last executing test programs: 8.601765311s ago: executing program 1 (id=757): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xfc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}]}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.245105084s ago: executing program 1 (id=763): mlockall(0x1) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_emit_ethernet(0x0, 0x0, 0x0) 4.366578403s ago: executing program 1 (id=779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@gettfilter={0x3c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x7671693a61b9ff27, 0x10}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24004010) 4.218135467s ago: executing program 1 (id=781): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xa00000, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4c0, &(0x7f0000000840)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0x1, 0x4b1, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) 3.466420185s ago: executing program 1 (id=790): syz_usb_connect$uac1(0x2, 0x87, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x2, 0x90, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0xc, 0x2, "79a491e9a246"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x8, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0xa9, 0x1, {0x7, 0x25, 0x1, 0x0, 0x10, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x7b57419a9e52b5fc, 0x6, 0x3, 0xfc, {0x7, 0x25, 0x1, 0x8, 0xbf, 0x9}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 2.87112596s ago: executing program 0 (id=787): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 2.393559742s ago: executing program 0 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0xd, 0x4, 0x5, 0x0, 0x8, 0x0, 0x3}, {0x80000000, 0xfff, 0x1, 0x0, 0x3fffc, 0x8, 0xfffffffb}]}) 1.973622742s ago: executing program 3 (id=794): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x820b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 1.800804736s ago: executing program 1 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00224102000083000400000b11200000b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close(0x3) ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x8488, &(0x7f0000000340)=ANY=[@ANYBLOB='nobarrier,nls=ascii,part=0x0000000000000000,nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00'/15, @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x3, 0x72f, &(0x7f0000000dc0)="$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") r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) r4 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = userfaultfd(0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x5fd12af8, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) 1.705805228s ago: executing program 3 (id=797): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd, 0x0, 0xfdfffffc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000580)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c", 0x25}, {&(0x7f00000005c0)="0046053cb304538a9927911e00005a", 0xf}, {&(0x7f0000000240)="a43b2eaab4000000000080", 0xb}, {&(0x7f0000000540)="57348a", 0x3}], 0x4) 1.693336789s ago: executing program 0 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000304006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 1.63304064s ago: executing program 2 (id=799): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) mkdir(&(0x7f0000000080)='./bus\x00', 0x10d) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000740)='./bus/file0\x00') 1.538461442s ago: executing program 2 (id=800): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) 1.402628125s ago: executing program 2 (id=801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x80}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000, &(0x7f0000001000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="f4", 0x1}], 0x41, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000500)=@vmx={0x1, 0x0, 0x2080, {0x1000, 0x2000}}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000600)={0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700)) 1.297046398s ago: executing program 3 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 1.296799168s ago: executing program 0 (id=803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 618.605714ms ago: executing program 0 (id=804): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xfc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}]}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 618.493545ms ago: executing program 2 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm_intel/parameters/enable_apicv\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='Y\x00', 0x1) 618.353274ms ago: executing program 3 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000001000)=@nullb, &(0x7f0000002000)='./sys\x00', &(0x7f0000003000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004000)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000005000)='freeze', 0x6) 457.111188ms ago: executing program 2 (id=807): shutdown(0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) 413.038419ms ago: executing program 3 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='disk\n', 0x5) 274.124782ms ago: executing program 2 (id=809): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af71, &(0x7f0000000500)={0x0, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000700)={r4, 0x0, 0x0, 0xffffffff}) 261.344483ms ago: executing program 3 (id=810): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd, 0x0, 0xfdfffffc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000580)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c", 0x25}, {&(0x7f00000005c0)="0046053cb304538a9927911e00005a", 0xf}, {&(0x7f0000000240)="a43b2eaab4000000000080", 0xb}, {&(0x7f0000000540)="57348a", 0x3}], 0x4) 0s ago: executing program 0 (id=811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138aeb4, &(0x7f0000000200)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee00900}) kernel console output (not intermixed with test programs): =16, nr_sectors = 40 limit=16 [ 96.722669][ T5930] syz.1.20: attempt to access beyond end of device [ 96.722669][ T5930] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 96.747558][ T27] audit: type=1800 audit(1785084164.797:2): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 96.800105][ T5932] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 96.815830][ T5932] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4097 with max blocks 1 with error 28 [ 96.829113][ T5932] EXT4-fs (loop3): This should not happen!! Data will be lost [ 96.829113][ T5932] [ 96.840667][ T5932] EXT4-fs (loop3): Total free blocks count 0 [ 96.857724][ T5932] EXT4-fs (loop3): Free/Dirty block details [ 96.872192][ T5932] EXT4-fs (loop3): free_blocks=4096 [ 96.883267][ T5932] EXT4-fs (loop3): dirty_blocks=32 [ 96.895793][ T5932] EXT4-fs (loop3): Block reservation details [ 96.917052][ T5932] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 97.121143][ T5942] loop2: detected capacity change from 0 to 1024 [ 97.217243][ T2976] hfsplus: b-tree write err: -5, ino 25 [ 97.229273][ T2976] hfsplus: b-tree write err: -5, ino 4 [ 97.249032][ T2976] hfsplus: b-tree write err: -5, ino 2 [ 97.388692][ T5930] syz.1.20 (5930) used greatest stack depth: 19240 bytes left [ 97.490306][ T2976] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.656587][ T5946] loop0: detected capacity change from 0 to 512 [ 97.667742][ T5946] EXT4-fs: Ignoring removed i_version option [ 97.861577][ T5946] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.902746][ T5949] loop1: detected capacity change from 0 to 512 [ 98.141593][ T5949] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.367927][ T5946] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 112 vs 41 free clusters [ 98.509029][ T5946] Quota error (device loop0): write_blk: dquota write failed [ 98.528964][ T5946] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 98.550217][ T5946] Quota error (device loop0): write_blk: dquota write failed [ 98.557928][ T5946] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 98.620301][ T5946] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.26: Failed to acquire dquot type 1 [ 98.659818][ T5946] EXT4-fs (loop0): 1 truncate cleaned up [ 98.686001][ T5946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.877214][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.907947][ T5957] loop3: detected capacity change from 0 to 4096 [ 98.945438][ T5957] EXT4-fs: inline encryption not supported [ 98.983077][ T5957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.034451][ T5957] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.086011][ T5957] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 99.144607][ T5957] System zones: 0-5 [ 99.196908][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.457636][ T5976] loop0: detected capacity change from 0 to 1024 [ 99.495506][ T5975] loop2: detected capacity change from 0 to 1024 [ 99.522300][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.651867][ T5976] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.683842][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.732083][ T2976] hfsplus: b-tree write err: -5, ino 25 [ 99.763474][ T2976] hfsplus: b-tree write err: -5, ino 4 [ 99.780545][ T2976] hfsplus: b-tree write err: -5, ino 2 [ 100.025305][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.062676][ T5986] loop3: detected capacity change from 0 to 512 [ 100.090204][ T5986] EXT4-fs: Ignoring removed bh option [ 100.135077][ T5986] EXT4-fs (loop3): 1 truncate cleaned up [ 100.170144][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.727880][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.646515][ T6009] loop2: detected capacity change from 0 to 2048 [ 101.722518][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.748346][ T6011] loop1: detected capacity change from 0 to 512 [ 101.777834][ T6011] EXT4-fs: Ignoring removed i_version option [ 101.844139][ T6011] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.889573][ T6009] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 101.938296][ T6009] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4097 with max blocks 1 with error 28 [ 101.976014][ T6011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 112 vs 41 free clusters [ 101.995867][ T6009] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.995867][ T6009] [ 102.070864][ T6011] Quota error (device loop1): write_blk: dquota write failed [ 102.078349][ T6011] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 102.100133][ T6023] loop3: detected capacity change from 0 to 1024 [ 102.108645][ T6009] EXT4-fs (loop2): Total free blocks count 0 [ 102.122106][ T6011] Quota error (device loop1): write_blk: dquota write failed [ 102.143616][ T6011] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 102.158404][ T6009] EXT4-fs (loop2): Free/Dirty block details [ 102.182831][ T6011] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.41: Failed to acquire dquot type 1 [ 102.208960][ T6009] EXT4-fs (loop2): free_blocks=4096 [ 102.214270][ T6009] EXT4-fs (loop2): dirty_blocks=32 [ 102.225209][ T6011] EXT4-fs (loop1): 1 truncate cleaned up [ 102.244834][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.274095][ T6009] EXT4-fs (loop2): Block reservation details [ 102.304325][ T6009] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 102.388902][ T42] hfsplus: b-tree write err: -5, ino 25 [ 102.394767][ T42] hfsplus: b-tree write err: -5, ino 4 [ 102.419138][ T42] hfsplus: b-tree write err: -5, ino 2 [ 102.487247][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.670790][ T6028] loop3: detected capacity change from 0 to 2048 [ 102.750788][ T6028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.823827][ T6032] loop1: detected capacity change from 0 to 1024 [ 102.887028][ T6033] loop0: detected capacity change from 0 to 4096 [ 102.922338][ T6032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.942397][ T6033] EXT4-fs: inline encryption not supported [ 102.969822][ T42] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.982586][ T6033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.071919][ T6033] EXT4-fs (loop0): Test dummy encryption mode enabled [ 103.082510][ T5914] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.125141][ T6033] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 103.188408][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.198902][ T6033] System zones: 0-5 [ 103.240388][ T6033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.606497][ T2976] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 606 with error 28 [ 103.639538][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.701043][ T2976] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.701043][ T2976] [ 103.743740][ T2976] EXT4-fs (loop3): Total free blocks count 0 [ 103.788225][ T2976] EXT4-fs (loop3): Free/Dirty block details [ 103.816556][ T2976] EXT4-fs (loop3): free_blocks=2415919104 [ 104.280201][ T2976] EXT4-fs (loop3): dirty_blocks=608 [ 104.458595][ T2976] EXT4-fs (loop3): Block reservation details [ 104.464674][ T2976] EXT4-fs (loop3): i_reserved_data_blocks=38 [ 104.625481][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.774463][ T6066] loop1: detected capacity change from 0 to 1024 [ 104.918367][ T11] hfsplus: b-tree write err: -5, ino 25 [ 104.927663][ T11] hfsplus: b-tree write err: -5, ino 4 [ 104.950387][ T11] hfsplus: b-tree write err: -5, ino 2 [ 105.146219][ T6075] loop1: detected capacity change from 0 to 512 [ 105.220458][ T6079] loop3: detected capacity change from 0 to 512 [ 105.241187][ T6075] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.56: invalid block [ 105.280022][ T6079] EXT4-fs: Ignoring removed i_version option [ 105.291986][ T6075] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.56: invalid indirect mapped block 10 (level 1) [ 105.322570][ T6075] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.56: invalid indirect mapped block 8 (level 1) [ 105.344138][ T6075] EXT4-fs (loop1): 1 truncate cleaned up [ 105.350714][ T6079] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.367097][ T6075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.413888][ T6079] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 112 vs 41 free clusters [ 105.445391][ T6079] Quota error (device loop3): write_blk: dquota write failed [ 105.456300][ T6079] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 105.555783][ T6079] Quota error (device loop3): write_blk: dquota write failed [ 105.594348][ T6079] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 105.648031][ T6079] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.55: Failed to acquire dquot type 1 [ 105.687102][ T6079] EXT4-fs (loop3): 1 truncate cleaned up [ 105.700476][ T6079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.844584][ T5773] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 105.900217][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.916692][ T5773] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 106.055971][ T6095] loop3: detected capacity change from 0 to 1024 [ 106.124073][ T6095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.407873][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.454376][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.529449][ T2976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.663868][ T2976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.761377][ T2976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.864446][ T2976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.564857][ T6126] loop2: detected capacity change from 0 to 4096 [ 107.673583][ T6126] EXT4-fs: inline encryption not supported [ 107.862670][ T6126] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.198280][ T6126] EXT4-fs (loop2): Test dummy encryption mode enabled [ 108.286686][ T6126] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 108.332207][ T6126] System zones: 0-5 [ 108.367894][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.577871][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.587818][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.597430][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.608743][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.617382][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.626182][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.643637][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.654578][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.662601][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.692824][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.733967][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.760360][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.888906][ T6148] loop0: detected capacity change from 0 to 256 [ 109.164449][ T6148] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 109.246086][ T27] audit: type=1800 audit(1785084177.287:3): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 109.664211][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.853256][ T6154] loop3: detected capacity change from 0 to 2048 [ 109.938763][ T6154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.048644][ T27] audit: type=1800 audit(1785084178.107:4): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.68" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 110.848339][ T5784] Bluetooth: hci0: command tx timeout [ 110.941364][ T6173] loop2: detected capacity change from 0 to 512 [ 110.949581][ T6173] EXT4-fs: Ignoring removed i_version option [ 110.983246][ T6173] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.128252][ T6173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 112 vs 41 free clusters [ 111.179624][ T6173] Quota error (device loop2): write_blk: dquota write failed [ 111.191078][ T2976] hsr_slave_0: left promiscuous mode [ 111.197482][ T6173] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 111.217844][ T6173] Quota error (device loop2): write_blk: dquota write failed [ 111.227470][ T6173] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 111.259419][ T6173] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.71: Failed to acquire dquot type 1 [ 111.278812][ T6173] EXT4-fs (loop2): 1 truncate cleaned up [ 111.296375][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.351062][ T2976] hsr_slave_1: left promiscuous mode [ 111.413823][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.472207][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.833516][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.893443][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.052933][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.089617][ T2976] bridge_slave_1: left allmulticast mode [ 112.111314][ T2976] bridge_slave_1: left promiscuous mode [ 112.151200][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.205873][ T2976] bridge_slave_0: left allmulticast mode [ 112.221980][ T2976] bridge_slave_0: left promiscuous mode [ 112.227930][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.405530][ T2976] veth1_macvtap: left promiscuous mode [ 112.428923][ T2976] veth0_macvtap: left promiscuous mode [ 112.458806][ T2976] veth1_vlan: left promiscuous mode [ 112.464483][ T2976] veth0_vlan: left promiscuous mode [ 112.471716][ T6200] loop2: detected capacity change from 0 to 128 [ 112.507681][ T6200] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 112.719824][ T6199] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 112.771563][ T27] audit: type=1804 audit(1785084180.837:5): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.75" name="/newroot/20/file1/file1" dev="loop2" ino=94 res=1 errno=0 [ 112.800471][ T6204] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 112.918692][ T5784] Bluetooth: hci0: command tx timeout [ 113.214465][ T6211] loop0: detected capacity change from 0 to 764 [ 113.332767][ T6213] loop2: detected capacity change from 0 to 256 [ 113.392063][ T6213] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 113.542829][ T27] audit: type=1800 audit(1785084181.527:6): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="file1" dev="loop2" ino=1048593 res=0 errno=0 [ 114.306598][ T6217] loop2: detected capacity change from 0 to 2048 [ 114.349162][ T6217] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 114.410229][ T6217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.731789][ T6223] loop2: detected capacity change from 0 to 256 [ 114.759190][ T6223] ======================================================= [ 114.759190][ T6223] WARNING: The mand mount option has been deprecated and [ 114.759190][ T6223] and is ignored by this kernel. Remove the mand [ 114.759190][ T6223] option from the mount to silence this warning. [ 114.759190][ T6223] ======================================================= [ 114.827106][ T2976] team0 (unregistering): Port device team_slave_1 removed [ 114.840161][ T6223] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.854880][ T6223] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 114.883860][ T6223] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d) [ 114.961597][ T2976] team0 (unregistering): Port device team_slave_0 removed [ 114.998678][ T5784] Bluetooth: hci0: command tx timeout [ 115.088253][ T2976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.167099][ T2976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.410027][ T2976] bond0 (unregistering): Released all slaves [ 116.475531][ T6233] loop0: detected capacity change from 0 to 128 [ 116.496785][ T6233] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 116.587269][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 116.658418][ T6232] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 116.698223][ T6236] loop2: detected capacity change from 0 to 128 [ 116.733076][ T27] audit: type=1804 audit(1785084184.787:7): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.85" name="/newroot/21/file1/file1" dev="loop0" ino=94 res=1 errno=0 [ 116.765194][ T6237] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 116.839473][ T6236] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.959786][ T6236] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.079005][ T5784] Bluetooth: hci0: command tx timeout [ 117.169585][ T6247] loop3: detected capacity change from 0 to 256 [ 117.342531][ T6247] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 117.576849][ T27] audit: type=1800 audit(1785084185.487:8): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 118.120429][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.186181][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.212383][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.259074][ T6141] bridge_slave_0: entered allmulticast mode [ 118.266745][ T6141] bridge_slave_0: entered promiscuous mode [ 118.299794][ T6250] loop3: detected capacity change from 0 to 764 [ 118.329087][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.348690][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.356025][ T6141] bridge_slave_1: entered allmulticast mode [ 118.423284][ T6141] bridge_slave_1: entered promiscuous mode [ 118.580824][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.623819][ T6260] binder_alloc: 6257: pid 6257 spamming oneway? 2 buffers allocated for a total size of 5136 [ 118.645413][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.788308][ T6141] team0: Port device team_slave_0 added [ 118.828461][ T6141] team0: Port device team_slave_1 added [ 119.045409][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.093422][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.175992][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.189923][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.196946][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.224236][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.985850][ T6141] hsr_slave_0: entered promiscuous mode [ 120.036139][ T6141] hsr_slave_1: entered promiscuous mode [ 120.056977][ T6141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.065201][ T6141] Cannot create hsr debugfs directory [ 120.748220][ T6141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.759719][ T6141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.771204][ T6141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.790018][ T6141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.914845][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.948393][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.963938][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.971220][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.005366][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.012654][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.063341][ T6141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.350928][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.434576][ T6141] veth0_vlan: entered promiscuous mode [ 121.464958][ T6141] veth1_vlan: entered promiscuous mode [ 121.527612][ T6141] veth0_macvtap: entered promiscuous mode [ 121.544367][ T6141] veth1_macvtap: entered promiscuous mode [ 121.579527][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.590821][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.600897][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.611716][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.624145][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.634744][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.648276][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.671208][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.682211][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.692678][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.703593][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.716041][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.735225][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.747192][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.766644][ T6141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.783491][ T6141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.793019][ T6141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.806812][ T6141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.935541][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.961313][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.996734][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.005492][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.184804][ T6327] loop1: detected capacity change from 0 to 512 [ 122.270672][ T6327] EXT4-fs: Ignoring removed i_version option [ 122.297537][ T6327] EXT4-fs: Ignoring removed oldalloc option [ 122.336642][ T6327] EXT4-fs (loop1): Test dummy encryption mode enabled [ 122.405263][ T6327] EXT4-fs (loop1): 1 truncate cleaned up [ 122.423923][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.464668][ T6327] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.62: invalid indirect mapped block 234881024 (level 0) [ 123.287943][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.434201][ T6344] loop3: detected capacity change from 0 to 128 [ 123.502539][ T6347] loop0: detected capacity change from 0 to 128 [ 123.503722][ T6344] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 123.635481][ T6350] loop1: detected capacity change from 0 to 256 [ 123.676545][ T6350] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 123.798159][ T27] audit: type=1800 audit(1785084191.817:9): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.96" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 124.110344][ T6351] loop2: detected capacity change from 0 to 16 [ 124.239805][ T6347] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.512953][ T6351] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.547910][ T6347] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.841838][ T6358] loop2: detected capacity change from 0 to 764 [ 124.858949][ T6341] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 124.932349][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.959005][ T27] audit: type=1804 audit(1785084193.017:10): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.97" name="/newroot/26/file1/file1" dev="loop3" ino=94 res=1 errno=0 [ 124.994718][ T6362] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 125.109068][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.338722][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 125.375165][ T5815] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.393979][ T5815] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.418562][ T5815] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 125.476376][ T5815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.508561][ T5815] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 125.553543][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.632357][ T5815] usb 2-1: config 0 descriptor?? [ 126.249257][ T5815] hid (null): bogus close delimiter [ 126.742626][ T5815] usb 2-1: USB disconnect, device number 2 [ 127.023468][ T6397] loop0: detected capacity change from 0 to 256 [ 127.227463][ T6397] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 127.380633][ T27] audit: type=1800 audit(1785084195.367:11): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.112" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 128.077862][ T6409] loop3: detected capacity change from 0 to 128 [ 128.107927][ T6408] loop1: detected capacity change from 0 to 764 [ 128.143972][ T6409] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.193699][ T6409] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.287925][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.637155][ T6419] loop2: detected capacity change from 0 to 1024 [ 128.650749][ T6419] EXT4-fs: Ignoring removed orlov option [ 128.660184][ T6424] loop1: detected capacity change from 0 to 128 [ 128.667441][ T6419] EXT4-fs: quotafile must be on filesystem root [ 128.739551][ T6424] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 128.849479][ T6426] loop3: detected capacity change from 0 to 512 [ 128.876178][ T6426] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.891405][ T6423] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 128.914348][ T6426] UDF-fs: Scanning with blocksize 512 failed [ 128.956622][ T6426] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.984780][ T27] audit: type=1804 audit(1785084197.037:12): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.116" name="/newroot/4/file1/file1" dev="loop1" ino=94 res=1 errno=0 [ 129.009212][ T6426] UDF-fs: Scanning with blocksize 1024 failed [ 129.022344][ T6427] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 129.131666][ T6426] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 129.158814][ T6426] UDF-fs: Scanning with blocksize 2048 failed [ 129.223336][ T6426] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 129.301669][ T6426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.528926][ T27] audit: type=1800 audit(1785084197.567:13): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.119" name="file1" dev="loop3" ino=28 res=0 errno=0 [ 130.371650][ T6443] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 130.402464][ T6439] loop2: detected capacity change from 0 to 256 [ 130.537022][ T6449] loop1: detected capacity change from 0 to 128 [ 130.560325][ T6439] FAT-fs (loop2): Directory bread(block 64) failed [ 130.578828][ T6439] FAT-fs (loop2): Directory bread(block 65) failed [ 130.585572][ T6439] FAT-fs (loop2): Directory bread(block 66) failed [ 130.595496][ T6439] FAT-fs (loop2): Directory bread(block 67) failed [ 130.604363][ T6439] FAT-fs (loop2): Directory bread(block 68) failed [ 130.612450][ T6449] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.622742][ T6449] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.625793][ T6439] FAT-fs (loop2): Directory bread(block 69) failed [ 130.663525][ T6439] FAT-fs (loop2): Directory bread(block 70) failed [ 130.670214][ T6439] FAT-fs (loop2): Directory bread(block 71) failed [ 130.677850][ T6439] FAT-fs (loop2): Directory bread(block 72) failed [ 130.684753][ T6439] FAT-fs (loop2): Directory bread(block 73) failed [ 130.771649][ T6141] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.946722][ T6457] loop1: detected capacity change from 0 to 512 [ 130.962666][ T6457] EXT4-fs: Ignoring removed orlov option [ 130.986782][ T6457] EXT4-fs: Ignoring removed orlov option [ 131.031978][ T6457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.089366][ T6457] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.131: iget: bad i_size value: 38620345925642 [ 131.123707][ T6460] program syz.2.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.134494][ T6457] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.131: couldn't read orphan inode 15 (err -117) [ 131.166293][ T6457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.321214][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.392897][ T6476] loop0: detected capacity change from 0 to 128 [ 132.428816][ T6476] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 132.448975][ T5762] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 132.654972][ T5762] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 132.700101][ T5762] usb 4-1: config 0 has no interface number 0 [ 132.730898][ T5762] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.778208][ T6475] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 132.795259][ T5762] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 132.846019][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 132.968887][ T5762] usb 4-1: Manufacturer: syz [ 133.040618][ T5762] usb 4-1: SerialNumber: syz [ 133.169704][ T5762] usb 4-1: config 0 descriptor?? [ 133.176000][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.200389][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.390236][ T27] audit: type=1804 audit(1785084201.457:14): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.138" name="/newroot/37/file1/file1" dev="loop0" ino=94 res=1 errno=0 [ 133.418674][ T6483] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 133.634917][ T5762] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 133.654964][ T5762] usbtouchscreen: probe of 4-1:0.214 failed with error -32 [ 133.664934][ T6487] loop2: detected capacity change from 0 to 128 [ 133.693213][ T5762] usb 4-1: USB disconnect, device number 2 [ 133.727418][ T6487] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.773840][ T6487] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.016543][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.111076][ T6495] loop0: detected capacity change from 0 to 512 [ 134.120221][ T6495] EXT4-fs: Ignoring removed i_version option [ 134.147898][ T6495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.216291][ T6495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.252392][ T6495] ext4 filesystem being mounted at /39/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.271597][ T6502] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 134.328838][ T6501] loop1: detected capacity change from 0 to 1024 [ 134.431537][ T5926] udevd[5926]: incorrect ext4 checksum on /dev/loop0 [ 134.440062][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.077251][ T6527] Zero length message leads to an empty skb [ 136.093434][ T6530] loop0: detected capacity change from 0 to 512 [ 136.126256][ T6530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.162742][ T6530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 136.206248][ T6530] System zones: 1-2, 4-12, 8-8 [ 136.226863][ T6530] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.160: iget: bad i_size value: 38620345925642 [ 136.265354][ T6530] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.160: couldn't read orphan inode 15 (err -117) [ 136.283029][ T6530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.335723][ T6530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.160: bg 0: block 5: invalid block bitmap [ 136.363563][ T6530] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 136.383629][ T6530] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.383629][ T6530] [ 136.388884][ T5762] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.404358][ T6530] EXT4-fs (loop0): Total free blocks count 0 [ 136.410760][ T6530] EXT4-fs (loop0): Free/Dirty block details [ 136.417279][ T6530] EXT4-fs (loop0): free_blocks=0 [ 136.423082][ T6530] EXT4-fs (loop0): dirty_blocks=2 [ 136.428176][ T6530] EXT4-fs (loop0): Block reservation details [ 136.435172][ T6530] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 136.529074][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.594142][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.618632][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.638659][ T5762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.658600][ T5762] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.667739][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.692354][ T5762] usb 3-1: config 0 descriptor?? [ 136.744708][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.756428][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.783684][ T9] usb 4-1: config 220 has no interface number 2 [ 136.793800][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.819932][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 136.826811][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 136.858696][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 136.881494][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 136.898666][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.920957][ T9] usb 4-1: Product: syz [ 136.925219][ T9] usb 4-1: Manufacturer: syz [ 136.940919][ T9] usb 4-1: SerialNumber: syz [ 137.034730][ T6545] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 137.071730][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.115158][ T5762] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 137.172710][ T5762] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 137.196752][ T9] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 137.207272][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 137.214438][ T9] usb 4-1: No valid video chain found. [ 137.220875][ T9] usb 4-1: selecting invalid altsetting 0 [ 137.244860][ T9] usb 4-1: selecting invalid altsetting 0 [ 137.250930][ T9] usbtest: probe of 4-1:220.1 failed with error -22 [ 137.276026][ T9] usb 4-1: USB disconnect, device number 3 [ 137.454896][ T6548] loop2: detected capacity change from 0 to 1024 [ 138.147084][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.443485][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 138.495957][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.686675][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 64, changing to 7 [ 138.714160][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 49924, setting to 1024 [ 138.748108][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.773454][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.807145][ T8] usb 1-1: Product: syz [ 138.829006][ T8] usb 1-1: Manufacturer: syz [ 138.835425][ T8] usb 1-1: SerialNumber: syz [ 138.855070][ T8] usb 1-1: config 0 descriptor?? [ 138.890587][ T8] usb 1-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 1d [ 139.167137][ T1139] hfsplus: b-tree write err: -5, ino 25 [ 139.173783][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 139.184784][ T1139] hfsplus: b-tree write err: -5, ino 2 [ 139.218107][ T8] usb 1-1: USB disconnect, device number 2 [ 139.392313][ T6577] loop1: detected capacity change from 0 to 2048 [ 139.445980][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.474586][ T6577] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 139.491697][ T6577] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 139.504673][ T6577] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.504673][ T6577] [ 139.516139][ T6577] EXT4-fs (loop1): Total free blocks count 0 [ 139.522539][ T6577] EXT4-fs (loop1): Free/Dirty block details [ 139.533883][ T6577] EXT4-fs (loop1): free_blocks=2415919504 [ 139.540057][ T6577] EXT4-fs (loop1): dirty_blocks=16 [ 139.545281][ T6577] EXT4-fs (loop1): Block reservation details [ 139.546989][ T9] usb 3-1: USB disconnect, device number 2 [ 139.574902][ T6577] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 139.607478][ T6581] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 139.789189][ T6585] syz.2.176 uses obsolete (PF_INET,SOCK_PACKET) [ 139.949686][ T6590] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 141.189144][ T2132] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.294695][ T6612] loop3: detected capacity change from 0 to 2048 [ 141.318930][ T6612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.349602][ T6612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 141.366458][ T6612] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 141.379364][ T6612] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.379364][ T6612] [ 141.394052][ T6612] EXT4-fs (loop3): Total free blocks count 0 [ 141.402762][ T2132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.415137][ T6612] EXT4-fs (loop3): Free/Dirty block details [ 141.421265][ T2132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.431270][ T6612] EXT4-fs (loop3): free_blocks=2415919504 [ 141.437073][ T6612] EXT4-fs (loop3): dirty_blocks=16 [ 141.442506][ T2132] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.449016][ T6612] EXT4-fs (loop3): Block reservation details [ 141.456113][ T2132] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.470919][ T2132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.503967][ T2132] usb 2-1: config 0 descriptor?? [ 141.523537][ T6612] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 141.557046][ T6615] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 141.635583][ T6619] loop2: detected capacity change from 0 to 512 [ 141.701205][ T6619] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 141.741859][ T6619] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 141.756518][ T6619] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.187: Failed to acquire dquot type 1 [ 141.777811][ T6619] EXT4-fs (loop2): 1 truncate cleaned up [ 141.785356][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.798836][ T6619] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.871517][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.969937][ T2132] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 142.008179][ T2132] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 142.041905][ T6628] loop3: detected capacity change from 0 to 256 [ 142.087834][ T6628] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 142.247662][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 142.367007][ T6634] loop1: detected capacity change from 0 to 1024 [ 143.488228][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 143.658581][ T2132] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 143.831367][ T6655] loop0: detected capacity change from 0 to 2048 [ 143.876780][ T6655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.943963][ T6655] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 143.961191][ T6655] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 143.974541][ T6655] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.974541][ T6655] [ 143.984336][ T6655] EXT4-fs (loop0): Total free blocks count 0 [ 143.990955][ T6655] EXT4-fs (loop0): Free/Dirty block details [ 143.997890][ T6655] EXT4-fs (loop0): free_blocks=2415919504 [ 144.003853][ T6655] EXT4-fs (loop0): dirty_blocks=16 [ 144.009118][ T6655] EXT4-fs (loop0): Block reservation details [ 144.018781][ T6655] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 144.029865][ T6658] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 144.183258][ T2976] hfsplus: b-tree write err: -5, ino 25 [ 144.195077][ T2976] hfsplus: b-tree write err: -5, ino 4 [ 144.223304][ T2976] hfsplus: b-tree write err: -5, ino 2 [ 144.518419][ T23] usb 2-1: USB disconnect, device number 3 [ 145.108098][ T6672] loop0: detected capacity change from 0 to 128 [ 145.142315][ T6673] loop1: detected capacity change from 0 to 1024 [ 145.161847][ T6673] EXT4-fs: Ignoring removed orlov option [ 145.175005][ T6672] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.212746][ T6672] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.232637][ T6673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.473699][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.729305][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.843265][ T6689] Bluetooth: MGMT ver 1.22 [ 146.297726][ T6702] loop0: detected capacity change from 0 to 2048 [ 146.371404][ T6702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.649055][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.860823][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.882415][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.902753][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.930554][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.950077][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.992251][ T8] usb 4-1: config 0 descriptor?? [ 147.376586][ T6717] loop1: detected capacity change from 0 to 512 [ 147.390134][ T6717] EXT4-fs: Ignoring removed i_version option [ 147.404548][ T6717] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.436210][ T8] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 147.452300][ T8] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 147.485910][ T6717] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 147.503724][ T6717] Quota error (device loop1): write_blk: dquota write failed [ 147.511348][ T6717] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 147.520921][ T6717] Quota error (device loop1): write_blk: dquota write failed [ 147.534766][ T6717] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 147.561439][ T6717] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.219: Failed to acquire dquot type 1 [ 147.573990][ T6717] EXT4-fs (loop1): 1 truncate cleaned up [ 147.581354][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.844217][ T6727] loop3: detected capacity change from 0 to 1024 [ 148.255633][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.905860][ T6740] loop0: detected capacity change from 0 to 256 [ 148.964553][ T6739] loop1: detected capacity change from 0 to 2048 [ 149.023381][ T6739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.100035][ C0] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 149.683426][ T6753] loop1: detected capacity change from 0 to 164 [ 149.728192][ T2976] hfsplus: b-tree write err: -5, ino 25 [ 149.734169][ T6753] rock: directory entry would overflow storage [ 149.734244][ T6753] rock: sig=0x5252, size=5, remaining=3 [ 149.788824][ T2976] hfsplus: b-tree write err: -5, ino 4 [ 149.838636][ T2976] hfsplus: b-tree write err: -5, ino 2 [ 149.967859][ T5815] usb 4-1: USB disconnect, device number 4 [ 150.506354][ T6761] xt_CT: No such helper "pptp" [ 151.582313][ T6768] loop1: detected capacity change from 0 to 512 [ 151.730330][ T6768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.791679][ T6768] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.876037][ T6778] loop2: detected capacity change from 0 to 2048 [ 151.915491][ T6774] loop0: detected capacity change from 0 to 4096 [ 151.923380][ T6774] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.968147][ T6778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.011084][ T6774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.070569][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.132209][ T6774] support for the xor transformation has been removed. [ 152.324384][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.582026][ T6794] loop1: detected capacity change from 0 to 2048 [ 152.606457][ T6794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.673008][ T27] audit: type=1800 audit(1785084220.737:15): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.246" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 152.768679][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.914549][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.980733][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.001134][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.029429][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.069488][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.083700][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.102943][ T8] usb 1-1: config 0 descriptor?? [ 153.517754][ T6805] xt_CT: No such helper "pptp" [ 153.536641][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 153.636216][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 154.347514][ T6810] loop1: detected capacity change from 0 to 4096 [ 154.360136][ T6812] loop0: detected capacity change from 0 to 1024 [ 154.380056][ T6810] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.510250][ T6810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.560955][ T6816] loop2: detected capacity change from 0 to 256 [ 154.668550][ T6816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 154.700279][ T6810] support for the xor transformation has been removed. [ 154.869766][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 154.886225][ T6821] loop3: detected capacity change from 0 to 512 [ 154.886228][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.018560][ T8] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 155.031782][ T6821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.124077][ T6821] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.141541][ T6827] loop2: detected capacity change from 0 to 1024 [ 155.218629][ T8] usb 1-1: device descriptor read/64, error -32 [ 155.251940][ T6827] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 155.377984][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.791549][ T6839] xt_CT: No such helper "pptp" [ 155.962068][ T2976] hfsplus: b-tree write err: -5, ino 25 [ 155.974464][ T2976] hfsplus: b-tree write err: -5, ino 4 [ 155.995814][ T2976] hfsplus: b-tree write err: -5, ino 2 [ 156.191187][ T6568] usb 1-1: USB disconnect, device number 3 [ 156.316250][ T6850] loop3: detected capacity change from 0 to 4096 [ 156.348957][ T6850] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.589814][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.684878][ T6850] support for the xor transformation has been removed. [ 157.445408][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.908682][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.111817][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.142212][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.169317][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.192999][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.203834][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.229466][ T23] usb 4-1: config 0 descriptor?? [ 158.319048][ T6886] loop1: detected capacity change from 0 to 256 [ 158.343684][ T6886] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.358773][ T6886] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 158.374669][ T6886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 158.667188][ T23] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 158.711547][ T23] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.684375][ T6895] loop3: detected capacity change from 0 to 1024 [ 159.993342][ T6900] loop2: detected capacity change from 0 to 4096 [ 160.052481][ T6900] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.127921][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.229473][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 160.284941][ T6900] support for the xor transformation has been removed. [ 160.459478][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.830353][ T6923] loop1: detected capacity change from 0 to 512 [ 160.855109][ T6923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.888807][ T78] hfsplus: b-tree write err: -5, ino 25 [ 160.912156][ T6923] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 160.924342][ T78] hfsplus: b-tree write err: -5, ino 4 [ 160.932819][ T6923] EXT4-fs (loop1): 1 truncate cleaned up [ 160.946012][ T6923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.949405][ T78] hfsplus: b-tree write err: -5, ino 2 [ 161.003308][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.282948][ T5815] usb 4-1: USB disconnect, device number 5 [ 161.691551][ T6944] input: syz1 as /devices/virtual/input/input8 [ 161.699926][ T6945] loop0: detected capacity change from 0 to 164 [ 161.822863][ T6945] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.861851][ T6945] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.893441][ T6945] rock: directory entry would overflow storage [ 161.911521][ T6945] rock: sig=0x4f50, size=4, remaining=3 [ 161.919078][ T5788] udevd[5788]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 161.931215][ T6945] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 162.210772][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.249070][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.106071][ T6972] loop3: detected capacity change from 0 to 512 [ 164.098490][ C0] sched: RT throttling activated [ 164.389555][ T6972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.403893][ T6972] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.951480][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.218035][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.408709][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 165.416299][ T9] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 165.428592][ T9] usb 2-1: config 0 has no interface number 0 [ 165.434808][ T9] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 165.454020][ T9] usb 2-1: New USB device found, idVendor=444c, idProduct=0998, bcdDevice= 0.7f [ 165.463259][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.480567][ T9] usb 2-1: config 0 descriptor?? [ 165.487660][ T6984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.578592][ T2132] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 165.781708][ T2132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.803376][ T2132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.829030][ T2132] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.845893][ T2132] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.873629][ T2132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.912994][ T2132] usb 4-1: config 0 descriptor?? [ 165.948143][ T6998] loop0: detected capacity change from 0 to 1024 [ 166.335027][ T2132] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 166.347139][ T2132] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 167.328513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.808524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 168.130969][ C1] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 168.428771][ T9] usb 2-1: USB disconnect, device number 4 [ 168.468615][ T6568] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 168.610661][ T7015] loop1: detected capacity change from 0 to 512 [ 168.675155][ T7015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.688973][ T7015] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.812014][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.269235][ T7028] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 169.310195][ T8] usb 4-1: USB disconnect, device number 6 [ 169.571610][ T7032] netlink: 277 bytes leftover after parsing attributes in process `syz.2.335'. [ 169.757759][ T7040] loop3: detected capacity change from 0 to 256 [ 169.770809][ T7040] exfat: Deprecated parameter 'utf8' [ 169.776315][ T7040] exfat: Deprecated parameter 'utf8' [ 169.794458][ T7040] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 169.828339][ T7040] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 170.852601][ T6568] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.872588][ T7044] loop0: detected capacity change from 0 to 512 [ 171.020157][ T7044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.036546][ T7044] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.063109][ T6568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.078675][ T6568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.115869][ T6568] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.144970][ T6568] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.151807][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.165966][ T6568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.198870][ T6568] usb 3-1: config 0 descriptor?? [ 171.647473][ T6568] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 171.676804][ T6568] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.096059][ T7067] loop3: detected capacity change from 0 to 256 [ 172.172983][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.204576][ T7067] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.220395][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.250488][ T7067] FAT-fs (loop3): Filesystem has been set read-only [ 172.273153][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.286791][ T7067] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.318657][ T7067] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.333493][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.348292][ T27] audit: type=1800 audit(1785084240.407:16): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.347" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 172.383864][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.454306][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.482203][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.498090][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.544604][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 172.587955][ T7063] kvm: kvm [7060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 173.821680][ C0] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 174.487380][ T7082] loop2: detected capacity change from 0 to 512 [ 174.561124][ T7082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.579546][ T7082] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.734846][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.745454][ T5780] usb 3-1: USB disconnect, device number 3 [ 175.019957][ T8] smpboot: CPU 1 is now offline [ 175.134969][ T7094] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 175.686704][ T7101] loop0: detected capacity change from 0 to 2048 [ 175.791009][ T7101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.818903][ T7101] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.079883][ T7113] netlink: 'syz.3.355': attribute type 11 has an invalid length. [ 176.169093][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.792453][ T7118] loop1: detected capacity change from 0 to 512 [ 177.799728][ T7118] EXT4-fs: Ignoring removed i_version option [ 177.817176][ T7118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.826660][ T7118] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.858668][ T7118] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.873809][ T7118] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 177.884913][ T7118] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.901348][ T7118] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 177.913761][ T7118] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 177.933005][ T7118] EXT4-fs (loop1): Remounting filesystem read-only [ 177.940217][ T7118] EXT4-fs (loop1): 1 truncate cleaned up [ 177.960815][ T7118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.975178][ T7118] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.038341][ T7116] kvm_pr_unimpl_wrmsr: 11 callbacks suppressed [ 178.038359][ T7116] kvm: kvm [7107]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 178.191390][ T7116] kvm: kvm [7107]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 178.568944][ T5780] smpboot: CPU 1 is now offline [ 178.614877][ T7134] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 179.739919][ T5780] smpboot: CPU 1 is now offline [ 180.016658][ T7159] loop6: detected capacity change from 0 to 1 [ 180.027716][ T7159] Dev loop6: unable to read RDB block 1 [ 180.033759][ T7159] loop6: unable to read partition table [ 180.039674][ T7159] loop6: partition table beyond EOD, truncated [ 180.045873][ T7159] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.106115][ T7161] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 180.280378][ T7157] kvm: kvm [7154]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 180.325102][ T7157] kvm: kvm [7154]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 180.477078][ T7157] kvm: kvm [7154]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 180.531702][ T7157] kvm: kvm [7154]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 180.602908][ T7157] kvm: kvm [7154]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 180.761077][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.799216][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.860144][ T7177] loop0: detected capacity change from 0 to 1024 [ 181.059758][ T7186] loop3: detected capacity change from 0 to 128 [ 181.087527][ T7186] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.100659][ T7186] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.202478][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.501006][ T1043] hfsplus: b-tree write err: -5, ino 25 [ 181.506845][ T1043] hfsplus: b-tree write err: -5, ino 4 [ 181.516268][ T1043] hfsplus: b-tree write err: -5, ino 2 [ 181.817869][ T9] smpboot: CPU 1 is now offline [ 181.864568][ T7210] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 182.939048][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.987243][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.023563][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.086245][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.122004][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.150651][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.180873][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.195162][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.219774][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.254967][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.271932][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.297387][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.308631][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.325339][ T9] usb 3-1: config 0 descriptor?? [ 183.333309][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.356176][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.386603][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.423506][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.461277][ T7226] kvm: kvm [7225]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 183.758908][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 183.805299][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 184.031264][ T7256] loop0: detected capacity change from 0 to 16 [ 184.080387][ T7256] erofs: (device loop0): mounted with root inode @ nid 36. [ 184.107614][ T7258] loop2: detected capacity change from 0 to 1024 [ 184.938651][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 185.048914][ C0] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 185.141233][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.153561][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.166420][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.183127][ T9] usb 2-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 185.208841][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.221823][ T9] usb 2-1: Product: syz [ 185.226063][ T9] usb 2-1: Manufacturer: syz [ 185.241338][ T9] usb 2-1: SerialNumber: syz [ 185.493469][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 185.504242][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 185.545628][ T9] usb 2-1: USB disconnect, device number 5 [ 185.641801][ T6164] udevd[6164]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.693440][ T78] hfsplus: b-tree write err: -5, ino 25 [ 185.707428][ T78] hfsplus: b-tree write err: -5, ino 4 [ 185.715007][ T78] hfsplus: b-tree write err: -5, ino 2 [ 185.870013][ T5780] usb 3-1: USB disconnect, device number 4 [ 186.466506][ T7307] loop0: detected capacity change from 0 to 8192 [ 186.738752][ T5780] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 186.848951][ T7321] loop2: detected capacity change from 0 to 256 [ 186.870336][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.880801][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.933287][ T5780] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.952409][ T5780] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.967679][ T7322] loop0: detected capacity change from 0 to 1024 [ 186.978626][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.997479][ T5780] usb 2-1: Product: syz [ 187.005490][ T5780] usb 2-1: Manufacturer: syz [ 187.011712][ T5780] usb 2-1: SerialNumber: syz [ 187.587263][ T2946] hfsplus: b-tree write err: -5, ino 25 [ 187.593405][ T2946] hfsplus: b-tree write err: -5, ino 4 [ 187.605268][ T2946] hfsplus: b-tree write err: -5, ino 2 [ 187.736342][ T7331] loop0: detected capacity change from 0 to 512 [ 187.809678][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.851357][ T7331] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.920316][ T7331] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #12: comm syz.0.441: corrupted xattr block 6: invalid header [ 188.025909][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.076192][ T5780] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 188.084842][ T5780] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 188.126401][ T5780] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 188.277157][ T5780] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 188.335290][ T5780] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 188.382831][ T7341] loop0: detected capacity change from 0 to 128 [ 188.432024][ T7341] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.488789][ T27] audit: type=1800 audit(1785084256.537:17): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.444" name="file1" dev="loop0" ino=1048608 res=0 errno=0 [ 188.520203][ T5780] usb 2-1: USB disconnect, device number 6 [ 188.531344][ T5780] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 188.648640][ T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.881061][ T7354] netlink: 27 bytes leftover after parsing attributes in process `syz.2.448'. [ 188.891303][ T7353] netlink: 'syz.0.447': attribute type 16 has an invalid length. [ 188.899379][ T7353] netlink: 'syz.0.447': attribute type 17 has an invalid length. [ 189.014633][ T7353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.070491][ T7394] UDC core: g1: couldn't find an available UDC or it's busy [ 190.100493][ T7394] loop1: detected capacity change from 0 to 512 [ 190.112352][ T7394] EXT4-fs: Ignoring removed nobh option [ 190.147236][ T7394] EXT4-fs: Ignoring removed nobh option [ 190.199087][ T7394] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 190.249807][ T7394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 190.280640][ T7394] System zones: 1-12 [ 190.292341][ T7394] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.321870][ T7394] EXT4-fs error (device loop1): __ext4_iget:5079: inode #11: block 1042: comm syz.1.457: invalid block [ 190.408007][ T7394] EXT4-fs (loop1): Remounting filesystem read-only [ 190.470575][ T7394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 190.675162][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 190.987833][ T7429] loop0: detected capacity change from 0 to 512 [ 191.029834][ T7429] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.465: bad orphan inode 13 [ 191.066399][ T7429] ext4_test_bit(bit=12, block=4) = 1 [ 191.079057][ T7429] is_bad_inode(inode)=0 [ 191.087918][ T7429] NEXT_ORPHAN(inode)=0 [ 191.100209][ T7429] max_ino=32 [ 191.111682][ T7429] i_nlink=1 [ 191.126320][ T7429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.158903][ T7291] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.179471][ T7429] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.465: Hash code is SIPHASH, but hash not in dirent [ 191.196468][ T7429] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.465: Corrupt directory, running e2fsck is recommended [ 191.237697][ T7429] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.465: path /123/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 191.284380][ T7429] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.465: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 191.361193][ T7291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.372790][ T7291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.421018][ T7291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.458418][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.471212][ T7291] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.494315][ T7291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.545716][ T7291] usb 3-1: config 0 descriptor?? [ 191.986874][ T7291] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 192.010012][ T7446] UDC core: g1: couldn't find an available UDC or it's busy [ 192.035408][ T7291] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 192.074420][ T7446] loop0: detected capacity change from 0 to 512 [ 192.100734][ T7446] EXT4-fs: Ignoring removed nobh option [ 192.126273][ T7446] EXT4-fs: Ignoring removed nobh option [ 192.150545][ T7446] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 192.175115][ T7449] loop1: detected capacity change from 0 to 512 [ 192.198363][ T7446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 192.220177][ T7446] System zones: 1-12 [ 192.225717][ T7446] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.233649][ T7449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 192.250260][ T7446] EXT4-fs error (device loop0): __ext4_iget:5079: inode #11: block 1042: comm syz.0.471: invalid block [ 192.265496][ T7449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.286225][ T7446] EXT4-fs (loop0): Remounting filesystem read-only [ 192.299502][ T7446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 192.319985][ T7449] EXT4-fs (loop1): 1 truncate cleaned up [ 192.354649][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.387519][ T7452] loop2: detected capacity change from 0 to 1024 [ 192.525987][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 192.824908][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.039026][ T7461] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 193.078168][ T7461] bridge1: entered promiscuous mode [ 193.099558][ T7461] bridge1: entered allmulticast mode [ 193.167417][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.204559][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.329098][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 193.416908][ T7469] loop1: detected capacity change from 0 to 512 [ 193.440560][ T7469] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.480: corrupted in-inode xattr: invalid ea_ino [ 193.458157][ T7469] EXT4-fs (loop1): Remounting filesystem read-only [ 193.468973][ T7469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.527508][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.913836][ T11] hfsplus: b-tree write err: -5, ino 25 [ 193.932839][ T11] hfsplus: b-tree write err: -5, ino 4 [ 193.954081][ T11] hfsplus: b-tree write err: -5, ino 2 [ 194.047332][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.077298][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.112671][ T7483] UDC core: g1: couldn't find an available UDC or it's busy [ 194.146309][ T7483] loop2: detected capacity change from 0 to 512 [ 194.162321][ T6568] usb 3-1: USB disconnect, device number 5 [ 194.184852][ T7483] EXT4-fs: Ignoring removed nobh option [ 194.198875][ T7479] loop0: detected capacity change from 0 to 1024 [ 194.211226][ T7483] EXT4-fs: Ignoring removed nobh option [ 194.252845][ T7483] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 194.297594][ T7483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 194.326727][ T7483] System zones: 1-12 [ 194.357163][ T7483] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.373722][ T7483] EXT4-fs error (device loop2): __ext4_iget:5079: inode #11: block 1042: comm syz.2.484: invalid block [ 194.410632][ T7483] EXT4-fs (loop2): Remounting filesystem read-only [ 194.422143][ T7483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 194.571362][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 194.602760][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.610561][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.811958][ T7493] loop1: detected capacity change from 0 to 512 [ 194.890171][ T78] hfsplus: b-tree write err: -5, ino 25 [ 194.896023][ T78] hfsplus: b-tree write err: -5, ino 4 [ 194.912929][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.953534][ T78] hfsplus: b-tree write err: -5, ino 2 [ 194.963025][ T7493] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.125129][ T7493] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 195.278290][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.436973][ T7509] loop2: detected capacity change from 0 to 164 [ 196.818691][ T7291] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.863368][ T7534] loop2: detected capacity change from 0 to 256 [ 196.905844][ T7534] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.916619][ T7534] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.928237][ T7534] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.939709][ T27] audit: type=1800 audit(1785084265.007:18): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.506" name="file1" dev="loop2" ino=1048610 res=0 errno=0 [ 196.943234][ T7534] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.975798][ T7534] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 197.007998][ T7291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.019882][ T7291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.039581][ T7291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.064355][ T7291] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.084114][ T7291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.110311][ T7291] usb 2-1: config 0 descriptor?? [ 197.532264][ T7291] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 197.546869][ T7291] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 197.878186][ T7551] loop1: detected capacity change from 0 to 1024 [ 198.470918][ T7564] loop0: detected capacity change from 0 to 164 [ 198.839519][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 199.408070][ T78] hfsplus: b-tree write err: -5, ino 25 [ 199.415388][ T78] hfsplus: b-tree write err: -5, ino 4 [ 199.421433][ T78] hfsplus: b-tree write err: -5, ino 2 [ 199.559828][ T7588] loop1: detected capacity change from 0 to 512 [ 199.591370][ T7588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.636228][ T7588] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 199.660315][ T7291] usb 2-1: USB disconnect, device number 7 [ 199.703369][ T7588] EXT4-fs (loop1): 1 truncate cleaned up [ 199.736397][ T7588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.896797][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.979582][ T5780] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.035723][ T7598] loop1: detected capacity change from 0 to 164 [ 200.061349][ T7600] capability: warning: `syz.3.533' uses 32-bit capabilities (legacy support in use) [ 200.176136][ T5780] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 200.206616][ T5780] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 200.242786][ T5780] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 200.268800][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.289299][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.303207][ T7606] loop1: detected capacity change from 0 to 8 [ 200.309690][ T5780] usb 3-1: Product: syz [ 200.319196][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.327137][ T5780] usb 3-1: Manufacturer: syz [ 200.342867][ T5780] usb 3-1: SerialNumber: syz [ 200.372714][ T5780] usb 3-1: config 0 descriptor?? [ 200.392381][ T7592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.403782][ T7592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.523401][ T7609] loop1: detected capacity change from 0 to 128 [ 200.533078][ T7609] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 200.636858][ T7592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.646339][ T7608] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 200.661354][ T7592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.713238][ T7608] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 200.739091][ T7608] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 201.075699][ T5780] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 201.385901][ T7622] 9pnet_fd: Insufficient options for proto=fd [ 201.481699][ T5780] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 201.546901][ T5780] usb 3-1: USB disconnect, device number 6 [ 202.079494][ T5780] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 202.291526][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.324233][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.354642][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.401110][ T5780] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.441180][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.471623][ T7291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 202.490852][ T5780] usb 2-1: config 0 descriptor?? [ 202.551758][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.573464][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.696335][ T7291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.734115][ T7291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.760868][ T7291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.791894][ T7291] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.821848][ T7291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.846159][ T7291] usb 3-1: config 0 descriptor?? [ 202.940177][ T5780] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 202.970065][ T5780] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 203.273405][ T7291] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 203.297668][ T7650] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 203.323596][ T7291] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.614422][ T7655] loop2: detected capacity change from 0 to 1024 [ 204.261197][ T7291] usb 3-1: USB disconnect, device number 7 [ 204.534322][ T7670] 9pnet_fd: Insufficient options for proto=fd [ 204.896588][ T78] hfsplus: b-tree write err: -5, ino 25 [ 204.903399][ T78] hfsplus: b-tree write err: -5, ino 4 [ 204.916222][ T78] hfsplus: b-tree write err: -5, ino 2 [ 205.100866][ T5780] usb 2-1: USB disconnect, device number 8 [ 206.018788][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 206.220673][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.239947][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.261346][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.288079][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.307398][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.329519][ T9] usb 3-1: config 0 descriptor?? [ 206.541762][ T7715] capability: warning: `syz.0.578' uses deprecated v2 capabilities in a way that may be insecure [ 206.771162][ T9] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 206.813730][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 207.236955][ T9] usb 3-1: USB disconnect, device number 8 [ 208.479366][ T7733] loop1: detected capacity change from 0 to 1024 [ 208.486974][ T7733] ext4: Unknown parameter 'fowner>00000000000000000000' [ 209.196565][ T7741] loop1: detected capacity change from 0 to 256 [ 209.215100][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.245822][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.339621][ T7743] loop0: detected capacity change from 0 to 1024 [ 209.599984][ T7752] loop1: detected capacity change from 0 to 256 [ 209.747970][ T7755] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 210.321357][ T2976] hfsplus: b-tree write err: -5, ino 25 [ 210.327230][ T2976] hfsplus: b-tree write err: -5, ino 4 [ 210.337779][ T2976] hfsplus: b-tree write err: -5, ino 2 [ 210.481818][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.536280][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.079393][ T7291] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.257000][ T7787] loop0: detected capacity change from 0 to 1024 [ 211.277189][ T7787] EXT4-fs: inline encryption not supported [ 211.287704][ T7291] usb 2-1: Using ep0 maxpacket: 8 [ 211.300333][ T7787] EXT4-fs: Ignoring removed bh option [ 211.314967][ T7291] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 211.332069][ T7291] usb 2-1: config 179 has no interface number 0 [ 211.354800][ T7787] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 211.367080][ T7291] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 211.392728][ T7291] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 211.418269][ T7291] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.432578][ T7787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.466060][ T7291] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 211.506458][ T27] audit: type=1800 audit(1785084279.567:19): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.605" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 211.514805][ T7291] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 211.591485][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.604543][ T7291] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 211.627314][ T7291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.685615][ T7775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.981631][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 212.220708][ T9] usb 2-1: USB disconnect, device number 9 [ 212.220770][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 212.235025][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.257529][ T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 212.346282][ T7798] loop0: detected capacity change from 0 to 512 [ 212.398208][ T7800] loop2: detected capacity change from 0 to 16 [ 212.419529][ T7798] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.609: iget: bad i_size value: 38620345925642 [ 212.440032][ T7800] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 212.512721][ T7798] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.609: couldn't read orphan inode 15 (err -117) [ 212.582778][ T7798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.954671][ T42] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 212.976115][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 360 with error 28 [ 212.983372][ T7815] loop2: detected capacity change from 0 to 128 [ 212.997895][ T42] EXT4-fs (loop0): This should not happen!! Data will be lost [ 212.997895][ T42] [ 213.014355][ T42] EXT4-fs (loop0): Total free blocks count 0 [ 213.020711][ T42] EXT4-fs (loop0): Free/Dirty block details [ 213.048228][ T42] EXT4-fs (loop0): free_blocks=0 [ 213.054624][ T42] EXT4-fs (loop0): dirty_blocks=360 [ 213.063274][ T42] EXT4-fs (loop0): Block reservation details [ 213.072143][ T7815] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.084424][ T42] EXT4-fs (loop0): i_reserved_data_blocks=360 [ 213.121567][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.140533][ T7815] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.291617][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.319889][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.365739][ T7820] loop0: detected capacity change from 0 to 1024 [ 213.508580][ T5780] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.689041][ T5780] usb 3-1: Using ep0 maxpacket: 32 [ 213.698821][ T5780] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.705671][ T5780] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 213.724976][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.748365][ T5780] usb 3-1: config 0 descriptor?? [ 214.166808][ T5780] logitech 0003:046D:C295.000F: unknown main item tag 0x3 [ 214.192146][ T5780] logitech 0003:046D:C295.000F: unknown main item tag 0x1 [ 214.206511][ T2976] hfsplus: b-tree write err: -5, ino 25 [ 214.211442][ T5780] logitech 0003:046D:C295.000F: unknown main item tag 0x0 [ 214.224672][ T2976] hfsplus: b-tree write err: -5, ino 4 [ 214.230730][ T2976] hfsplus: b-tree write err: -5, ino 2 [ 214.231597][ T5780] logitech 0003:046D:C295.000F: unknown main item tag 0x4 [ 214.272054][ T5780] logitech 0003:046D:C295.000F: unknown main item tag 0x2 [ 214.305788][ T5780] logitech 0003:046D:C295.000F: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 214.344272][ T5780] logitech 0003:046D:C295.000F: no inputs found [ 214.391370][ T5780] usb 3-1: USB disconnect, device number 9 [ 214.465179][ T7833] fido_id[7833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 214.690764][ T7841] loop1: detected capacity change from 0 to 2048 [ 214.735067][ T7841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.628623][ T7790] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 216.636561][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.913821][ T7850] loop2: detected capacity change from 0 to 512 [ 216.930822][ T7849] loop0: detected capacity change from 0 to 512 [ 216.961114][ T7849] EXT4-fs (loop0): Test dummy encryption mode enabled [ 217.005506][ T7850] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.624: iget: bad i_size value: 38620345925642 [ 217.038247][ T7849] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.626: inode has both inline data and extents flags [ 217.099361][ T7850] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.624: couldn't read orphan inode 15 (err -117) [ 217.112205][ T7849] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.626: couldn't read orphan inode 15 (err -117) [ 217.134859][ T7850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.160795][ T7849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.436924][ T7849] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 217.537427][ T2946] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 217.545667][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.562433][ T2946] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 256 with error 28 [ 217.597958][ T2946] EXT4-fs (loop2): This should not happen!! Data will be lost [ 217.597958][ T2946] [ 217.623504][ T2946] EXT4-fs (loop2): Total free blocks count 0 [ 217.632422][ T2946] EXT4-fs (loop2): Free/Dirty block details [ 217.638911][ T2946] EXT4-fs (loop2): free_blocks=0 [ 217.644544][ T2946] EXT4-fs (loop2): dirty_blocks=256 [ 217.658542][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.668586][ T2946] EXT4-fs (loop2): Block reservation details [ 217.674675][ T2946] EXT4-fs (loop2): i_reserved_data_blocks=256 [ 217.724799][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.879252][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.904185][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.933599][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.980194][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.006766][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.027603][ T9] usb 2-1: config 0 descriptor?? [ 218.158856][ T5780] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 218.316568][ T7876] loop0: detected capacity change from 0 to 2048 [ 218.362659][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.387480][ T7876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.398161][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.435350][ T5780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.461749][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 218.678348][ T7863] loop1: detected capacity change from 0 to 1024 [ 218.688572][ T5780] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.718224][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.343411][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 220.388370][ T5780] usb 3-1: config 0 descriptor?? [ 220.792091][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.808429][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.874234][ T5780] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 220.905321][ T5780] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 220.937255][ T9] usb 2-1: USB disconnect, device number 10 [ 221.086360][ T5780] usb 3-1: USB disconnect, device number 10 [ 221.457624][ T42] hfsplus: b-tree write err: -5, ino 25 [ 221.464216][ T42] hfsplus: b-tree write err: -5, ino 4 [ 221.470668][ T42] hfsplus: b-tree write err: -5, ino 2 [ 221.549556][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.575461][ T7901] loop1: detected capacity change from 0 to 512 [ 221.582340][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.646618][ T7899] loop0: detected capacity change from 0 to 1024 [ 221.668731][ T7901] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.639: iget: bad i_size value: 38620345925642 [ 221.752472][ T7901] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.639: couldn't read orphan inode 15 (err -117) [ 221.825131][ T7901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.209445][ T1043] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:5: bg 0: block 5: invalid block bitmap [ 222.229477][ T1043] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 236 with error 28 [ 222.246670][ T1043] EXT4-fs (loop1): This should not happen!! Data will be lost [ 222.246670][ T1043] [ 222.257054][ T1043] EXT4-fs (loop1): Total free blocks count 0 [ 222.267892][ T1043] EXT4-fs (loop1): Free/Dirty block details [ 222.276381][ T1043] EXT4-fs (loop1): free_blocks=0 [ 222.285916][ T1043] EXT4-fs (loop1): dirty_blocks=236 [ 222.292538][ T1043] EXT4-fs (loop1): Block reservation details [ 222.302257][ T1043] EXT4-fs (loop1): i_reserved_data_blocks=236 [ 222.325054][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.598811][ T1139] hfsplus: b-tree write err: -5, ino 25 [ 222.604750][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 222.625187][ T1139] hfsplus: b-tree write err: -5, ino 2 [ 224.895667][ T7937] loop0: detected capacity change from 0 to 512 [ 224.902326][ T5780] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 224.921152][ T7937] EXT4-fs: Ignoring removed i_version option [ 225.089744][ T7937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.127540][ T7937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.170811][ T7937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.186618][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 225.192260][ T7937] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.219930][ T5780] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 225.228237][ T5780] usb 3-1: config 179 has no interface number 0 [ 225.248618][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 225.315112][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 225.382667][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.417743][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 225.434214][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.448630][ T5780] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 225.498557][ T5780] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 225.533784][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.554989][ T7933] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.027124][ T5780] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 226.348338][ T7291] usb 3-1: USB disconnect, device number 11 [ 226.354447][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 226.354489][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 226.410201][ T7291] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 226.438879][ T5780] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 226.631167][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.650432][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.670811][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.719784][ T5780] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.750968][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.782110][ T5780] usb 2-1: config 0 descriptor?? [ 227.265195][ T5780] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 228.829913][ T5780] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 229.058162][ T7976] loop1: detected capacity change from 0 to 1024 [ 229.921360][ C0] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 230.509809][ T78] hfsplus: b-tree write err: -5, ino 25 [ 230.520317][ T78] hfsplus: b-tree write err: -5, ino 4 [ 230.525982][ T78] hfsplus: b-tree write err: -5, ino 2 [ 230.760407][ T6568] usb 2-1: USB disconnect, device number 11 [ 233.056795][ T8024] loop1: detected capacity change from 0 to 1024 [ 235.519832][ T5780] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 235.721354][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.758640][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.784510][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.824673][ T5780] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.854775][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.885469][ T5780] usb 2-1: config 0 descriptor?? [ 236.025013][ T8077] loop2: detected capacity change from 0 to 1024 [ 236.319191][ T5780] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 236.334577][ T5780] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 236.654963][ T8080] loop1: detected capacity change from 0 to 1024 [ 237.618889][ C0] plantronics 0003:047F:FFFF.0013: usb_submit_urb(ctrl) failed: -1 [ 237.629664][ T6568] usb 2-1: USB disconnect, device number 12 [ 238.133354][ T8110] loop2: detected capacity change from 0 to 2048 [ 238.214489][ T1139] hfsplus: b-tree write err: -5, ino 25 [ 238.235347][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 238.246100][ T1139] hfsplus: b-tree write err: -5, ino 2 [ 238.270267][ T8110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.342788][ T8110] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 238.344208][ T27] audit: type=1800 audit(1785084306.407:20): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.711" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 238.424602][ T8110] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4097 with max blocks 1 with error 28 [ 238.468733][ T8110] EXT4-fs (loop2): This should not happen!! Data will be lost [ 238.468733][ T8110] [ 238.488947][ T8110] EXT4-fs (loop2): Total free blocks count 0 [ 238.517002][ T8110] EXT4-fs (loop2): Free/Dirty block details [ 238.548755][ T8110] EXT4-fs (loop2): free_blocks=4096 [ 238.554676][ T8110] EXT4-fs (loop2): dirty_blocks=32 [ 238.579054][ T8110] EXT4-fs (loop2): Block reservation details [ 238.597428][ T8110] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 238.703561][ T78] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 241.622805][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 242.451975][ T8175] netlink: 'syz.3.723': attribute type 15 has an invalid length. [ 242.461198][ T8175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 243.108735][ T6568] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.290111][ T6568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.301354][ T6568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.311292][ T6568] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.324412][ T6568] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.333835][ T6568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.345056][ T6568] usb 3-1: config 0 descriptor?? [ 243.764195][ T6568] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 243.795164][ T6568] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 244.112543][ T8211] loop2: detected capacity change from 0 to 1024 [ 244.346709][ T8218] Invalid option length (1040122) for dns_resolver key [ 245.058838][ C0] plantronics 0003:047F:FFFF.0014: usb_submit_urb(ctrl) failed: -1 [ 245.633801][ T78] hfsplus: b-tree write err: -5, ino 25 [ 245.640052][ T78] hfsplus: b-tree write err: -5, ino 4 [ 245.645682][ T78] hfsplus: b-tree write err: -5, ino 2 [ 245.890545][ T5780] usb 3-1: USB disconnect, device number 12 [ 246.631662][ T8241] loop2: detected capacity change from 0 to 512 [ 246.674887][ T8241] EXT4-fs error (device loop2): __ext4_fill_super:5517: inode #2: comm syz.2.747: iget: checksum invalid [ 246.688349][ T8241] EXT4-fs (loop2): get root inode failed [ 246.694221][ T8241] EXT4-fs (loop2): mount failed [ 248.921828][ T7291] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 249.110634][ T7291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.142802][ T7291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.173193][ T7291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.230853][ T7291] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.279663][ T7291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.310106][ T7291] usb 3-1: config 0 descriptor?? [ 249.760230][ T7291] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 249.802424][ T7291] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 250.099236][ T8290] loop2: detected capacity change from 0 to 1024 [ 250.115395][ T8291] loop0: detected capacity change from 0 to 512 [ 250.188820][ T8291] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.762: Unimplemented hash flags: 0x0001 [ 250.274552][ T8291] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.762: Corrupt directory, running e2fsck is recommended [ 250.378299][ T8291] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 250.413708][ T8291] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.762: corrupted in-inode xattr: invalid ea_ino [ 250.478779][ T8291] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.762: couldn't read orphan inode 15 (err -117) [ 250.531243][ T8291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.614750][ T8291] EXT4-fs (loop0): shut down requested (2) [ 250.641520][ T8291] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.762: Unimplemented hash flags: 0x0001 [ 250.670395][ T8291] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.762: Corrupt directory, running e2fsck is recommended [ 250.796641][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.039523][ C0] plantronics 0003:047F:FFFF.0015: usb_submit_urb(ctrl) failed: -1 [ 251.668592][ T1139] hfsplus: b-tree write err: -5, ino 25 [ 251.674463][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 251.687288][ T1139] hfsplus: b-tree write err: -5, ino 2 [ 251.806576][ T8317] loop0: detected capacity change from 0 to 1024 [ 252.148632][ T9] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 252.370897][ T9] usb 3-1: device firmware changed [ 252.391724][ T5780] usb 3-1: USB disconnect, device number 13 [ 252.570859][ T5780] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 252.784606][ T5780] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.809823][ T5780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.852109][ T5780] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 252.888577][ T5780] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 252.933969][ T5780] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 253.010542][ T5780] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 253.048757][ T5780] usb 3-1: config 1 interface 1 has no altsetting 0 [ 253.082578][ T5780] usb 3-1: string descriptor 0 read error: -22 [ 253.089209][ T5780] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 253.098267][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.825428][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.857714][ T8342] loop1: detected capacity change from 0 to 512 [ 253.869139][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.937167][ T8340] loop0: detected capacity change from 0 to 1024 [ 253.946290][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.972103][ T8342] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.987296][ T5780] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 254.048494][ T8342] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.781: corrupted xattr block 33: invalid header [ 254.091972][ T5780] usb 3-1: USB disconnect, device number 14 [ 254.138596][ T8342] EXT4-fs (loop1): Remounting filesystem read-only [ 254.171231][ T8342] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 254.311066][ T6141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.889757][ T5780] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 255.102132][ T42] hfsplus: b-tree write err: -5, ino 25 [ 255.108031][ T42] hfsplus: b-tree write err: -5, ino 4 [ 255.114252][ T5780] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.131774][ T5780] usb 2-1: not running at top speed; connect to a high speed hub [ 255.143646][ T42] hfsplus: b-tree write err: -5, ino 2 [ 255.151450][ T5780] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 46588, setting to 1023 [ 255.189401][ T5780] usb 2-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 255.214646][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.242839][ T5780] usb 2-1: Product: syz [ 255.257492][ T5780] usb 2-1: Manufacturer: syz [ 255.282413][ T5780] usb 2-1: SerialNumber: syz [ 255.567036][ T5780] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 255.676079][ T5780] usb 2-1: USB disconnect, device number 13 [ 256.044484][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.052122][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475300][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 256.528806][ T5837] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.730567][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.762094][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.813658][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.860153][ T5837] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.889159][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.910351][ T5837] usb 2-1: config 0 descriptor?? [ 257.324635][ T5837] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 257.349377][ T5837] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 257.653869][ T8422] loop1: detected capacity change from 0 to 1024 [ 258.082042][ T8428] [ 258.084555][ T8428] ====================================================== [ 258.091611][ T8428] WARNING: possible circular locking dependency detected [ 258.098696][ T8428] syzkaller #0 Not tainted [ 258.103154][ T8428] ------------------------------------------------------ [ 258.110230][ T8428] syz.2.809/8428 is trying to acquire lock: [ 258.116167][ T8428] ffff88814e0580e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390 [ 258.125684][ T8428] [ 258.125684][ T8428] but task is already holding lock: [ 258.133097][ T8428] ffff8880200ceac8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 258.142753][ T8428] [ 258.142753][ T8428] which lock already depends on the new lock. [ 258.142753][ T8428] [ 258.153184][ T8428] [ 258.153184][ T8428] the existing dependency chain (in reverse order) is: [ 258.162234][ T8428] [ 258.162234][ T8428] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 258.170438][ T8428] __mutex_lock+0x135/0xc80 [ 258.175504][ T8428] bd_finish_claiming+0x229/0x3f0 [ 258.181082][ T8428] blkdev_get_by_dev+0x469/0x610 [ 258.186579][ T8428] bdev_open_by_dev+0x77/0x100 [ 258.191895][ T8428] setup_bdev_super+0x59/0x660 [ 258.197218][ T8428] mount_bdev+0x1ce/0x2c0 [ 258.202097][ T8428] legacy_get_tree+0xea/0x180 [ 258.207335][ T8428] vfs_get_tree+0x8c/0x280 [ 258.212309][ T8428] do_new_mount+0x24a/0xa40 [ 258.217367][ T8428] init_mount+0xde/0x130 [ 258.222208][ T8428] do_mount_root+0x97/0x230 [ 258.227265][ T8428] mount_root_generic+0x1a6/0x3e0 [ 258.232854][ T8428] prepare_namespace+0xc2/0x100 [ 258.238274][ T8428] kernel_init_freeable+0x41a/0x560 [ 258.244033][ T8428] kernel_init+0x1d/0x1c0 [ 258.248924][ T8428] ret_from_fork+0x48/0x80 [ 258.253928][ T8428] ret_from_fork_asm+0x11/0x20 [ 258.259249][ T8428] [ 258.259249][ T8428] -> #3 (bdev_lock){+.+.}-{3:3}: [ 258.266434][ T8428] __mutex_lock+0x135/0xc80 [ 258.271490][ T8428] bd_prepare_to_claim+0x1d9/0x4a0 [ 258.277154][ T8428] truncate_bdev_range+0x4e/0x260 [ 258.282735][ T8428] blkdev_fallocate+0x428/0x6a0 [ 258.288140][ T8428] vfs_fallocate+0x585/0x6f0 [ 258.293296][ T8428] do_madvise+0x166b/0x3790 [ 258.298380][ T8428] __x64_sys_madvise+0xa6/0xc0 [ 258.303717][ T8428] do_syscall_64+0x55/0xb0 [ 258.308687][ T8428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.315134][ T8428] [ 258.315134][ T8428] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 258.323517][ T8428] down_write+0x97/0x200 [ 258.328327][ T8428] set_blocksize+0x247/0x4b0 [ 258.333512][ T8428] sb_min_blocksize+0xbe/0x190 [ 258.338821][ T8428] ext4_fill_super+0x6e7/0x6870 [ 258.344223][ T8428] get_tree_bdev+0x3e5/0x520 [ 258.349396][ T8428] vfs_get_tree+0x8c/0x280 [ 258.354362][ T8428] do_new_mount+0x24a/0xa40 [ 258.359414][ T8428] init_mount+0xde/0x130 [ 258.364210][ T8428] do_mount_root+0x97/0x230 [ 258.369271][ T8428] mount_root_generic+0x1a6/0x3e0 [ 258.374851][ T8428] prepare_namespace+0xc2/0x100 [ 258.380256][ T8428] kernel_init_freeable+0x41a/0x560 [ 258.386015][ T8428] kernel_init+0x1d/0x1c0 [ 258.390905][ T8428] ret_from_fork+0x48/0x80 [ 258.395878][ T8428] ret_from_fork_asm+0x11/0x20 [ 258.401227][ T8428] [ 258.401227][ T8428] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 258.409936][ T8428] down_write+0x97/0x200 [ 258.414742][ T8428] set_blocksize+0x1ff/0x4b0 [ 258.419912][ T8428] sb_min_blocksize+0xbe/0x190 [ 258.425225][ T8428] ext4_fill_super+0x6e7/0x6870 [ 258.430628][ T8428] get_tree_bdev+0x3e5/0x520 [ 258.435772][ T8428] vfs_get_tree+0x8c/0x280 [ 258.440741][ T8428] do_new_mount+0x24a/0xa40 [ 258.445793][ T8428] init_mount+0xde/0x130 [ 258.450604][ T8428] do_mount_root+0x97/0x230 [ 258.455660][ T8428] mount_root_generic+0x1a6/0x3e0 [ 258.461233][ T8428] prepare_namespace+0xc2/0x100 [ 258.466644][ T8428] kernel_init_freeable+0x41a/0x560 [ 258.472397][ T8428] kernel_init+0x1d/0x1c0 [ 258.477284][ T8428] ret_from_fork+0x48/0x80 [ 258.482251][ T8428] ret_from_fork_asm+0x11/0x20 [ 258.487571][ T8428] [ 258.487571][ T8428] -> #0 (&type->s_umount_key#31){++++}-{3:3}: [ 258.495885][ T8428] __lock_acquire+0x37ef/0x7d80 [ 258.501293][ T8428] lock_acquire+0x19e/0x420 [ 258.506344][ T8428] down_read+0x46/0x2e0 [ 258.511053][ T8428] super_lock+0x189/0x390 [ 258.515933][ T8428] fs_bdev_mark_dead+0xad/0x1f0 [ 258.521338][ T8428] bdev_mark_dead+0x83/0x1a0 [ 258.526502][ T8428] blk_report_disk_dead+0x21c/0x3e0 [ 258.532267][ T8428] del_gendisk+0x2cb/0x8f0 [ 258.537241][ T8428] sd_remove+0x8d/0x100 [ 258.541946][ T8428] device_release_driver_internal+0x458/0x6f0 [ 258.548582][ T8428] bus_remove_device+0x43b/0x520 [ 258.554077][ T8428] device_del+0x51f/0x910 [ 258.558993][ T8428] __scsi_remove_device+0x1a2/0x390 [ 258.564751][ T8428] scsi_forget_host+0xd0/0x110 [ 258.570074][ T8428] scsi_remove_host+0x1b3/0x730 [ 258.575482][ T8428] virtscsi_remove+0x130/0x1a0 [ 258.580807][ T8428] virtio_dev_remove+0x96/0x1a0 [ 258.586211][ T8428] device_release_driver_internal+0x408/0x6f0 [ 258.592866][ T8428] bus_remove_device+0x43b/0x520 [ 258.598362][ T8428] device_del+0x51f/0x910 [ 258.603250][ T8428] device_unregister+0x20/0xc0 [ 258.608560][ T8428] unregister_virtio_device+0x37/0x60 [ 258.614489][ T8428] virtio_pci_remove+0x7f/0xf0 [ 258.619810][ T8428] pci_device_remove+0x97/0x230 [ 258.625211][ T8428] device_release_driver_internal+0x408/0x6f0 [ 258.631850][ T8428] unbind_store+0x1a1/0x1d0 [ 258.636915][ T8428] kernfs_fop_write_iter+0x3a4/0x520 [ 258.642763][ T8428] vfs_write+0x474/0x9a0 [ 258.647561][ T8428] ksys_write+0x151/0x260 [ 258.652452][ T8428] do_syscall_64+0x55/0xb0 [ 258.657423][ T8428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.663880][ T8428] [ 258.663880][ T8428] other info that might help us debug this: [ 258.663880][ T8428] [ 258.674145][ T8428] Chain exists of: [ 258.674145][ T8428] &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock [ 258.674145][ T8428] [ 258.687841][ T8428] Possible unsafe locking scenario: [ 258.687841][ T8428] [ 258.695310][ T8428] CPU0 CPU1 [ 258.700693][ T8428] ---- ---- [ 258.706082][ T8428] lock(&bdev->bd_holder_lock); [ 258.711046][ T8428] lock(bdev_lock); [ 258.717492][ T8428] lock(&bdev->bd_holder_lock); [ 258.724982][ T8428] rlock(&type->s_umount_key#31); [ 258.730134][ T8428] [ 258.730134][ T8428] *** DEADLOCK *** [ 258.730134][ T8428] [ 258.738299][ T8428] 8 locks held by syz.2.809/8428: [ 258.743432][ T8428] #0: ffff88806bd6f248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.752746][ T8428] #1: ffff88807edd4418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 258.761673][ T8428] #2: ffff88802f09bc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 258.771467][ T8428] #3: ffff88814767a1f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 258.782222][ T8428] #4: ffff888145aee1b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 258.792805][ T8428] #5: ffff888141fa80e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 258.802771][ T8428] #6: ffff888022ab23b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 258.813346][ T8428] #7: ffff8880200ceac8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 258.823395][ T8428] [ 258.823395][ T8428] stack backtrace: [ 258.829346][ T8428] CPU: 0 PID: 8428 Comm: syz.2.809 Not tainted syzkaller #0 [ 258.836654][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.846749][ T8428] Call Trace: [ 258.850056][ T8428] [ 258.853019][ T8428] dump_stack_lvl+0x18c/0x250 [ 258.857738][ T8428] ? load_image+0x420/0x420 [ 258.862288][ T8428] ? show_regs_print_info+0x20/0x20 [ 258.867529][ T8428] ? print_circular_bug+0x12b/0x1a0 [ 258.872767][ T8428] check_noncircular+0x2fc/0x400 [ 258.877747][ T8428] ? print_deadlock_bug+0x5d0/0x5d0 [ 258.882981][ T8428] ? lockdep_lock+0xf5/0x230 [ 258.887603][ T8428] ? _find_first_zero_bit+0xd6/0x100 [ 258.892932][ T8428] __lock_acquire+0x37ef/0x7d80 [ 258.897832][ T8428] ? __lock_acquire+0x1262/0x7d80 [ 258.902893][ T8428] ? verify_lock_unused+0x140/0x140 [ 258.908129][ T8428] ? verify_lock_unused+0x140/0x140 [ 258.913367][ T8428] ? find_lock_entries+0x120/0x1020 [ 258.918601][ T8428] lock_acquire+0x19e/0x420 [ 258.923140][ T8428] ? super_lock+0x189/0x390 [ 258.927675][ T8428] ? __might_sleep+0xe0/0xe0 [ 258.932304][ T8428] ? read_lock_is_recursive+0x20/0x20 [ 258.937707][ T8428] ? __mutex_trylock_common+0x160/0x270 [ 258.943289][ T8428] ? trace_raw_output_contention_end+0xd0/0xd0 [ 258.949506][ T8428] ? mapping_try_invalidate+0x4bf/0x570 [ 258.955086][ T8428] down_read+0x46/0x2e0 [ 258.959286][ T8428] ? super_lock+0x189/0x390 [ 258.963821][ T8428] super_lock+0x189/0x390 [ 258.968180][ T8428] ? xa_find_after+0xaf/0x430 [ 258.972895][ T8428] ? user_get_super+0x180/0x180 [ 258.977775][ T8428] ? mutex_lock_nested+0x20/0x20 [ 258.982749][ T8428] fs_bdev_mark_dead+0xad/0x1f0 [ 258.987664][ T8428] ? super_s_dev_set+0xa0/0xa0 [ 258.992456][ T8428] bdev_mark_dead+0x83/0x1a0 [ 258.997073][ T8428] ? blk_report_disk_dead+0x88/0x3e0 [ 259.002388][ T8428] blk_report_disk_dead+0x21c/0x3e0 [ 259.007624][ T8428] ? __blk_mark_disk_dead+0x120/0x120 [ 259.013031][ T8428] ? xa_find_after+0xaf/0x430 [ 259.017742][ T8428] del_gendisk+0x2cb/0x8f0 [ 259.022202][ T8428] ? blk_report_disk_dead+0x3e0/0x3e0 [ 259.027611][ T8428] ? __pm_runtime_resume+0x129/0x170 [ 259.032934][ T8428] sd_remove+0x8d/0x100 [ 259.037114][ T8428] ? sd_probe+0x11c0/0x11c0 [ 259.041643][ T8428] device_release_driver_internal+0x458/0x6f0 [ 259.047756][ T8428] bus_remove_device+0x43b/0x520 [ 259.052731][ T8428] ? bus_probe_device+0x260/0x260 [ 259.057789][ T8428] ? up_write+0x1be/0x410 [ 259.062151][ T8428] ? kernfs_remove_by_name_ns+0x117/0x150 [ 259.067945][ T8428] device_del+0x51f/0x910 [ 259.072316][ T8428] ? kill_device+0x160/0x160 [ 259.076937][ T8428] ? kobject_put+0x421/0x450 [ 259.081561][ T8428] __scsi_remove_device+0x1a2/0x390 [ 259.086811][ T8428] scsi_forget_host+0xd0/0x110 [ 259.091617][ T8428] scsi_remove_host+0x1b3/0x730 [ 259.096514][ T8428] virtscsi_remove+0x130/0x1a0 [ 259.101329][ T8428] virtio_dev_remove+0x96/0x1a0 [ 259.106296][ T8428] ? virtio_dev_probe+0xae0/0xae0 [ 259.111357][ T8428] device_release_driver_internal+0x408/0x6f0 [ 259.117466][ T8428] bus_remove_device+0x43b/0x520 [ 259.122446][ T8428] ? bus_probe_device+0x260/0x260 [ 259.127507][ T8428] ? up_write+0x1be/0x410 [ 259.131865][ T8428] ? kernfs_remove_by_name_ns+0x117/0x150 [ 259.137621][ T8428] device_del+0x51f/0x910 [ 259.141987][ T8428] ? kill_device+0x160/0x160 [ 259.146617][ T8428] ? pci_device_is_present+0x175/0x240 [ 259.152119][ T8428] ? pci_real_dma_dev+0x20/0x20 [ 259.157001][ T8428] ? _raw_spin_lock_irq+0xbb/0xf0 [ 259.162068][ T8428] device_unregister+0x20/0xc0 [ 259.166901][ T8428] unregister_virtio_device+0x37/0x60 [ 259.172312][ T8428] virtio_pci_remove+0x7f/0xf0 [ 259.177122][ T8428] pci_device_remove+0x97/0x230 [ 259.182015][ T8428] ? pci_device_probe+0x8d0/0x8d0 [ 259.187073][ T8428] device_release_driver_internal+0x408/0x6f0 [ 259.193192][ T8428] unbind_store+0x1a1/0x1d0 [ 259.197739][ T8428] ? sysfs_kf_read+0x360/0x360 [ 259.202879][ T8428] kernfs_fop_write_iter+0x3a4/0x520 [ 259.208210][ T8428] vfs_write+0x474/0x9a0 [ 259.212495][ T8428] ? file_end_write+0x250/0x250 [ 259.217482][ T8428] ? __fget_files+0x3fc/0x460 [ 259.222284][ T8428] ? __fdget_pos+0x2a3/0x330 [ 259.226905][ T8428] ? ksys_write+0x74/0x260 [ 259.231360][ T8428] ksys_write+0x151/0x260 [ 259.235731][ T8428] ? __ia32_sys_read+0x90/0x90 [ 259.240555][ T8428] ? lockdep_hardirqs_on+0x98/0x150 [ 259.245793][ T8428] do_syscall_64+0x55/0xb0 [ 259.250242][ T8428] ? clear_bhb_loop+0x40/0x90 [ 259.254956][ T8428] ? clear_bhb_loop+0x40/0x90 [ 259.259670][ T8428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.265606][ T8428] RIP: 0033:0x7f75cb19de99 [ 259.270058][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.289702][ T8428] RSP: 002b:00007f75cbfae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.298155][ T8428] RAX: ffffffffffffffda RBX: 00007f75cb425fa0 RCX: 00007f75cb19de99 [ 259.306244][ T8428] RDX: 000000000000000d RSI: 0000200000000140 RDI: 0000000000000003 [ 259.314242][ T8428] RBP: 00007f75cb233eaf R08: 0000000000000000 R09: 0000000000000000 [ 259.322242][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.330267][ T8428] R13: 00007f75cb426038 R14: 00007f75cb425fa0 R15: 00007ffcbb9db338 [ 259.338281][ T8428] [ 259.418355][ T55] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 259.430983][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 94246) [ 259.442629][ T55] Buffer I/O error on device sda1, logical block 94208 [ 259.449625][ T55] device offline error, dev sda, sector 762150 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 259.460238][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95268) [ 259.471794][ T55] Buffer I/O error on device sda1, logical block 95230 [ 259.478753][ T55] Buffer I/O error on device sda1, logical block 95231 [ 259.485721][ T55] device offline error, dev sda, sector 766174 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 259.496238][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95771) [ 259.507809][ T55] Buffer I/O error on device sda1, logical block 95733 [ 259.514747][ T55] Buffer I/O error on device sda1, logical block 95734 [ 259.521724][ T55] Buffer I/O error on device sda1, logical block 95735 [ 259.528670][ T55] Buffer I/O error on device sda1, logical block 95736 [ 259.535584][ T55] Buffer I/O error on device sda1, logical block 95737 [ 259.542532][ T55] Buffer I/O error on device sda1, logical block 95738 [ 259.549463][ T55] Buffer I/O error on device sda1, logical block 95739 [ 259.556434][ T55] device offline error, dev sda, sector 794934 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 259.566967][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2034 starting block 99366) [ 259.578575][ T55] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 259.589088][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 102438) [ 259.592280][ T2946] device offline error, dev sda, sector 745766 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 259.611243][ T55] device offline error, dev sda, sector 827686 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 259.611278][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103460) [ 259.633470][ T55] device offline error, dev sda, sector 831734 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 259.643991][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103966) [ 259.655744][ T55] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 259.666271][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 92198) [ 259.678931][ T2946] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93220) [ 259.690587][ T2946] device offline error, dev sda, sector 749758 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 259.701325][ T2946] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93719) [ 259.713904][ T2946] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2032, error -5) [ 259.739081][ T5101] Aborting journal on device sda1-8. [ 259.744707][ T55] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 259.749419][ T8426] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.2.809: Detected aborted journal [ 259.758190][ T5101] JBD2: I/O error when updating journal superblock for sda1-8. [ 259.810060][ T1096] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 259.818356][ T8426] EXT4-fs (sda1): I/O error while writing superblock [ 259.837777][ T8426] EXT4-fs (sda1): Remounting filesystem read-only [ 259.929769][ T8428] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 260.348798][ C0] plantronics 0003:047F:FFFF.0016: usb_submit_urb(ctrl) failed: -1 [ 260.370306][ T5780] usb 2-1: USB disconnect, device number 14 [ 260.382558][ T11] hfsplus: b-tree write err: -5, ino 25 [ 260.388383][ T11] hfsplus: b-tree write err: -5, ino 4 [ 260.394859][ T11] hfsplus: b-tree write err: -5, ino 2