last executing test programs: 7.346502935s ago: executing program 5 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 6.745625864s ago: executing program 5 (id=1816): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, 0x0, 0x45}, 0x0) 6.594329037s ago: executing program 5 (id=1817): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x4, 0x5b, {0x5b, 0x31, "bdde47eccc4602934195a901b419fad725e624828e9f921da930ad78b3b092a4851e1b9916cbe37f037b3e6bd92490b5ad8870df08faa870f8f041c89b4d5c62eaacdd871c0e78bd3ef0e630ffc82b72a20c21dec577983322"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.321038676s ago: executing program 0 (id=1830): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 5.038523781s ago: executing program 0 (id=1833): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34343b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) 4.254014166s ago: executing program 5 (id=1838): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, r1, 0x1000000}}, 0x18) 3.768901681s ago: executing program 5 (id=1843): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.564687676s ago: executing program 4 (id=1846): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.347227978s ago: executing program 0 (id=1850): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = epoll_create(0xe7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) 3.22254776s ago: executing program 2 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x40) 3.158250441s ago: executing program 4 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400000000000000000200000018000480140001800a000100696e6e657200000004000d800900010073797a30000000000900020073797a3200000000050007"], 0x74}}, 0x4048010) 3.039439208s ago: executing program 0 (id=1855): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014880, &(0x7f0000000700)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="a240939593dcf5d96f4ae9a6a307fed9139e08b16fa6096b876c40f3645fe4793498f349e30de690cc6f68a0bd843e5fc9cd54566eb36c05efba9e7e11805a000853610e8dc7c7a9ae20", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES32], 0xff, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80087601, 0x0) 2.878481951s ago: executing program 4 (id=1857): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1014acc, &(0x7f0000001280)=ANY=[@ANYRES64=0x0], 0xfc, 0x257, &(0x7f0000000740)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 2.826591955s ago: executing program 2 (id=1858): io_setup(0x2, &(0x7f0000000340)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.555871947s ago: executing program 3 (id=1861): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x109, 0x0, 0x0, {0x1c}, [@typed={0x7, 0x118, 0x0, 0x0, @str='&@\x00'}]}, 0x1c}}, 0x40000) 2.461830533s ago: executing program 4 (id=1862): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x4000) 2.43649312s ago: executing program 2 (id=1863): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x98}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={0x0, r0}, 0x18) 2.340797361s ago: executing program 1 (id=1864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 2.339906466s ago: executing program 5 (id=1865): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) getdents(r0, 0x0, 0x58) 2.336305938s ago: executing program 0 (id=1866): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x80, 0x6, 0xf00, 0x8, 0x0, 0x0, 0x0}) 2.183595445s ago: executing program 3 (id=1867): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.010759046s ago: executing program 2 (id=1868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 1.887426787s ago: executing program 1 (id=1869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) 1.886752842s ago: executing program 0 (id=1870): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x1903, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x7, {0x7, 0x7, "6315d08acf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.780645221s ago: executing program 2 (id=1871): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2018402, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp932,iocharset=iso8859-2,integrity,errors=remount-ro,nodiscard,grpquota,grpquota\x00noquota,noquota,resize=0xfffffffuid=', @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="8e81284fa8cbb5301d45eaade5bddc78afdb4d1e4411a3137afcac52e080525950b494329c0421253dfea9dddb1ebb4844a59c1336e7d0d75503c302b86e955c86fa33baa1d56e648f56e713b572f275e9519940124ff188b4629ca29c890285ccf7cda99acd827d81a75ede5d7f684882484e747ad80b213b27b0fa2ca3695fb82264164625c37be9bd3a7e2eb9000000000000000000"], 0xfe, 0x6194, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.62468124s ago: executing program 1 (id=1872): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002a00)="ca644ae3261ff69d80ef6db79670fbfad8fbae9e7ace4179603336abdd893a35b78e3bb15d84fc23ef1b0adf7d5bf91b62c8750cc73aeadd3ac5b9e92e9eead924d086e6f4d35b9dc3dbdadd8aa741dfe7e8dd67b0091babf3b0ea2a323153c087c01a590328508a681614b5fbf3b715f32e2d1cd7362c32c193c9a5d18f62370752f7bf6ea5712fc11ec15e38c1fd059e187a71ab7f77373c96d5b3de020ab1234654478c3221b6bfbbf3e7f106646f7ed399fdb171055fa7cc6fb73114268c778ac537b97965cd28eb4d72dd0a0a92cbe0f6854e267eb4e0e6908487b53ddfe3dc966ce3cec276491a93cb63670e0733d9c82d01de50ee3a5545ae9d84ba204decc9b0e953192ecd55ef1ea42fdeed37998a0219fa75e6dd4e076882af39bd0a91edeafa9814bdbbdda29c113c26af622dc63f2aea176bc19c6a69575ba74ef2edb482a089383c2d2d2e17bd244c7eef94f90020280e3e94d874cf71d7dc05f0cc9001043ad6cc1a72fe202f223dba6178e7acfc10ab1dab07ae22bf9e28ca0c7a7a089a2de8ae7b5e987eb143771ccfb65d5deaf421b9c32b86d131848079a7f2dea82cb9c8dd49ff276a7379af2f483910846fad2fa559b5301315d91d18e6a6516798de05a359a7743ef40bba1a469393b4d85307053b8e9a23d06cbdc2bdf46ed5db2d30d8e5ca30a78b3a396a99c9075a624161f508cd0399a49c35b0a9c0e72a0a25f92711a1233993d69eab9bb8989d9935b7c7c3e46ddbfbbff5c01951eec602457a87c0a647e8671577479125f172ccb95c1e80eda4d327d98caebd9452fa4e716ec609f5255f75f310a04c0e907c1ffbb6f63dafdd78a356d817e33978202016c58f2d018f0a406dd1b4009e6a0ad046b437ff501ddbaa6958f4489c294530f8339b39b5e72c7db9b98b9281874143850a23733548c61d9c1d9bed559c52304691e4949e0811797364686285598eb14865bb8d3329599cc63936ef629214acc03797bc6e6b2c07ccee114714c3299ec510c736224d45cd5742c16c3e53025a4a83c923fdecd3e4ce715cda37661a5453656d6fba7e0fa996ec5cb0ee10948c84f820b1fcb5f5a0080cb38342bd999b1085a1f48158544eb963153560f05216fe03e0b311574be50551c0a10fd73ded80fa5b6d512acf9ea5f55b242791d4408f30a53914b9073a36e0bf8886c153d99e5fa81b4ea3c2e430135d8c15be7ad03929844b2cce81a7824410b06d3c911b96fda2dd356a12ba792adc46ee8965a2e5036f15a2ed2f17d019ba220fdc542f4864f538a31f3e872507ac78470428cb7cc13850a14c05ea6a1a0c30e656bd7a3f8425bd096d7ae855795434f2875ec98814802d8b54597bd9809bafd70f8f2458dee39e6a912bca3096fb8bc11d5e5787738b25cea1ff8944741178ca9c3df67b0447f5aacf1e576547194fb9e092d41d30ae6c9625f18858c53495c1728041bc2a52d6e20fcacebe21f35ad5aa5577a1b3de4968bf4d5f08d3a9a9c815c8a51e043f6f4d3428b7a3c80fb510e4b26a1e59e0269ef8b609d70f8f252b82f416a18438733dae5da46fe689806fb0cc79d3c6714a3f88379882dbae1625b257af8701ed69b907c9419d435d629f343ed7961dbe49241dd22832c0bc023760561eff03845db9751408a37fd64e750a2ac59e0e6deb5d03953197c553ba09c323238272fee72d1aef5cc381fe46a80777d33fceb2274d14ade7ba0a79f39ffc58a57dc014d04b67fec2d3cec937d91d408758f4179986960fe483bb297d120361e362aae6c06d95be9ba6e06167151ccd83886099e5fdbb4892bbcea99ea94891db39d8bee196efc1b8c28fb59728d51f417953e6c0420e1796bdcf68071eff481b8769ea0196ae8da4a2ca40e8fcca6f1228e8283c5c2019f628ffa3461b2a3806cf8bc89ba5ada24cf633c07d36c00f790ec2363428324e66b0236acc3d094cdcff74baf2a293d6f0fb97100f0678c856b368b4fec004edcf935ee46d39dc21bfd1f18b0f73f3bb771d8ee4e3940ca1e54ea53c9816c1af4be963075c10c9e4c924462abc8e1fe7c545f552687983935c4d06be2bb5afc171a1d4316b823a220dd1e2abe7915fcf27129650687d049f3da8edd5b6be7b7fcfdc8ef1d9142e4c88eb4e2cbbb9c41e34eb303470813acfdda59afb870c738028b6b21048bed2960c08ad1da25278a39e0b10039b2607111aefba064a36f06b9b395d3f8da6b7fa78205cf251526dd8472db95a2a247d56cf8e138eb8a39637d118b4430a8439c0eb1770ddd20c7a787f3e414e5c27aefe56367ef85ec09736fa122bc981efb701cba360991844f2010d87a37e40769380ee90debd23b2eff3dfc4a540d925ce1de75bf2d70133e9bc9098a213f452ec464019b11829082afd9387acb310668922436a87187a4773651f3172e3770ddc42b78f95916944c5b869a1f40b771bd1321b5d3a6f77337ff05eb5fe36d0a0c111b82a8f2bcf05638701e7ce9988c9d3239e412d4a8f2bd384234eb2dd66e33ff3ea96593989be4ef6b5fa3feb3d34a45e5150a48128a2fcd043a9b4f9b94f35a6d6dabbd56ab600605da88403a2987eac8eda038b52b135b33f6a029519aae73e526c37f678e861515c0356366d2d8660b87a74d4fb4d6132deb2791c582751bd484cb055db8e540d334de8e0f7a4b88a382ef4608f4e824ff88ac8c3f1560ff87b1f8921db275b89bedcf0ab9c3fbeae08577ae054d23f9496a9048e3da395e146cf832f33224ce0e5903be92f1f8bf216cbe14cbdd6aa76f4c74729ead075023106a0bc40ac96d916439c3f218059b9422b4a8833fd1bb6b401b20411f0e428e6831139307c204f84bc996c70adc280e2aab59f9fc3c1dba58fccb22d946ab872447ec66150db1e6d86560eee2fc7081831c115c8a9a6143baa4ca864c0c801ab570ecf37d8636e7117db207bf3714277b885a366ca852772f4f9ed80a737bc557bafba49ce30048fcd5bdba947f76f2aa199f3af3d06963d8c37c7b7a7fd63065375fce06fce89e991c3c1da2bbe5dc6f66a52a85331f31843518307ffb6d279f2353e967fb91d8855c9556aa8518718d711da7349ffa3b677361ad01a968e3d1ce53283ea0911ac4aed0f12776481f8b7ad563bae9acc1e27de9810de1de12994c4400c540ca5891f90c819a1d240a592a0b90133ada361bac1dcb5b501484920e96e3a23f1fa7a5a428b29e00ecb83d95b136c1938b1e826d08ebe5df4029993c3dfa7c9c055635143dc18b6b7ae22fa5cf80dd5b6fb4fe06ace1bca727f97aec22b5a8e620fb530b5c4c336f3e35ee6c78603b7c9c223704eacc13c042a6d07e355a9ca51870f418e81b653cbd6fd83c63ee51c52545341aac2bfe93ae20683db22b2fd33bb907d7874fb5c054eb4aad59e9edd3f11339e8a7c110fd1943882cbd509a9b38f9b9c47f31c86ac44ad7d7d88f0cb32f8888beae3ff51e6a4f450ce8ac2d59a5ca60caea448567a4f08b2f0e180e41de8c3266645366435adcda80c88e490bbce1a0607d63dc96856101ef5538e8fa4053051e3811f28994d5f2fb37ce05dbc6c7f51655e1c74640a9fc4003e407ab787a47ee87f2fbfc1549b06098e36b9fa1d41231000ad49500bce7bdf80b55240b41caa7b2ead8db9e8b5c3b79da4a3aecd3eec1f8c4e7584b4aae236f628764416116734c7b4a75ed967701ff70224074d7fbddcbe5983bde6d522a682186ba6f617dbf3bc16210c3d1a7b49278fc13abfdaaa5098f286f15313c798a3cc58116f66dc25dd35c35db1a6c27a0c77024cb0290ebf05708352494dbd26329f8fd02684948ac79b534201c05c38c75621d0c1c6e466942af6c011458d437dc7c96bd8e8ddd3654b45ba80a27eafd1514e6e067986e84071f4c2fca438fbb4dc1683d3116b8a0ed5f39ce249455d8bd348ac2d5af9a64d2970b0b125710a27c5e00072e4b66c3678b202a12685f783294a8b64d1918dfbf79440ba0c485c453cd085184420bc20dfcb2b79a092bbecd5c2f8c9d4ac7395cf7fce5e7a557db8d15246108700c9d44150bdced59450711a1970bf7153f35ea7c273e1b2c2848b113bd5ef74504b9b1b4e85577a98014e4bd9c009485bb80b72cdd02e37777457fc45bc8a9f45786c6364058901d6f2f3312f67c79f1ca0e91328a7bc976d497dc440c5702078ba804274adbf503013cffdf117e0671215411b662a4085869b1de3a875230271a6267d65d8c69420b0f57bfb85fc556152cfc251946e2b771c4eae9060a1a40303f9504289fa7e700d055e90a61f70585fa69482384960c6ce4d57054035b845dca69e1014a402f3fbcdfd603ca67f925ab48cf3010b531667786846324e8b38d7c4602c410e6318d141d5f89fa01f4cf6f9ea48223b9795e64a7b7ac8281bb72e92be68cd2e8e2ed15d158dbfc662ed5ee548a55a5d92d5d290ebd2a1153d5ad3231d69170ee8bb51ba450b5817138451f9e56c5953d25919b7a18c8edcb3c48966992cb685f2ef1519faab12fa76bed1c6e1e819b06b37cd1b697646792fd4e3549072020e2db6644ba1cc8e442dfd361403005b82e2f7b32c3aa3e82fbc5ace2c6228a444bccead2adf1d6850cd530999ac6fb8ec8e2cc47c4d8d6aebd87a3e879220023a31a5849350fb418aaf6309737da38cd6b8a5a2ad952eb62ab3fa20fafad784f8a5988d256e27c706191fda079d5f215a324571c3966938258353f8a6fa4674a38902e7b8c6d64dabd5747849b92328e5465fcdad5759cbb00baa5bcced862b6b81f520b99228a82322c20458036e1af29f9855973e1600a37cce23d7974a4780e28959fbdb763672a7cb55cab75d23235745008e8bca249d37d0a430c510e5f9e58e46ef7a99566289275958e5678a30da6fa7e66b41bb9afb3f9213169fb6ee45bba8e735da35b7cd23328a160453b5d1b141768676bc0295799852628957d51be446ff05faac318a756641f93257dbbc3025aa709ba8079546bf6dfeb2f8b9c38120f5abb5540a08796351b039dc99a77a2249d4166b62026ae44be82a63dd07cc749f9eac0f1d3dc93b3c612418097e41b671cde34bca77c045576c7526b67ae23becbe1b658d86d622baf78eb59f1ba65096482777f1aed86ec98b431da65554652b3dfd793c096a50f04e25cf8b324f4278bed35d6068ff68a36817131ce69b6552f77abc8035d782b0cb99569a964a02c1420dc5c2aa7f90b6f6f86b873b2886d6862a6a43ea2eca8e78e74b7d8eccd9c26943c27119b7b917c1b395185eaccdbd742a071d875a25dbb971fd49c4184c93b9d6ef7311a04650f32e133c71226c8781df8dd086e6737ebebbdc2a2f349ce88b93d760f513dbff6dafb849cbd149205583961ec6670ca156176364f1909d896cf12e84dfebcef4c3b3480a500cc6c315625b985f397ee74c43ad46d4baf8af4387dbcb780cf69e640569d4d82c6b958f3633191d8159f2c72562b4e33e5f897929073e08c45eb5dafac8e6459f3aa19189b12755b74ceb6d181ad64cf801fa5af3282d372a654bc8d31d7524c074b09f86da7780430605028a724562575efbbb30a040d32d7d7df63f3ddf9d7d02c8988fb99a3623c84ad91fdeb2e609d6de3052db76ee45fbb715a353cd72af856bea1166e4331e0fbd85dca535b1b4430bd374ce84ecaa31bd2600f1e0d31e13270af049963f676bfdad17516a8172b0f851a57dc5a02b16388ea4b4c2b976231782e1f560874e6cc166f8e092b972b8b562111d915e597a23410d06a9209a78d263a2a9fba71276e5f917681abc92824c3ad264f012f88ce070a319c82b1bbafdaaf0b86640df4eefd1bbe12505fed6db31373ec95fdcef57a5bfdf253603340b3ece340fb76c160feeb793706067e80eb7fcebb4913a033415d0f521a2c198a0a7691166f77366c66fe0dc9cb6db314294eb505237c69b737b2841ed289e431d1721bd2616f6e8740bacdf5885ee134bf010816773a4ed548df7c534064c3413dbaa8ee5e13e364adce42f851db527443f4872cfe39bc178d499f98bd116073b8690f4035b6e5afd567c9a872ad5e05635cfb2f416cf1d62f5199f8d9308493722bce967f36aba8f20da22428e92388d5a44520f1741652e74fc113f3f86302ce06a2fa5eb843433953e56cbc16c2d31a85315ba9ced626a130c53da3c2819042cc8a2ead685764b9b4dce49fdc80345918250ad7a1cdebc9f8904acf64e1e2c5fc85504306c7e466f0924d0b6d38ca1fd6d5313fb8661dac237c2e37d262bfe7012954bee0f214f78c317cadc9b70db2783358a72ed11caccd8b4b4c92271c079c8046dd491b86298dddd242c8727bd461e5fc6eb75abc36fd49224f7c090a5d5a237d71fc08f5a6ca7ce112c07468f0703d7c50f4689fe1dfa5a54459266c6ca19c0f212eaa1c40347df5ce22f12c36b27d0c831d8ec513d945b38052d9e78e5ee6ae917de1af681d4cb86966ae67a89fe33d7adee22cf3373a794f114fe229ec128862e26feeb0a1932c2f3829203a0aeee1b501d415a33861e2ae9d4943721f2e9552207ea0f826477d54ced206aa9aa8d4316edbe05f0501087bf20e0852787e2d8fce6dd45b57f1cbd1faf04813d7d59b45eab90bf5376b2446a2ea5f043a669fa25726b5af12b517e75ff7365d0d503a7447aef92f3928c42e596981bcbe0e97669c1dde386adfdb9b2a0fea2f7b791634ac4e95e22770313276192668c7a2e173201849a7b0244f38cdfce47a1c156c81123f5a52b61c971d2c5a7edf91969ce38750df9def997102f77d5fab11a6cf7b9ad5d1cec443407fa264d29e4294de7be194df7fd1cece12719788e886756dd8e0532a7ee4708d1d2cb7dc12417e31416e339feb463f8c44a18583d6b11900c21f09ed38403a503d9fbbe199395b2498aab1a98d7ce0e49ffc92bc907d4e600253f69e02921f10add96244327931281aed07ddee012929e1af7ad3aca7996fa1a61145142c6be5b444fdbe4eb6d22453892df25fda94173b198604e43596106e887dc7e6745058ea68e03a02e73c0d92cbac68be0c2dc890ae9dc2a9d1c8e6392487d7c6c8b59f408d1cc5d6a4dbcc2d0c80a58674648bae6b40290d4df8d2a9d94db47d23de6c11ab7de3f5a360c44d833736d68422ba60c43a0cf712ea4dcbb4a40d9d193ad6032a0374ec3b68740897110f6fac968608e22e4934843ef395d6addbccb9041e3a1b7be4d30c03e769d1d5f9e4fbc5935d9185b85c5fbddf25aa0e156f90eb73e56b0df22572b04a3f7c3b4a11a635f8833ebbe2940645de32276fc572c320713769d4210b871befdde3f36ebb5f5a78874c310ad415b6abf70d19fb05187a784b3181a4cfcf300c520184c1e6b7489b2ded6537b93d98872627aed13ac1cd32b4845d082402dae830dd2975ee3de1a527bc7f9ad4abcb7d6c7ebc0b6dbf0499baaea6f03b180f58a4a708d32fc884979a30d520adac4021a6e60875dcf198ab3e88ca446363ddab39c08eecd7223bb5cc18e1dae145dde50bfc8c56600f585113da55f6caf5aa50e9d982dc787cf4c600030432f05551ad20472cf326efedd90c12188700d775a223ae10558bf1083cec370fe600f87894f9a92c38bff192d2bfa8106549f2fc915686899c04f901fe6b52bab913cc323bd5055dfa0e64f6b5aae8014a2538d4c1cfd706dfa7418142e2dee2ccb770e4f4c0211e62432bdc77954f28434c5246f81a3a9cf53134a4cf19d0b55865d8c0021b5bfecd122107763ad9cefe7104523131d7d12c4e2ba65d3f5730fd756262dd4c377b3c180d5e9f7e8a00b21415c3d66a644c9a0c86e8f64935725397d487a0feb5ec2cff9bbe48dc87ef23d78fc0a3bac4d868407108c3c4b48dae7a09843c23a7987551278b262ebc52e4b22d5370b0b8553a528dc7e90fa19cffd893ebe38561b159a52e1c35531cd8eae7cc218ea9a0fca3779b7b8c344c4b15d509ba1f7b61629d795a6d19e86a1af59971bcc61820d002cce2bbf396f9b507783430c8560a9426b53fdf15287ec7a6e47c403ac2f614cda6a4eaffa7c93135de642c6a987da2c398bb6fcb6e5ec3c5d8cb685ec6a62af36e18bf2a092af784a2fa217ca2184ffc962ca88a3a17d2dadb1622ff7e56a6106358299aa4e6cc62f4b6e2945891ad43ef7e9cedb713884c84814240b13fa6268b6275d5ebaf84e4c7cac1cae3746f41b286ff2427caea4222c7d0d9b28387d2d44836dc2641bfa8516006f6db59a6132a0db3cd5811bca1b144e1b5194d2d76a342cca2e2ae5737808d9acfef6cc3c2f967278287b691d807d7ec808a8e44d11229c5a676283d868737fdc864b216c9950046aa14fe80ae89a2a4e3d00a5e49bfb5103932ca350c4b7756c8b2948740121533cfddecf0700d22852a91e8d70c93aa05df283cb1c80c36196081eff93bad947de701b040321d44165018a8c32ec490f84c026e44c4be415051f7f2dedaf4f0eb7ed2198031779f9b88032bb444f5a81b13ecf4c0e6a70d51f804cc50a4755a1dc472b630f19bd978b26b5f71549570c18fbc99e03fcd69761271df91f94267da1b2513f2c1371ec2dbf58079a08667561904dd23401ae2d9fc35a140aa03ebbe61b5f54020bcb3a138deac75e43ec06ae314891f321414222dfc94893583f1d24b3ce3507b4d5463f5343c06d049d25d70b80a1a39bc8f78eb4676ab447cc072923e554c150657dba89d4d1a674aadd40b6ea2ad0aa80deec89b687fbf714adb3ef585aef739aee8178117ded9ddda0e43617adcc913e9060a8c43328c3abfdf58ec011799842db4c3017e9360c72910b2334cd6254bd75391c18b363c7931bad0a62d63ee367b076882c8059bbdb0e4826887210865b857e18297426984c4bd3392a49bb562f73814ee1989f7595059b58db3fc0f55c84401200e230a1ff53c2fee705fb8fb25c84cb89cd2f001f181d3361c9895bb589b64f4458d0fcd2ef18020d7b7fe664de24842dbb1b4022d766358825844e79f47f9da7bf06562dbae12069cc593c36664d36d92cb0497f9d7bdeab1c818460f1f4769938db9574906753b924c3d018d592b6ece597f8ca3ac98e3ee0dad851d4ea6f233503474fe7b2c2d1b445e5f99c30815b8ef12f23dfdbddd5ccd3f74c46ed77454dac831056c85fa0342e49100799098c12454a5f05645812987aec171e62975283838710dc335b0b3fb6fc7e0cb339c1fc4f5f1896aed9aeb29bf559d33ca0d0a1817b0f170b27f69073e3afad2f9da69a3e6038a93d570447c97eb8c67ba04d755379bd7476b75ddf609536c286cb9e32cf7ab08414e9e33451dfa5b87b04f8777c7e0fd6053fcc64e103556e09e80a89a72a7e842de84f1be6efbb835f7149380371e1fe1f9198973f41e6051a3594bd085e6246b6aabe6dc830d3978d6b30f8c0d6c6204fcd1dd830f3708db14d7d3440420ad520b526ee2672fdb898edcaf785d6b3b15628e241eba5126561d5378279f04dfe18fb54c5d687271c7cfac9eee7314d4892aa12dc80a93d8c993138b2524aa9e761490044cff6419ebb00734159125189284aadd3e9df6ad2a73669f8f82d6451921d85dcea36db6b956ac0bcf3640ccc8507349d2635e4db4c4d1ebe3e5f1bf34e22d5c221b1741056f4d0ce5dea5e2d38fd687edf0c5a04f793898382c50ac897ab84bf331e0b70de9e7f02fa62955e8e76bf2118b88f1c40a8845233578d57fd8eb1ddeb3d88d387325d3021f47552be58320a7215633dd2410ae9ad99767c57fad0598c9cc627171a18c55e08b225449eb0b9fd7b8c5862173860f8e0efe454b096a734e57c26dcf5a64e30133123d82e30a6d48a51213dc5a9e637a8ae1ae6de4e6690659a920309943ed8a7ab2e1e82c8ad010ced755255267a3866cfc8263ec69461e09b320333691347c7db103b1b6dc314e8ccd455a8e50b39244d1b18672b87ab3bb45541cb6c6c3f4714171364d2cbc1e3d30cecf0f9b2ec1743e8aa5ad30895727cd252919bca424fb5e453ee57030c31b90d19e3061619bdefc3864a96e26bf72abc9c49170c0b93a23e23a3ea3abcb22abea99f9bcf6113f843383d295b16728ccbbc104906ce436f997ff41e24c09aebb8702dcc9c90599eb3a9c29ffc892adcdfdd1fb75d626b0dec33b5da31eec35e4cf2b64de73f0e8cc60e27d20298a233085c5b8eb5de08b7f524201578aa8954860fe77f4e79ae975e0c28491796900eb09386feac5719a7ceac7f768da8766ab4c797c79d9c3bed61d9ddf091ded5a47be0824de751ff871f954416f688d16e4c7f8167a956529cfbc6620a943511a065c11f9f6be1edd5a343faa9162dbda0162a794de65d8c452d13672aa852e8ff4f06b6dfe0e43960d592bc3754b1d2ff15038a43ee15eb36172d533327fa4ed0740d8c2460286b46180d331d7fc2d5cad1f305420f3a6fe4355ba97fd471981dbf296a5c8f336ddf7e4b6cdb4f90fb4dd919dacf8866e936bdbb54b63fd634aa41ac41fc2a86ee87d6b011417f08e42fd37267a339236d33a598b8740d4ff9333ceb72b84749d56d1b3cce49eaba28be73b0e1aec20c6c60b583d5fd00b5335ddbb86d17a042ef0056b73e33bc2cfacee0f29d70ab45ce95fec97cd802296e9d82cfdf5d25a64e6032008a96ed0c6b2e079218e246c841e3dbd02ceb4bdc04f84b4225cf98bc87767529f708df1e8733de2b6b06d7139007bc8292613a7cc74fa31fbfb7268d08bb64b0db152bb4405d52a42c311747b3028614595198344c0502496c9e8bb5f0fc72339b17470fc622251cf3975e8575875e8039bbc8bb762a0b9c5f7282564e87f7992d7441b844a40ab0221c48a776568ad91e7570c20ccd9f6ab5a511d71cce89ac1358c2719041c425b35716e776b20d2146f4ac7732a1cb1d8973aeccc6ab574882f331bf7ab8dddc8741195b4219a5596629605d47f37b84fae87c067c05dfa9a1fabe9ba1ebce09850aa8fae1a2aa18563bbce609d9abffa9fbd31653bbc9b3a3aec7c687bb90381cc79d3432156f5ad38c2f903f738b6321cdc14f7f3707fce6a495d4308a0832c173494754e6839d730e9f702c37c76529175df0ba5eb33bf81f0ab0e67c163be65c54627b6a9442a06cf40059bb3ed5f2138316cfd398cb2a50d96aa3998583b116f4de52ecc2d43e2f4d59b02ce445bb5e794b5b19cb592a4fe8855b8c5485ea45cf0e9c7c9a5fc3d5c729b894abc090030182074ce84710722643c122d12aaea3bbfc0e34fbdddf3a531142044f504a1380822e8fc0413ec6b782410494d05f98ae1eb0fb0700c85765c9dd39e147391675873bc1641134b5ba5baa200d5553824e663c3ac13460e1d1f346e3980f05af919781b752bc5ad543a115dc4c13a3e31f414af9538228b0fec1fac4a602f0641172a14e513ea3bd47574eb3246c11e4da2eaf35baddfae65ac8310c43754962b63848aa9dc2d02f3b993e0d2a64d5d55d2b85b8273014fb48794e684bf6990c02a3c2ad6a1ed88e795f2f604e56b739dbc4faaba4c4b6752cde62eedbab5349d37c54", 0x2000, &(0x7f0000007640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.494974535s ago: executing program 4 (id=1873): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4077, 0xfed}, {&(0x7f0000001ac0)=""/245, 0xf5}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000100)=""/16, 0x10}], 0x7}, 0x80000000}], 0x4, 0x102, 0x0) 1.354775857s ago: executing program 1 (id=1874): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x1) fallocate(r0, 0x3, 0xc62, 0x8000c62) 1.246377914s ago: executing program 3 (id=1875): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 1.092874946s ago: executing program 4 (id=1876): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0) 793.481959ms ago: executing program 3 (id=1877): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) 585.848491ms ago: executing program 3 (id=1878): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@namecase}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0xa0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x515002, 0x10) 512.252243ms ago: executing program 1 (id=1879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000c00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001c000280180003801000018008000100090000000400030004"], 0x48}}, 0x0) 138.58795ms ago: executing program 3 (id=1880): setgroups(0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 92.896135ms ago: executing program 2 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd29, 0x25dddbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) 0s ago: executing program 1 (id=1882): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): g mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.638306][ T8967] loop1: detected capacity change from 0 to 4096 [ 219.651811][ T5154] usb 3-1: Using ep0 maxpacket: 8 [ 219.658861][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.680409][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.684129][ T8967] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 219.690681][ T5154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.733315][ T5154] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 219.752993][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.821238][ T5154] usb 3-1: config 0 descriptor?? [ 219.841218][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.172816][ T5832] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.282553][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.324172][ T5154] elecom 0003:056E:00FE.0028: item fetching failed at offset 6/7 [ 220.358795][ T5154] elecom 0003:056E:00FE.0028: probe with driver elecom failed with error -22 [ 220.461574][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 220.475272][ T24] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 220.485502][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.539576][ T24] usb 5-1: Product: syz [ 220.573715][ T24] usb 5-1: Manufacturer: syz [ 220.592233][ T5154] usb 3-1: USB disconnect, device number 11 [ 220.600045][ T24] usb 5-1: SerialNumber: syz [ 220.643246][ T24] usb 5-1: config 0 descriptor?? [ 220.671845][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 220.870322][ T8992] loop5: detected capacity change from 0 to 1024 [ 221.035845][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1177'. [ 221.061411][ T8994] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1177'. [ 221.072909][ T13] hfsplus: b-tree write err: -5, ino 4 [ 221.284237][ T24] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 221.321626][ T24] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 221.359912][ T24] usb 5-1: USB disconnect, device number 12 [ 221.607884][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 221.625192][ T8978] loop3: detected capacity change from 0 to 32768 [ 221.639672][ T8978] XFS: ikeep mount option is deprecated. [ 221.658863][ T8978] XFS: noikeep mount option is deprecated. [ 221.857907][ T8978] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 222.034973][ T8978] XFS (loop3): Ending clean mount [ 222.040402][ T9030] loop5: detected capacity change from 0 to 256 [ 222.096031][ T8978] XFS (loop3): Quotacheck needed: Please wait. [ 222.204834][ T8978] XFS (loop3): Quotacheck: Done. [ 222.416245][ T5828] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 222.869713][ T9019] loop2: detected capacity change from 0 to 32768 [ 223.131977][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 223.220655][ T30] audit: type=1400 audit(1746850542.174:54): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A61616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=9048 comm="syz.5.1200" [ 223.382099][ T5895] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.390786][ T5895] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 223.409867][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.433996][ T5895] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 223.449345][ T5895] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 223.469854][ T5895] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.479451][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.498177][ T5895] usb 1-1: Product: syz [ 223.523802][ T5895] usb 1-1: Manufacturer: syz [ 223.591385][ T5895] cdc_wdm 1-1:1.0: skipping garbage [ 223.610382][ T5895] cdc_wdm 1-1:1.0: skipping garbage [ 223.672613][ T5895] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 223.678530][ T5895] cdc_wdm 1-1:1.0: Unknown control protocol [ 223.774585][ T9037] loop4: detected capacity change from 0 to 32768 [ 223.843205][ T5154] usb 1-1: USB disconnect, device number 7 [ 223.858046][ T9037] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 223.879234][ T9039] loop1: detected capacity change from 0 to 32768 [ 223.974075][ T9039] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.127750][ T5829] (syz-executor,5829,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 224.170268][ T9039] XFS (loop1): Ending clean mount [ 224.201765][ T9039] XFS (loop1): Quotacheck needed: Please wait. [ 224.227661][ T5829] ocfs2: Unmounting device (7,4) on (node local) [ 224.275304][ T9057] loop5: detected capacity change from 0 to 32768 [ 224.318968][ T9057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1205 (9057) [ 224.382481][ T9039] XFS (loop1): Quotacheck: Done. [ 224.429437][ T9057] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.439694][ T5154] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 224.499866][ T9057] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 224.553877][ T9057] BTRFS info (device loop5): using free-space-tree [ 224.623388][ T5831] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.655471][ T5154] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 224.671592][ T5154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.731381][ T5154] usb 3-1: Product: syz [ 224.760940][ T5154] usb 3-1: Manufacturer: syz [ 224.795702][ T9094] loop3: detected capacity change from 0 to 512 [ 224.812106][ T5154] usb 3-1: SerialNumber: syz [ 224.890284][ T5154] usb 3-1: config 0 descriptor?? [ 225.053721][ T9094] EXT4-fs (loop3): 1 orphan inode deleted [ 225.062831][ T5833] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.076527][ T54] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 225.132032][ T9094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.133289][ T5154] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 225.144868][ T54] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 225.190995][ T5830] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.195426][ T5154] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 225.227311][ T9094] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.259203][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.282774][ T5154] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 225.312136][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.332165][ T5154] usb 3-1: media controller created [ 225.352544][ T5833] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 225.371389][ T5154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.400005][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.435651][ T5833] usb 5-1: config 0 descriptor?? [ 225.537615][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.610735][ T5154] DVB: Unable to find symbol dib7000p_attach() [ 225.656021][ T5154] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 225.692982][ T5154] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 225.761756][ T5154] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 225.782321][ T5154] usb 3-1: media controller created [ 225.844787][ T5154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.888817][ T5833] pyra 0003:1E7D:2CF6.0029: item fetching failed at offset 3/7 [ 225.936134][ T5833] pyra 0003:1E7D:2CF6.0029: parse failed [ 225.955972][ T5833] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -22 [ 225.974396][ T5154] dib0700: the master dib7090 has to be initialized first [ 226.014367][ T5154] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 226.116071][ T5895] usb 5-1: USB disconnect, device number 13 [ 226.136341][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1222'. [ 226.272425][ T5154] rc_core: IR keymap rc-dib0700-rc5 not found [ 226.278545][ T5154] Registered IR keymap rc-empty [ 226.329342][ T5154] dvb-usb: could not initialize remote control. [ 226.359452][ T5154] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 226.731913][ T5154] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.749991][ T5895] usb 3-1: USB disconnect, device number 12 [ 226.799465][ T9141] loop5: detected capacity change from 0 to 1024 [ 226.876749][ T5895] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 226.918909][ T5154] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 226.954387][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.986351][ T5154] usb 4-1: Product: syz [ 227.004123][ T5154] usb 4-1: Manufacturer: syz [ 227.045085][ T5154] usb 4-1: SerialNumber: syz [ 227.083917][ T5154] usb 4-1: config 0 descriptor?? [ 227.125460][ T5154] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 227.584854][ T9160] lo speed is unknown, defaulting to 1000 [ 227.597210][ T9160] lo speed is unknown, defaulting to 1000 [ 227.779300][ T5154] gspca_sunplus: reg_r err -71 [ 227.788856][ T5154] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 227.806719][ T5154] usb 4-1: USB disconnect, device number 12 [ 227.823032][ T5833] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 227.947691][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 227.995037][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 228.023610][ T5833] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 228.047395][ T5833] usb 1-1: config 0 has no interface number 0 [ 228.085177][ T5833] usb 1-1: config 0 interface 125 has no altsetting 0 [ 228.091370][ T9179] loop5: detected capacity change from 0 to 512 [ 228.102470][ T5833] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 228.117475][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.149222][ T5833] usb 1-1: Product: syz [ 228.157320][ T5833] usb 1-1: Manufacturer: syz [ 228.171348][ T5833] usb 1-1: SerialNumber: syz [ 228.210933][ T9175] syz.1.1245 (9175) used greatest stack depth: 16424 bytes left [ 228.237434][ T9179] EXT4-fs (loop5): 1 orphan inode deleted [ 228.252831][ T5833] usb 1-1: config 0 descriptor?? [ 228.323559][ T9179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.348191][ T82] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 228.388660][ T82] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 228.431139][ T9179] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.535336][ T5833] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 228.536822][ T9189] loop1: detected capacity change from 0 to 256 [ 228.593105][ T9189] exfat: Deprecated parameter 'namecase' [ 228.598825][ T9189] exfat: Deprecated parameter 'utf8' [ 228.627780][ T9190] loop4: detected capacity change from 0 to 2048 [ 228.659765][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.671857][ T82] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 228.685961][ T82] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 228.750373][ T9190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.779931][ T9189] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 228.992745][ T5833] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 229.294993][ T9181] loop2: detected capacity change from 0 to 40427 [ 229.314807][ T9181] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3fffff [ 229.397676][ T9181] F2FS-fs (loop2): invalid crc value [ 229.462734][ T5833] usb 1-1: failed to restore interface 125 altsetting 246 (error=-71) [ 229.485585][ T5833] ueagle-atm 1-1:0.125: usbatm_usb_probe: bind failed: -19! [ 229.563896][ T5833] usb 1-1: USB disconnect, device number 8 [ 229.620286][ T9212] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 229.862555][ T9181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 229.910432][ T9220] loop5: detected capacity change from 0 to 512 [ 229.917968][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1264'. [ 230.010831][ T9220] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 230.051129][ T9220] EXT4-fs (loop5): orphan cleanup on readonly fs [ 230.091004][ T9220] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 230.147300][ T5827] syz-executor: attempt to access beyond end of device [ 230.147300][ T5827] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 230.178668][ T9220] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.250180][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 230.250213][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.250229][ T5827] Call Trace: [ 230.250239][ T5827] [ 230.250248][ T5827] dump_stack_lvl+0x189/0x250 [ 230.250295][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.250332][ T5827] ? __pfx_queue_work_on+0x10/0x10 [ 230.250356][ T5827] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.250385][ T5827] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.250414][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.250453][ T5827] f2fs_handle_critical_error+0x37c/0x540 [ 230.250489][ T5827] f2fs_write_end_io+0x4e2/0x6d0 [ 230.250540][ T5827] __submit_merged_bio+0x27a/0x6a0 [ 230.250574][ T5827] __submit_merged_write_cond+0x255/0x530 [ 230.250625][ T5827] f2fs_write_data_pages+0x2854/0x31f0 [ 230.250655][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.250723][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 230.250815][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.250844][ T5827] ? __lock_acquire+0xaac/0xd20 [ 230.250898][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.250926][ T5827] ? __lock_acquire+0xaac/0xd20 [ 230.250977][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.251020][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.251048][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 230.251079][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 230.251110][ T5827] do_writepages+0x3b1/0x7b0 [ 230.251163][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.251191][ T5827] ? do_raw_spin_lock+0x121/0x290 [ 230.251219][ T5827] ? __pfx_do_writepages+0x10/0x10 [ 230.251256][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.251290][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.251318][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 230.251352][ T5827] filemap_fdatawrite+0x191/0x230 [ 230.251388][ T5827] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 230.251472][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.251512][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 230.251547][ T5827] f2fs_sync_dirty_inodes+0x31f/0x830 [ 230.251599][ T5827] f2fs_write_checkpoint+0x94a/0x1de0 [ 230.251661][ T5827] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 230.251745][ T5827] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 230.251776][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.251805][ T5827] ? kfree+0x193/0x440 [ 230.251835][ T5827] ? kill_f2fs_super+0x298/0x6c0 [ 230.251874][ T5827] kill_f2fs_super+0x2c3/0x6c0 [ 230.251915][ T5827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 230.251949][ T5827] ? radix_tree_delete_item+0x2b6/0x400 [ 230.251985][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.252013][ T5827] ? shrinker_free+0x2ce/0x3e0 [ 230.252043][ T5827] deactivate_locked_super+0xbc/0x130 [ 230.252071][ T5827] cleanup_mnt+0x425/0x4c0 [ 230.252108][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.252137][ T5827] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.252170][ T5827] task_work_run+0x1d4/0x260 [ 230.252206][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 230.252240][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.252282][ T5827] resume_user_mode_work+0x5e/0x80 [ 230.252318][ T5827] syscall_exit_to_user_mode+0x9a/0x120 [ 230.252350][ T5827] do_syscall_64+0x103/0x210 [ 230.252382][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.252410][ T5827] ? exc_page_fault+0x91/0x110 [ 230.252442][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.252466][ T5827] RIP: 0033:0x7f9e8318fc97 [ 230.252487][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 230.252508][ T5827] RSP: 002b:00007ffdb9951f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 230.252533][ T5827] RAX: 0000000000000000 RBX: 00007f9e8321089d RCX: 00007f9e8318fc97 [ 230.252551][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb9952040 [ 230.252567][ T5827] RBP: 00007ffdb9952040 R08: 0000000000000000 R09: 0000000000000000 [ 230.252584][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb99530d0 [ 230.252601][ T5827] R13: 00007f9e8321089d R14: 000000000003825c R15: 00007ffdb9953110 [ 230.252640][ T5827] [ 230.657419][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.738708][ T9220] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 230.776100][ T9220] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.1265: casefold flag without casefold feature [ 230.791856][ T5827] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 230.857261][ T9220] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1265: couldn't read orphan inode 16 (err -117) [ 230.996256][ T9220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.111243][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 231.233708][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.618794][ T5833] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 232.845599][ T5833] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 232.864811][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.911932][ T5833] usb 1-1: config 0 has no interface number 0 [ 232.959691][ T5833] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 232.975604][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 232.996357][ T5833] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.054329][ T5833] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 233.081273][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.140045][ T5833] usb 1-1: Product: syz [ 233.152081][ T5833] usb 1-1: Manufacturer: syz [ 233.191865][ T5833] usb 1-1: SerialNumber: syz [ 233.238329][ T5833] usb 1-1: config 0 descriptor?? [ 233.725593][ T9317] loop1: detected capacity change from 0 to 256 [ 233.754763][ T5895] usb 1-1: USB disconnect, device number 9 [ 233.858259][ T9317] exfat: Deprecated parameter 'utf8' [ 233.976614][ T9315] loop3: detected capacity change from 0 to 32768 [ 233.992203][ T9317] exfat: Deprecated parameter 'utf8' [ 234.033113][ T9315] gfs2: fsid=îhSÃ…Ë: Trying to join cluster "lock_nolock", "îhSÃ…Ë" [ 234.041275][ T9315] gfs2: fsid=îhSÃ…Ë: Now mounting FS (format 1801)... [ 234.092480][ T9315] gfs2: fsid=îhSÃ…Ë.0: fatal: invalid metadata block - bh = 0 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 234.107501][ T9315] gfs2: fsid=îhSÃ…Ë.0: about to withdraw this file system [ 234.115319][ T9315] gfs2: fsid=îhSÃ…Ë.0: File system withdrawn [ 234.121314][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.3.1309 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 234.121346][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.121361][ T9315] Call Trace: [ 234.121370][ T9315] [ 234.121380][ T9315] dump_stack_lvl+0x189/0x250 [ 234.121425][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.121462][ T9315] ? __pfx__printk+0x10/0x10 [ 234.121493][ T9315] ? kobject_uevent_env+0x36b/0x8c0 [ 234.121544][ T9315] gfs2_withdraw+0x111c/0x14f0 [ 234.121569][ T9315] ? __pfx___might_resched+0x10/0x10 [ 234.121602][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121638][ T9315] ? __pfx_gfs2_withdraw+0x10/0x10 [ 234.121662][ T9315] ? __pfx_gfs2_lm+0x10/0x10 [ 234.121685][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121713][ T9315] ? gfs2_meta_read+0x838/0x980 [ 234.121754][ T9315] ? __pfx_gfs2_meta_read+0x10/0x10 [ 234.121787][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121820][ T9315] gfs2_meta_check_ii+0x67/0x80 [ 234.121849][ T9315] gfs2_meta_buffer+0x22e/0x300 [ 234.121891][ T9315] inode_go_instantiate+0xe4/0x1150 [ 234.121931][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121979][ T9315] ? __pfx_inode_go_instantiate+0x10/0x10 [ 234.122019][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122048][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122076][ T9315] ? gfs2_glock_nq+0x10bb/0x1900 [ 234.122110][ T9315] gfs2_instantiate+0x168/0x220 [ 234.122138][ T9315] gfs2_glock_wait+0x1d4/0x2a0 [ 234.122168][ T9315] gfs2_lookupi+0x35b/0x5a0 [ 234.122203][ T9315] ? __pfx_gfs2_lookupi+0x10/0x10 [ 234.122234][ T9315] ? gfs2_lookup_meta+0xa7/0x170 [ 234.122265][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122293][ T9315] ? crc32_le_base+0x1f7/0x250 [ 234.122322][ T9315] gfs2_lookup_meta+0xa7/0x170 [ 234.122349][ T9315] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 234.122377][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122406][ T9315] ? __asan_memset+0x22/0x50 [ 234.122440][ T9315] init_journal+0x19f/0x2260 [ 234.122468][ T9315] ? __pfx_number+0x10/0x10 [ 234.122514][ T9315] ? format_decode+0x5a3/0xe30 [ 234.122556][ T9315] ? __pfx_init_journal+0x10/0x10 [ 234.122580][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122608][ T9315] ? vsnprintf+0xe11/0xf00 [ 234.122659][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122687][ T9315] ? snprintf+0xda/0x120 [ 234.122715][ T9315] ? __pfx_snprintf+0x10/0x10 [ 234.122754][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122782][ T9315] ? gfs2_glock_nq_num+0x13d/0x170 [ 234.122814][ T9315] init_inodes+0xdb/0x320 [ 234.122842][ T9315] gfs2_fill_super+0x18a3/0x2050 [ 234.122888][ T9315] ? __pfx_gfs2_fill_super+0x10/0x10 [ 234.122909][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122949][ T9315] ? init_locking+0xb8/0x210 [ 234.122970][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.122997][ T9315] ? sb_set_blocksize+0x104/0x180 [ 234.123032][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.123058][ T9315] ? setup_bdev_super+0x4c1/0x5b0 [ 234.123092][ T9315] get_tree_bdev_flags+0x40e/0x4d0 [ 234.123120][ T9315] ? __pfx_gfs2_fill_super+0x10/0x10 [ 234.123145][ T9315] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 234.123175][ T9315] ? rcu_is_watching+0x15/0xb0 [ 234.123221][ T9315] gfs2_get_tree+0x51/0x1e0 [ 234.123250][ T9315] vfs_get_tree+0x92/0x2b0 [ 234.123282][ T9315] do_new_mount+0x24a/0xa40 [ 234.123324][ T9315] __se_sys_mount+0x317/0x410 [ 234.123364][ T9315] ? __pfx___se_sys_mount+0x10/0x10 [ 234.123402][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.123430][ T9315] ? __x64_sys_mount+0x20/0xc0 [ 234.123467][ T9315] do_syscall_64+0xf6/0x210 [ 234.123500][ T9315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.123528][ T9315] ? exc_page_fault+0x91/0x110 [ 234.123560][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.123584][ T9315] RIP: 0033:0x7fe71899010a [ 234.123606][ T9315] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.123626][ T9315] RSP: 002b:00007fe71976de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.123652][ T9315] RAX: ffffffffffffffda RBX: 00007fe71976def0 RCX: 00007fe71899010a [ 234.123671][ T9315] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fe71976deb0 [ 234.123688][ T9315] RBP: 000020000001f680 R08: 00007fe71976def0 R09: 0000000000000084 [ 234.123706][ T9315] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 234.123723][ T9315] R13: 00007fe71976deb0 R14: 000000000001f73d R15: 0000200000000240 [ 234.123761][ T9315] [ 234.570934][ T9315] gfs2: fsid=îhSÃ…Ë.0: can't lookup journal index: 0 [ 234.899011][ T9292] loop2: detected capacity change from 0 to 40427 [ 235.031231][ T9292] F2FS-fs (loop2): invalid crc value [ 235.088171][ T9317] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 235.379478][ T5833] IPVS: starting estimator thread 0... [ 235.471619][ T9336] IPVS: using max 24 ests per chain, 57600 per kthread [ 236.129209][ T9349] loop4: detected capacity change from 0 to 4096 [ 236.180344][ T9351] loop2: detected capacity change from 0 to 7 [ 236.186752][ T9349] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 236.229800][ T9351] Dev loop2: unable to read RDB block 7 [ 236.269294][ T9351] loop2: unable to read partition table [ 236.322052][ T9351] loop2: partition table beyond EOD, truncated [ 236.351374][ T9351] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.622970][ T9333] loop0: detected capacity change from 0 to 32768 [ 236.770559][ T9333] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.208963][ T9333] XFS (loop0): Ending clean mount [ 237.303863][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.312650][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.436482][ T5832] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.028805][ T9354] loop3: detected capacity change from 0 to 40427 [ 238.102191][ T9354] F2FS-fs (loop3): invalid crc value [ 238.418531][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.514026][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.562788][ T9354] F2FS-fs (loop3): Start checkpoint disabled! [ 238.578877][ T9408] loop1: detected capacity change from 0 to 512 [ 238.606022][ T9354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 238.666406][ T9408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 238.832937][ T54] kworker/u8:3: attempt to access beyond end of device [ 238.832937][ T54] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.906410][ T9408] EXT4-fs (loop1): 1 truncate cleaned up [ 238.917717][ T9399] loop4: detected capacity change from 0 to 32768 [ 238.921777][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 238.921809][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.921825][ T54] Workqueue: writeback wb_workfn (flush-7:3) [ 238.921868][ T54] Call Trace: [ 238.921879][ T54] [ 238.921889][ T54] dump_stack_lvl+0x189/0x250 [ 238.921930][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.921966][ T54] ? __pfx_queue_work_on+0x10/0x10 [ 238.921989][ T54] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 238.922016][ T54] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.922044][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.922082][ T54] f2fs_handle_critical_error+0x37c/0x540 [ 238.922117][ T54] f2fs_write_end_io+0x4e2/0x6d0 [ 238.922166][ T54] __submit_merged_bio+0x27a/0x6a0 [ 238.922200][ T54] __submit_merged_write_cond+0x255/0x530 [ 238.922258][ T54] f2fs_write_data_pages+0x2854/0x31f0 [ 238.922285][ T54] ? __lock_acquire+0xaac/0xd20 [ 238.922359][ T54] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.922405][ T54] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 238.922480][ T54] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 238.922523][ T54] ? trace_f2fs_writepages+0x7f/0x200 [ 238.922552][ T54] ? f2fs_write_node_pages+0x478/0x6e0 [ 238.922583][ T54] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 238.922605][ T54] ? register_lock_class+0x51/0x320 [ 238.922647][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.922673][ T54] ? __lock_acquire+0xaac/0xd20 [ 238.922716][ T54] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.922745][ T54] do_writepages+0x3b1/0x7b0 [ 238.922788][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.922815][ T54] ? __lock_acquire+0xaac/0xd20 [ 238.922854][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.922883][ T54] ? __pfx_do_writepages+0x10/0x10 [ 238.922918][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.922944][ T54] ? reacquire_held_locks+0x127/0x1d0 [ 238.922967][ T54] ? writeback_sb_inodes+0x372/0x1000 [ 238.923004][ T54] __writeback_single_inode+0x145/0xff0 [ 238.923029][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.923057][ T54] ? do_raw_spin_unlock+0x122/0x240 [ 238.923090][ T54] writeback_sb_inodes+0x6b5/0x1000 [ 238.923148][ T54] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 238.923224][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.923251][ T54] ? rcu_is_watching+0x15/0xb0 [ 238.923288][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.923327][ T54] wb_writeback+0x43b/0xaf0 [ 238.923362][ T54] ? queue_io+0x351/0x590 [ 238.923391][ T54] ? __pfx_wb_writeback+0x10/0x10 [ 238.923427][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.923459][ T54] wb_workfn+0x409/0xef0 [ 238.923513][ T54] ? __pfx_wb_workfn+0x10/0x10 [ 238.923544][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.923571][ T54] ? register_lock_class+0x51/0x320 [ 238.923611][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.923638][ T54] ? __lock_acquire+0xaac/0xd20 [ 238.923683][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.923718][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.923750][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.923773][ T54] ? process_scheduled_works+0x9ec/0x17a0 [ 238.923811][ T54] ? process_scheduled_works+0x9ec/0x17a0 [ 238.923851][ T54] process_scheduled_works+0xade/0x17a0 [ 238.923926][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.923974][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.924011][ T54] worker_thread+0x8a0/0xda0 [ 238.924068][ T54] kthread+0x711/0x8a0 [ 238.924101][ T54] ? __pfx_worker_thread+0x10/0x10 [ 238.924125][ T54] ? __pfx_kthread+0x10/0x10 [ 238.924153][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.924184][ T54] ? __pfx_kthread+0x10/0x10 [ 238.924213][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.924238][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.924266][ T54] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.924296][ T54] ? __pfx_kthread+0x10/0x10 [ 238.924324][ T54] ret_from_fork+0x4e/0x80 [ 238.924348][ T54] ? __pfx_kthread+0x10/0x10 [ 238.924377][ T54] ret_from_fork_asm+0x1a/0x30 [ 238.924421][ T54] [ 238.924430][ T54] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 239.115640][ T9408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.317175][ T9374] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.371788][ T9374] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.387488][ T9399] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.421616][ T9374] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.449786][ T9411] Falling back ldisc for ttyS3. [ 239.488254][ T9374] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.689874][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.745759][ T9399] XFS (loop4): Ending clean mount [ 239.883763][ T9404] loop0: detected capacity change from 0 to 40427 [ 239.899223][ T9404] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3fffff [ 239.944736][ T9404] F2FS-fs (loop0): invalid crc value [ 240.000046][ T5894] lo speed is unknown, defaulting to 1000 [ 240.026959][ T5829] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.045904][ T5894] s: Port: 1 Link DOWN [ 240.287177][ T9404] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 240.484395][ T5832] syz-executor: attempt to access beyond end of device [ 240.484395][ T5832] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.592602][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 240.592637][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.592652][ T5832] Call Trace: [ 240.592662][ T5832] [ 240.592672][ T5832] dump_stack_lvl+0x189/0x250 [ 240.592726][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.592763][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 240.592787][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 240.592818][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 240.592844][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.592880][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 240.592915][ T5832] f2fs_write_end_io+0x4e2/0x6d0 [ 240.592962][ T5832] __submit_merged_bio+0x27a/0x6a0 [ 240.592995][ T5832] __submit_merged_write_cond+0x255/0x530 [ 240.593042][ T5832] f2fs_write_data_pages+0x2854/0x31f0 [ 240.593068][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593136][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 240.593220][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593244][ T5832] ? __mod_node_page_state+0xf4/0x170 [ 240.593283][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593307][ T5832] ? lru_gen_update_size+0x7bd/0xd20 [ 240.593348][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593372][ T5832] ? __lock_acquire+0xaac/0xd20 [ 240.593414][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593453][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593478][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 240.593506][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 240.593533][ T5832] do_writepages+0x3b1/0x7b0 [ 240.593583][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593607][ T5832] ? do_raw_spin_lock+0x121/0x290 [ 240.593632][ T5832] ? __pfx_do_writepages+0x10/0x10 [ 240.593673][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593710][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593734][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 240.593766][ T5832] filemap_fdatawrite+0x191/0x230 [ 240.593797][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 240.593880][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.593911][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 240.593944][ T5832] f2fs_sync_dirty_inodes+0x31f/0x830 [ 240.593992][ T5832] f2fs_write_checkpoint+0x94a/0x1de0 [ 240.594052][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 240.594133][ T5832] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 240.594161][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.594185][ T5832] ? kfree+0x193/0x440 [ 240.594212][ T5832] ? kill_f2fs_super+0x298/0x6c0 [ 240.594247][ T5832] kill_f2fs_super+0x2c3/0x6c0 [ 240.594284][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 240.594310][ T5832] ? radix_tree_delete_item+0x2b6/0x400 [ 240.594344][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.594369][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 240.594395][ T5832] deactivate_locked_super+0xbc/0x130 [ 240.594421][ T5832] cleanup_mnt+0x425/0x4c0 [ 240.594454][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.594478][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.594508][ T5832] task_work_run+0x1d4/0x260 [ 240.594542][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 240.594571][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.594610][ T5832] resume_user_mode_work+0x5e/0x80 [ 240.594643][ T5832] syscall_exit_to_user_mode+0x9a/0x120 [ 240.594672][ T5832] do_syscall_64+0x103/0x210 [ 240.594705][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.594729][ T5832] ? exc_page_fault+0x91/0x110 [ 240.594757][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.594778][ T5832] RIP: 0033:0x7f067618fc97 [ 240.594798][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 240.594816][ T5832] RSP: 002b:00007ffe56177ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 240.594839][ T5832] RAX: 0000000000000000 RBX: 00007f067621089d RCX: 00007f067618fc97 [ 240.594854][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe56177fb0 [ 240.594868][ T5832] RBP: 00007ffe56177fb0 R08: 0000000000000000 R09: 0000000000000000 [ 240.594882][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe56179040 [ 240.594897][ T5832] R13: 00007f067621089d R14: 000000000003aaee R15: 00007ffe56179080 [ 240.594935][ T5832] [ 240.595903][ T5832] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 241.283391][ T9452] loop5: detected capacity change from 0 to 256 [ 241.802278][ T9458] loop1: detected capacity change from 0 to 128 [ 241.914676][ T9458] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 242.031020][ T9458] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 242.113280][ T9462] tipc: Started in network mode [ 242.118185][ T9462] tipc: Node identity ac14140f, cluster identity 4711 [ 242.145770][ T9450] loop3: detected capacity change from 0 to 32768 [ 242.185904][ T9458] EXT4-fs error (device loop1): __ext4_find_entry:1628: inode #2: comm syz.1.1360: checksumming directory block 0 [ 242.200306][ T9462] tipc: New replicast peer: 255.255.255.255 [ 242.218686][ T9462] tipc: Enabled bearer , priority 10 [ 242.236244][ T9450] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.399490][ T5831] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.530531][ T9475] loop0: detected capacity change from 0 to 2048 [ 242.573901][ T9449] loop4: detected capacity change from 0 to 32768 [ 242.600809][ T9475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.630519][ T9447] loop2: detected capacity change from 0 to 32768 [ 242.688555][ T9450] XFS (loop3): Ending clean mount [ 242.744000][ T9449] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 242.954121][ T5829] ocfs2: Unmounting device (7,4) on (node local) [ 243.022573][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 243.114926][ T9489] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1370'. [ 243.263991][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 243.292788][ T5894] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 243.327023][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 243.353050][ T5897] tipc: Node number set to 2886997007 [ 243.389069][ T9492] loop2: detected capacity change from 0 to 4096 [ 243.477840][ T9492] NILFS (loop2): invalid segment: Checksum error in segment payload [ 243.598185][ T9492] NILFS (loop2): trying rollback from an earlier position [ 243.599175][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.628119][ T9497] loop5: detected capacity change from 0 to 512 [ 243.669890][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.712421][ T9492] NILFS (loop2): recovery complete [ 243.752906][ T9497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.781570][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.891645][ T9497] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.912187][ T5894] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.947656][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.980750][ T5894] usb 2-1: config 0 descriptor?? [ 244.167151][ T5897] kernel write not supported for file /input/mouse0 (pid: 5897 comm: kworker/0:7) [ 244.240705][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.259188][ T9512] netem: invalid attributes len -24 [ 244.275354][ T9512] netem: change failed [ 244.452637][ T5894] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 244.488423][ T5894] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 244.532363][ T5894] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 244.564649][ T5894] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 244.603799][ T5894] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 244.604907][ T9518] loop5: detected capacity change from 0 to 1024 [ 244.628584][ T5894] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 244.673983][ T5894] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 244.737460][ T5894] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 244.858311][ T5894] usb 2-1: USB disconnect, device number 11 [ 244.916699][ T9522] loop2: detected capacity change from 0 to 4096 [ 244.935528][ T54] hfsplus: b-tree write err: -5, ino 4 [ 245.068330][ T9526] fido_id[9526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 245.128864][ T9530] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.303338][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.448819][ T9536] loop4: detected capacity change from 0 to 256 [ 245.506836][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 245.543218][ T9536] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 245.553995][ T5897] usb 4-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 245.573227][ T9536] FAT-fs (loop4): Filesystem has been set read-only [ 245.590487][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.630174][ T9541] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 245.643616][ T5897] usb 4-1: Product: syz [ 245.647795][ T5897] usb 4-1: Manufacturer: syz [ 245.693376][ T5897] usb 4-1: SerialNumber: syz [ 245.724030][ T5897] usb 4-1: config 0 descriptor?? [ 245.745527][ T5897] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 246.088406][ T9550] loop4: detected capacity change from 0 to 2048 [ 246.143537][ T9550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.165641][ T9514] loop0: detected capacity change from 0 to 40427 [ 246.220823][ T9514] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 246.234968][ T9550] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.303328][ T9514] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 246.334101][ T5897] gspca_sunplus: reg_w_riv err -71 [ 246.344711][ T9514] F2FS-fs (loop0): Image doesn't support compression [ 246.360936][ T5897] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 246.382063][ T9514] F2FS-fs (loop0): Image doesn't support compression [ 246.426067][ T5897] usb 4-1: USB disconnect, device number 13 [ 246.469692][ T9514] F2FS-fs (loop0): invalid crc value [ 246.569291][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.821208][ T9514] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 246.895578][ T30] audit: type=1800 audit(1747374853.940:55): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1381" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 247.064056][ T5832] syz-executor: attempt to access beyond end of device [ 247.064056][ T5832] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.118431][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 247.118463][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.118479][ T5832] Call Trace: [ 247.118488][ T5832] [ 247.118498][ T5832] dump_stack_lvl+0x189/0x250 [ 247.118543][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.118580][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 247.118602][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 247.118630][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 247.118659][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.118697][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 247.118733][ T5832] f2fs_write_end_io+0x4e2/0x6d0 [ 247.118783][ T5832] __submit_merged_bio+0x27a/0x6a0 [ 247.118817][ T5832] __submit_merged_write_cond+0x255/0x530 [ 247.118868][ T5832] f2fs_write_data_pages+0x2854/0x31f0 [ 247.118898][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.118971][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.119055][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119084][ T5832] ? __mod_node_page_state+0xf4/0x170 [ 247.119125][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119153][ T5832] ? lru_gen_update_size+0x7bd/0xd20 [ 247.119196][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119223][ T5832] ? __lock_acquire+0xaac/0xd20 [ 247.119269][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119312][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119340][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 247.119371][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.119402][ T5832] do_writepages+0x3b1/0x7b0 [ 247.119454][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119483][ T5832] ? do_raw_spin_lock+0x121/0x290 [ 247.119511][ T5832] ? __pfx_do_writepages+0x10/0x10 [ 247.119548][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119581][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119609][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 247.119645][ T5832] filemap_fdatawrite+0x191/0x230 [ 247.119679][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 247.119763][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.119798][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 247.119833][ T5832] f2fs_sync_dirty_inodes+0x31f/0x830 [ 247.119884][ T5832] f2fs_write_checkpoint+0x94a/0x1de0 [ 247.119953][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 247.120043][ T5832] ? kill_f2fs_super+0x298/0x6c0 [ 247.120083][ T5832] kill_f2fs_super+0x2c3/0x6c0 [ 247.120123][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 247.120152][ T5832] ? radix_tree_delete_item+0x2b6/0x400 [ 247.120188][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.120216][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 247.120245][ T5832] deactivate_locked_super+0xbc/0x130 [ 247.120272][ T5832] cleanup_mnt+0x425/0x4c0 [ 247.120311][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.120338][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.120372][ T5832] task_work_run+0x1d4/0x260 [ 247.120409][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 247.120441][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.120483][ T5832] resume_user_mode_work+0x5e/0x80 [ 247.120519][ T5832] syscall_exit_to_user_mode+0x9a/0x120 [ 247.120551][ T5832] do_syscall_64+0x103/0x210 [ 247.120583][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.120611][ T5832] ? exc_page_fault+0x91/0x110 [ 247.120642][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.120667][ T5832] RIP: 0033:0x7f067618fc97 [ 247.120690][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 247.120711][ T5832] RSP: 002b:00007ffe56177ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 247.120737][ T5832] RAX: 0000000000000000 RBX: 00007f067621089d RCX: 00007f067618fc97 [ 247.120754][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe56177fb0 [ 247.120771][ T5832] RBP: 00007ffe56177fb0 R08: 0000000000000000 R09: 0000000000000000 [ 247.120787][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe56179040 [ 247.120804][ T5832] R13: 00007f067621089d R14: 000000000003c4c3 R15: 00007ffe56179080 [ 247.120844][ T5832] [ 247.120853][ T5832] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 247.355379][ T9547] loop5: detected capacity change from 0 to 32768 [ 247.834138][ T9547] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 247.877333][ T9547] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 247.877333][ T9547] allowing incompatible features above 0.0: (unknown version) [ 247.912245][ T9547] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 247.920437][ T9547] bcachefs (loop5): Version upgrade required: [ 247.920437][ T9547] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 247.920437][ T9547] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 247.920437][ T9547] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 248.098505][ T9547] bcachefs (loop5): dropping and reconstructing all alloc info [ 248.271347][ T9547] bcachefs (loop5): accounting_read... done [ 248.298720][ T9547] bcachefs (loop5): alloc_read... done [ 248.347864][ T9547] bcachefs (loop5): snapshots_read... done [ 248.397740][ T9547] bcachefs (loop5): done starting filesystem [ 248.804048][ T5830] bcachefs (loop5): shutting down [ 248.826236][ T9618] loop3: detected capacity change from 0 to 1024 [ 248.842815][ T9618] EXT4-fs: Ignoring removed oldalloc option [ 248.848757][ T9618] EXT4-fs: Ignoring removed orlov option [ 248.928115][ T9618] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 248.958211][ T9621] loop2: detected capacity change from 0 to 1024 [ 248.976208][ T9621] EXT4-fs: Ignoring removed orlov option [ 248.992956][ T9621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.994987][ T9624] loop4: detected capacity change from 0 to 256 [ 249.036880][ T9618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.107566][ T5830] bcachefs (loop5): shutdown complete [ 249.160961][ T9632] loop0: detected capacity change from 0 to 256 [ 249.172804][ T9621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.231315][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.394173][ T9632] FAT-fs (loop0): Directory bread(block 64) failed [ 249.406320][ T9632] FAT-fs (loop0): Directory bread(block 65) failed [ 249.412933][ T9632] FAT-fs (loop0): Directory bread(block 66) failed [ 249.445900][ T9632] FAT-fs (loop0): Directory bread(block 67) failed [ 249.452514][ T9632] FAT-fs (loop0): Directory bread(block 68) failed [ 249.515458][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.533144][ T9632] FAT-fs (loop0): Directory bread(block 69) failed [ 249.545130][ T9632] FAT-fs (loop0): Directory bread(block 70) failed [ 249.551668][ T9632] FAT-fs (loop0): Directory bread(block 71) failed [ 249.560153][ T30] audit: type=1326 audit(1747374856.665:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71898e969 code=0x7ffc0000 [ 249.571231][ T9632] FAT-fs (loop0): Directory bread(block 72) failed [ 249.630654][ T30] audit: type=1326 audit(1747374856.665:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71898e969 code=0x7ffc0000 [ 249.654377][ T9632] FAT-fs (loop0): Directory bread(block 73) failed [ 249.661927][ T30] audit: type=1326 audit(1747374856.717:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe71898e969 code=0x7ffc0000 [ 249.689139][ T30] audit: type=1326 audit(1747374856.717:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71898e969 code=0x7ffc0000 [ 249.796153][ T30] audit: type=1326 audit(1747374856.717:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71898e969 code=0x7ffc0000 [ 249.820951][ T9643] loop3: detected capacity change from 0 to 16 [ 249.870256][ T9643] erofs (device loop3): mounted with root inode @ nid 36. [ 250.181571][ T9653] loop3: detected capacity change from 0 to 1764 [ 250.444864][ T9659] loop4: detected capacity change from 0 to 2048 [ 250.461213][ T9664] loop1: detected capacity change from 0 to 1024 [ 250.499968][ T9665] loop0: detected capacity change from 0 to 1024 [ 250.537268][ T9659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.564996][ T5897] Process accounting resumed [ 250.592601][ T9670] Process accounting resumed [ 250.615735][ T9664] hfsplus: bad catalog entry type [ 250.680001][ T30] audit: type=1800 audit(1747374857.810:61): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1439" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 250.869268][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.896766][ T54] hfsplus: b-tree write err: -5, ino 4 [ 251.788445][ T9697] netlink: 'syz.4.1455': attribute type 4 has an invalid length. [ 251.797582][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 251.831881][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1455'. [ 251.860045][ T9675] loop2: detected capacity change from 0 to 32768 [ 251.966902][ T24] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.974562][ T9675] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 251.978367][ T24] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.007265][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.014162][ T24] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 252.024093][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.113793][ T9675] (syz.2.1444,9675,1):ocfs2_verify_group_and_input:433 ERROR: the add group should be in chain 1 [ 252.160870][ T9675] (syz.2.1444,9675,1):ocfs2_group_add:511 ERROR: status = -22 [ 252.179836][ T24] usb 4-1: config 0 descriptor?? [ 252.342314][ T5827] ocfs2: Unmounting device (7,2) on (node local) [ 252.660472][ T24] hid-steam 0003:28DE:1102.002B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 252.819250][ T24] usb 4-1: USB disconnect, device number 14 [ 252.861848][ T9686] loop0: detected capacity change from 0 to 40427 [ 252.891327][ T9713] loop5: detected capacity change from 0 to 4096 [ 252.910984][ T9686] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 252.940311][ T9713] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 252.949845][ T9686] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 252.990917][ T9715] fido_id[9715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 253.026315][ T9686] F2FS-fs (loop0): invalid crc value [ 253.088828][ T9713] ntfs3(loop5): ino=19, mi_enum_attr [ 253.129497][ T9720] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.131560][ T9713] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 253.375011][ T9686] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 253.404410][ T9686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 253.520696][ T9723] loop2: detected capacity change from 0 to 1024 [ 253.585559][ T9723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.807319][ T9723] EXT4-fs warning (device loop2): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 253.917040][ T9707] loop4: detected capacity change from 0 to 40427 [ 253.985218][ T9707] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff [ 254.013809][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.023407][ T9707] F2FS-fs (loop4): invalid crc value [ 254.370784][ T9707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 254.640387][ T9748] loop1: detected capacity change from 0 to 1024 [ 254.678829][ T5829] syz-executor: attempt to access beyond end of device [ 254.678829][ T5829] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.737710][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 254.737744][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.737760][ T5829] Call Trace: [ 254.737770][ T5829] [ 254.737780][ T5829] dump_stack_lvl+0x189/0x250 [ 254.737828][ T5829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.737867][ T5829] ? __pfx_queue_work_on+0x10/0x10 [ 254.737894][ T5829] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 254.737923][ T5829] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.737962][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738004][ T5829] f2fs_handle_critical_error+0x37c/0x540 [ 254.738043][ T5829] f2fs_write_end_io+0x4e2/0x6d0 [ 254.738099][ T5829] __submit_merged_bio+0x27a/0x6a0 [ 254.738137][ T5829] __submit_merged_write_cond+0x255/0x530 [ 254.738191][ T5829] f2fs_write_data_pages+0x2854/0x31f0 [ 254.738221][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738301][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 254.738399][ T5829] ? unwind_get_return_address+0x4d/0x90 [ 254.738431][ T5829] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 254.738459][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738488][ T5829] ? arch_stack_walk+0xfc/0x150 [ 254.738552][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738581][ T5829] ? __lock_acquire+0xaac/0xd20 [ 254.738630][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738676][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738704][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 254.738736][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 254.738767][ T5829] do_writepages+0x3b1/0x7b0 [ 254.738827][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738857][ T5829] ? do_raw_spin_lock+0x121/0x290 [ 254.738887][ T5829] ? __pfx_do_writepages+0x10/0x10 [ 254.738927][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738968][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.738997][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 254.739035][ T5829] filemap_fdatawrite+0x191/0x230 [ 254.739072][ T5829] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 254.739170][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.739208][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 254.739246][ T5829] f2fs_sync_dirty_inodes+0x31f/0x830 [ 254.739303][ T5829] f2fs_write_checkpoint+0x94a/0x1de0 [ 254.739373][ T5829] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 254.739469][ T5829] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 254.739502][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.739531][ T5829] ? kfree+0x193/0x440 [ 254.739562][ T5829] ? kill_f2fs_super+0x298/0x6c0 [ 254.739604][ T5829] kill_f2fs_super+0x2c3/0x6c0 [ 254.739647][ T5829] ? __pfx_kill_f2fs_super+0x10/0x10 [ 254.739677][ T5829] ? radix_tree_delete_item+0x2b6/0x400 [ 254.739718][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.739746][ T5829] ? shrinker_free+0x2ce/0x3e0 [ 254.739776][ T5829] deactivate_locked_super+0xbc/0x130 [ 254.739807][ T5829] cleanup_mnt+0x425/0x4c0 [ 254.739846][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.739875][ T5829] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.739910][ T5829] task_work_run+0x1d4/0x260 [ 254.739955][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 254.739989][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.740034][ T5829] resume_user_mode_work+0x5e/0x80 [ 254.740075][ T5829] syscall_exit_to_user_mode+0x9a/0x120 [ 254.740107][ T5829] do_syscall_64+0x103/0x210 [ 254.740140][ T5829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.740169][ T5829] ? exc_page_fault+0x91/0x110 [ 254.740201][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.740225][ T5829] RIP: 0033:0x7f310a38fc97 [ 254.740246][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 254.740268][ T5829] RSP: 002b:00007ffe23602f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 254.740293][ T5829] RAX: 0000000000000000 RBX: 00007f310a41089d RCX: 00007f310a38fc97 [ 254.740311][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe23603040 [ 254.740327][ T5829] RBP: 00007ffe23603040 R08: 0000000000000000 R09: 0000000000000000 [ 254.740343][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe236040d0 [ 254.740361][ T5829] R13: 00007f310a41089d R14: 000000000003e34b R15: 00007ffe23604110 [ 254.740405][ T5829] [ 254.740416][ T5829] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 254.804402][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.179141][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.345357][ T9759] loop3: detected capacity change from 0 to 1024 [ 255.352717][ T9759] EXT4-fs: Ignoring removed bh option [ 255.401759][ T9759] EXT4-fs: inline encryption not supported [ 255.434794][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1481'. [ 255.454296][ T9759] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 255.474247][ T9764] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1481'. [ 255.502450][ T9764] netlink: 'syz.5.1481': attribute type 10 has an invalid length. [ 255.515998][ T9759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 255.557798][ T9759] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.1480: lblock 2 mapped to illegal pblock 2 (length 1) [ 255.655872][ T9759] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 255.664499][ T9759] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.1480: lblock 0 mapped to illegal pblock 48 (length 1) [ 255.684325][ T9759] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 255.693599][ T9773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1483'. [ 255.693926][ T9770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1483'. [ 255.737034][ T9759] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1480: Failed to acquire dquot type 0 [ 255.761784][ T9762] loop0: detected capacity change from 0 to 4096 [ 255.802936][ T9762] ntfs3(loop0): It is recommened to use chkdsk. [ 255.816975][ T9759] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 255.844646][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 255.866034][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 255.875291][ T9759] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.1480: mark_inode_dirty error [ 255.895306][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 255.923075][ T9759] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 255.948303][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 255.967900][ T9759] EXT4-fs (loop3): 1 orphan inode deleted [ 255.988262][ T9759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.004403][ T13] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 256.020755][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 256.073527][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 256.101155][ T13] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 256.120171][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 256.153889][ T9759] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.1480: Invalid inode table block 1 in block_group 0 [ 256.168422][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 256.191281][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 256.207920][ T9759] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 256.209890][ T9762] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 256.364834][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.405004][ T5828] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 256.442793][ T5828] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 256.468576][ T5828] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 256.624640][ T9790] loop2: detected capacity change from 0 to 512 [ 256.734143][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 256.801585][ T9790] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.883992][ T9790] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it [ 256.894633][ T9790] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.1493: Corrupt directory, running e2fsck is recommended [ 256.917958][ T9790] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 256.981278][ T9790] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.1493: corrupted in-inode xattr: invalid ea_ino [ 257.011405][ T9790] EXT4-fs (loop2): Remounting filesystem read-only [ 257.046008][ T9790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.159147][ T9790] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 257.207154][ T9790] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 257.272488][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.302753][ T9784] loop4: detected capacity change from 0 to 32768 [ 257.305570][ T5930] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 257.373501][ T9784] JBD2: Ignoring recovery information on journal [ 257.487974][ T5930] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 257.522767][ T9784] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 257.526982][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.609334][ T5930] usb 4-1: config 0 descriptor?? [ 257.621375][ T9815] loop0: detected capacity change from 0 to 256 [ 257.672705][ T9784] (syz.4.1477,9784,0):ocfs2_file_write_iter:2446 ERROR: status = -27 [ 257.728241][ T30] audit: type=1800 audit(1747374864.977:62): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1501" name="=1,uni_xlate=0,fmask=00000000000000000000040,utf8=0,nonumtail=0,shortname=win95,shortname=lower,shortname=winnt,uni_xlate=1,time_offset=0x00000000000001fb,flush,uni_xlate=0,shortname=win95," dev="loop0" ino=1048767 res=0 errno=0 [ 257.875847][ T5930] [drm] vendor descriptor length:6 data:06 5f 01 ff ff ff 00 00 00 00 00 [ 257.883215][ T5829] ocfs2: Unmounting device (7,4) on (node local) [ 257.915965][ T5930] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 258.082101][ T5930] [drm:udl_init] *ERROR* Selecting channel failed [ 258.198524][ T9819] loop5: detected capacity change from 0 to 32768 [ 258.338322][ T5930] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 258.392741][ T5930] [drm] Initialized udl on minor 2 [ 258.406853][ T9819] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 258.435644][ T9819] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 258.435644][ T9819] allowing incompatible features above 0.0: (unknown version) [ 258.448146][ T5930] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.462079][ T9819] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 258.478594][ T9819] bcachefs (loop5): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 258.478594][ T9819] Doing compatible version upgrade from 1.19: autofix_errors to 1.25: extent_flags [ 258.478594][ T9819] running recovery passes: check_extents_to_backpointers [ 258.505671][ T9819] bcachefs (loop5): dropping and reconstructing all alloc info [ 258.515457][ T9819] bcachefs (loop5): btree node read error: no device to read from [ 258.515457][ T9819] at extents level 0/0 [ 258.515457][ T9819] u64s 11 type 145 SPOS_MAX len 0 ver 0: [ 258.533374][ T9819] bcachefs (loop5): flagging btree extents lost data [ 258.540220][ T9819] bcachefs (loop5): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 258.553193][ T9819] bcachefs (loop5): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 258.566188][ T9819] bcachefs (loop5): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 258.579431][ T9819] bcachefs (loop5): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 258.590507][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.605564][ T9819] bcachefs (loop5): bcachefs (loop5): error validating btree node at btree dirents level 0/0 [ 258.605591][ T9819] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 258.605611][ T9819] node offset 8/24 bset u64s 6 bset byte offset 40: bad k->u64s 0 (min 3 max 253), fixing [ 258.641111][ T9819] bcachefs (loop5): bcachefs (loop5): error validating btree node at btree dirents level 0/0 [ 258.641131][ T9819] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 258.641153][ T9819] node offset 16/24 bset u64s 36 bset byte offset 200: keys out of order: u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0 > u64s 8 type dirent 0:112405674:U32_MAX len 0 ver 0, fixing [ 258.687591][ T9819] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [ 258.687591][ T9819] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 258.722330][ T9819] bcachefs (loop5): bcachefs (loop5): error validating btree node on loop5 at btree xattrs level 0/0 [ 258.722358][ T9819] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 258.722384][ T9819] node offset 0/16: got wrong btree node: got [ 258.722397][ T9819] btree=xattrs level=0 seq ded0abe32 1 [ 258.722410][ T9819] min: POS_MIN [ 258.722419][ T9819] max: SPOS_MAX, btree topology error: [ 258.736084][ T5930] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 258.746911][ T9819] bcachefs (loop5): flagging btree xattrs lost data [ 258.786178][ T9819] bcachefs (loop5): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 258.814377][ T9819] bcachefs (loop5): scan_for_btree_nodes... [ 258.821500][ T24] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 258.863434][ T9837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1508'. [ 258.893507][ T9819] bcachefs (loop5): btree node scan found 3 nodes after overwrites [ 258.901492][ T9819] done [ 258.905843][ T9819] bcachefs (loop5): check_topology... [ 258.906557][ T9819] bcachefs (loop5): btree root extents unreadable, must recover from scan [ 258.920828][ T9819] bcachefs (loop5): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 258.931609][ T9819] bcachefs (loop5): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 258.956498][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.972218][ T9819] bcachefs (loop5): btree root xattrs unreadable, must recover from scan [ 258.975376][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.980845][ T9819] bcachefs (loop5): bch2_get_scanned_nodes(): recovery btree=xattrs level=0 POS_MIN - SPOS_MAX [ 258.981046][ T9819] bcachefs (loop5): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ded0abe32 written 8 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 259.019918][ T9819] done [ 259.023453][ T9819] bcachefs (loop5): accounting_read... done [ 259.063997][ T9819] bcachefs (loop5): alloc_read... done [ 259.071600][ T9819] bcachefs (loop5): snapshots_read... done [ 259.077659][ T9819] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 259.087430][ T9819] bcachefs (loop5): done starting filesystem [ 259.087737][ T5154] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 259.119932][ T5930] usb 4-1: USB disconnect, device number 15 [ 259.173367][ T5154] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 259.199402][ T24] usb 5-1: Product: syz [ 259.206350][ T24] usb 5-1: Manufacturer: syz [ 259.211516][ T24] usb 5-1: SerialNumber: syz [ 259.217079][ T5830] bcachefs (loop5): shutting down [ 259.314229][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.342507][ T5154] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.351851][ T9843] loop1: detected capacity change from 0 to 64 [ 259.376346][ T5830] bcachefs (loop5): shutdown complete [ 259.515954][ T9847] loop0: detected capacity change from 0 to 512 [ 259.641705][ T9847] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 259.657217][ T9847] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 259.730858][ T9847] EXT4-fs (loop0): 1 truncate cleaned up [ 259.748618][ T9847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.881868][ T9847] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 260.025994][ T9855] loop3: detected capacity change from 0 to 8 [ 260.056519][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.097126][ T5930] usb 5-1: USB disconnect, device number 14 [ 260.146322][ T9832] loop2: detected capacity change from 0 to 32768 [ 260.194598][ T9832] [ 260.194598][ T9832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.194598][ T9832] [ 260.292852][ T9832] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 260.292852][ T9832] [ 260.504383][ T54] [ 260.504383][ T54] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.504383][ T54] [ 260.533126][ T54] [ 260.533126][ T54] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.533126][ T54] [ 260.562003][ T115] [ 260.562003][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.562003][ T115] [ 260.607235][ T5827] [ 260.607235][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.607235][ T5827] [ 260.635181][ T5132] Bluetooth: hci5: unexpected event for opcode 0x204e [ 260.661966][ T5827] [ 260.661966][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.661966][ T5827] [ 260.686451][ T5154] usb 5-1: Service connection timeout for: 256 [ 260.702784][ T5154] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 260.718302][ T5154] ath9k_htc: Failed to initialize the device [ 260.725313][ T5930] usb 5-1: ath9k_htc: USB layer deinitialized [ 261.176569][ T9879] sp0: Synchronizing with TNC [ 261.216763][ T9884] sp0: Found TNC [ 261.254801][ T9877] [U] è` [ 261.376289][ T9886] loop2: detected capacity change from 0 to 4096 [ 262.621726][ T9923] loop1: detected capacity change from 0 to 256 [ 262.792414][ T9923] FAT-fs (loop1): Directory bread(block 64) failed [ 262.829682][ T9923] FAT-fs (loop1): Directory bread(block 65) failed [ 262.860051][ T9923] FAT-fs (loop1): Directory bread(block 66) failed [ 262.880066][ T9923] FAT-fs (loop1): Directory bread(block 67) failed [ 262.913181][ T9923] FAT-fs (loop1): Directory bread(block 68) failed [ 262.964675][ T9923] FAT-fs (loop1): Directory bread(block 69) failed [ 262.971293][ T9923] FAT-fs (loop1): Directory bread(block 70) failed [ 263.032353][ T9923] FAT-fs (loop1): Directory bread(block 71) failed [ 263.046055][ T9923] FAT-fs (loop1): Directory bread(block 72) failed [ 263.053711][ T9923] FAT-fs (loop1): Directory bread(block 73) failed [ 263.219470][ T9905] loop4: detected capacity change from 0 to 32768 [ 263.450251][ T9945] loop1: detected capacity change from 0 to 256 [ 263.519069][ T9945] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 263.538323][ T9905] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 263.765310][ T9905] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 263.765310][ T9905] allowing incompatible features above 0.0: (unknown version) [ 263.845287][ T9905] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 263.853482][ T9905] bcachefs (loop4): Version upgrade required: [ 263.853482][ T9905] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 263.853482][ T9905] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 263.853482][ T9905] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 264.031068][ T9905] bcachefs (loop4): dropping and reconstructing all alloc info [ 264.051093][ T9925] loop2: detected capacity change from 0 to 32768 [ 264.073837][ T9925] btrfs: Deprecated parameter 'usebackuproot' [ 264.101544][ T9905] bcachefs (loop4): accounting_read... [ 264.106259][ T9925] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 264.133177][ T9905] done [ 264.142550][ T9905] bcachefs (loop4): alloc_read... done [ 264.153854][ T9925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1549 (9925) [ 264.185844][ T9905] bcachefs (loop4): snapshots_read... done [ 264.210340][ T9905] bcachefs (loop4): done starting filesystem [ 264.243621][ T5154] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 264.273219][ T9925] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.296190][ T9925] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 264.353690][ T9925] BTRFS info (device loop2): using free-space-tree [ 264.413251][ T5154] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.430126][ T5154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.447080][ T5154] usb 2-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 264.521764][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.551801][ T5154] usb 2-1: config 0 descriptor?? [ 264.598225][ T54] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 264.631121][ T9925] BTRFS warning (device loop2): couldn't read tree root [ 264.638722][ T9925] BTRFS warning (device loop2): try to load backup roots slot 1 [ 264.646845][ T54] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 264.660382][ T9925] BTRFS warning (device loop2): couldn't read tree root [ 264.667362][ T9925] BTRFS warning (device loop2): try to load backup roots slot 2 [ 264.696150][ T13] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 264.714949][ T5829] bcachefs (loop4): shutting down [ 264.750450][ T9925] BTRFS warning (device loop2): couldn't read tree root [ 264.758030][ T9925] BTRFS warning (device loop2): try to load backup roots slot 3 [ 264.822213][ T9925] BTRFS info (device loop2): rebuilding free space tree [ 264.871577][ T9925] BTRFS info (device loop2): checking UUID tree [ 264.897145][ T5829] bcachefs (loop4): shutdown complete [ 264.983602][ T5154] hid-generic 0003:18D1:5030.002C: ignoring exceeding usage max [ 265.009064][ T9947] loop0: detected capacity change from 0 to 32768 [ 265.059747][ T5154] hid-generic 0003:18D1:5030.002C: hidraw0: USB HID v0.00 Device [HID 18d1:5030] on usb-dummy_hcd.1-1/input0 [ 265.210937][ T5154] usb 2-1: USB disconnect, device number 12 [ 265.321178][ T5827] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.453254][ T9989] fido_id[9989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 265.598353][ T9979] loop3: detected capacity change from 0 to 40427 [ 265.619283][ T9979] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3fffff [ 265.701510][ T9979] F2FS-fs (loop3): invalid crc value [ 265.749950][ T9947] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 265.991978][ T9947] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 265.991978][ T9947] allowing incompatible features above 0.0: (unknown version) [ 266.063726][ T9947] bcachefs (loop0): initializing new filesystem [ 266.112805][ T9947] bcachefs (loop0): going read-write [ 266.166837][ T9947] bcachefs (loop0): marking superblocks [ 266.225996][ T9979] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 266.257920][T10006] loop2: detected capacity change from 0 to 1024 [ 266.264752][ T9947] bcachefs (loop0): initializing freespace [ 266.291866][ T30] audit: type=1800 audit(1747374873.623:63): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1564" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 266.355728][ T9947] bcachefs (loop0): done initializing freespace [ 266.372489][ T9947] bcachefs (loop0): reading snapshots table [ 266.372551][ T9947] bcachefs (loop0): reading snapshots done [ 266.398699][ T9979] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x119a/0x43b0 [ 266.440825][ T9947] bcachefs (loop0): done starting filesystem [ 266.631108][ T65] hfsplus: b-tree write err: -5, ino 4 [ 266.781901][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'. [ 266.802536][ T5832] bcachefs (loop0): shutting down [ 266.821280][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1572'. [ 266.830447][ T5832] bcachefs (loop0): going read-only [ 266.851673][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 266.860578][ T5828] syz-executor: attempt to access beyond end of device [ 266.860578][ T5828] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.903024][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 266.921929][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 266.921965][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.921981][ T5828] Call Trace: [ 266.921991][ T5828] [ 266.922000][ T5828] dump_stack_lvl+0x189/0x250 [ 266.922045][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.922082][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 266.922105][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 266.922133][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 266.922162][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.922201][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 266.922236][ T5828] f2fs_write_end_io+0x4e2/0x6d0 [ 266.922285][ T5828] __submit_merged_bio+0x27a/0x6a0 [ 266.922319][ T5828] __submit_merged_write_cond+0x255/0x530 [ 266.922370][ T5828] f2fs_write_data_pages+0x2854/0x31f0 [ 266.922397][ T5828] ? validate_chain+0x897/0x2140 [ 266.922460][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 266.922508][ T5828] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 266.922568][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.922601][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.922628][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 266.922677][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.922704][ T5828] ? __lock_acquire+0xaac/0xd20 [ 266.922748][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.922790][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.922818][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 266.922849][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 266.922880][ T5828] do_writepages+0x3b1/0x7b0 [ 266.922933][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.922964][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 266.922992][ T5828] ? __pfx_do_writepages+0x10/0x10 [ 266.923029][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.923059][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.923085][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 266.923120][ T5828] filemap_fdatawrite+0x191/0x230 [ 266.923154][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 266.923238][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.923271][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 266.923305][ T5828] f2fs_sync_dirty_inodes+0x31f/0x830 [ 266.923356][ T5828] f2fs_write_checkpoint+0x94a/0x1de0 [ 266.923416][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 266.923498][ T5828] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 266.923529][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.923556][ T5828] ? kfree+0x193/0x440 [ 266.923586][ T5828] ? kill_f2fs_super+0x298/0x6c0 [ 266.923625][ T5828] kill_f2fs_super+0x2c3/0x6c0 [ 266.923664][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 266.923694][ T5828] ? radix_tree_delete_item+0x2b6/0x400 [ 266.923730][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.923758][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 266.923787][ T5828] deactivate_locked_super+0xbc/0x130 [ 266.923814][ T5828] cleanup_mnt+0x425/0x4c0 [ 266.923852][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.923879][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.923911][ T5828] task_work_run+0x1d4/0x260 [ 266.923949][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 266.923985][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.924026][ T5828] resume_user_mode_work+0x5e/0x80 [ 266.924061][ T5828] syscall_exit_to_user_mode+0x9a/0x120 [ 266.924093][ T5828] do_syscall_64+0x103/0x210 [ 266.924124][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.924151][ T5828] ? exc_page_fault+0x91/0x110 [ 266.924182][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.924205][ T5828] RIP: 0033:0x7fe71898fc97 [ 266.924226][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 266.924246][ T5828] RSP: 002b:00007ffcbf198558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 266.924271][ T5828] RAX: 0000000000000000 RBX: 00007fe718a1089d RCX: 00007fe71898fc97 [ 266.924289][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbf198610 [ 266.924304][ T5828] RBP: 00007ffcbf198610 R08: 0000000000000000 R09: 0000000000000000 [ 266.924320][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbf1996a0 [ 266.924337][ T5828] R13: 00007fe718a1089d R14: 00000000000412cc R15: 00007ffcbf1996e0 [ 266.924376][ T5828] [ 266.924385][ T5828] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 267.493715][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 267.520481][ T5832] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 267.613236][ T5832] bcachefs (loop0): marking filesystem clean [ 267.811572][ T5832] bcachefs (loop0): shutdown complete [ 267.818972][T10030] loop5: detected capacity change from 0 to 1024 [ 267.846962][T10030] EXT4-fs: Ignoring removed bh option [ 267.974715][T10030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.017649][T10043] loop4: detected capacity change from 0 to 256 [ 268.072119][T10030] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1582: inode #2905849479: comm syz.5.1582: iget: illegal inode # [ 268.138789][T10043] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 268.183050][T10030] EXT4-fs (loop5): Remounting filesystem read-only [ 268.190594][T10030] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #19: comm syz.5.1582: dec ref error=-30 [ 268.298676][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.908693][T10065] loop3: detected capacity change from 0 to 256 [ 268.940496][T10065] FAT-fs (loop3): Directory bread(block 1285) failed [ 268.997803][T10065] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 269.069008][T10069] loop2: detected capacity change from 0 to 2048 [ 269.317766][T10073] tipc: MTU too low for tipc bearer [ 269.512783][T10082] loop5: detected capacity change from 0 to 512 [ 269.581973][T10082] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.640496][T10082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 269.649472][T10082] System zones: 1-12 [ 269.656664][T10082] EXT4-fs (loop5): 1 truncate cleaned up [ 269.665576][T10082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.914402][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.020829][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 270.189425][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 270.210931][ T5897] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 270.231056][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.284425][ T5897] usb 2-1: config 0 descriptor?? [ 270.368796][T10109] sctp: [Deprecated]: syz.2.1614 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.368796][T10109] Use struct sctp_sack_info instead [ 270.445007][T10111] sctp: [Deprecated]: syz.2.1614 (pid 10111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.445007][T10111] Use struct sctp_sack_info instead [ 270.526412][ T5154] kernel write not supported for file /602/attr/exec (pid: 5154 comm: kworker/1:2) [ 270.819915][ T5897] aquacomputer_d5next 0003:0C70:F00D.002D: hidraw0: USB HID v0.05 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 270.985126][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1621'. [ 271.063058][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1621'. [ 271.097981][ T5897] usb 2-1: USB disconnect, device number 13 [ 271.232572][T10122] fido_id[10122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 271.462266][ T5930] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 271.579757][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 271.645479][ T5930] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 271.672425][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.714930][ T5930] usb 6-1: config 0 descriptor?? [ 271.855601][T10142] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 271.855601][T10142] [ 272.144474][ T5930] creative-sb0540 0003:041E:3100.002E: unknown main item tag 0x1 [ 272.198484][ T5930] creative-sb0540 0003:041E:3100.002E: item fetching failed at offset 2/5 [ 272.237728][ T5930] creative-sb0540 0003:041E:3100.002E: parse failed [ 272.248566][ T5930] creative-sb0540 0003:041E:3100.002E: probe with driver creative-sb0540 failed with error -22 [ 272.350718][ T5930] usb 6-1: USB disconnect, device number 12 [ 272.492656][T10129] loop3: detected capacity change from 0 to 32768 [ 272.535396][T10129] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1624 (10129) [ 272.602669][T10129] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 272.613713][T10166] netlink: 'syz.2.1643': attribute type 61 has an invalid length. [ 272.642473][T10129] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 272.745735][ T5833] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 272.892419][T10129] BTRFS info (device loop3): rebuilding free space tree [ 272.940553][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.986211][T10129] BTRFS info (device loop3): disabling free space tree [ 273.013129][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.038100][T10129] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.068090][ T5833] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 273.094321][T10129] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 273.124027][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.163172][ T5833] usb 5-1: config 0 descriptor?? [ 273.631195][ T5833] elo 0003:04E7:0030.002F: item fetching failed at offset 5/7 [ 273.682979][ T5833] elo 0003:04E7:0030.002F: parse failed [ 273.700372][ T5833] elo 0003:04E7:0030.002F: probe with driver elo failed with error -22 [ 273.838269][ T5833] usb 5-1: USB disconnect, device number 15 [ 273.926442][ T5828] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.120479][T10213] loop5: detected capacity change from 0 to 4096 [ 274.199025][T10218] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.341344][T10193] loop1: detected capacity change from 0 to 32768 [ 274.379831][T10213] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 274.458460][T10213] Remounting filesystem read-only [ 274.615226][ T5830] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 275.443475][ T5894] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 275.634206][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.662564][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.688101][T10215] loop0: detected capacity change from 0 to 32768 [ 275.711496][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 275.741209][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.766237][ T5894] usb 4-1: config 0 descriptor?? [ 275.839352][T10244] loop5: detected capacity change from 0 to 512 [ 275.882518][T10244] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 275.952438][T10244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 276.077893][T10244] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1671: bad orphan inode 7 [ 276.128516][T10227] loop1: detected capacity change from 0 to 32768 [ 276.210006][T10244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.268449][ T5894] logitech-djreceiver 0003:046D:C71B.0030: hidraw0: USB HID v0.02 Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input0 [ 276.309759][T10244] EXT4-fs error (device loop5): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz.5.1671: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=199, size=1024 fake=0 [ 276.459420][ T5894] usb 4-1: USB disconnect, device number 16 [ 276.597990][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.673868][T10255] fido_id[10255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 276.900353][T10266] loop4: detected capacity change from 0 to 64 [ 276.921363][T10262] loop5: detected capacity change from 0 to 1024 [ 276.942526][T10262] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 276.997586][T10262] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 277.046226][T10262] EXT4-fs (loop5): invalid journal inode [ 277.095112][T10262] EXT4-fs (loop5): can't get journal size [ 277.131408][T10262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.187999][T10262] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #16: comm syz.5.1679: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 277.266218][T10271] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #16: comm syz.5.1679: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 277.344675][T10273] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 277.394679][T10273] [U] J"—e:ÀÆ" [ 277.445496][T10272] [U] Y [ 277.523711][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.583494][T10277] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[10277] [ 278.062863][T10288] loop0: detected capacity change from 0 to 2048 [ 278.114866][T10288] EXT4-fs: inline encryption not supported [ 278.146855][T10288] EXT4-fs: Ignoring removed oldalloc option [ 278.266138][T10288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.321818][T10303] loop3: detected capacity change from 0 to 256 [ 278.420163][T10288] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.1690: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 278.494065][T10303] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 278.569432][T10302] loop5: detected capacity change from 0 to 4096 [ 278.641828][T10302] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 278.706968][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.748448][T10302] ntfs3(loop5): ino=19, mi_enum_attr [ 278.757198][T10302] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 278.817957][T10302] ntfs3(loop5): MFT: r=b, expect seq=0 instead of b! [ 279.309336][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 279.333494][T10325] loop0: detected capacity change from 0 to 256 [ 279.347790][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1708'. [ 279.409882][T10325] exfat: Deprecated parameter 'namecase' [ 279.415611][T10325] exfat: Deprecated parameter 'utf8' [ 279.481056][T10325] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 279.535150][T10327] loop3: detected capacity change from 0 to 64 [ 279.599861][T10325] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 279.666002][T10327] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 279.964069][T10335] loop4: detected capacity change from 0 to 1024 [ 280.038900][T10335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.578106][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.671427][T10356] loop5: detected capacity change from 0 to 128 [ 280.750349][T10356] FAT-fs (loop5): error, clusters badly computed (2 != 0) [ 280.791169][T10356] FAT-fs (loop5): Filesystem has been set read-only [ 280.805606][T10324] loop1: detected capacity change from 0 to 32768 [ 280.825283][T10356] FAT-fs (loop5): error, clusters badly computed (3 != 1) [ 280.845321][T10324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1706 (10324) [ 280.875528][T10356] FAT-fs (loop5): error, clusters badly computed (4 != 2) [ 280.979177][T10324] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.048324][T10324] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 281.108506][T10324] BTRFS info (device loop1): using free-space-tree [ 281.197535][T10363] loop3: detected capacity change from 0 to 1024 [ 281.732103][ T30] audit: type=1326 audit(1747374889.136:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.4.1730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f310a38e969 code=0x0 [ 281.755425][ T5831] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.778090][T10350] loop0: detected capacity change from 0 to 32768 [ 281.832077][ T5897] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 281.842023][T10350] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1718 (10350) [ 281.890461][T10350] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.946049][T10350] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 282.002268][T10350] BTRFS info (device loop0): disk space caching is enabled [ 282.019137][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.040617][T10350] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 282.061909][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.072041][T10393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.091584][ T5897] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 282.107278][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.129989][ T5897] usb 6-1: config 0 descriptor?? [ 282.298574][T10350] BTRFS info (device loop0): rebuilding free space tree [ 282.380894][T10350] BTRFS info (device loop0): disabling free space tree [ 282.411309][T10350] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.447195][T10350] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.490414][T10415] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1733'. [ 282.580425][ T5897] hid (null): unknown global tag 0xc [ 282.630778][ T5897] steelseries 0003:1038:12B6.0031: unknown main item tag 0x4 [ 282.661179][ T5897] steelseries 0003:1038:12B6.0031: unknown global tag 0xc [ 282.689770][ T5897] steelseries 0003:1038:12B6.0031: item 0 0 1 12 parsing failed [ 282.731072][ T5897] steelseries 0003:1038:12B6.0031: probe with driver steelseries failed with error -22 [ 282.813883][T10421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1737'. [ 282.821178][T10350] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512 [ 282.852929][ T5897] usb 6-1: USB disconnect, device number 13 [ 282.856754][T10421] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1737'. [ 282.910371][T10421] netlink: 'syz.3.1737': attribute type 5 has an invalid length. [ 282.962442][T10421] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1737'. [ 283.031262][ T5832] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.463926][T10414] loop1: detected capacity change from 0 to 32768 [ 283.545157][T10414] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 283.825479][T10414] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 283.989525][T10414] XFS (loop1): Starting recovery (logdev: internal) [ 284.025871][T10457] sp0: Synchronizing with TNC [ 284.093655][T10414] XFS (loop1): Ending recovery (logdev: internal) [ 284.225792][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 284.267714][T10457] [U] è [ 284.406282][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 284.410506][T10466] loop4: detected capacity change from 0 to 2048 [ 284.432411][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.460219][T10466] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 284.477185][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 284.483951][ T5831] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 284.548495][T10469] loop5: detected capacity change from 0 to 512 [ 284.548629][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.618996][ T24] usb 3-1: config 0 descriptor?? [ 284.637645][T10469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.739058][T10469] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.048915][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.106077][ T24] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.0032/input/input11 [ 285.173761][ T5930] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 285.298649][ T24] uclogic 0003:28BD:0909.0032: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 285.386579][ T5930] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 285.399008][T10488] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 285.408875][ T24] usb 3-1: USB disconnect, device number 13 [ 285.436337][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.507377][ T5930] usb 1-1: config 0 descriptor?? [ 285.549816][ T5930] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 285.616951][ T5930] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 285.699570][T10491] fido_id[10491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 285.784381][ T24] usb 1-1: USB disconnect, device number 10 [ 285.879580][T10462] loop3: detected capacity change from 0 to 32768 [ 286.232365][T10509] loop4: detected capacity change from 0 to 512 [ 286.291195][T10509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 286.347186][T10513] loop1: detected capacity change from 0 to 1024 [ 286.386528][T10509] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1766: bad orphan inode 131083 [ 286.561613][T10509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.787199][T10519] loop5: detected capacity change from 0 to 4096 [ 286.817108][T10519] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 286.846469][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.919298][T10519] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 286.920982][T10519] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 288.039532][T10563] gretap0: entered promiscuous mode [ 288.068660][T10563] macsec1: entered promiscuous mode [ 288.149268][T10563] gretap0: left promiscuous mode [ 288.187727][ T5894] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 288.378383][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 288.421448][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.473307][T10573] loop1: detected capacity change from 0 to 256 [ 288.496130][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.575572][ T5894] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 288.615574][T10573] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 288.627579][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.645281][ T5894] usb 1-1: config 0 descriptor?? [ 288.827143][ T5833] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 288.869005][T10584] netlink: 'syz.4.1795': attribute type 1 has an invalid length. [ 288.907401][T10584] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1795'. [ 288.936436][T10584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1795'. [ 289.018561][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 289.055556][ T5833] usb 6-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 289.097930][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.110628][ T5894] ryos 0003:1E7D:3138.0033: unknown main item tag 0x0 [ 289.146873][ T5894] ryos 0003:1E7D:3138.0033: unknown main item tag 0x0 [ 289.158519][ T5833] usb 6-1: config 0 descriptor?? [ 289.165901][ T5894] ryos 0003:1E7D:3138.0033: item fetching failed at offset 4/5 [ 289.199821][T10558] loop3: detected capacity change from 0 to 32768 [ 289.207856][ T5894] ryos 0003:1E7D:3138.0033: parse failed [ 289.213562][ T5894] ryos 0003:1E7D:3138.0033: probe with driver ryos failed with error -22 [ 289.282141][T10558] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.346191][ T5930] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 289.349519][ T5894] usb 1-1: USB disconnect, device number 11 [ 289.510598][ T5930] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 289.528435][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.550288][ T5930] usb 2-1: config 0 descriptor?? [ 289.606123][ T5833] hid (null): global environment stack underflow [ 289.612507][T10558] XFS (loop3): Ending clean mount [ 289.643364][ T5833] wacom 0003:056A:0325.0034: global environment stack underflow [ 289.663139][ T5833] wacom 0003:056A:0325.0034: item 0 0 1 11 parsing failed [ 289.729559][ T5833] wacom 0003:056A:0325.0034: parse failed [ 289.766770][ T5833] wacom 0003:056A:0325.0034: probe with driver wacom failed with error -22 [ 289.835223][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.927546][ T5897] usb 6-1: USB disconnect, device number 14 [ 290.025320][ T5930] saitek 0003:0738:1705.0035: hidraw0: USB HID v1.03 Device [HID 0738:1705] on usb-dummy_hcd.1-1/input0 [ 290.131375][T10614] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 290.279379][ T5930] usb 2-1: USB disconnect, device number 14 [ 290.482115][T10617] fido_id[10617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 290.596354][T10623] loop3: detected capacity change from 0 to 128 [ 290.670555][T10623] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 290.713634][T10623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.870866][T10625] loop4: detected capacity change from 0 to 256 [ 290.970962][T10625] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 291.061360][T10625] FAT-fs (loop4): Filesystem has been set read-only [ 291.186793][T10629] loop1: detected capacity change from 0 to 2048 [ 291.230680][T10635] loop3: detected capacity change from 0 to 16 [ 291.246161][T10633] loop2: detected capacity change from 0 to 2048 [ 291.314338][T10635] erofs (device loop3): mounted with root inode @ nid 36. [ 291.411635][T10629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.426541][T10633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.544077][T10633] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.1813: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 291.665150][T10633] EXT4-fs (loop2): Remounting filesystem read-only [ 291.711838][ T5894] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 291.742927][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.888413][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.921730][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 291.988280][ T5894] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.038355][ T5894] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 292.083635][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 292.083678][ T5894] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 292.083707][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.120991][ T5894] usb 6-1: config 0 descriptor?? [ 292.427881][ T5930] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 292.438352][T10664] tracefs: Bad value for 'uid' [ 292.479930][T10664] tracefs: Bad value for 'uid' [ 292.570691][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 292.587606][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.587661][ T5930] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 292.587690][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.591889][ T5930] usb 3-1: config 0 descriptor?? [ 292.673975][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1828'. [ 292.678019][ T5894] corsair-cpro 0003:1B1C:0C10.0036: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 292.753063][ T5894] corsair-cpro 0003:1B1C:0C10.0036: probe with driver corsair-cpro failed with error -38 [ 292.882801][ T5833] usb 6-1: USB disconnect, device number 15 [ 293.039107][T10673] fido_id[10673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 293.093053][ T5930] aquacomputer_d5next 0003:0C70:F014.0037: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 293.105325][T10679] : entered promiscuous mode [ 293.226098][ T5930] usb 3-1: USB disconnect, device number 14 [ 293.263433][ T5893] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 293.369123][T10682] fido_id[10682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 293.429049][ T5893] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 293.429083][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.429109][ T5893] usb 5-1: Product: syz [ 293.429128][ T5893] usb 5-1: Manufacturer: syz [ 293.429148][ T5893] usb 5-1: SerialNumber: syz [ 293.439048][ T5893] usb 5-1: config 0 descriptor?? [ 293.552267][T10688] loop3: detected capacity change from 0 to 512 [ 293.591802][ T5893] comedi comedi0: Wrong number of endpoints [ 293.591869][ T5893] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 293.634811][T10688] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1836: inode #15: comm syz.3.1836: iget: illegal inode # [ 293.635186][T10688] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1836: couldn't read orphan inode 15 (err -117) [ 293.674833][T10688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.723241][T10692] loop1: detected capacity change from 0 to 256 [ 293.724277][T10692] exfat: Deprecated parameter 'namecase' [ 293.724354][T10692] exfat: Deprecated parameter 'namecase' [ 293.792579][ T5893] usb 5-1: USB disconnect, device number 16 [ 293.866348][T10692] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 293.886255][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.055885][T10698] loop3: detected capacity change from 0 to 512 [ 294.061038][T10698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.111069][T10698] EXT4-fs (loop3): 1 truncate cleaned up [ 294.115947][T10698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.335513][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.226771][T10731] loop0: detected capacity change from 0 to 4096 [ 295.300816][T10731] NILFS (loop0): invalid segment: Checksum error in segment payload [ 295.323045][T10738] loop4: detected capacity change from 0 to 128 [ 295.323508][T10731] NILFS (loop0): trying rollback from an earlier position [ 295.405109][T10731] NILFS (loop0): recovery complete [ 295.427679][T10741] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.874205][T10751] loop4: detected capacity change from 0 to 512 [ 296.060767][T10757] loop3: detected capacity change from 0 to 1024 [ 296.079156][T10751] EXT4-fs (loop4): 1 orphan inode deleted [ 296.140877][T10751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.170993][ T5915] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.210519][T10757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.265627][ T5915] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 296.285315][T10751] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.331176][T10757] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.1867: Abort forced by user [ 296.410482][T10757] EXT4-fs (loop3): Remounting filesystem read-only [ 296.453461][T10773] loop1: detected capacity change from 0 to 16 [ 296.459358][T10757] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 296.492890][T10773] erofs (device loop1): mounted with root inode @ nid 36. [ 296.534734][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.547244][T10771] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 296.553908][ T82] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.555530][ T30] audit: type=1800 audit(1747374903.963:65): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1872" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 296.595599][ T5893] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 296.620123][ T82] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 296.787396][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.807247][ T5893] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.825583][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.832220][ T5893] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 296.904100][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.919041][T10777] loop1: detected capacity change from 0 to 512 [ 296.940014][T10777] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.956749][ T5893] usb 1-1: config 0 descriptor?? [ 297.053838][T10777] EXT4-fs (loop1): 1 truncate cleaned up [ 297.088640][T10777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.136071][ T30] audit: type=1800 audit(1747374904.563:66): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1874" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 297.137425][T10777] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1874: invalid indirect mapped block 3489660928 (level 0) [ 297.245493][ T5833] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 297.285078][T10777] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1874: invalid indirect mapped block 6 (level 1) [ 297.429604][ T5893] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.0038/input/input13 [ 297.437917][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.475848][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 297.498255][T10786] loop3: detected capacity change from 0 to 256 [ 297.518234][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.529372][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 297.536427][T10767] loop2: detected capacity change from 0 to 32768 [ 297.548991][T10786] exfat: Deprecated parameter 'namecase' [ 297.592090][T10767] ERROR: (device loop2): diWrite: ixpxd invalid [ 297.592090][T10767] [ 297.613324][ T5833] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 297.623516][T10786] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 297.642183][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.653494][T10767] ERROR: (device loop2): remounting filesystem as read-only [ 297.668130][ T5893] uclogic 0003:28BD:1903.0038: input,hidraw0: USB HID v0.02 Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0 [ 297.693750][T10767] ERROR: (device loop2): txCommit: [ 297.693750][T10767] [ 297.706257][ T5833] usb 5-1: config 0 descriptor?? [ 297.746609][T10781] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 297.768730][ T5893] usb 1-1: USB disconnect, device number 12 [ 297.961944][ T114] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 297.981932][ T114] ------------[ cut here ]------------ [ 297.987488][ T114] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 298.028359][ T114] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 298.034806][ T114] CPU: 1 UID: 0 PID: 114 Comm: jfsCommit Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 298.046620][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.056690][ T114] RIP: 0010:txUnlock+0xdaf/0xdf0 [ 298.061650][ T114] Code: e9 fd 90 0f 0b e8 d1 34 82 fe 48 c7 c7 c0 a3 a3 8b 48 c7 c6 b9 9f a3 8b ba a3 03 00 00 48 c7 c1 c0 b0 a3 8b e8 e2 f5 e9 fd 90 <0f> 0b e8 aa 34 82 fe 48 c7 c7 c0 a3 a3 8b 48 c7 c6 b9 9f a3 8b ba [ 298.081263][ T114] RSP: 0018:ffffc90002737c68 EFLAGS: 00010246 [ 298.087331][ T114] RAX: 0000000000000037 RBX: 0000000000001000 RCX: d422f9eeb56ea700 [ 298.095302][ T114] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 298.103270][ T114] RBP: ffffc9000295a558 R08: ffffc90002737947 R09: 1ffff920004e6f28 [ 298.111238][ T114] R10: dffffc0000000000 R11: fffff520004e6f29 R12: dffffc0000000000 [ 298.119205][ T114] R13: 1ffff110067a0272 R14: ffff888033d01390 R15: 0000000000000000 [ 298.127173][ T114] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 298.136099][ T114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.142699][ T114] CR2: 00007faf8ab7d2d8 CR3: 000000003453c000 CR4: 0000000000350ef0 [ 298.150667][ T114] Call Trace: [ 298.153938][ T114] [ 298.156867][ T114] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.162070][ T114] jfs_lazycommit+0x584/0xa90 [ 298.166761][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 298.171964][ T114] ? __pfx_default_wake_function+0x10/0x10 [ 298.177784][ T114] ? __kthread_parkme+0x7b/0x200 [ 298.182719][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.188351][ T114] ? __kthread_parkme+0x1a1/0x200 [ 298.193372][ T114] kthread+0x711/0x8a0 [ 298.197441][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 298.202644][ T114] ? __pfx_kthread+0x10/0x10 [ 298.207236][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.212871][ T114] ? __pfx_kthread+0x10/0x10 [ 298.217458][ T114] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.222653][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.228283][ T114] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.233478][ T114] ? __pfx_kthread+0x10/0x10 [ 298.238066][ T114] ret_from_fork+0x4e/0x80 [ 298.242477][ T114] ? __pfx_kthread+0x10/0x10 [ 298.247093][ T114] ret_from_fork_asm+0x1a/0x30 [ 298.251863][ T114] [ 298.254875][ T114] Modules linked in: [ 298.260265][ T114] ---[ end trace 0000000000000000 ]--- [ 298.261147][T10789] fido_id[10789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 298.268659][ T114] RIP: 0010:txUnlock+0xdaf/0xdf0 [ 298.297665][ T5833] aureal 0003:0755:2626.0039: unknown main item tag 0x6 [ 298.341673][T10792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.345936][ T114] Code: e9 fd 90 0f 0b e8 d1 34 82 fe 48 c7 c7 c0 a3 a3 8b 48 c7 c6 b9 9f a3 8b ba a3 03 00 00 48 c7 c1 c0 b0 a3 8b e8 e2 f5 e9 fd 90 <0f> 0b e8 aa 34 82 fe 48 c7 c7 c0 a3 a3 8b 48 c7 c6 b9 9f a3 8b ba [ 298.348913][T10792] IPv6: NLM_F_CREATE should be set when creating new route [ 298.368591][ T5833] aureal 0003:0755:2626.0039: report_id 29495 is invalid [ 298.425609][ T5833] aureal 0003:0755:2626.0039: item 0 2 1 8 parsing failed [ 298.447569][ T5833] aureal 0003:0755:2626.0039: probe with driver aureal failed with error -22 [ 298.464229][ T114] RSP: 0018:ffffc90002737c68 EFLAGS: 00010246 [ 298.470320][ T114] RAX: 0000000000000037 RBX: 0000000000001000 RCX: d422f9eeb56ea700 [ 298.490131][T10758] loop5: detected capacity change from 0 to 32768 [ 298.499415][ T5833] usb 5-1: USB disconnect, device number 17 [ 298.509346][ T114] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 298.521686][T10758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1865 (10758) [ 298.526995][ T114] RBP: ffffc9000295a558 R08: ffffc90002737947 R09: 1ffff920004e6f28 [ 298.546553][T10758] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.554188][ T114] R10: dffffc0000000000 R11: fffff520004e6f29 R12: dffffc0000000000 [ 298.567519][ T114] R13: 1ffff110067a0272 R14: ffff888033d01390 R15: 0000000000000000 [ 298.577008][ T114] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 298.585801][T10758] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 298.588099][ T114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.596562][T10758] BTRFS info (device loop5): disk space caching is enabled [ 298.602595][ T114] CR2: 00007f084ff96000 CR3: 000000007f4b7000 CR4: 0000000000350ef0 [ 298.618526][ T114] Kernel panic - not syncing: Fatal exception [ 298.624817][ T114] Kernel Offset: disabled [ 298.629136][ T114] Rebooting in 86400 seconds..