_group 0 [ 1175.837032][T24397] macsec1: entered allmulticast mode [ 1175.855807][T24409] loop0: detected capacity change from 0 to 512 [ 1175.873658][T24409] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1175.884042][T24401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.911428][T24381] loop6: lost filesystem error report for type 5 error -117 [ 1175.921831][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1175.926557][T24399] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1175.929225][ C0] EXT4-fs (loop6): last error at time 1162593: ext4_read_block_bitmap_nowait:483 [ 1175.948248][ T29] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1175.971505][T24381] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.14073: Invalid block bitmap block 0 in block_group 0 [ 1176.029742][ T29] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1176.042383][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1176.046988][T24381] loop6: lost filesystem error report for type 5 error -117 [ 1176.053661][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.055885][T24409] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.14079: bad orphan inode 131083 [ 1176.062489][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1176.091986][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1176.094983][T24381] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.14073: Invalid block bitmap block 0 in block_group 0 [ 1176.105612][ T29] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1176.150951][T24409] loop0: lost filesystem error report for type 5 error -117 [ 1176.160468][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1176.174294][ C1] EXT4-fs (loop0): initial error at time 1162594: ext4_orphan_get:1417 [ 1176.182609][ C1] EXT4-fs (loop0): last error at time 1162594: ext4_orphan_get:1417 [ 1176.197490][T24381] loop6: lost filesystem error report for type 5 error -117 [ 1176.209166][T24409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.234391][T24418] vivid-007: ================= START STATUS ================= [ 1176.248625][ T29] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1176.257669][T24381] Quota error (device loop6): write_blk: dquota write failed [ 1176.269142][T24381] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1176.279500][ T29] usb 4-1: Product: syz [ 1176.283660][ T29] usb 4-1: Manufacturer: syz [ 1176.290480][T24381] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.14073: Failed to acquire dquot type 1 [ 1176.306271][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 1176.311474][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 1176.315909][T24381] loop6: lost filesystem error report for type 5 error -28 [ 1176.317369][T24418] vivid-007: Enable Output Cropping: [ 1176.331026][ T30] audit: type=1800 audit(1162594.377:673): pid=24409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14079" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1176.357906][T24381] EXT4-fs (loop6): 1 orphan inode deleted [ 1176.365737][ T29] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1176.369686][T24418] true [ 1176.374335][T24418] vivid-007: Enable Output Composing: true [ 1176.392205][ T29] cdc_wdm 4-1:1.0: Unknown control protocol [ 1176.399019][T23934] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 1176.419191][T24418] vivid-007: Enable Output Scaler: true [ 1176.435117][T24418] vivid-007: Tx RGB Quantization Range: Automatic [ 1176.441996][T23934] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 1176.472829][T24418] vivid-007: Transmit Mode: HDMI [ 1176.488197][T24418] vivid-007: Hotplug Present: 0x00000000 [ 1176.513697][T23934] loop6: lost filesystem error report for type 5 error -117 [ 1176.519134][T24381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1176.525675][T24418] vivid-007: RxSense Present: 0x00000000 [ 1176.600283][T24418] vivid-007: EDID Present: 0x00000000 [ 1176.611100][T24418] vivid-007: ================== END STATUS ================== [ 1176.620527][T24381] dummy0: mtu less than device minimum [ 1176.670379][ T5973] usb 4-1: USB disconnect, device number 5 [ 1176.692461][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.740094][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.265488][ T29] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1177.298110][T24484] loop6: detected capacity change from 0 to 128 [ 1177.321196][T24484] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1177.369780][T24484] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1177.428980][ T29] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.446708][ T29] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1177.474703][ T29] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1177.494250][ T29] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1177.543384][ T29] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1177.570166][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.580802][T24460] loop5: detected capacity change from 0 to 32768 [ 1177.624626][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1177.702172][T18439] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1177.704226][T24460] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1177.721855][ T29] usb 1-1: invalid MIDI out EP 0 [ 1177.803199][T24460] XFS (loop5): Ending clean mount [ 1177.806927][ T29] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1177.845126][ T7838] udevd[7838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1177.892745][ T29] usb 1-1: USB disconnect, device number 125 [ 1178.147239][ T5833] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1178.435762][T24559] Trying to free block not in datazone [ 1178.465643][T24559] Trying to free block not in datazone [ 1178.471152][T24559] Trying to free block not in datazone [ 1178.483625][T24485] xfs: Deprecated parameter 'attr2' [ 1178.522230][T24485] XFS: attr2 mount option is deprecated. [ 1178.561914][T24559] Trying to free block not in datazone [ 1178.563327][T24485] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1178.567944][T24559] Trying to free block not in datazone [ 1178.582978][T24559] minix_free_block (loop2:6): bit already cleared [ 1178.594873][T24559] Trying to free block not in datazone [ 1178.601080][T24559] Trying to free block not in datazone [ 1178.749711][T24485] XFS (loop3): Ending clean mount [ 1178.807235][T24485] XFS (loop3): Quotacheck needed: Please wait. [ 1178.834295][T24582] set_capacity_and_notify: 2 callbacks suppressed [ 1178.834313][T24582] loop4: detected capacity change from 0 to 1024 [ 1178.906096][T24485] XFS (loop3): Quotacheck: Done. [ 1178.985279][T24590] loop2: detected capacity change from 0 to 4096 [ 1179.071887][T24601] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1179.082903][ T3201] hfsplus: b-tree write err: -5, ino 25 [ 1179.105264][ T3201] hfsplus: b-tree write err: -5, ino 4 [ 1179.110806][ T3201] hfsplus: b-tree write err: -5, ino 2 [ 1179.255739][ T5822] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1179.358312][T24613] loop4: detected capacity change from 0 to 2048 [ 1179.377786][T24613] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1179.476369][ T30] audit: type=1800 audit(1162597.684:674): pid=24613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14115" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 1179.833072][T24632] loop4: detected capacity change from 0 to 1024 [ 1180.173706][T24647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14123'. [ 1180.204083][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14123'. [ 1180.254608][T24602] loop0: detected capacity change from 0 to 32768 [ 1180.282656][T24647] netlink: 'syz.4.14123': attribute type 14 has an invalid length. [ 1180.290288][T24602] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1180.424861][T24602] XFS (loop0): Ending clean mount [ 1180.458524][T24667] loop2: detected capacity change from 0 to 256 [ 1180.458557][T24602] XFS (loop0): Quotacheck needed: Please wait. [ 1180.466610][T24667] exfat: Deprecated parameter 'namecase' [ 1180.572138][T24667] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 1180.591467][T24602] XFS (loop0): Quotacheck: Done. [ 1180.770286][ T5820] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1181.256650][T14762] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1181.427491][T14762] usb 5-1: Using ep0 maxpacket: 8 [ 1181.452344][T14762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.531912][T14762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1181.559616][T14762] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1181.570723][T14762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.600917][T14762] usb 5-1: config 0 descriptor?? [ 1181.740428][T24731] loop6: detected capacity change from 0 to 2368 [ 1181.760496][T24731] iso9660: Unknown parameter 'ŠXðÓ-¥¤ô' [ 1181.827423][T14762] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1181.975921][T24760] random: crng reseeded on system resumption [ 1182.040198][T24701] iowarrior 5-1:0.0: Error -90 while submitting URB [ 1182.072672][T14762] usb 5-1: USB disconnect, device number 8 [ 1183.004918][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14166'. [ 1183.060941][T24833] loop2: detected capacity change from 0 to 256 [ 1183.152090][ T5973] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1183.203726][T24833] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 1183.296034][T24833] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 1183.357074][ T5973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.374769][ T5973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.417941][T24783] loop0: detected capacity change from 0 to 32768 [ 1183.424867][ T5973] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1183.460802][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.477608][T24851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.516049][ T5973] usb 7-1: config 0 descriptor?? [ 1183.572734][T24856] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14175'. [ 1183.674714][T24866] tipc: Enabling of bearer rejected, failed to enable media [ 1183.721806][T24864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14176'. [ 1184.002975][ T5973] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x2 [ 1184.040129][ T5973] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 1184.101380][ T7436] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1184.161849][ T5973] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 1184.200403][ T5973] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 1184.229299][ T5973] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 1184.239605][T14762] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1184.243652][ T5973] usb 7-1: USB disconnect, device number 27 [ 1184.300390][ T7436] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1184.316433][T24900] fido_id[24900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1184.323683][ T7436] usb 5-1: config 1 has no interface number 0 [ 1184.368256][ T7436] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1184.417208][ T7436] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1184.455450][ T7436] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 1184.457790][T14762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.476531][ T7436] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.488025][ T7436] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1184.524133][ T7436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.554052][ T7436] usb 5-1: Product: syz [ 1184.564130][ T7436] usb 5-1: Manufacturer: syz [ 1184.566448][T14762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.592706][ T7436] usb 5-1: SerialNumber: syz [ 1184.597956][T14762] usb 6-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00 [ 1184.610007][T24875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1184.622127][T24875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1184.627441][T14762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.668724][ T7436] usb 5-1: Expected 3 endpoints, found: 2 [ 1184.698815][T14762] usb 6-1: config 0 descriptor?? [ 1184.839418][ T7436] IPVS: starting estimator thread 0... [ 1184.863417][ T5837] usb 5-1: USB disconnect, device number 9 [ 1184.933653][T24949] IPVS: using max 25 ests per chain, 60000 per kthread [ 1185.098457][T14762] hid-generic 0003:5E0A:A055.000B: unbalanced collection at end of report description [ 1185.118162][T14762] hid-generic 0003:5E0A:A055.000B: probe with driver hid-generic failed with error -22 [ 1185.118767][ T30] audit: type=1326 audit(1162603.605:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24964 comm="syz.3.14197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1185.191501][ T30] audit: type=1326 audit(1162603.647:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24964 comm="syz.3.14197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1185.231131][ T30] audit: type=1326 audit(1162603.647:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24964 comm="syz.3.14197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1185.286634][ T30] audit: type=1326 audit(1162603.647:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24964 comm="syz.3.14197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1185.294077][T14762] usb 6-1: USB disconnect, device number 122 [ 1185.473334][T24959] loop2: detected capacity change from 0 to 32768 [ 1185.546335][T24959] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 1185.546335][T24959] [ 1185.576102][T24959] jfs_create: dtInsert returned -EIO [ 1185.583465][T24959] ERROR: (device loop2): jfs_create: [ 1185.583465][T24959] [ 1185.599358][T24989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14201'. [ 1185.662449][T24992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14201'. [ 1185.754003][T24996] Invalid ELF header len 4 [ 1186.112371][T25022] netlink: 84 bytes leftover after parsing attributes in process `syz.6.14210'. [ 1186.148019][T25022] netlink: 84 bytes leftover after parsing attributes in process `syz.6.14210'. [ 1186.181997][T25022] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1186.229104][ T7436] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1186.262886][T25026] loop5: detected capacity change from 0 to 256 [ 1186.313389][T25026] exfat: Deprecated parameter 'utf8' [ 1186.377332][T25026] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1186.416653][ T7436] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1186.448267][ T7436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.467945][T25039] vivid-003: disconnect [ 1186.476763][ T7436] usb 5-1: Product: syz [ 1186.480934][ T7436] usb 5-1: Manufacturer: syz [ 1186.486721][T25038] vivid-003: reconnect [ 1186.514390][ T7436] usb 5-1: SerialNumber: syz [ 1186.553692][ T7436] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1186.572063][T14762] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1186.586520][ T5837] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1186.715828][T25005] loop0: detected capacity change from 0 to 32768 [ 1186.736650][T14762] usb 3-1: Using ep0 maxpacket: 32 [ 1186.757135][T14762] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1186.782796][T14762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.800724][T14762] usb 3-1: Product: syz [ 1186.810849][T14762] usb 3-1: Manufacturer: syz [ 1186.821061][T14762] usb 3-1: SerialNumber: syz [ 1186.854773][T14762] usb 3-1: config 0 descriptor?? [ 1187.281420][T14762] airspy 3-1:0.0: Board ID: 00 [ 1187.314760][T14762] airspy 3-1:0.0: Firmware version: [ 1187.488542][T14762] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 1187.551504][T14762] airspy 3-1:0.0: Registered as swradio24 [ 1187.585657][T25031] loop3: detected capacity change from 0 to 32768 [ 1187.594458][T14762] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1187.726704][T14762] usb 3-1: USB disconnect, device number 4 [ 1187.792031][T25031] JBD2: Ignoring recovery information on journal [ 1188.117873][T25031] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1188.171732][T25101] loop6: detected capacity change from 0 to 512 [ 1188.383623][T25101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.413218][ T5973] usb 5-1: USB disconnect, device number 10 [ 1188.428639][ T5837] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1188.459541][ T5837] ath9k_htc: Failed to initialize the device [ 1188.465880][ T9006] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 1188.495432][ T5973] usb 5-1: ath9k_htc: USB layer deinitialized [ 1188.502342][ T7436] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1188.645294][ T5822] ocfs2: Unmounting device (7,3) on (node local) [ 1188.763066][ T7436] usb 1-1: Using ep0 maxpacket: 16 [ 1188.780117][ T7436] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1188.801595][T25128] loop2: detected capacity change from 0 to 512 [ 1188.818338][ T7436] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1188.837657][ T7436] usb 1-1: Product: syz [ 1188.849071][ T7436] usb 1-1: Manufacturer: syz [ 1188.849465][T25128] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1188.857176][ T7436] usb 1-1: SerialNumber: syz [ 1188.939342][ T7436] usb 1-1: config 0 descriptor?? [ 1189.089510][T18439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.122066][T25128] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1189.178870][T25128] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 1189.221150][T25128] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 1189.307660][T25145] loop3: detected capacity change from 0 to 4096 [ 1189.309276][ T7436] usb 1-1: USB disconnect, device number 126 [ 1189.358767][T25145] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1189.409056][ T6590] udevd[6590]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.459458][ T5837] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1189.573342][T25183] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 1189.576127][T25145] ntfs3(loop3): ino=19, mi_enum_attr [ 1189.625996][T25145] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1189.666487][ T5837] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1189.685405][ T5837] usb 6-1: config 0 has no interface number 0 [ 1189.694584][ T5837] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1189.747261][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.792277][ T5837] usb 6-1: config 0 descriptor?? [ 1189.813292][ T5837] usb 6-1: selecting invalid altsetting 1 [ 1189.861202][ T5837] dvb_ttusb_budget: ttusb_init_controller: error [ 1189.906843][ T5837] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1190.036109][T25203] loop4: detected capacity change from 0 to 1024 [ 1190.053242][T25203] EXT4-fs: Ignoring removed orlov option [ 1190.073073][T25203] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1190.093311][T25213] loop0: detected capacity change from 0 to 512 [ 1190.151423][T25203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.170398][T25213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.240253][T25232] loop2: detected capacity change from 0 to 128 [ 1190.254628][ T5837] DVB: Unable to find symbol cx22700_attach() [ 1190.263985][T25203] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 1190.302017][T25232] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1190.328478][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.343774][T25232] FAT-fs (loop2): Filesystem has been set read-only [ 1190.435402][ T5837] DVB: Unable to find symbol tda10046_attach() [ 1190.448736][ T5837] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1190.468563][T25241] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1190.482212][ T5837] usb 6-1: USB disconnect, device number 123 [ 1190.520280][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.090234][T25275] loop2: detected capacity change from 0 to 4096 [ 1191.122333][T25290] loop5: detected capacity change from 0 to 256 [ 1191.125009][T25275] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1191.187374][T25290] exfat: Deprecated parameter 'namecase' [ 1191.188205][T25275] ntfs3(loop2): ino=1a, mi_enum_attr [ 1191.212381][T25275] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1191.219808][T25290] exfat: Deprecated parameter 'namecase' [ 1191.221811][T25287] loop4: detected capacity change from 0 to 4096 [ 1191.241923][T25210] loop6: detected capacity change from 0 to 32768 [ 1191.255997][T25290] exfat: Deprecated parameter 'utf8' [ 1191.269617][ T5837] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1191.296349][T25290] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1191.299456][T25210] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1191.340349][T25290] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x02ffffff) [ 1191.363281][T25290] exFAT-fs (loop5): Filesystem has been set read-only [ 1191.370090][T25290] exFAT-fs (loop5): failed to count the number of clusters in root [ 1191.428876][T25312] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1191.462032][T25290] exFAT-fs (loop5): failed to recognize exfat type [ 1191.496987][ T5837] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1191.518496][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.551199][T25210] XFS (loop6): Ending clean mount [ 1191.564363][ T5837] usb 1-1: config 0 has no interface number 0 [ 1191.616890][ T5837] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1191.696606][ T5837] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1191.737213][T25210] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 1191.787974][ T5837] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1191.809433][T25210] XFS (loop6): Unmount and run xfs_repair [ 1191.820136][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.830924][T25210] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1191.853535][T25210] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 1191.862953][ T5837] usb 1-1: Product: syz [ 1191.872821][ T5837] usb 1-1: Manufacturer: syz [ 1191.882339][T25210] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 1191.896546][ T5837] usb 1-1: SerialNumber: syz [ 1191.930306][ T5837] usb 1-1: config 0 descriptor?? [ 1191.935658][T25210] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1191.986270][T25210] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 1192.029862][T25210] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 1192.038766][T25210] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 1192.092690][T25210] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 1192.131179][T25210] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 1192.158743][T25210] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74 [ 1192.160516][T25344] loop5: detected capacity change from 0 to 512 [ 1192.224194][T25210] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x950 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1192.240340][T25210] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 1192.286816][T25344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.318381][T18439] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1192.327362][T14762] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1192.500877][T14762] usb 4-1: Using ep0 maxpacket: 16 [ 1192.524373][T25360] EXT4-fs error (device loop5): ext4_get_first_dir_block:3527: inode #12: comm syz.5.14269: Attempting to read directory block (0) that is past i_size (3) [ 1192.527067][T14762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.582779][T14762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.615430][T14762] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1192.629968][ T5837] usb 1-1: USB disconnect, device number 127 [ 1192.645050][T14762] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1192.684192][T14762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.718679][T14762] usb 4-1: config 0 descriptor?? [ 1192.756992][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.031504][T25379] loop5: detected capacity change from 0 to 4096 [ 1193.056422][T25379] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1193.065634][T25379] NILFS (loop5): trying rollback from an earlier position [ 1193.073630][T25385] loop6: detected capacity change from 0 to 2048 [ 1193.096328][T25385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1193.172076][T14762] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input69 [ 1193.191384][T25379] NILFS (loop5): recovery complete [ 1193.242152][T25398] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1193.291472][T14762] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1193.382998][T14762] usb 4-1: USB disconnect, device number 6 [ 1193.435329][T25414] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1193.639780][ T5837] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1193.680086][T25409] fido_id[25409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1193.817367][T25445] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1193.871747][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.907144][ T5837] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1193.964858][ T5837] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1193.993455][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.038442][ T5837] usb 1-1: config 0 descriptor?? [ 1194.076776][ T5837] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1194.102552][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 1194.129778][ T5837] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1194.188069][ T5837] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1194.226487][ T5837] usb 1-1: media controller created [ 1194.237360][T25472] netlink: 'syz.3.14292': attribute type 5 has an invalid length. [ 1194.252732][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.267116][T25410] dvb-usb: bulk message failed: -22 (2/0) [ 1194.318526][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 1194.339615][T25484] loop6: detected capacity change from 0 to 256 [ 1194.346229][ T5837] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1194.367754][T25484] exfat: Deprecated parameter 'namecase' [ 1194.374448][T25484] exfat: Deprecated parameter 'namecase' [ 1194.387245][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input70 [ 1194.422320][ T5837] dvb-usb: schedule remote query interval to 150 msecs. [ 1194.439907][ T5837] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1194.471903][T25484] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1194.533677][ T5837] usb 1-1: USB disconnect, device number 2 [ 1194.640253][ T5837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1194.681407][T25512] loop5: detected capacity change from 0 to 164 [ 1194.849689][ T5973] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1195.049444][ T5973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.096186][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.126233][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.160819][ T5973] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1195.202026][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.285800][ T5973] usb 5-1: config 0 descriptor?? [ 1195.340316][T14762] kernel write not supported for file /uhid (pid: 14762 comm: kworker/1:7) [ 1195.698152][T25577] loop3: detected capacity change from 0 to 64 [ 1195.709892][ T5973] wacom 0003:056A:0010.000D: unknown main item tag 0x0 [ 1195.729128][ T5973] wacom 0003:056A:0010.000D: unknown main item tag 0x0 [ 1195.772007][ T5973] wacom 0003:056A:0010.000D: unknown main item tag 0x0 [ 1195.788226][T25577] minix-fs error (device loop3): minix_rename:227: inode #2: comm syz.3.14318: inode has corrupted nlink [ 1195.906136][T14762] usb 5-1: USB disconnect, device number 11 [ 1196.291316][T25610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14325'. [ 1196.322921][T25552] loop5: detected capacity change from 0 to 32768 [ 1197.166501][T25647] loop4: detected capacity change from 0 to 1024 [ 1197.258841][T25647] hfsplus: request for non-existent node 16777216 in B*Tree [ 1197.266643][ T30] audit: type=1800 audit(1162616.339:679): pid=25647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14334" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1197.319575][T25647] hfsplus: request for non-existent node 16777216 in B*Tree [ 1197.596651][T25680] loop6: detected capacity change from 0 to 64 [ 1197.663825][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14345'. [ 1197.796362][T25679] loop3: detected capacity change from 0 to 4096 [ 1197.837600][T25679] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1197.919134][T25679] ntfs3(loop3): Failed to load $Extend (-22). [ 1197.925277][T25679] ntfs3(loop3): Failed to initialize $Extend. [ 1197.941734][T25703] loop0: detected capacity change from 0 to 256 [ 1197.998661][T25703] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1198.051370][ T5973] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1198.072168][T25709] loop5: detected capacity change from 0 to 1024 [ 1198.131702][T25709] EXT4-fs: Ignoring removed orlov option [ 1198.219603][T25709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1198.250645][ T5973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1198.301118][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1198.370338][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1198.414276][ T5973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1198.460070][ T5973] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1198.487592][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.488179][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.561411][ T5973] usb 5-1: config 0 descriptor?? [ 1198.704042][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14360'. [ 1199.019396][ T5973] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1199.044922][ T30] audit: type=1326 audit(1162618.218:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25770 comm="syz.3.14366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1199.072076][ T5973] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1199.090944][ T5973] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1199.111984][T25778] loop0: detected capacity change from 0 to 512 [ 1199.121536][ T5973] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1199.136178][ T30] audit: type=1326 audit(1162618.218:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25770 comm="syz.3.14366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1199.158644][ T5973] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1199.246625][ T30] audit: type=1326 audit(1162618.239:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25770 comm="syz.3.14366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1199.310217][T25773] loop5: detected capacity change from 0 to 8192 [ 1199.326452][ T30] audit: type=1326 audit(1162618.239:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25770 comm="syz.3.14366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1199.356546][ T5973] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1199.394427][ T5973] usb 5-1: USB disconnect, device number 12 [ 1199.398560][T25773] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1199.423469][ T30] audit: type=1326 audit(1162618.270:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25770 comm="syz.3.14366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1199.474279][T25800] loop0: detected capacity change from 0 to 64 [ 1199.490344][T25773] UDF-fs: Scanning with blocksize 512 failed [ 1199.518426][T25800] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1199.564987][T25773] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1199.625764][T25773] UDF-fs: Scanning with blocksize 1024 failed [ 1199.633143][ T30] audit: type=1326 audit(1162618.270:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25770 comm="syz.3.14366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1199.713825][T25773] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1199.759552][T25773] UDF-fs: Scanning with blocksize 2048 failed [ 1199.774399][ T30] audit: type=1326 audit(1162618.270:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25770 comm="syz.3.14366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6ab9c799 code=0x7ffc0000 [ 1199.788455][T25798] fido_id[25798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1199.892355][T25773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1200.050170][ T30] audit: type=1800 audit(1162619.268:687): pid=25773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14365" name="bus" dev="loop5" ino=824 res=0 errno=0 [ 1200.155207][ T5973] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1200.360234][ T5973] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1200.393463][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.440088][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.479114][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1200.497842][T25853] loop4: detected capacity change from 0 to 128 [ 1200.542255][ T5973] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1200.567469][ T5973] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1200.613069][ T5973] usb 3-1: Manufacturer: syz [ 1200.650545][ T5973] usb 3-1: config 0 descriptor?? [ 1200.670408][ T30] audit: type=1326 audit(1162619.918:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.0.14384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc78479c799 code=0x0 [ 1200.804230][T25872] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14385'. [ 1200.871139][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14387'. [ 1201.069573][ T5973] appleir 0003:05AC:8243.000F: item fetching failed at offset 0/1 [ 1201.101142][ T5973] appleir 0003:05AC:8243.000F: parse failed [ 1201.120540][ T5973] appleir 0003:05AC:8243.000F: probe with driver appleir failed with error -22 [ 1201.275260][ T5973] usb 3-1: USB disconnect, device number 5 [ 1201.987626][T25943] netlink: 'syz.2.14405': attribute type 1 has an invalid length. [ 1202.012750][T25943] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14405'. [ 1202.028307][T25947] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1202.045565][T25943] netlink: 'syz.2.14405': attribute type 1 has an invalid length. [ 1202.073084][T25943] netlink: 'syz.2.14405': attribute type 8 has an invalid length. [ 1202.098879][T25943] netlink: 606 bytes leftover after parsing attributes in process `syz.2.14405'. [ 1202.203998][T25950] loop0: detected capacity change from 0 to 2048 [ 1202.251043][T25956] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1202.455348][T25911] loop4: detected capacity change from 0 to 32768 [ 1202.511414][T25911] MetaData crosses page boundary!! [ 1202.547866][T25911] lblock = 6161616161, size = 370544640 [ 1202.557791][T25911] CPU: 1 UID: 0 PID: 25911 Comm: syz.4.14395 Tainted: G L syzkaller #0 PREEMPT(full) [ 1202.557830][T25911] Tainted: [L]=SOFTLOCKUP [ 1202.557839][T25911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1202.557856][T25911] Call Trace: [ 1202.557866][T25911] [ 1202.557877][T25911] dump_stack_lvl+0xe8/0x150 [ 1202.557919][T25911] __get_metapage+0x9ed/0xde0 [ 1202.557956][T25911] dtSearch+0x591/0x21b0 [ 1202.558013][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558068][T25911] jfs_symlink+0x857/0xfd0 [ 1202.558111][T25911] ? __pfx_jfs_symlink+0x10/0x10 [ 1202.558181][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558212][T25911] ? make_vfsuid+0x49/0xa0 [ 1202.558244][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558292][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558321][T25911] ? inode_permission+0x346/0x5f0 [ 1202.558357][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558388][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558424][T25911] vfs_symlink+0x195/0x340 [ 1202.558458][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558495][T25911] filename_symlinkat+0x1cd/0x410 [ 1202.558538][T25911] ? __pfx_filename_symlinkat+0x10/0x10 [ 1202.558576][T25911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1202.558606][T25911] ? do_getname+0x151/0x250 [ 1202.558646][T25911] __se_sys_symlink+0x4d/0x2b0 [ 1202.558686][T25911] do_syscall_64+0x14d/0xf80 [ 1202.558722][T25911] ? trace_irq_disable+0x3b/0x150 [ 1202.558760][T25911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.558794][T25911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.558821][T25911] RIP: 0033:0x7f4d8bd9c799 [ 1202.558844][T25911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.558865][T25911] RSP: 002b:00007f4d8cbb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1202.558892][T25911] RAX: ffffffffffffffda RBX: 00007f4d8c015fa0 RCX: 00007f4d8bd9c799 [ 1202.558912][T25911] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 1202.558929][T25911] RBP: 00007f4d8be32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1202.558946][T25911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.558962][T25911] R13: 00007f4d8c016038 R14: 00007f4d8c015fa0 R15: 00007fff6b8010e8 [ 1202.559003][T25911] [ 1202.559014][T25911] bread failed! [ 1202.584693][T25917] loop3: detected capacity change from 0 to 32768 [ 1203.275645][T25984] loop0: detected capacity change from 0 to 4096 [ 1203.344524][T25984] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1203.456663][T25984] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1203.511603][T25984] ntfs3(loop0): Failed to load $Extend (-22). [ 1203.532888][T25984] ntfs3(loop0): Failed to initialize $Extend. [ 1203.548464][T25984] ntfs3(loop0): ino=5, mi_enum_attr [ 1203.666699][T25984] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 1203.920072][T25963] loop5: detected capacity change from 0 to 32768 [ 1204.031449][T25963] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 1204.031449][T25963] [ 1204.425499][T26050] loop3: detected capacity change from 0 to 64 [ 1204.476232][T26055] netlink: 88 bytes leftover after parsing attributes in process `syz.0.14435'. [ 1205.022551][T26082] loop4: detected capacity change from 0 to 1024 [ 1205.044688][T26082] EXT4-fs: inline encryption not supported [ 1205.090307][T26082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.121020][ T30] audit: type=1800 audit(1162624.590:689): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14442" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1205.251329][ T5973] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1205.293996][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.320946][T26111] netlink: 'syz.3.14448': attribute type 2 has an invalid length. [ 1205.415030][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 1205.422825][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.441894][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.456662][ T5973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1205.473010][T26120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14451'. [ 1205.487538][ T5973] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1205.528561][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.563632][T26123] xt_hashlimit: size too large, truncated to 1048576 [ 1205.575122][ T5973] usb 6-1: config 0 descriptor?? [ 1205.657936][T26129] loop2: detected capacity change from 0 to 1024 [ 1205.722504][T26129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1205.890564][T14762] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1205.915427][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1206.024226][ T5973] lenovo 0003:17EF:6067.0010: invalid report_count 60130 [ 1206.042938][ T5973] lenovo 0003:17EF:6067.0010: item 0 2 1 9 parsing failed [ 1206.061568][T14762] usb 1-1: Using ep0 maxpacket: 16 [ 1206.068078][ T5973] lenovo 0003:17EF:6067.0010: hid_parse failed [ 1206.079099][T14762] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1206.090570][ T5973] lenovo 0003:17EF:6067.0010: probe with driver lenovo failed with error -22 [ 1206.117740][T14762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.173240][T14762] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1206.209623][T14762] usb 1-1: config 1 has no interface number 1 [ 1206.216775][T14762] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1206.221673][ T5973] usb 6-1: USB disconnect, device number 124 [ 1206.229859][T14762] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 7 [ 1206.229896][T14762] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25710, setting to 1024 [ 1206.350686][T14762] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1206.372519][T14762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.380920][T14762] usb 1-1: Product: syz [ 1206.385925][T14762] usb 1-1: Manufacturer: syz [ 1206.391169][T14762] usb 1-1: SerialNumber: syz [ 1206.587876][T26182] loop3: detected capacity change from 0 to 1024 [ 1206.619090][T14762] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1206.645354][T14762] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 1206.653960][T14762] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1206.773135][T14762] usb 1-1: USB disconnect, device number 3 [ 1206.922527][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.073575][T26219] loop3: detected capacity change from 0 to 1024 [ 1207.090911][T26219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1207.109790][T26219] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1207.176886][T26219] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1207.223934][T26219] System zones: 0-1, 3-36 [ 1207.272719][T26219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.545879][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.625515][T26256] loop0: detected capacity change from 0 to 128 [ 1207.691165][T26250] loop2: detected capacity change from 0 to 2048 [ 1207.798238][T26270] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.842638][ T5973] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1207.853602][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1207.854031][T26268] loop3: detected capacity change from 0 to 1024 [ 1207.947273][T26250] Remounting filesystem read-only [ 1207.961927][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1207.986846][T26268] hfsplus: bad catalog entry type [ 1208.020436][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.040647][ T5973] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1208.072057][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.077630][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.117837][T23934] hfsplus: b-tree write err: -5, ino 25 [ 1208.128283][ T5973] usb 5-1: Product: syz [ 1208.128335][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.132457][ T5973] usb 5-1: Manufacturer: syz [ 1208.146867][T23934] hfsplus: b-tree write err: -5, ino 4 [ 1208.170554][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.176001][T23934] hfsplus: b-tree write err: -5, ino 2 [ 1208.186887][ T5973] usb 5-1: SerialNumber: syz [ 1208.202315][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.210939][ T5973] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1208.231195][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.242836][ T5837] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1208.298678][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.343766][T26250] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1208.373598][ T30] audit: type=1800 audit(1162628.012:690): pid=26250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14477" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1208.402102][T26287] loop0: detected capacity change from 0 to 256 [ 1208.480498][T26287] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1208.654488][T26261] loop5: detected capacity change from 0 to 32768 [ 1208.688525][T26261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.14481 (26261) [ 1208.730754][T26264] loop6: detected capacity change from 0 to 32768 [ 1208.756473][T14762] usb 5-1: USB disconnect, device number 13 [ 1208.766053][T26261] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1208.779862][T26264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14480 (26264) [ 1208.803720][T26261] BTRFS info (device loop5): using crc32c checksum algorithm [ 1208.849883][T26264] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1208.908263][T26264] BTRFS info (device loop6): using sha256 checksum algorithm [ 1209.035249][T26261] BTRFS info (device loop5): enabling ssd optimizations [ 1209.078036][T26261] BTRFS info (device loop5): turning on flush-on-commit [ 1209.114530][T26343] xt_hashlimit: size too large, truncated to 1048576 [ 1209.134257][T26351] binder: 26349:26351 ioctl c018620b 200000000780 returned -14 [ 1209.141440][T26261] BTRFS info (device loop5): enabling free space tree [ 1209.152809][T26264] BTRFS info (device loop6): enabling ssd optimizations [ 1209.164450][T26261] BTRFS info (device loop5): enabling auto defrag [ 1209.186100][T26264] BTRFS info (device loop6): turning on async discard [ 1209.206317][T26261] BTRFS info (device loop5): use lzo compression, level 1 [ 1209.217034][T26264] BTRFS info (device loop6): enabling free space tree [ 1209.236995][T26261] BTRFS info (device loop5): max_inline set to 4096 [ 1209.257643][T26264] BTRFS info (device loop6): enabling auto defrag [ 1209.297594][T26264] BTRFS info (device loop6): max_inline set to 4096 [ 1209.338482][ T5837] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1209.345598][ T5837] ath9k_htc: Failed to initialize the device [ 1209.394418][T14762] usb 5-1: ath9k_htc: USB layer deinitialized [ 1209.552909][ T5833] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1209.591048][T18439] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1209.665087][T26371] loop2: detected capacity change from 0 to 1024 [ 1209.748470][T26371] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38923!=20869) [ 1209.817561][T26371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1210.117574][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.127591][T26398] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.14499'. [ 1210.191310][T26393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14498'. [ 1210.292728][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14498'. [ 1210.350703][T26405] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1210.416013][T26407] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1210.504188][T26407] EXT4-fs (loop5): 1 truncate cleaned up [ 1210.545656][T26407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.760345][T26427] set_capacity_and_notify: 1 callbacks suppressed [ 1210.760367][T26427] loop4: detected capacity change from 0 to 64 [ 1210.820610][T26427] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1210.847572][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.894599][T26427] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 1210.971303][T26434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14508'. [ 1211.252919][T26452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14516'. [ 1211.262103][T26452] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1211.843692][T26475] Bluetooth: MGMT ver 1.23 [ 1211.845617][T26470] loop2: detected capacity change from 0 to 8192 [ 1212.136231][T26442] loop6: detected capacity change from 0 to 32768 [ 1212.226923][T26491] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14525'. [ 1212.283267][T26491] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14525'. [ 1212.469728][T26446] loop3: detected capacity change from 0 to 40427 [ 1212.525404][T26446] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1212.550235][T26446] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1212.576957][ T5837] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1212.616136][T26446] F2FS-fs (loop3): invalid crc value [ 1212.777074][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 1212.856615][ T5837] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1212.874026][ T5837] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1212.892789][T26463] loop0: detected capacity change from 0 to 40427 [ 1212.899879][ T5837] usb 6-1: Product: syz [ 1212.909573][T26446] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1212.919822][ T5837] usb 6-1: Manufacturer: syz [ 1212.924434][ T5837] usb 6-1: SerialNumber: syz [ 1212.939417][T26463] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1212.945787][T26463] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1212.976344][ T5837] usb 6-1: config 0 descriptor?? [ 1213.005330][T26446] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1213.012399][T26463] F2FS-fs (loop0): invalid crc value [ 1213.027699][ T5837] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1213.055101][T26527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14534'. [ 1213.065154][T26446] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1213.356027][T26538] loop2: detected capacity change from 0 to 4096 [ 1213.384654][T26463] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1213.406709][T26538] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1213.444486][T26463] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1213.455403][T26463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1213.515888][T26538] ntfs3(loop2): ino=1a, mi_enum_attr [ 1213.547005][T26538] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1213.575607][T26538] ntfs3(loop2): ino=1a, mi_enum_attr [ 1213.594244][T26538] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1213.614608][ T5837] gspca_zc3xx: reg_w_i err -71 [ 1213.615964][ T30] audit: type=1800 audit(1162633.513:691): pid=26463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14517" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1213.634146][ T5837] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1213.689567][ T5837] usb 6-1: USB disconnect, device number 125 [ 1213.782776][ T5820] syz-executor: attempt to access beyond end of device [ 1213.782776][ T5820] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1213.843905][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.843945][ T5820] Tainted: [L]=SOFTLOCKUP [ 1213.843954][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1213.843970][ T5820] Call Trace: [ 1213.843980][ T5820] [ 1213.843991][ T5820] dump_stack_lvl+0xe8/0x150 [ 1213.844032][ T5820] f2fs_handle_critical_error+0x37c/0x540 [ 1213.844075][ T5820] f2fs_write_end_io+0xcdb/0xff0 [ 1213.844136][ T5820] __submit_merged_bio+0x256/0x700 [ 1213.844177][ T5820] __submit_merged_write_cond+0x3c9/0x4e0 [ 1213.844221][ T5820] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1213.844269][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.844310][ T5820] f2fs_write_data_pages+0x2975/0x35e0 [ 1213.844390][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1213.844501][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.844573][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.844603][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 1213.844650][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 1213.844715][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.844754][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.844787][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 1213.844843][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.844882][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1213.844925][ T5820] do_writepages+0x32e/0x550 [ 1213.844972][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845009][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845054][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845084][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 1213.845125][ T5820] filemap_fdatawrite+0x1e9/0x2f0 [ 1213.845171][ T5820] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1213.845259][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845291][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845332][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 1213.845368][ T5820] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1213.845431][ T5820] f2fs_write_checkpoint+0x9df/0x26a0 [ 1213.845529][ T5820] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1213.845570][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845665][ T5820] kill_f2fs_super+0x314/0x720 [ 1213.845712][ T5820] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1213.845765][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845794][ T5820] ? lockdep_hardirqs_on+0x7a/0x110 [ 1213.845823][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1213.845869][ T5820] deactivate_locked_super+0xbc/0x130 [ 1213.845913][ T5820] cleanup_mnt+0x437/0x4d0 [ 1213.845941][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.845972][ T5820] task_work_run+0x1d9/0x270 [ 1213.846004][ T5820] ? __pfx_task_work_run+0x10/0x10 [ 1213.846045][ T5820] exit_to_user_mode_loop+0xed/0x480 [ 1213.846075][ T5820] ? rcu_is_watching+0x15/0xb0 [ 1213.846117][ T5820] do_syscall_64+0x32d/0xf80 [ 1213.846145][ T5820] ? trace_irq_disable+0x3b/0x150 [ 1213.846183][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.846216][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.846242][ T5820] RIP: 0033:0x7fc78479d9d7 [ 1213.846266][ T5820] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1213.846287][ T5820] RSP: 002b:00007ffc963d87f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1213.846313][ T5820] RAX: 0000000000000000 RBX: 00007fc784832050 RCX: 00007fc78479d9d7 [ 1213.846331][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc963d88b0 [ 1213.846347][ T5820] RBP: 00007ffc963d88b0 R08: 00007ffc963d98b0 R09: 00000000ffffffff [ 1213.846365][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc963d9940 [ 1213.846382][ T5820] R13: 00007fc784832050 R14: 000000000012563a R15: 00007ffc963d9980 [ 1213.846422][ T5820] [ 1213.846432][ T5820] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1213.958097][ T5973] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1214.389110][ T5973] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1214.408228][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.425432][T26573] loop6: detected capacity change from 0 to 32768 [ 1214.434963][ T5973] usb 5-1: config 0 descriptor?? [ 1214.459725][ T5973] cp210x 5-1:0.0: cp210x converter detected [ 1214.842533][ T5973] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1215.002712][ T5837] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1215.070353][ T5973] usb 5-1: USB disconnect, device number 14 [ 1215.091345][ T5973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1215.135619][ T5973] cp210x 5-1:0.0: device disconnected [ 1215.206677][ T5837] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1215.244313][ T5837] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1215.261778][ T5837] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.300239][ T5837] usb 4-1: config 220 has no interface number 2 [ 1215.335472][ T5837] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1215.365388][ T5837] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1215.372674][ T5837] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1215.384756][ T5837] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1215.394592][ T5837] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1215.405883][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.414137][ T5837] usb 4-1: Product: syz [ 1215.420993][ T5837] usb 4-1: Manufacturer: syz [ 1215.425907][ T5837] usb 4-1: SerialNumber: syz [ 1215.482883][ T7436] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1215.662936][ T7436] usb 1-1: Using ep0 maxpacket: 16 [ 1215.688897][ T5837] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1215.707751][ T7436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.724764][ T5837] uvcvideo 4-1:220.0: No valid video chain found. [ 1215.740055][ T5837] usb 4-1: selecting invalid altsetting 0 [ 1215.748877][ T7436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.775967][ T7436] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1215.797123][ T7436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.810564][ T5837] usb 4-1: selecting invalid altsetting 0 [ 1215.820287][ T5837] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1215.866462][ T7436] usb 1-1: config 0 descriptor?? [ 1215.899790][ T5837] usb 4-1: USB disconnect, device number 7 [ 1216.276176][T26652] loop2: detected capacity change from 0 to 32768 [ 1216.321979][ T7436] razer 0003:1532:011B.0011: unbalanced collection at end of report description [ 1216.359503][T26652] ERROR: (device loop2): diAllocAG: numfree > numinos [ 1216.359503][T26652] [ 1216.374675][ T7436] razer 0003:1532:011B.0011: probe with driver razer failed with error -22 [ 1216.418826][T26652] ERROR: (device loop2): remounting filesystem as read-only [ 1216.444991][T26652] ialloc: diAlloc returned -5! [ 1216.517679][ T5837] usb 1-1: USB disconnect, device number 4 [ 1216.805281][T26735] sctp: [Deprecated]: syz.3.14574 (pid 26735) Use of int in maxseg socket option. [ 1216.805281][T26735] Use struct sctp_assoc_value instead [ 1216.831705][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14572'. [ 1216.843732][T26680] loop5: detected capacity change from 0 to 32768 [ 1216.892212][T26680] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.14561 (26680) [ 1216.937848][T26680] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1216.954507][T26680] BTRFS info (device loop5): using sha256 checksum algorithm [ 1217.065812][T26757] loop2: detected capacity change from 0 to 256 [ 1217.105458][T26764] ptrace attach of "./syz-executor exec"[5822] was attempted by "\x22"[26764] [ 1217.139608][T26680] BTRFS info (device loop5): enabling ssd optimizations [ 1217.146609][T26680] BTRFS info (device loop5): turning on async discard [ 1217.154118][T26680] BTRFS info (device loop5): enabling free space tree [ 1217.161309][T26680] BTRFS info (device loop5): enabling auto defrag [ 1217.168568][T26680] BTRFS info (device loop5): max_inline set to 4096 [ 1217.209258][T26757] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1217.297476][ T30] audit: type=1800 audit(1162637.377:692): pid=26757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14571" name="file1" dev="loop2" ino=1048811 res=0 errno=0 [ 1217.377488][ T5833] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1217.694474][T26776] loop6: detected capacity change from 0 to 8192 [ 1217.733085][T26776] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1217.982914][T26812] loop3: detected capacity change from 0 to 256 [ 1218.045282][T26812] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1218.478167][T26833] loop0: detected capacity change from 0 to 512 [ 1218.499420][T26834] loop3: detected capacity change from 0 to 2048 [ 1218.505899][T26833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1218.558257][T26833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.696787][T26834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.722128][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.911095][ T5837] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1219.108923][ T5837] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1219.120667][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.146974][ T5837] usb 6-1: Product: syz [ 1219.162019][ T3199] [ 1219.164398][ T3199] ====================================================== [ 1219.171415][ T3199] WARNING: possible circular locking dependency detected [ 1219.178452][ T3199] syzkaller #0 Tainted: G L [ 1219.184598][ T3199] ------------------------------------------------------ [ 1219.191691][ T3199] kworker/u8:11/3199 is trying to acquire lock: [ 1219.198102][ T3199] ffff888057b69d90 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1219.207893][ T3199] [ 1219.207893][ T3199] but task is already holding lock: [ 1219.215253][ T3199] ffff8880306e8b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1219.225468][ T3199] [ 1219.225468][ T3199] which lock already depends on the new lock. [ 1219.225468][ T3199] [ 1219.235861][ T3199] [ 1219.235861][ T3199] the existing dependency chain (in reverse order) is: [ 1219.244866][ T3199] [ 1219.244866][ T3199] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1219.253296][ T3199] percpu_down_read_internal+0x48/0x1c0 [ 1219.259370][ T3199] ext4_writepages+0x205/0x3b0 [ 1219.264919][ T3199] do_writepages+0x32e/0x550 [ 1219.270296][ T3199] __writeback_single_inode+0x133/0x11a0 [ 1219.276448][ T3199] writeback_single_inode+0x4ac/0xdc0 [ 1219.282335][ T3199] write_inode_now+0x1c2/0x290 [ 1219.287610][ T3199] iput+0x8c1/0xe80 [ 1219.291939][ T3199] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1219.297913][ T3199] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1219.304325][ T3199] __ext4_expand_extra_isize+0x30d/0x400 [ 1219.310474][ T3199] __ext4_mark_inode_dirty+0x45c/0x730 [ 1219.316442][ T3199] ext4_evict_inode+0x7a1/0xeb0 [ 1219.321816][ T3199] evict+0x61e/0xb10 [ 1219.326226][ T3199] ext4_orphan_cleanup+0xc38/0x1470 [ 1219.331929][ T3199] ext4_fill_super+0x59ff/0x6320 [ 1219.337384][ T3199] get_tree_bdev_flags+0x431/0x4f0 [ 1219.343008][ T3199] vfs_get_tree+0x92/0x2a0 [ 1219.347940][ T3199] do_new_mount+0x341/0xd30 [ 1219.352968][ T3199] __se_sys_mount+0x31d/0x420 [ 1219.358167][ T3199] do_syscall_64+0x14d/0xf80 [ 1219.363278][ T3199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.369687][ T3199] [ 1219.369687][ T3199] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1219.377243][ T3199] __lock_acquire+0x15a5/0x2cf0 [ 1219.382613][ T3199] lock_acquire+0xf0/0x2e0 [ 1219.387544][ T3199] down_write+0x96/0x200 [ 1219.392306][ T3199] ext4_destroy_inline_data+0x28/0xe0 [ 1219.398200][ T3199] ext4_do_writepages+0x51e/0x46e0 [ 1219.403821][ T3199] ext4_writepages+0x241/0x3b0 [ 1219.409098][ T3199] do_writepages+0x32e/0x550 [ 1219.414204][ T3199] __writeback_single_inode+0x133/0x11a0 [ 1219.420354][ T3199] writeback_sb_inodes+0x992/0x1a20 [ 1219.426068][ T3199] wb_writeback+0x456/0xb70 [ 1219.431085][ T3199] wb_workfn+0x414/0xf50 [ 1219.435834][ T3199] process_scheduled_works+0xb6e/0x18c0 [ 1219.441895][ T3199] worker_thread+0xa53/0xfc0 [ 1219.446998][ T3199] kthread+0x388/0x470 [ 1219.451575][ T3199] ret_from_fork+0x51e/0xb90 [ 1219.456680][ T3199] ret_from_fork_asm+0x1a/0x30 [ 1219.461964][ T3199] [ 1219.461964][ T3199] other info that might help us debug this: [ 1219.461964][ T3199] [ 1219.472168][ T3199] Possible unsafe locking scenario: [ 1219.472168][ T3199] [ 1219.479599][ T3199] CPU0 CPU1 [ 1219.484946][ T3199] ---- ---- [ 1219.490294][ T3199] rlock(&sbi->s_writepages_rwsem); [ 1219.495583][ T3199] lock(&ei->xattr_sem); [ 1219.502439][ T3199] lock(&sbi->s_writepages_rwsem); [ 1219.510169][ T3199] lock(&ei->xattr_sem); [ 1219.514511][ T3199] [ 1219.514511][ T3199] *** DEADLOCK *** [ 1219.514511][ T3199] [ 1219.522684][ T3199] 3 locks held by kworker/u8:11/3199: [ 1219.528043][ T3199] #0: ffff88801fe87948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1219.539300][ T3199] #1: ffffc9000da27c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1219.551783][ T3199] #2: ffff8880306e8b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1219.562258][ T3199] [ 1219.562258][ T3199] stack backtrace: [ 1219.568140][ T3199] CPU: 0 UID: 0 PID: 3199 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.568170][ T3199] Tainted: [L]=SOFTLOCKUP [ 1219.568179][ T3199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.568196][ T3199] Workqueue: writeback wb_workfn (flush-7:3) [ 1219.568229][ T3199] Call Trace: [ 1219.568241][ T3199] [ 1219.568251][ T3199] dump_stack_lvl+0xe8/0x150 [ 1219.568283][ T3199] print_circular_bug+0x2e1/0x300 [ 1219.568321][ T3199] check_noncircular+0x12e/0x150 [ 1219.568359][ T3199] __lock_acquire+0x15a5/0x2cf0 [ 1219.568390][ T3199] ? unwind_next_frame+0xa5/0x23c0 [ 1219.568427][ T3199] ? unwind_next_frame+0xa5/0x23c0 [ 1219.568463][ T3199] lock_acquire+0xf0/0x2e0 [ 1219.568490][ T3199] ? ext4_destroy_inline_data+0x28/0xe0 [ 1219.568525][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.568561][ T3199] down_write+0x96/0x200 [ 1219.568590][ T3199] ? ext4_destroy_inline_data+0x28/0xe0 [ 1219.568624][ T3199] ? __pfx_down_write+0x10/0x10 [ 1219.568654][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.568688][ T3199] ext4_destroy_inline_data+0x28/0xe0 [ 1219.568724][ T3199] ext4_do_writepages+0x51e/0x46e0 [ 1219.568748][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.568773][ T3199] ? __lock_acquire+0x6b5/0x2cf0 [ 1219.568803][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.568840][ T3199] ? __skb_flow_dissect+0x423/0x6d20 [ 1219.568865][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.568894][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.568919][ T3199] ? look_up_lock_class+0x57/0x110 [ 1219.568944][ T3199] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1219.568969][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.568994][ T3199] ? __lock_acquire+0x6b5/0x2cf0 [ 1219.569025][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569050][ T3199] ? __lock_acquire+0x6b5/0x2cf0 [ 1219.569080][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569105][ T3199] ? __lock_acquire+0x6b5/0x2cf0 [ 1219.569136][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569165][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569192][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569221][ T3199] ext4_writepages+0x241/0x3b0 [ 1219.569250][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569277][ T3199] ? __pfx_ext4_writepages+0x10/0x10 [ 1219.569306][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569338][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569366][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569390][ T3199] ? do_raw_spin_unlock+0xf5/0x210 [ 1219.569413][ T3199] ? __pfx_ext4_writepages+0x10/0x10 [ 1219.569444][ T3199] do_writepages+0x32e/0x550 [ 1219.569478][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569504][ T3199] ? reacquire_held_locks+0x104/0x190 [ 1219.569542][ T3199] ? writeback_sb_inodes+0x477/0x1a20 [ 1219.569575][ T3199] __writeback_single_inode+0x133/0x11a0 [ 1219.569606][ T3199] ? do_raw_spin_unlock+0xf5/0x210 [ 1219.569631][ T3199] writeback_sb_inodes+0x992/0x1a20 [ 1219.569674][ T3199] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1219.569702][ T3199] ? do_raw_spin_lock+0x12b/0x2f0 [ 1219.569742][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569767][ T3199] ? rcu_is_watching+0x15/0xb0 [ 1219.569798][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.569827][ T3199] wb_writeback+0x456/0xb70 [ 1219.569858][ T3199] ? queue_io+0x251/0x4a0 [ 1219.569889][ T3199] ? __pfx_wb_writeback+0x10/0x10 [ 1219.569916][ T3199] ? do_raw_spin_lock+0x12b/0x2f0 [ 1219.569946][ T3199] wb_workfn+0x414/0xf50 [ 1219.569970][ T3199] ? look_up_lock_class+0x57/0x110 [ 1219.570001][ T3199] ? __pfx_wb_workfn+0x10/0x10 [ 1219.570023][ T3199] ? kasan_quarantine_put+0xbb/0x1f0 [ 1219.570047][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570073][ T3199] ? do_raw_spin_lock+0x12b/0x2f0 [ 1219.570101][ T3199] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1219.570125][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570173][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570200][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570226][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570253][ T3199] ? process_scheduled_works+0xa8d/0x18c0 [ 1219.570281][ T3199] ? process_scheduled_works+0xa8d/0x18c0 [ 1219.570310][ T3199] process_scheduled_works+0xb6e/0x18c0 [ 1219.570354][ T3199] ? __pfx_process_scheduled_works+0x10/0x10 [ 1219.570385][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570411][ T3199] ? assign_work+0x3d5/0x5e0 [ 1219.570440][ T3199] worker_thread+0xa53/0xfc0 [ 1219.570478][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570508][ T3199] kthread+0x388/0x470 [ 1219.570529][ T3199] ? __pfx_worker_thread+0x10/0x10 [ 1219.570561][ T3199] ? __pfx_kthread+0x10/0x10 [ 1219.570582][ T3199] ret_from_fork+0x51e/0xb90 [ 1219.570611][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570637][ T3199] ? __pfx_ret_from_fork+0x10/0x10 [ 1219.570664][ T3199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.570689][ T3199] ? __switch_to+0xc7d/0x1450 [ 1219.570715][ T3199] ? __pfx_kthread+0x10/0x10 [ 1219.570736][ T3199] ret_from_fork_asm+0x1a/0x30 [ 1219.570777][ T3199] [ 1220.082932][ T5837] usb 6-1: Manufacturer: syz [ 1220.087568][ T5837] usb 6-1: SerialNumber: syz [ 1220.107080][ T3199] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1220.123167][ T5837] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1220.156892][ T7436] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1220.173379][ T3199] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 1220.184206][T26889] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14606'. [ 1220.203967][ T3199] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1220.203967][ T3199] [ 1220.222449][ T3199] EXT4-fs (loop3): Total free blocks count 0 [ 1220.229056][ T3199] EXT4-fs (loop3): Free/Dirty block details [ 1220.235852][ T3199] EXT4-fs (loop3): free_blocks=4096 [ 1220.241154][ T3199] EXT4-fs (loop3): dirty_blocks=512 [ 1220.246704][ T3199] EXT4-fs (loop3): Block reservation details [ 1220.252821][ T3199] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 1220.270720][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.323425][T26898] loop3: detected capacity change from 0 to 1024 [ 1220.338737][T26898] hfsplus: bad catalog entry type [ 1220.374990][T23934] hfsplus: b-tree write err: -5, ino 25 [ 1220.381374][T23934] hfsplus: b-tree write err: -5, ino 4 [ 1220.386997][T23934] hfsplus: b-tree write err: -5, ino 2 [ 1221.368676][ T7436] usb 6-1: Service connection timeout for: 256 [ 1221.374963][ T7436] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1221.400187][ T7436] ath9k_htc: Failed to initialize the device [ 1221.408533][ T7436] usb 6-1: ath9k_htc: USB layer deinitialized [ 1221.537799][T14762] usb 6-1: USB disconnect, device number 126