last executing test programs: 7.406022953s ago: executing program 0 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) 7.160605377s ago: executing program 0 (id=365): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x8, 0x2aa, 0x80003}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x102, 0x0, 0x4}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0xfffffffe}, 0x0, {[0xfffffffc, 0x3ff, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x4, 0x4) 6.93483223s ago: executing program 2 (id=366): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x20000001}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.756542639s ago: executing program 0 (id=370): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x3, @mcast1}}, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 5.563982432s ago: executing program 1 (id=371): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_default\x00') 5.313104886s ago: executing program 0 (id=373): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60) 5.249867197s ago: executing program 2 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xf1, 0x0, 0x8}}}}, 0x36) 5.165332438s ago: executing program 1 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xf) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 5.162543048s ago: executing program 0 (id=376): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000042c0)='./file2\x00', 0x300000a, &(0x7f0000000780)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@noacl}, {@ref_verify}, {@nossd}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@nobarrier}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@discard}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x380585b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 5.009870771s ago: executing program 2 (id=377): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) 4.941214942s ago: executing program 1 (id=378): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x8, 0x2aa, 0x80003}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x102, 0x0, 0x4}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0xfffffffe}, 0x0, {[0xfffffffc, 0x3ff, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x4, 0x4) 4.640620746s ago: executing program 2 (id=380): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x63}, 0x1}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)={0x14, r1, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fcntl$setpipe(r2, 0x407, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = getpid() syz_pidfd_open(r5, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) r6 = getpid() syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6], 0x1}, 0x58) fadvise64(r4, 0xfcff, 0x20000, 0x3) mq_open(&(0x7f0000000040)='&\x00\x8c\xe0h:\xa2\x9c\xde\xb8S\xa8\x92A\x1c$\xd2(\xc4\xcb\x82(\x97\x8b\xf9\x11J\xedu\x9d\x9f\xa1\x03\x91\xdf\x06l\x1b\xc2\xc8\x11\x83\xef\xd6\x14\xfe\xb3\x12|\x00\x00\x00\x00\x00\x00', 0x40, 0x107, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) 3.542604124s ago: executing program 2 (id=381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r4, 0xb701, 0x80000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000d0) 3.265469769s ago: executing program 4 (id=383): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.12597751s ago: executing program 4 (id=384): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 3.018183112s ago: executing program 4 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000002500)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x3e8) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.691091237s ago: executing program 4 (id=388): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0xce, 0x7ffc1ff8}]}) io_setup(0x1, &(0x7f0000000b80)) 2.495855141s ago: executing program 1 (id=391): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101442, 0x1ff) 2.396579292s ago: executing program 4 (id=393): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x33) preadv2(r0, 0x0, 0x0, 0x4, 0x7fff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1.835541331s ago: executing program 2 (id=394): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1) 1.480527647s ago: executing program 0 (id=395): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x8, 0x2aa, 0x80003}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x102, 0x0, 0x4}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x4, 0x4) 1.366275828s ago: executing program 3 (id=396): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) add_key(0x0, 0x0, &(0x7f0000000500), 0x0, 0xfffffffffffffffd) 1.23057686s ago: executing program 4 (id=397): ioprio_set$pid(0x3, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='8', 0x1) syz_usb_disconnect(r0) 1.226500751s ago: executing program 1 (id=398): unshare(0x22020600) unshare(0x2a020400) r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 1.155936752s ago: executing program 3 (id=399): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.029013484s ago: executing program 3 (id=400): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000440), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) ftruncate(r0, 0xf88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 794.513368ms ago: executing program 1 (id=401): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 481.379283ms ago: executing program 3 (id=402): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="692d338298", 0x5}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102}}}], 0x20}, 0x0) 178.442347ms ago: executing program 3 (id=403): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a0000000000010000230000000000019500000000000000f16260b181099d6d1928a8b7cb4147b2553f903aac73ba87846003e80166d9dd6a52ae929f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x801) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000ac0)={0x6fb3e42990632d7e, 0x0, 0x7, 0x0, 0xc}) 0s ago: executing program 3 (id=404): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) ftruncate(r0, 0x3af001) kernel console output (not intermixed with test programs): Unmounting Filesystem [ 76.901494][ T4402] XFS (loop2): Quotacheck needed: Please wait. [ 77.029570][ T4402] XFS (loop2): Quotacheck: Done. [ 77.182162][ T4170] XFS (loop2): Unmounting Filesystem [ 77.566775][ T4447] loop0: detected capacity change from 0 to 2048 [ 77.650872][ T4214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.697718][ T4447] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 77.767727][ T4447] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,auto_da_alloc,,errors=continue. Quota mode: none. [ 77.810459][ T4442] loop3: detected capacity change from 0 to 32768 [ 77.820210][ T4447] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 78.064021][ T4214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.084444][ T4442] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 78.139432][ T4214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.178990][ T4214] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.349423][ T4169] (syz-executor,4169,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 78.381687][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 78.433927][ T4214] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.443241][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.458224][ T4214] usb 5-1: Product: syz [ 78.467927][ T4214] usb 5-1: Manufacturer: syz [ 78.478245][ T4214] usb 5-1: SerialNumber: syz [ 78.487143][ T4469] loop0: detected capacity change from 0 to 64 [ 78.535407][ T4214] usb 5-1: selecting invalid altsetting 1 [ 78.652064][ T4245] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.747067][ T4473] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure [ 78.946784][ T4484] loop0: detected capacity change from 0 to 1024 [ 78.993657][ T4214] usb 5-1: selecting invalid altsetting 1 [ 78.999719][ T4214] cdc_ncm 5-1:1.0: bind() failure [ 79.023767][ T4245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.067987][ T4245] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.087007][ T4245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.099835][ T4245] usb 3-1: config 0 descriptor?? [ 79.178009][ T4214] usb 5-1: USB disconnect, device number 2 [ 79.233766][ T4373] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.291933][ T4490] loop0: detected capacity change from 0 to 512 [ 79.313384][ T4490] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.330575][ T4490] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 79.343316][ T4490] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 79.356022][ T4490] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 79.364485][ T4490] System zones: 0-2, 18-18, 34-34 [ 79.372742][ T4490] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.391296][ T4490] EXT4-fs (loop0): 1 truncate cleaned up [ 79.397332][ T4490] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,abort,,errors=continue. Quota mode: none. [ 79.442732][ T26] audit: type=1800 audit(1743194080.387:4): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.76" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 79.484189][ T4373] usb 2-1: Using ep0 maxpacket: 32 [ 79.576346][ T4245] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 79.598690][ T4245] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5 [ 79.610758][ T4373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.624859][ T4373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.634737][ T4373] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 79.644171][ T4373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.665819][ T4373] usb 2-1: config 0 descriptor?? [ 79.730234][ T4245] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 79.937660][ T4499] loop3: detected capacity change from 0 to 2048 [ 80.001306][ T4499] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 80.042561][ T4499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.145772][ T4373] cypress 0003:04B4:BCA1.0003: unknown main item tag 0x0 [ 80.170378][ T4373] cypress 0003:04B4:BCA1.0003: hidraw1: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0 [ 80.400307][ T4373] usb 2-1: USB disconnect, device number 2 [ 80.423583][ T4374] usb 3-1: USB disconnect, device number 2 [ 81.405052][ T4495] loop0: detected capacity change from 0 to 32768 [ 81.610934][ T3148] cfg80211: failed to load regulatory.db [ 81.631562][ T4521] loop3: detected capacity change from 0 to 24 [ 81.684410][ T4521] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 81.730151][ T4521] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 81.769052][ T4495] XFS (loop0): Mounting V5 Filesystem [ 81.794130][ T3148] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.959772][ T4495] XFS (loop0): Ending clean mount [ 81.971313][ T4495] XFS (loop0): Quotacheck needed: Please wait. [ 82.122611][ T4495] XFS (loop0): Quotacheck: Done. [ 82.139792][ T4531] tipc: Started in network mode [ 82.190079][ T4531] tipc: Node identity 7ff, cluster identity 4711 [ 82.225731][ T4531] tipc: Node number set to 2047 [ 82.228250][ T3148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.277165][ T3148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.323571][ T3148] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 82.332668][ T3148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.382377][ T3148] usb 2-1: config 0 descriptor?? [ 82.412182][ T4171] XFS (loop0): Unmounting Filesystem [ 82.787313][ T4518] loop2: detected capacity change from 0 to 40427 [ 82.907541][ T4518] F2FS-fs (loop2): invalid crc value [ 82.971004][ T4518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.170585][ T4518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.373197][ T4170] attempt to access beyond end of device [ 83.373197][ T4170] loop2: rw=2049, want=45104, limit=40427 [ 84.245368][ T4533] loop3: detected capacity change from 0 to 262144 [ 84.382638][ T4545] user requested TSC rate below hardware speed [ 84.396956][ T3148] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 84.407536][ T4533] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.88 (4533) [ 84.439031][ T3148] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 84.454534][ T3148] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 84.472271][ T3148] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 84.484876][ T3148] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 84.506618][ T4533] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 84.515971][ T4533] BTRFS info (device loop3): using free space tree [ 84.523388][ T4533] BTRFS info (device loop3): has skinny extents [ 84.529719][ T4533] BTRFS info (device loop3): flagging fs with big metadata feature [ 84.543932][ T3148] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 84.673773][ T3148] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 9: -71 [ 84.683221][ T3148] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -71 [ 84.721463][ T3148] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 84.741417][ T3148] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 84.775337][ T3148] playstation: probe of 0003:054C:0DF2.0004 failed with error -71 [ 84.797872][ T3148] usb 2-1: USB disconnect, device number 3 [ 84.822355][ T4553] loop1: detected capacity change from 0 to 4096 [ 84.931108][ T4533] BTRFS info (device loop3): enabling ssd optimizations [ 85.043653][ T4575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.283138][ T4548] loop4: detected capacity change from 0 to 32768 [ 85.367028][ T4548] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.92 (4548) [ 85.503852][ T4555] loop2: detected capacity change from 0 to 32768 [ 85.533922][ T4548] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 85.578594][ T4548] BTRFS info (device loop4): setting nodatacow, compression disabled [ 85.588951][ T4555] XFS: attr2 mount option is deprecated. [ 85.620860][ T4555] XFS: ikeep mount option is deprecated. [ 85.637132][ T4548] BTRFS info (device loop4): setting datacow [ 85.649384][ T4555] XFS: noikeep mount option is deprecated. [ 85.663544][ T4548] BTRFS info (device loop4): doing ref verification [ 85.683569][ T4548] BTRFS info (device loop4): force clearing of disk cache [ 85.713768][ T4548] BTRFS info (device loop4): turning off barriers [ 85.720241][ T4548] BTRFS info (device loop4): enabling ssd optimizations [ 85.826787][ T4548] BTRFS info (device loop4): using spread ssd allocation scheme [ 85.836610][ T4548] BTRFS info (device loop4): using free space tree [ 85.843363][ T4548] BTRFS info (device loop4): has skinny extents [ 86.663398][ T4555] XFS (loop2): Mounting V5 Filesystem [ 86.665889][ T4571] loop0: detected capacity change from 0 to 40427 [ 86.742443][ T4571] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 86.801431][ T4571] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.874809][ T4548] BTRFS info (device loop4): clearing free space tree [ 86.882128][ T4571] F2FS-fs (loop0): invalid crc value [ 86.885996][ T4548] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.902976][ T4555] XFS (loop2): Ending clean mount [ 86.931093][ T4571] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.936067][ T4555] XFS (loop2): Quotacheck needed: Please wait. [ 86.953567][ T4548] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.000568][ T4555] XFS (loop2): Quotacheck: Done. [ 87.008558][ T4627] loop1: detected capacity change from 0 to 2048 [ 87.054147][ T4548] BTRFS info (device loop4): creating free space tree [ 87.063277][ T4548] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.064760][ T26] audit: type=1800 audit(1743194088.007:5): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.93" name="file1" dev="loop2" ino=1062 res=0 errno=0 [ 87.105282][ T4548] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.134335][ T4571] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.153283][ T4571] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.172945][ T4170] XFS (loop2): Unmounting Filesystem [ 87.192022][ T4627] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 87.372233][ T4171] attempt to access beyond end of device [ 87.372233][ T4171] loop0: rw=2049, want=45104, limit=40427 [ 87.381244][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 87.514963][ T4613] loop3: detected capacity change from 0 to 32768 [ 87.792646][ T4613] XFS (loop3): Mounting V5 Filesystem [ 88.026279][ T4613] XFS (loop3): Ending clean mount [ 88.229615][ T4169] XFS (loop3): Unmounting Filesystem [ 88.447328][ T4664] loop1: detected capacity change from 0 to 512 [ 88.673325][ T4664] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 88.744903][ T4664] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.848392][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 88.923818][ T4599] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.155222][ T4654] loop4: detected capacity change from 0 to 32768 [ 89.256866][ T4682] loop1: detected capacity change from 0 to 4096 [ 89.284152][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.319839][ T4682] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 89.353835][ T4599] usb 1-1: Using ep0 maxpacket: 16 [ 89.403390][ T4682] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 89.494595][ T4599] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.506525][ T4609] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 89.514974][ T4599] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.530091][ T4168] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 89.537101][ T4599] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.553547][ T4599] usb 1-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 89.553604][ T4168] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.562617][ T4599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.571125][ T4599] usb 1-1: config 0 descriptor?? [ 89.622970][ T4168] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 89.646668][ T1271] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 89.668176][ T4168] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 89.684036][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.697325][ T4168] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 89.700742][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 89.904270][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.918097][ T4689] loop1: detected capacity change from 0 to 256 [ 89.924882][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.932901][ T23] usb 3-1: Product: syz [ 89.947785][ T23] usb 3-1: Manufacturer: syz [ 89.957931][ T23] usb 3-1: SerialNumber: syz [ 89.994430][ T4689] exfat: Deprecated parameter 'namecase' [ 90.001691][ T4691] loop3: detected capacity change from 0 to 256 [ 90.030597][ T4689] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 90.065511][ T4691] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.091843][ T4599] hid (null): invalid report_size 51558 [ 90.128526][ T4599] hid (null): unknown global tag 0xe [ 90.148861][ T4599] hid (null): unknown global tag 0xe [ 90.162249][ T4599] hid (null): unknown global tag 0xd [ 90.177624][ T4599] hid (null): unknown global tag 0x30 [ 90.192128][ T4599] hid (null): global environment stack underflow [ 90.213880][ T4599] hid-generic 0003:060B:430A.0005: unexpected long global item [ 90.219823][ T4677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.221967][ T4599] hid-generic: probe of 0003:060B:430A.0005 failed with error -22 [ 90.247871][ T4695] loop1: detected capacity change from 0 to 4096 [ 90.369082][ T4695] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.380311][ T3148] usb 1-1: USB disconnect, device number 2 [ 90.471777][ T4695] fs-verity: sha256 using implementation "sha256-avx2" [ 90.502910][ T4695] fs-verity (loop1, inode 16): fs-verity keyring is empty, rejecting signed file! [ 90.645113][ T4214] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.887920][ T4703] loop4: detected capacity change from 0 to 1024 [ 90.893719][ T4214] usb 4-1: Using ep0 maxpacket: 8 [ 90.903907][ T23] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 90.943672][ T4652] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.944136][ T23] cdc_ncm 3-1:1.0: bind() failure [ 90.978623][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 90.997178][ T23] cdc_ncm 3-1:1.1: bind() failure [ 91.016033][ T23] usb 3-1: USB disconnect, device number 3 [ 91.103947][ T4214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.215787][ T4708] loop4: detected capacity change from 0 to 128 [ 91.233643][ T4214] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 91.241878][ T4214] usb 4-1: config 0 has no interface number 0 [ 91.255792][ T4214] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 91.268716][ T4214] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 91.278981][ T4214] usb 4-1: config 0 interface 88 has no altsetting 0 [ 91.343824][ T4652] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.363528][ T4652] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.374386][ T4652] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.391212][ T4652] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 91.423791][ T4652] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 91.573935][ T4214] usb 4-1: string descriptor 0 read error: -22 [ 91.582067][ T4214] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 91.593756][ T4652] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.600587][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 91.614680][ T4652] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.622017][ T4214] usb 4-1: config 0 descriptor?? [ 91.657197][ T4652] usb 2-1: Product: syz [ 91.668361][ T4214] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 91.669046][ T4652] usb 2-1: Manufacturer: syz [ 91.759367][ T4716] loop4: detected capacity change from 0 to 4096 [ 91.774753][ T4652] cdc_wdm 2-1:1.0: skipping garbage [ 91.780036][ T4652] cdc_wdm 2-1:1.0: skipping garbage [ 91.846719][ T4716] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 91.865477][ T4652] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 91.871555][ T4652] cdc_wdm 2-1:1.0: Unknown control protocol [ 91.902762][ T4716] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 91.927783][ T4389] udevd[4389]: Error opening device "/dev/input/event4": Input/output error [ 91.935008][ T4716] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 91.948379][ T4214] usb 4-1: USB disconnect, device number 5 [ 91.955903][ T4389] udevd[4389]: Unable to EVIOCGABS device "/dev/input/event4" [ 91.999879][ T4389] udevd[4389]: Unable to EVIOCGABS device "/dev/input/event4" [ 92.006216][ T4716] ntfs: volume version 3.1. [ 92.040376][ T4716] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 92.061263][ T4716] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 92.086093][ T4716] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 92.161512][ T4652] usb 2-1: USB disconnect, device number 4 [ 92.167739][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 92.167916][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 92.167936][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 92.193601][ T4701] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 92.356730][ T4714] loop2: detected capacity change from 0 to 32768 [ 94.014397][ T4649] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.159627][ T4750] loop4: detected capacity change from 0 to 4096 [ 94.166124][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 94.253897][ T4649] usb 2-1: Using ep0 maxpacket: 16 [ 94.284887][ T4750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.383843][ T4649] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.406099][ T4649] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.420566][ T4649] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.430213][ T4649] usb 2-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 94.446577][ T4649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.482982][ T4649] usb 2-1: config 0 descriptor?? [ 94.563815][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.587046][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.605135][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 94.623650][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.682309][ T4755] loop4: detected capacity change from 0 to 4096 [ 94.732222][ T23] usb 4-1: config 0 descriptor?? [ 94.768836][ T4758] loop2: detected capacity change from 0 to 1024 [ 94.856422][ T4755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.897921][ T4755] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 95.008149][ T4649] wacom 0003:056A:00ED.0006: hidraw0: USB HID v20.00 Device [HID 056a:00ed] on usb-dummy_hcd.1-1/input0 [ 95.208673][ T4599] usb 2-1: USB disconnect, device number 5 [ 95.221961][ T23] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 95.244995][ T23] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 95.247656][ T4767] loop0: detected capacity change from 0 to 4096 [ 95.284544][ T23] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 95.291385][ T23] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 95.301137][ T4769] loop2: detected capacity change from 0 to 512 [ 95.308908][ T23] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 95.320776][ T4767] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 95.329930][ T23] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 95.339705][ T23] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 95.352351][ T23] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 95.369720][ T4769] EXT4-fs (loop2): Ignoring removed nobh option [ 95.538925][ T4769] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.143: corrupted inode contents [ 95.560337][ T4769] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.143: mark_inode_dirty error [ 95.573297][ T4769] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.143: corrupted inode contents [ 95.592218][ T4769] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.143: mark_inode_dirty error [ 95.612388][ T4769] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.143: corrupted inode contents [ 95.636380][ T4769] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 95.651978][ T4769] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.143: corrupted inode contents [ 95.734026][ T23] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 95.741222][ T4769] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.143: mark_inode_dirty error [ 95.741980][ T23] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 95.764509][ T23] pyra: probe of 0003:1E7D:2CF6.0007 failed with error -71 [ 95.792144][ T23] usb 4-1: USB disconnect, device number 6 [ 95.808622][ T4769] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 96.016106][ T4769] EXT4-fs (loop2): 1 truncate cleaned up [ 96.121002][ T4769] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,nobh,,errors=continue. Quota mode: writeback. [ 96.558562][ T4769] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.570202][ T4780] loop0: detected capacity change from 0 to 8 [ 96.687018][ T4782] loop1: detected capacity change from 0 to 64 [ 96.716119][ T4780] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 96.743815][ T4785] EXT4-fs (loop2): shut down requested (1) [ 96.761275][ T26] audit: type=1800 audit(1743194097.707:6): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.143" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 96.797182][ T4780] cramfs: bad data blocksize 4294966936 [ 96.803107][ T4780] cramfs: Error -3 while decompressing! [ 96.808130][ T4782] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 96.849215][ T4787] loop4: detected capacity change from 0 to 64 [ 96.862710][ T4780] cramfs: ffffffff96bbe100(428)->ffff88805d34c000(4096) [ 96.891443][ T4780] cramfs: bad data blocksize 4294966936 [ 96.910836][ T26] audit: type=1800 audit(1743194097.857:7): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.154" name="file3" dev="loop0" ino=348 res=0 errno=0 [ 97.016606][ T1271] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.065862][ T1271] Quota error (device loop2): write_blk: dquota write failed [ 97.073288][ T1271] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 97.108109][ T1271] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.134021][ T1271] Quota error (device loop2): write_blk: dquota write failed [ 97.151668][ T1271] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 97.172142][ T1271] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 97.192498][ T1271] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 97.203105][ T1271] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.216115][ T1271] Quota error (device loop2): write_blk: dquota write failed [ 97.230732][ T1271] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 97.309945][ T4178] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.389745][ T4214] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.484109][ T4803] loop4: detected capacity change from 0 to 512 [ 97.523216][ T4805] loop2: detected capacity change from 0 to 256 [ 97.565865][ T4803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.613674][ T4178] usb 2-1: Using ep0 maxpacket: 16 [ 97.650110][ T4805] FAT-fs (loop2): Directory bread(block 64) failed [ 97.664100][ T4803] EXT4-fs (loop4): 1 truncate cleaned up [ 97.669783][ T4803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.697598][ T4805] FAT-fs (loop2): Directory bread(block 65) failed [ 97.718525][ T4805] FAT-fs (loop2): Directory bread(block 66) failed [ 97.751995][ T4805] FAT-fs (loop2): Directory bread(block 67) failed [ 97.774065][ T4178] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 97.782287][ T4178] usb 2-1: config 0 has no interface number 0 [ 97.803841][ T4805] FAT-fs (loop2): Directory bread(block 68) failed [ 97.814184][ T4178] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 97.821004][ T4805] FAT-fs (loop2): Directory bread(block 69) failed [ 97.834206][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.849672][ T4805] FAT-fs (loop2): Directory bread(block 70) failed [ 97.854617][ T4214] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.861935][ T4805] FAT-fs (loop2): Directory bread(block 71) failed [ 97.872683][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.879883][ T4805] FAT-fs (loop2): Directory bread(block 72) failed [ 97.890770][ T4214] usb 1-1: config 0 descriptor?? [ 97.893925][ T4805] FAT-fs (loop2): Directory bread(block 73) failed [ 98.025713][ T4178] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 98.043372][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.053821][ T4178] usb 2-1: Product: syz [ 98.061953][ T4178] usb 2-1: Manufacturer: syz [ 98.072090][ T4178] usb 2-1: SerialNumber: syz [ 98.088020][ T4178] usb 2-1: config 0 descriptor?? [ 98.293754][ T4599] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.425060][ T4214] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 98.436547][ T4214] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input11 [ 98.524399][ T4214] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 98.536941][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 98.716247][ T4599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.727335][ T4599] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.733718][ T4374] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.739180][ T4599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.754186][ T4599] usb 5-1: config 0 descriptor?? [ 98.787582][ T4178] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 98.803067][ T4178] usb 2-1: USB disconnect, device number 6 [ 98.944173][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.955434][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.970752][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 98.980377][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.987399][ T4374] usb 4-1: Using ep0 maxpacket: 16 [ 98.998052][ T23] usb 3-1: config 0 descriptor?? [ 99.113803][ T4374] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 99.121359][ T4374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 99.133138][ T4374] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 99.219104][ T4652] usb 1-1: USB disconnect, device number 3 [ 99.255155][ T4599] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 99.268333][ T4599] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input12 [ 99.293947][ T4374] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 99.314888][ T4374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.331560][ T4374] usb 4-1: Product: syz [ 99.338426][ T4374] usb 4-1: Manufacturer: syz [ 99.343070][ T4374] usb 4-1: SerialNumber: syz [ 99.352582][ T4374] usb 4-1: config 0 descriptor?? [ 99.374268][ T4817] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 99.374869][ T4599] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 99.426156][ T4374] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 99.433625][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 99.439806][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 99.529916][ T23] ryos 0003:1E7D:3138.000A: hidraw1: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 99.627849][ T23] usb 4-1: USB disconnect, device number 7 [ 99.634371][ T4178] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.647584][ T23] mcba_usb 4-1:0.0 can0: device disconnected [ 99.698753][ T4599] usb 3-1: USB disconnect, device number 4 [ 99.822216][ T4833] loop0: detected capacity change from 0 to 1024 [ 99.868780][ T4833] EXT4-fs (loop0): Ignoring removed nobh option [ 99.891138][ T4833] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 99.913710][ T4178] usb 2-1: Using ep0 maxpacket: 16 [ 99.918647][ T4833] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.962400][ T4833] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.162: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 99.988904][ T4833] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.162: couldn't read orphan inode 11 (err -117) [ 100.006602][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noload,nobh,jqfmt=vfsv0,journal_dev=0x0000000000000017,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 100.053929][ T4178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.081101][ T4178] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.097182][ T4833] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.162: Invalid block bitmap block 0 in block_group 0 [ 100.116971][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.130491][ T4599] usb 5-1: USB disconnect, device number 3 [ 100.140621][ T4178] usb 2-1: config 0 descriptor?? [ 100.152756][ T4833] Quota error (device loop0): write_blk: dquota write failed [ 100.162555][ T4833] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 100.219452][ T4833] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.162: Failed to acquire dquot type 0 [ 100.393371][ T4852] loop3: detected capacity change from 0 to 4096 [ 100.417637][ T4601] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 100.433585][ T4601] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:10: Failed to release dquot type 0 [ 100.531284][ T4852] ntfs3: loop3: ino=0, "file0" failed to extend initialized size to 80009. [ 100.618047][ T4860] loop0: detected capacity change from 0 to 512 [ 100.666202][ T4178] hid (null): report_id 0 is invalid [ 100.757679][ T4864] loop4: detected capacity change from 0 to 2048 [ 100.822306][ T4860] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 100.834784][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.846768][ T4864] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 100.861897][ T3148] usb 2-1: USB disconnect, device number 7 [ 100.872460][ T4860] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.903602][ T4864] UDF-fs: Scanning with blocksize 512 failed [ 100.982477][ T4864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.041810][ T4870] loop3: detected capacity change from 0 to 256 [ 101.077750][ T4856] loop2: detected capacity change from 0 to 32768 [ 101.141590][ T4856] JBD2: Ignoring recovery information on journal [ 101.155014][ T4875] loop0: detected capacity change from 0 to 256 [ 101.172858][ T4870] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 101.266475][ T4875] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 101.319572][ T4856] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.648094][ T4170] ocfs2: Unmounting device (7,2) on (node local) [ 101.661505][ T4886] loop1: detected capacity change from 0 to 512 [ 101.820614][ T4877] loop4: detected capacity change from 0 to 32768 [ 101.843301][ T4886] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 101.915181][ T4886] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.930609][ T4877] XFS (loop4): Mounting V5 Filesystem [ 101.994182][ T26] audit: type=1800 audit(1743194102.937:8): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.185" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 102.061209][ T4900] loop2: detected capacity change from 0 to 4096 [ 102.101112][ T4877] XFS (loop4): Ending clean mount [ 102.176142][ T4900] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.191878][ T4877] XFS (loop4): Quotacheck needed: Please wait. [ 102.307365][ T4900] fs-verity (loop2, inode 16): fs-verity keyring is empty, rejecting signed file! [ 102.320326][ T4880] loop3: detected capacity change from 0 to 40427 [ 102.362156][ T4877] XFS (loop4): Quotacheck: Done. [ 102.368955][ T4880] F2FS-fs (loop3): invalid crc value [ 102.427295][ T4880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.532557][ T4910] loop1: detected capacity change from 0 to 512 [ 102.542289][ T4888] loop0: detected capacity change from 0 to 32768 [ 102.559820][ T4176] XFS (loop4): Unmounting Filesystem [ 102.581703][ T4910] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.595929][ T4912] loop2: detected capacity change from 0 to 512 [ 102.609507][ T4910] EXT4-fs (loop1): 1 truncate cleaned up [ 102.620635][ T4910] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,init_itable,nodiscard,stripe=0x0000000000004000,errors=remount-ro,bsdgroups,. Quota mode: none. [ 102.634459][ T4880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.643805][ T4888] XFS: ikeep mount option is deprecated. [ 102.667442][ T4912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.699000][ T4910] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.179: corrupted in-inode xattr [ 102.713053][ T26] audit: type=1800 audit(1743194103.647:9): pid=4910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.179" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 102.764145][ T4910] EXT4-fs (loop1): Remounting filesystem read-only [ 102.770814][ T4910] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1751: inode #15: comm syz.1.179: unable to update i_inline_off [ 102.792531][ T4912] EXT4-fs (loop2): 1 truncate cleaned up [ 102.795059][ T4888] XFS (loop0): Mounting V5 Filesystem [ 102.801017][ T4918] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.179: corrupted in-inode xattr [ 102.838474][ T4912] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.855129][ T4918] EXT4-fs (loop1): Remounting filesystem read-only [ 102.880184][ T4880] attempt to access beyond end of device [ 102.880184][ T4880] loop3: rw=2049, want=45104, limit=40427 [ 102.954797][ T4912] fscrypt (loop2, inode 18): Direct key flag not allowed with different contents and filenames modes [ 103.161237][ T4888] XFS (loop0): Ending clean mount [ 103.255655][ T4888] XFS (loop0): Quotacheck needed: Please wait. [ 103.291634][ T4929] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.539854][ T4888] XFS (loop0): Quotacheck: Done. [ 104.393555][ T4171] XFS (loop0): Unmounting Filesystem [ 104.457979][ T4940] loop4: detected capacity change from 0 to 256 [ 104.473708][ T4652] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 104.833885][ T3148] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.887135][ T4950] loop4: detected capacity change from 0 to 4096 [ 104.903909][ T4652] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.935195][ T4950] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 104.948808][ T4652] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.948868][ T4652] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 104.948897][ T4652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.952417][ T4652] usb 3-1: config 0 descriptor?? [ 104.988242][ T4652] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 104.988630][ T4652] dvb-usb: bulk message failed: -22 (3/0) [ 105.001391][ T4652] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 105.020577][ T4652] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 105.020677][ T4652] usb 3-1: media controller created [ 105.022660][ T4652] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.063866][ T4652] dvb-usb: bulk message failed: -22 (6/0) [ 105.123129][ T4652] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 105.228700][ T3148] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 105.269879][ T3148] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.302736][ T4935] loop2: detected capacity change from 0 to 2048 [ 105.313297][ T3148] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 105.364612][ T3148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.380857][ T4935] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.494616][ T3148] usb 2-1: config 0 descriptor?? [ 105.552579][ T4960] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.567928][ T4935] attempt to access beyond end of device [ 105.567928][ T4935] loop2: rw=524288, want=33554432, limit=2048 [ 105.571085][ T4652] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 105.602674][ T4652] dvb-usb: schedule remote query interval to 150 msecs. [ 105.613024][ T4652] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 105.766321][ T4652] dvb-usb: bulk message failed: -22 (1/0) [ 105.772420][ T4652] dvb-usb: error while querying for an remote control event. [ 105.814195][ T4652] usb 3-1: USB disconnect, device number 5 [ 105.904557][ T4652] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 106.046506][ T3148] creative-sb0540 0003:041E:3100.000C: unknown main item tag 0x0 [ 106.067399][ T3148] creative-sb0540 0003:041E:3100.000C: unknown main item tag 0x0 [ 106.094156][ T3148] creative-sb0540 0003:041E:3100.000C: No inputs registered, leaving [ 106.124097][ T3148] creative-sb0540 0003:041E:3100.000C: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 106.256278][ T3148] usb 2-1: USB disconnect, device number 8 [ 106.350183][ T4962] loop4: detected capacity change from 0 to 32768 [ 106.487767][ T4962] XFS (loop4): Mounting V5 Filesystem [ 106.564237][ T4962] XFS (loop4): Ending clean mount [ 106.595073][ T4962] XFS (loop4): Quotacheck needed: Please wait. [ 106.662473][ T4962] XFS (loop4): Quotacheck: Done. [ 106.712017][ T4962] XFS (loop4): User initiated shutdown received. [ 106.734949][ T4962] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 106.771945][ T4962] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 106.814204][ T4652] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.888086][ T4176] XFS (loop4): Unmounting Filesystem [ 107.085964][ T4652] usb 3-1: Using ep0 maxpacket: 32 [ 107.204827][ T4652] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 107.399806][ T4652] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 107.423549][ T4652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.452034][ T4986] loop1: detected capacity change from 0 to 32768 [ 107.453706][ T4652] usb 3-1: Product: syz [ 107.489401][ T4652] usb 3-1: Manufacturer: syz [ 107.504297][ T4990] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 107.523628][ T4652] usb 3-1: SerialNumber: syz [ 107.554516][ T4652] usb 3-1: config 0 descriptor?? [ 107.572628][ T4986] JBD2: Ignoring recovery information on journal [ 107.579706][ T4982] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.598978][ T4993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.609372][ T4652] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 107.667651][ T4995] loop4: detected capacity change from 0 to 16 [ 107.715105][ T4995] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.759902][ T4986] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.943630][ T4997] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 107.953411][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 107.963068][ T4997] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 107.972903][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 107.982746][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 108.009235][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 108.018742][ T4997] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 108.028310][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 108.037698][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 108.047131][ T4997] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 108.056702][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 108.066098][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 108.075947][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 108.087443][ T4997] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 108.097034][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 108.106886][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 108.116450][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 108.125802][ T4997] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 108.136081][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 108.146926][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 108.160929][ T4997] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 108.170693][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 108.180483][ T4997] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 108.190694][ T4997] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 108.201279][ T4997] attempt to access beyond end of device [ 108.201279][ T4997] loop4: rw=524288, want=848, limit=16 [ 108.213353][ T4997] attempt to access beyond end of device [ 108.213353][ T4997] loop4: rw=524288, want=13478624104, limit=16 [ 108.225805][ T4997] attempt to access beyond end of device [ 108.225805][ T4997] loop4: rw=524288, want=13478624080, limit=16 [ 108.238756][ T4997] attempt to access beyond end of device [ 108.238756][ T4997] loop4: rw=524288, want=32, limit=16 [ 108.254883][ T4177] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 108.482500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 108.564987][ T4652] usb 3-1: USB disconnect, device number 6 [ 108.794737][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 108.969377][ T5010] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 108.976449][ T5010] pim6reg0: owner set to 0 [ 109.026813][ T5007] loop4: detected capacity change from 0 to 512 [ 109.128217][ T5007] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.151262][ T5014] loop1: detected capacity change from 0 to 16 [ 109.209900][ T5018] loop2: detected capacity change from 0 to 1024 [ 109.218866][ T5007] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 109.237084][ T5007] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.205: invalid indirect mapped block 2683928664 (level 1) [ 109.237986][ T5014] erofs: (device loop1): mounted with root inode @ nid 36. [ 109.321383][ T5018] hfsplus: bad catalog entry type [ 109.349077][ T5008] loop3: detected capacity change from 0 to 32768 [ 109.363787][ T5007] EXT4-fs (loop4): Remounting filesystem read-only [ 109.370870][ T5007] EXT4-fs (loop4): 1 truncate cleaned up [ 109.387927][ T5007] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 109.410163][ T4272] hfsplus: b-tree write err: -5, ino 4 [ 109.436894][ T5007] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.205: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 109.493787][ T5007] EXT4-fs (loop4): Remounting filesystem read-only [ 109.605250][ T5019] capability: warning: `syz.1.207' uses 32-bit capabilities (legacy support in use) [ 109.616607][ T5019] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 109.625952][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 109.635048][ T5019] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 109.644365][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 109.653431][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 109.662498][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 109.671577][ T5019] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 109.680883][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 109.690020][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 109.699071][ T5019] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 109.708367][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 109.717957][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 109.727040][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 109.736673][ T5019] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 109.746123][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 109.755230][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 109.764319][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 109.773355][ T5019] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 109.783359][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 109.792441][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 109.801668][ T5019] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 109.811106][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 109.813776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 109.821160][ T5019] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 109.829457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 109.839022][ T5019] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 109.848340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 109.857198][ T5019] attempt to access beyond end of device [ 109.857198][ T5019] loop1: rw=524288, want=848, limit=16 [ 109.866324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 109.877010][ T5019] attempt to access beyond end of device [ 109.877010][ T5019] loop1: rw=524288, want=13478624104, limit=16 [ 109.886196][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 109.897536][ T5019] attempt to access beyond end of device [ 109.897536][ T5019] loop1: rw=524288, want=13478624080, limit=16 [ 109.906779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 109.919131][ T5019] attempt to access beyond end of device [ 109.919131][ T5019] loop1: rw=524288, want=32, limit=16 [ 109.927339][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 110.009329][ T5024] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.205: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 110.035759][ T4177] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 110.098685][ T5024] EXT4-fs (loop4): Remounting filesystem read-only [ 110.368340][ T5012] loop0: detected capacity change from 0 to 32768 [ 110.451439][ T5012] JBD2: Ignoring recovery information on journal [ 110.489646][ T5031] loop4: detected capacity change from 0 to 2048 [ 110.523262][ T5012] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.604887][ T5033] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.620917][ T4374] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.684452][ T5023] loop2: detected capacity change from 0 to 32768 [ 110.755042][ T4171] ocfs2: Unmounting device (7,0) on (node local) [ 110.786489][ T5023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.213 (5023) [ 110.865687][ T5023] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.884893][ T5023] BTRFS info (device loop2): using free space tree [ 110.903579][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 110.933922][ T5023] BTRFS info (device loop2): has skinny extents [ 110.944262][ T5038] loop3: detected capacity change from 0 to 16 [ 110.974995][ T5038] erofs: (device loop3): mounted with root inode @ nid 36. [ 111.023737][ T4374] usb 2-1: config 0 has an invalid interface number: 243 but max is 0 [ 111.032392][ T4374] usb 2-1: config 0 has no interface number 0 [ 111.049291][ T4374] usb 2-1: config 0 interface 243 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 111.154493][ T5050] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 111.163972][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 111.173093][ T5050] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 111.182604][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 111.192116][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 111.206602][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 111.215936][ T5050] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 111.225452][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 111.234989][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 111.244235][ T5050] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 111.254543][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 111.263886][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 111.273126][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 111.285083][ T5050] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 111.294616][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 111.304448][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 111.313849][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 111.323069][ T5050] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 111.333256][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 111.342582][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 111.353112][ T5050] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 111.362825][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 111.372115][ T5050] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 111.382268][ T5050] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 111.392098][ T5050] attempt to access beyond end of device [ 111.392098][ T5050] loop3: rw=524288, want=848, limit=16 [ 111.403570][ T5050] attempt to access beyond end of device [ 111.403570][ T5050] loop3: rw=524288, want=13478624104, limit=16 [ 111.418825][ T4177] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 111.453702][ T4374] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d0.ce [ 111.462931][ T4374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.656859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 111.703925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 111.776491][ T4374] usb 2-1: Product: syz [ 111.783372][ T5058] loop0: detected capacity change from 0 to 128 [ 111.789733][ T4374] usb 2-1: Manufacturer: syz [ 111.794457][ T4374] usb 2-1: SerialNumber: syz [ 111.803320][ T4374] usb 2-1: config 0 descriptor?? [ 111.823764][ T5028] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.838089][ T5058] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.848999][ T5023] BTRFS info (device loop2): enabling ssd optimizations [ 111.865526][ T4374] keyspan 2-1:0.243: Keyspan 1 port adapter converter detected [ 111.873363][ T4374] keyspan 2-1:0.243: found no endpoint descriptor for endpoint 84 [ 111.879358][ T5058] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.907943][ T4374] keyspan 2-1:0.243: found no endpoint descriptor for endpoint 82 [ 111.933582][ T4374] keyspan 2-1:0.243: found no endpoint descriptor for endpoint 1 [ 111.941404][ T4374] keyspan 2-1:0.243: found no endpoint descriptor for endpoint 2 [ 111.959240][ T4374] keyspan 2-1:0.243: found no endpoint descriptor for endpoint 83 [ 111.967940][ T4374] keyspan 2-1:0.243: found no endpoint descriptor for endpoint 3 [ 111.989408][ T4374] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 112.095538][ T4651] usb 2-1: USB disconnect, device number 9 [ 112.107560][ T4651] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 112.131631][ T4651] keyspan 2-1:0.243: device disconnected [ 112.393087][ T5070] loop3: detected capacity change from 0 to 64 [ 112.610525][ T5070] hfs: walked past end of dir [ 112.992788][ T5078] loop4: detected capacity change from 0 to 256 [ 113.043790][ T5076] input: syz0 as /devices/virtual/input/input15 [ 113.292751][ T5089] loop2: detected capacity change from 0 to 16 [ 113.358353][ T5089] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.453810][ T5094] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 113.463250][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 113.472454][ T5094] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 113.481905][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 113.491427][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 113.506486][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 113.515854][ T5094] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 113.525338][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 113.534672][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 113.543943][ T5094] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 113.553403][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 113.563136][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 113.572466][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 113.584047][ T5094] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 113.593724][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 113.604156][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 113.613628][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 113.622981][ T5094] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 113.633255][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 113.642677][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 113.652915][ T5094] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 113.662724][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 113.672297][ T5094] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 113.682596][ T5094] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 113.692316][ T5094] handle_bad_sector: 2 callbacks suppressed [ 113.692355][ T5094] attempt to access beyond end of device [ 113.692355][ T5094] loop2: rw=524288, want=848, limit=16 [ 113.710526][ T5094] attempt to access beyond end of device [ 113.710526][ T5094] loop2: rw=524288, want=13478624104, limit=16 [ 113.723161][ T5094] attempt to access beyond end of device [ 113.723161][ T5094] loop2: rw=524288, want=13478624080, limit=16 [ 113.735664][ T5094] attempt to access beyond end of device [ 113.735664][ T5094] loop2: rw=524288, want=32, limit=16 [ 113.749798][ T4177] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 113.810859][ T5067] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.903779][ T4651] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 114.144711][ T4651] usb 2-1: Using ep0 maxpacket: 8 [ 114.247360][ T5080] loop0: detected capacity change from 0 to 32768 [ 114.283870][ T4651] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 114.301136][ T4651] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 114.379635][ T4651] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.401326][ T5080] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 114.410284][ T4651] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.410597][ T5067] usb 5-1: Using ep0 maxpacket: 16 [ 114.431681][ T4651] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.469805][ T4651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.501881][ T5080] (syz.0.227,5080,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 114.513882][ T5080] (syz.0.227,5080,0):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 21474836480 failed -12 [ 114.544129][ T5080] (syz.0.227,5080,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 114.573950][ T5080] (syz.0.227,5080,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 114.605733][ T5080] (syz.0.227,5080,1):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 114.629054][ T5080] (syz.0.227,5080,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 114.649325][ T5097] loop3: detected capacity change from 0 to 32768 [ 114.690151][ T4171] ocfs2: Unmounting device (7,0) on (node local) [ 114.773814][ T5067] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 114.786639][ T5067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.793688][ T4651] usb 2-1: GET_CAPABILITIES returned 0 [ 114.800384][ T4651] usbtmc 2-1:16.0: can't read capabilities [ 114.803504][ T5067] usb 5-1: Product: syz [ 114.812334][ T5067] usb 5-1: Manufacturer: syz [ 114.830800][ T5067] usb 5-1: SerialNumber: syz [ 114.840629][ T5067] r8152-cfgselector 5-1: config 0 descriptor?? [ 114.893542][ T5097] XFS (loop3): Mounting V5 Filesystem [ 115.010118][ T5097] XFS (loop3): Ending clean mount [ 115.023616][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 115.037380][ T5093] usbtmc 2-1:16.0: Unable to send data, error -71 [ 115.039069][ T5117] loop0: detected capacity change from 0 to 64 [ 115.045856][ T4374] usb 2-1: USB disconnect, device number 10 [ 115.059021][ T5097] XFS (loop3): Quotacheck needed: Please wait. [ 115.146616][ T5097] XFS (loop3): Quotacheck: Done. [ 115.243881][ T4169] XFS (loop3): Unmounting Filesystem [ 115.324539][ T5091] udc-core: couldn't find an available UDC or it's busy [ 115.331761][ T5091] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.374903][ T5067] r8152-cfgselector 5-1: Unknown version 0x0000 [ 115.388393][ T5067] r8152-cfgselector 5-1: bad CDC descriptors [ 115.449718][ T5067] r8152-cfgselector 5-1: Unknown version 0x0000 [ 115.476651][ T5067] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 115.824996][ T5125] loop3: detected capacity change from 0 to 128 [ 115.964563][ T5125] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.049646][ T5125] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.303698][ T5132] netlink: 104 bytes leftover after parsing attributes in process `syz.3.242'. [ 116.507723][ T5122] loop1: detected capacity change from 0 to 32768 [ 116.634062][ T5136] loop3: detected capacity change from 0 to 16 [ 116.683676][ T5136] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.778072][ T5138] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.787635][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 116.796845][ T5138] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.806282][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 116.816044][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 116.829038][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 116.838569][ T5138] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.848225][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 116.857629][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 116.866944][ T5138] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.876558][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 116.886359][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 116.895682][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 116.906253][ T5138] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.915738][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 116.925309][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 116.934805][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 116.944107][ T5138] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 116.954318][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 116.963713][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 116.973548][ T5138] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 116.983587][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 116.992882][ T5138] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 117.003015][ T5138] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 117.012751][ T5138] attempt to access beyond end of device [ 117.012751][ T5138] loop3: rw=524288, want=848, limit=16 [ 117.025712][ T5138] attempt to access beyond end of device [ 117.025712][ T5138] loop3: rw=524288, want=13478624104, limit=16 [ 117.038197][ T5138] attempt to access beyond end of device [ 117.038197][ T5138] loop3: rw=524288, want=13478624080, limit=16 [ 117.050622][ T5138] attempt to access beyond end of device [ 117.050622][ T5138] loop3: rw=524288, want=32, limit=16 [ 117.070361][ T4177] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 117.612258][ T5130] loop4: detected capacity change from 0 to 32768 [ 117.768379][ T5130] XFS: ikeep mount option is deprecated. [ 117.911175][ T5130] XFS (loop4): Mounting V5 Filesystem [ 118.008945][ T5130] XFS (loop4): Ending clean mount [ 118.018398][ T5130] XFS (loop4): Quotacheck needed: Please wait. [ 118.080862][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 118.238471][ T5130] XFS (loop4): Quotacheck: Done. [ 118.365814][ T4176] XFS (loop4): Unmounting Filesystem [ 118.490307][ T5140] loop2: detected capacity change from 0 to 32768 [ 118.573637][ T5067] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 118.658807][ T5140] XFS (loop2): Mounting V5 Filesystem [ 118.817274][ T5140] XFS (loop2): Ending clean mount [ 118.831340][ T5140] XFS (loop2): Quotacheck needed: Please wait. [ 118.836163][ T5152] loop3: detected capacity change from 0 to 65536 [ 118.869320][ T5140] XFS (loop2): Quotacheck: Done. [ 118.930698][ T5152] XFS (loop3): Mounting V5 Filesystem [ 118.956215][ T4170] XFS (loop2): Unmounting Filesystem [ 118.982874][ T5152] XFS (loop3): Ending clean mount [ 119.051833][ T5067] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.064788][ T4178] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.074996][ T5067] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.088660][ T5067] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.110367][ T5067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.134293][ T5067] usb 2-1: config 0 descriptor?? [ 119.193031][ T5067] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.200478][ T5067] dvb-usb: bulk message failed: -22 (3/0) [ 119.219664][ T5067] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.239087][ T4169] XFS (loop3): Unmounting Filesystem [ 119.254469][ T5067] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.290270][ T5067] usb 2-1: media controller created [ 119.305440][ T5067] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.333631][ T4178] usb 5-1: Using ep0 maxpacket: 8 [ 119.397263][ T5067] dvb-usb: bulk message failed: -22 (6/0) [ 119.420619][ T5160] loop1: detected capacity change from 0 to 2048 [ 119.423957][ T5067] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.485752][ T5067] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 119.503527][ T4178] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 119.511729][ T4178] usb 5-1: config 64 has no interface number 0 [ 119.529912][ T4178] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.551034][ T5067] dvb-usb: schedule remote query interval to 150 msecs. [ 119.555838][ T5160] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.563495][ T4178] usb 5-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.603666][ T5067] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.603938][ T5160] attempt to access beyond end of device [ 119.603938][ T5160] loop1: rw=524288, want=33554432, limit=2048 [ 119.623762][ T5184] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.638635][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 119.654873][ T4178] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 119.683743][ T4178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.778399][ T5188] loop2: detected capacity change from 0 to 1024 [ 119.782110][ T4178] usb 5-1: probing VID:PID(2201:012C) [ 119.792335][ T4178] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 119.819168][ T4178] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 119.834988][ T5067] dvb-usb: bulk message failed: -22 (1/0) [ 119.841066][ T5067] dvb-usb: error while querying for an remote control event. [ 119.872277][ T4178] vub300: probe of 5-1:64.19 failed with error -22 [ 119.883314][ T4178] usb 2-1: USB disconnect, device number 11 [ 119.927328][ T4178] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 119.947092][ T4601] hfsplus: b-tree write err: -5, ino 4 [ 120.021896][ T5067] usb 5-1: USB disconnect, device number 5 [ 120.300615][ T5183] loop0: detected capacity change from 0 to 32768 [ 120.429401][ T5183] XFS (loop0): Mounting V5 Filesystem [ 120.528847][ T5183] XFS (loop0): Ending clean mount [ 120.648336][ T5208] loop1: detected capacity change from 0 to 16 [ 120.669773][ T4171] XFS (loop0): Unmounting Filesystem [ 120.696054][ T5208] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.759742][ T5208] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 90111 of nid 36 [ 120.793632][ T5208] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 120.805199][ T5208] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 86015 of nid 36 [ 120.819894][ T5208] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 120.830123][ T5208] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 81919 of nid 36 [ 120.856667][ T5208] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 120.876232][ T5208] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 77823 of nid 36 [ 120.887802][ T5209] attempt to access beyond end of device [ 120.887802][ T5209] loop1: rw=0, want=24, limit=16 [ 120.912763][ T5208] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 120.929359][ T5208] attempt to access beyond end of device [ 120.929359][ T5208] loop1: rw=524288, want=392, limit=16 [ 120.987220][ T5208] attempt to access beyond end of device [ 120.987220][ T5208] loop1: rw=524288, want=400, limit=16 [ 121.029604][ T5208] attempt to access beyond end of device [ 121.029604][ T5208] loop1: rw=524288, want=32, limit=16 [ 121.067102][ T5208] attempt to access beyond end of device [ 121.067102][ T5208] loop1: rw=524288, want=736, limit=16 [ 121.096179][ T5208] attempt to access beyond end of device [ 121.096179][ T5208] loop1: rw=524288, want=744, limit=16 [ 121.304841][ T5212] loop2: detected capacity change from 0 to 1024 [ 121.521300][ T5214] loop3: detected capacity change from 0 to 4096 [ 121.838755][ T5214] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 121.873846][ T5067] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.916776][ T5214] ntfs3: loop3: Failed to load $Extend. [ 122.153561][ T5067] usb 1-1: Using ep0 maxpacket: 16 [ 122.274692][ T5230] loop3: detected capacity change from 0 to 4096 [ 122.296232][ T5067] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.310589][ T5067] usb 1-1: config 0 has no interface number 0 [ 122.318314][ T5067] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.462226][ T5221] loop1: detected capacity change from 0 to 32768 [ 122.532442][ T5221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.264 (5221) [ 122.686087][ T5067] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.695957][ T5067] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.708896][ T5067] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 122.721975][ T5067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.737870][ T5067] usb 1-1: config 0 descriptor?? [ 122.757744][ T5221] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.784622][ T5221] BTRFS info (device loop1): metadata ratio 2 [ 122.803098][ T5221] BTRFS info (device loop1): enabling ssd optimizations [ 122.819391][ T5221] BTRFS info (device loop1): using spread ssd allocation scheme [ 122.849180][ T5221] BTRFS info (device loop1): enabling disk space caching [ 122.879837][ T5221] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.893656][ T5221] BTRFS info (device loop1): use zstd compression, level 3 [ 122.900910][ T5221] BTRFS info (device loop1): force clearing of disk cache [ 122.928737][ T5221] BTRFS info (device loop1): max_inline at 8 [ 122.973830][ T5221] BTRFS info (device loop1): disk space caching is enabled [ 122.993629][ T4651] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.019222][ T5221] BTRFS info (device loop1): has skinny extents [ 123.261990][ T5221] BTRFS info (device loop1): clearing free space tree [ 123.278886][ T5221] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.309338][ T5221] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.345770][ T5067] holtek_mouse 0003:04D9:A072.000D: unknown main item tag 0x3 [ 123.353924][ T5067] holtek_mouse 0003:04D9:A072.000D: item fetching failed at offset 2/4 [ 123.354399][ T4651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.362729][ T5067] holtek_mouse 0003:04D9:A072.000D: hid parse failed: -22 [ 123.380405][ T5067] holtek_mouse: probe of 0003:04D9:A072.000D failed with error -22 [ 124.216816][ T4159] usb 1-1: USB disconnect, device number 4 [ 124.254818][ T4651] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.264431][ T4651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.274937][ T4651] usb 5-1: config 0 descriptor?? [ 124.293689][ T26] audit: type=1800 audit(1743194125.237:10): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.264" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 124.766518][ T4651] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 124.817789][ T4651] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input17 [ 124.952356][ T4651] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 125.407241][ T5238] loop3: detected capacity change from 0 to 65536 [ 125.564349][ T5238] XFS (loop3): Mounting V5 Filesystem [ 125.585058][ T5269] loop1: detected capacity change from 0 to 32768 [ 125.657867][ T23] usb 5-1: USB disconnect, device number 6 [ 125.680331][ T5238] XFS (loop3): Ending clean mount [ 125.774858][ T5269] XFS (loop1): Mounting V5 Filesystem [ 125.941642][ T4169] XFS (loop3): Unmounting Filesystem [ 125.950198][ T5269] XFS (loop1): Ending clean mount [ 125.962537][ T5269] XFS (loop1): Quotacheck needed: Please wait. [ 125.989762][ T5283] loop2: detected capacity change from 0 to 32768 [ 126.042229][ T5281] loop0: detected capacity change from 0 to 32768 [ 126.127058][ T5281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.280 (5281) [ 126.140079][ T5269] XFS (loop1): Quotacheck: Done. [ 126.212907][ T4168] XFS (loop1): Unmounting Filesystem [ 126.254773][ T5281] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 126.273747][ T5281] BTRFS info (device loop0): using free space tree [ 126.280356][ T5281] BTRFS info (device loop0): has skinny extents [ 126.433041][ T5306] loop4: detected capacity change from 0 to 512 [ 126.551638][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.604449][ T5306] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.739250][ T5281] BTRFS info (device loop0): enabling ssd optimizations [ 126.953554][ T5067] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.023637][ T4651] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.243551][ T5067] usb 3-1: Using ep0 maxpacket: 8 [ 127.263651][ T4651] usb 4-1: Using ep0 maxpacket: 32 [ 127.395021][ T4651] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 127.553697][ T5067] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 127.572257][ T5337] loop0: detected capacity change from 0 to 512 [ 127.578951][ T5067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 127.587461][ T4651] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 127.593493][ T5067] usb 3-1: Product: syz [ 127.605966][ T4651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.611356][ T5067] usb 3-1: Manufacturer: syz [ 127.619222][ T5067] usb 3-1: SerialNumber: syz [ 127.630530][ T5335] loop1: detected capacity change from 0 to 32768 [ 127.632068][ T4651] usb 4-1: Product: syz [ 127.648073][ T4651] usb 4-1: Manufacturer: syz [ 127.649071][ T5067] usb 3-1: config 0 descriptor?? [ 127.652693][ T4651] usb 4-1: SerialNumber: syz [ 127.659234][ T4651] usb 4-1: config 0 descriptor?? [ 127.666743][ T5333] loop4: detected capacity change from 0 to 32768 [ 127.681952][ T5337] EXT4-fs (loop0): Ignoring removed nobh option [ 127.692330][ T5335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.288 (5335) [ 127.694299][ T5328] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.721589][ T5067] usbtest 3-1:0.0: FX2 device [ 127.724122][ T4651] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 127.730850][ T5067] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 127.769792][ T5337] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.287: corrupted inode contents [ 127.814235][ T5335] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.814768][ T5337] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.287: mark_inode_dirty error [ 127.835435][ T5335] BTRFS info (device loop1): force zlib compression, level 3 [ 127.849759][ T5337] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.287: corrupted inode contents [ 127.854093][ T5333] XFS (loop4): Mounting V5 Filesystem [ 127.875207][ T5335] BTRFS info (device loop1): force clearing of disk cache [ 127.882372][ T5335] BTRFS info (device loop1): setting nodatasum [ 127.933630][ T5335] BTRFS info (device loop1): allowing degraded mounts [ 127.944008][ T5337] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.287: mark_inode_dirty error [ 127.963738][ T4651] usb 3-1: USB disconnect, device number 7 [ 127.992592][ T5335] BTRFS info (device loop1): enabling disk space caching [ 128.003260][ T5337] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.287: corrupted inode contents [ 128.021920][ T5337] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 128.030891][ T5335] BTRFS info (device loop1): disk space caching is enabled [ 128.041542][ T5335] BTRFS info (device loop1): has skinny extents [ 128.051324][ T5337] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.287: corrupted inode contents [ 128.064907][ T5337] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.287: mark_inode_dirty error [ 128.079579][ T5337] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 128.080583][ T5067] usb 4-1: USB disconnect, device number 8 [ 128.088682][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 128.119401][ T5337] EXT4-fs (loop0): 1 truncate cleaned up [ 128.127552][ T5337] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,nobh,,errors=continue. Quota mode: writeback. [ 128.145517][ T5337] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.158914][ T5333] XFS (loop4): Ending clean mount [ 128.240766][ T5335] BTRFS info (device loop1): clearing free space tree [ 128.249592][ T5367] EXT4-fs (loop0): shut down requested (1) [ 128.258757][ T5335] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.288306][ T26] audit: type=1800 audit(1743194129.237:11): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.287" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 128.288389][ T5335] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.410341][ T4176] XFS (loop4): Unmounting Filesystem [ 128.426481][ T5335] BTRFS info (device loop1): balance: start -d -m -s [ 128.491075][ T4272] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.498067][ T5335] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 128.561571][ T4272] Quota error (device loop0): write_blk: dquota write failed [ 128.573694][ T4272] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 128.619169][ T4272] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.663520][ T4272] Quota error (device loop0): write_blk: dquota write failed [ 128.670935][ T4272] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 128.715275][ T4272] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 128.752251][ T4272] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 128.785251][ T5335] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 128.786217][ T4272] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.880529][ T4272] Quota error (device loop0): write_blk: dquota write failed [ 128.898233][ T4272] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 128.903098][ T5335] BTRFS info (device loop1): balance: canceled [ 129.106958][ C1] sd 0:0:1:0: tag#6250 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 129.116916][ C1] sd 0:0:1:0: tag#6250 CDB: Read(6) 08 00 00 00 ff ff ff ff 01 00 00 00 [ 129.182827][ T5387] loop2: detected capacity change from 0 to 16 [ 129.278667][ T5067] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.792308][ T5387] erofs: (device loop2): mounted with root inode @ nid 36. [ 130.244825][ T5390] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.272027][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 130.358166][ T5390] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.419687][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 130.461179][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 130.485051][ T5067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.524116][ T5067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.573979][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 130.588825][ T5067] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 130.636703][ T5390] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.648441][ T5067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.749904][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 130.838539][ T5067] usb 4-1: config 0 descriptor?? [ 131.127509][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 131.250527][ T5390] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 131.339377][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 131.419128][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 131.496299][ T5067] samsung 0003:0419:0001.000F: unknown main item tag 0x0 [ 131.571339][ T5067] samsung 0003:0419:0001.000F: unknown main item tag 0x0 [ 131.583645][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 131.650451][ T5067] samsung 0003:0419:0001.000F: unknown main item tag 0x0 [ 131.697619][ T5390] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 131.748297][ T5067] samsung 0003:0419:0001.000F: unknown main item tag 0x0 [ 131.807722][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 131.844897][ T5067] samsung 0003:0419:0001.000F: unknown main item tag 0x0 [ 131.925473][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 131.926049][ T5067] samsung 0003:0419:0001.000F: unknown main item tag 0x0 [ 131.956016][ T5067] samsung 0003:0419:0001.000F: unknown main item tag 0x0 [ 132.145692][ T5067] samsung 0003:0419:0001.000F: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 132.235095][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 132.266889][ T5390] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 132.278150][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 132.282785][ T5067] usb 4-1: USB disconnect, device number 9 [ 132.332057][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 132.347674][ T5390] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 132.362361][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 132.391412][ T5390] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 132.401786][ T5390] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 132.434494][ T5390] attempt to access beyond end of device [ 132.434494][ T5390] loop2: rw=524288, want=848, limit=16 [ 132.471539][ T5390] attempt to access beyond end of device [ 132.471539][ T5390] loop2: rw=524288, want=13478624104, limit=16 [ 132.523677][ T5390] attempt to access beyond end of device [ 132.523677][ T5390] loop2: rw=524288, want=13478624080, limit=16 [ 132.568885][ T5390] attempt to access beyond end of device [ 132.568885][ T5390] loop2: rw=524288, want=32, limit=16 [ 132.626031][ T4177] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 132.757906][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.774943][ T5067] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.782987][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.791577][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.895149][ T5395] loop1: detected capacity change from 0 to 32768 [ 132.958291][ T5395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.295 (5395) [ 133.032175][ T5395] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.051976][ T5395] BTRFS info (device loop1): force clearing of disk cache [ 133.102621][ T5395] BTRFS info (device loop1): force zlib compression, level 3 [ 133.125740][ T5418] sctp: [Deprecated]: syz.4.306 (pid 5418) Use of int in maxseg socket option. [ 133.125740][ T5418] Use struct sctp_assoc_value instead [ 133.141262][ T5395] BTRFS info (device loop1): enabling auto defrag [ 133.164859][ T5395] BTRFS info (device loop1): max_inline at 0 [ 133.170893][ T5395] BTRFS info (device loop1): enabling disk space caching [ 133.210015][ T5395] BTRFS info (device loop1): disk space caching is enabled [ 133.217565][ T5067] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.237999][ T5395] BTRFS info (device loop1): has skinny extents [ 133.333803][ T5067] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 133.344567][ T5067] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.443795][ T5067] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.452914][ T5067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.486076][ T5067] usb 4-1: SerialNumber: syz [ 133.524127][ T5399] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.623604][ T5395] BTRFS info (device loop1): enabling ssd optimizations [ 133.631931][ T5395] BTRFS info (device loop1): clearing free space tree [ 133.675097][ T5395] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.685179][ T5395] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.763807][ T5399] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.773986][ T5449] loop4: detected capacity change from 0 to 164 [ 133.880165][ T5416] loop0: detected capacity change from 0 to 32768 [ 133.896789][ T5449] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 134.216192][ T5444] loop2: detected capacity change from 0 to 32768 [ 134.223263][ T5416] XFS (loop0): Mounting V5 Filesystem [ 134.260939][ T5067] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 134.277313][ T5458] loop1: detected capacity change from 0 to 16 [ 134.376798][ T5458] erofs: (device loop1): mounted with root inode @ nid 36. [ 134.398433][ T5444] XFS (loop2): Mounting V5 Filesystem [ 134.439429][ T5416] XFS (loop0): Ending clean mount [ 134.448399][ T5416] XFS (loop0): Quotacheck needed: Please wait. [ 134.487712][ T5067] usb 4-1: USB disconnect, device number 10 [ 134.653675][ T5471] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.663038][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 134.672168][ T5471] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.681492][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 134.690593][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 134.700861][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 134.709976][ T5471] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.719328][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 134.728440][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 134.737513][ T5471] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.746847][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 134.755926][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 134.765033][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 134.774336][ T5471] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.783661][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 134.792755][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 134.802395][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 134.811487][ T5471] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 134.821496][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 134.830587][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 134.839813][ T5471] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 134.849257][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 134.858311][ T5471] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 134.868289][ T5471] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 134.877414][ T5471] attempt to access beyond end of device [ 134.877414][ T5471] loop1: rw=524288, want=848, limit=16 [ 134.888468][ T5471] attempt to access beyond end of device [ 134.888468][ T5471] loop1: rw=524288, want=13478624104, limit=16 [ 134.900252][ T5471] attempt to access beyond end of device [ 134.900252][ T5471] loop1: rw=524288, want=13478624080, limit=16 [ 134.912647][ T5471] attempt to access beyond end of device [ 134.912647][ T5471] loop1: rw=524288, want=32, limit=16 [ 134.941874][ T4177] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 134.957763][ T23] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 135.011125][ T23] XFS (loop2): Unmount and run xfs_repair [ 135.020523][ T23] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 135.035674][ T23] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 135.134944][ T23] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 135.141957][ T5416] XFS (loop0): Quotacheck: Done. [ 135.145055][ T23] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 135.162840][ T23] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 135.172307][ T23] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 135.181900][ T23] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 135.202809][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.212673][ T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.223307][ T5444] XFS (loop2): metadata I/O error in "xfs_read_agf+0x263/0x510" at daddr 0x1 len 1 error 74 [ 135.315558][ T5444] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 135.324982][ T4171] XFS (loop0): Unmounting Filesystem [ 135.374257][ T5444] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1cd/0x200 (fs/xfs/xfs_fsops.c:573). Shutting down filesystem. [ 135.403503][ T5444] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 135.411945][ T5444] XFS (loop2): Ending clean mount [ 135.444312][ T5444] XFS (loop2): Failed to initialize disk quotas. [ 135.503184][ T5477] loop1: detected capacity change from 0 to 1024 [ 135.599784][ T5477] EXT4-fs (loop1): Ignoring removed nobh option [ 135.619753][ T5477] EXT4-fs (loop1): Ignoring removed bh option [ 135.630479][ T4170] XFS (loop2): Unmounting Filesystem [ 135.716849][ T5477] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,nobh,data_err=ignore,barrier,max_batch_time=0x000000000000007f,user_xattr,bh,dioread_lock,,errors=continue. Quota mode: none. [ 135.853669][ T4642] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.993599][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.093720][ T4642] usb 4-1: Using ep0 maxpacket: 16 [ 136.213792][ T4642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.238861][ T4642] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 136.253529][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 136.258453][ T4642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.271794][ T4642] usb 4-1: config 0 descriptor?? [ 136.383801][ T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 136.392083][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.428522][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.446620][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.459802][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.477118][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.489072][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.679420][ T5489] loop2: detected capacity change from 0 to 32768 [ 136.714719][ T5489] XFS: ikeep mount option is deprecated. [ 136.720517][ T5489] XFS: noikeep mount option is deprecated. [ 136.778390][ T5489] XFS (loop2): Mounting V5 Filesystem [ 136.859365][ T5489] XFS (loop2): Ending clean mount [ 136.866929][ T5489] XFS (loop2): Quotacheck needed: Please wait. [ 136.874002][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 136.877553][ T4642] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 136.880095][ T23] usbtmc 5-1:16.0: can't read capabilities [ 136.943883][ T5489] XFS (loop2): Quotacheck: Done. [ 136.960463][ T5489] XFS: ikeep mount option is deprecated. [ 137.040368][ T4170] XFS (loop2): Unmounting Filesystem [ 137.092841][ T4599] usb 5-1: USB disconnect, device number 7 [ 137.300183][ T4642] usb 4-1: USB disconnect, device number 11 [ 137.551195][ T5520] loop2: detected capacity change from 0 to 16 [ 137.618807][ T5520] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.718646][ T5521] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.728264][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 137.737555][ T5521] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.747178][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 137.756944][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 137.772943][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 137.782329][ T5521] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.791865][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 137.801286][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 137.810529][ T5521] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.820142][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 137.829682][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 137.838995][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 137.848957][ T5521] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.858518][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 137.868226][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 137.878100][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 137.887946][ T5521] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 137.898544][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 137.907931][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 137.917877][ T5521] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 137.927490][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 137.936800][ T5521] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 137.946896][ T5521] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 137.956575][ T5521] attempt to access beyond end of device [ 137.956575][ T5521] loop2: rw=524288, want=848, limit=16 [ 137.968118][ T5521] attempt to access beyond end of device [ 137.968118][ T5521] loop2: rw=524288, want=13478624104, limit=16 [ 137.981383][ T5521] attempt to access beyond end of device [ 137.981383][ T5521] loop2: rw=524288, want=13478624080, limit=16 [ 137.993766][ T5521] attempt to access beyond end of device [ 137.993766][ T5521] loop2: rw=524288, want=32, limit=16 [ 138.006974][ T4177] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 138.638789][ T5529] loop4: detected capacity change from 0 to 256 [ 138.689666][ T5529] exfat: Deprecated parameter 'utf8' [ 138.717894][ T5529] exfat: Deprecated parameter 'utf8' [ 138.723259][ T5529] exfat: Deprecated parameter 'namecase' [ 138.768617][ T5518] loop1: detected capacity change from 0 to 32768 [ 138.795436][ T5529] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 138.850204][ T5537] netlink: 452 bytes leftover after parsing attributes in process `syz.3.335'. [ 138.966594][ T5518] XFS (loop1): Mounting V5 Filesystem [ 139.249279][ T5518] XFS (loop1): Ending clean mount [ 139.265495][ T5549] loop3: detected capacity change from 0 to 1024 [ 139.475504][ T4168] XFS (loop1): Unmounting Filesystem [ 139.481449][ T4509] hfsplus: b-tree write err: -5, ino 4 [ 139.528554][ T5556] loop0: detected capacity change from 0 to 256 [ 139.627299][ T5556] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 139.677538][ T5560] loop4: detected capacity change from 0 to 16 [ 139.834655][ T5560] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.968252][ T5563] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.977948][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 139.987145][ T5563] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.996528][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 140.005998][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 140.018922][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 140.029129][ T5563] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.038672][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 140.047946][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 140.057239][ T5563] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.066825][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 140.076114][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 140.085382][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 140.095122][ T5563] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.104615][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 140.114200][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 140.123602][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 140.133832][ T5563] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 140.144044][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 140.153283][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 140.163252][ T5563] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 140.172918][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 140.182308][ T5563] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 140.192459][ T5563] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 140.202197][ T5563] attempt to access beyond end of device [ 140.202197][ T5563] loop4: rw=524288, want=848, limit=16 [ 140.214030][ T5563] attempt to access beyond end of device [ 140.214030][ T5563] loop4: rw=524288, want=13478624104, limit=16 [ 140.227632][ T5563] attempt to access beyond end of device [ 140.227632][ T5563] loop4: rw=524288, want=13478624080, limit=16 [ 140.239930][ T5563] attempt to access beyond end of device [ 140.239930][ T5563] loop4: rw=524288, want=32, limit=16 [ 140.260252][ T4177] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 142.081771][ T5583] loop0: detected capacity change from 0 to 2048 [ 142.232801][ T5583] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.283753][ T5583] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.301401][ T26] audit: type=1800 audit(1743194143.247:12): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.351" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 142.838965][ T5602] loop0: detected capacity change from 0 to 4096 [ 142.927556][ T5602] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.950285][ T4160] udevd[4160]: incorrect nilfs2 checksum on /dev/loop0 [ 142.971316][ T5602] NILFS (loop0): mounting unchecked fs [ 143.071382][ T5602] NILFS (loop0): recovery complete [ 143.086251][ T5594] loop2: detected capacity change from 0 to 40427 [ 143.094581][ T5608] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.131565][ T5604] loop4: detected capacity change from 0 to 4096 [ 143.194452][ T5604] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 143.295286][ T5594] F2FS-fs (loop2): invalid crc value [ 143.359071][ T5594] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.612035][ T5594] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 143.669693][ T5594] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.806740][ T26] audit: type=1804 audit(1743194144.757:13): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.354" name="/newroot/73/file1/file0" dev="loop2" ino=10 res=1 errno=0 [ 143.921773][ T4170] attempt to access beyond end of device [ 143.921773][ T4170] loop2: rw=2049, want=45104, limit=40427 [ 143.943614][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.561205][ T5631] loop1: detected capacity change from 0 to 4096 [ 144.673513][ T5631] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 144.962312][ T5631] ntfs3: loop1: Failed to load $Extend. [ 145.063850][ T5629] loop4: detected capacity change from 0 to 32768 [ 145.131217][ T26] audit: type=1800 audit(1743194146.077:14): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.368" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 145.264802][ T5629] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 145.403117][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.410659][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.475835][ T4176] ocfs2: Unmounting device (7,4) on (node local) [ 145.624989][ T5649] syz.2.374 uses obsolete (PF_INET,SOCK_PACKET) [ 145.655519][ T5649] device syzkaller1 entered promiscuous mode [ 145.798236][ T5655] tun0: tun_chr_ioctl cmd 2147767520 [ 146.135695][ T5657] xt_CT: No such helper "snmp" [ 146.213706][ T5667] loop4: detected capacity change from 0 to 512 [ 146.288022][ T5670] loop2: detected capacity change from 0 to 16 [ 146.425941][ T5667] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 146.488316][ T5670] erofs: (device loop2): mounted with root inode @ nid 36. [ 146.513908][ T5667] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 146.594921][ T5673] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 146.604575][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 146.613835][ T5673] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 146.623189][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 146.632605][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 146.647968][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 146.657303][ T5673] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 146.666807][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 146.676237][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 146.686432][ T5673] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 146.696145][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 146.705483][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 146.715096][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 146.725101][ T5673] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 146.735635][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 146.745267][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 146.754587][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 146.763949][ T5673] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 146.774301][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 146.784490][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 146.795085][ T5673] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 146.804665][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 146.813939][ T5673] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 146.824001][ T5673] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 146.833703][ T5673] attempt to access beyond end of device [ 146.833703][ T5673] loop2: rw=524288, want=848, limit=16 [ 146.845169][ T5673] attempt to access beyond end of device [ 146.845169][ T5673] loop2: rw=524288, want=13478624104, limit=16 [ 146.857500][ T5673] attempt to access beyond end of device [ 146.857500][ T5673] loop2: rw=524288, want=13478624080, limit=16 [ 146.870154][ T5673] attempt to access beyond end of device [ 146.870154][ T5673] loop2: rw=524288, want=32, limit=16 [ 146.887815][ T4177] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 146.950888][ T5667] System zones: 0-2, 18-18, 34-35 [ 147.184387][ T5667] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 147.253162][ T5667] EXT4-fs (loop4): shut down requested (0) [ 147.441594][ T5653] loop0: detected capacity change from 0 to 32768 [ 147.530412][ T5653] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.376 (5653) [ 147.644300][ T5653] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 147.671192][ T5653] BTRFS info (device loop0): setting nodatacow, compression disabled [ 147.743552][ T5653] BTRFS info (device loop0): doing ref verification [ 147.750291][ T5653] BTRFS info (device loop0): turning off barriers [ 147.811651][ T5653] BTRFS info (device loop0): enabling ssd optimizations [ 147.853559][ T5653] BTRFS info (device loop0): using spread ssd allocation scheme [ 147.861247][ T5653] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 147.898876][ T5653] BTRFS info (device loop0): force lzo compression, level 0 [ 147.912992][ T5686] netlink: 452 bytes leftover after parsing attributes in process `syz.3.385'. [ 147.929663][ T5653] BTRFS info (device loop0): turning on sync discard [ 147.949410][ T5653] BTRFS info (device loop0): using free space tree [ 147.959536][ T5653] BTRFS info (device loop0): has skinny extents [ 148.274408][ T26] audit: type=1326 audit(1743194149.217:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30eff46169 code=0x7ffc0000 [ 148.318366][ T26] audit: type=1326 audit(1743194149.247:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f30eff46169 code=0x7ffc0000 [ 148.342333][ T26] audit: type=1326 audit(1743194149.247:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30eff46169 code=0x7ffc0000 [ 148.411525][ T5717] loop3: detected capacity change from 0 to 16 [ 148.426412][ T5719] loop1: detected capacity change from 0 to 1024 [ 148.464754][ T5717] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.525646][ T5719] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 148.612946][ T5724] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.622660][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 148.632419][ T5724] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.642133][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 148.652315][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 148.666648][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 148.676077][ T5724] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.685613][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 148.695071][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 148.704347][ T5724] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.713894][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 148.723200][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 148.732979][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 148.743799][ T5724] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.753339][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 148.762992][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 148.772360][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 148.781726][ T5724] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 148.791989][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 148.801352][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 148.811481][ T5724] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 148.821113][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 148.830787][ T5724] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 148.841028][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 148.851044][ T5724] attempt to access beyond end of device [ 148.851044][ T5724] loop3: rw=524288, want=848, limit=16 [ 148.862545][ T5724] attempt to access beyond end of device [ 148.862545][ T5724] loop3: rw=524288, want=13478624104, limit=16 [ 148.875076][ T5724] attempt to access beyond end of device [ 148.875076][ T5724] loop3: rw=524288, want=13478624080, limit=16 [ 148.889645][ T5724] attempt to access beyond end of device [ 148.889645][ T5724] loop3: rw=524288, want=32, limit=16 [ 148.911093][ T4177] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 149.753753][ T5392] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.929585][ T5742] loop3: detected capacity change from 0 to 8192 [ 150.003890][ T5392] usb 3-1: Using ep0 maxpacket: 16 [ 150.032927][ T5742] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 150.080012][ T5742] REISERFS (device loop3): using ordered data mode [ 150.092234][ T5742] reiserfs: using flush barriers [ 150.116495][ T5742] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.172147][ T5742] REISERFS (device loop3): checking transaction log (loop3) [ 150.197839][ T5742] REISERFS (device loop3): Using r5 hash to sort names [ 150.221839][ T5742] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 150.289531][ T5392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.300922][ T5392] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.310079][ T5392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.322302][ T5392] usb 3-1: config 0 descriptor?? [ 150.343610][ T4651] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 150.367181][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.609845][ T5752] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.687590][ T23] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 150.703934][ T4651] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.720409][ T4651] usb 2-1: config 0 has no interface number 0 [ 150.736917][ T4651] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 150.762527][ T4651] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 150.775745][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.792190][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.806331][ T5392] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 150.813623][ T5392] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 150.820702][ T5392] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 150.821430][ T4651] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.856364][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.857807][ T4651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.866564][ T5392] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 150.886599][ T5392] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 150.904234][ T5392] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 150.912524][ T4651] usb 2-1: config 0 descriptor?? [ 150.943254][ T5746] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 150.973744][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.986731][ T4651] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 151.004441][ T5731] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 151.009556][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.016191][ T5731] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 151.016219][ T5731] CPU: 0 PID: 5731 Comm: syz.2.394 Not tainted 5.15.179-syzkaller #0 [ 151.016242][ T5731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.016254][ T5731] RIP: 0010:mcp_i2c_xfer+0x5a/0x430 [ 151.016282][ T5731] Code: 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 aa 2f f6 f9 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 87 2f f6 f9 49 8b 1e 48 8d ab 70 [ 151.016300][ T5731] RSP: 0018:ffffc900030cf958 EFLAGS: 00010246 [ 151.016320][ T5731] RAX: dffffc0000000000 RBX: ffff8880256fa1d8 RCX: 0000000000080000 [ 151.016337][ T5731] RDX: ffffc90004074000 RSI: 0000000000000095 RDI: 0000000000000096 [ 151.016352][ T5731] RBP: dffffc0000000000 R08: ffffffff86bbc579 R09: ffffed1004adf4d3 [ 151.016368][ T5731] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 151.016382][ T5731] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc900030cfbc0 [ 151.016396][ T5731] FS: 00007fab076e76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 151.047602][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.053745][ T5731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.053768][ T5731] CR2: 00002000000012c0 CR3: 0000000056d69000 CR4: 00000000003506f0 [ 151.053786][ T5731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.053799][ T5731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.053812][ T5731] Call Trace: [ 151.053820][ T5731] [ 151.053829][ T5731] ? __die_body+0x5e/0xa0 [ 151.053854][ T5731] ? die_addr+0x95/0xc0 [ 151.053876][ T5731] ? exc_general_protection+0x327/0x4f0 [ 151.053916][ T5731] ? asm_exc_general_protection+0x22/0x30 [ 151.053942][ T5731] ? __i2c_transfer+0x6e9/0x2100 [ 151.053967][ T5731] ? mcp_i2c_xfer+0x5a/0x430 [ 151.053990][ T5731] ? mcp_i2c_xfer+0x26/0x430 [ 151.054011][ T5731] ? mcp_gpio_get+0x260/0x260 [ 151.054033][ T5731] __i2c_transfer+0x85a/0x2100 [ 151.054052][ T5731] ? rwsem_down_read_slowpath+0xb40/0xb40 [ 151.225833][ T5731] ? i2c_cmd+0x110/0x110 [ 151.231641][ T5731] i2c_transfer+0x261/0x3a0 [ 151.236183][ T5731] ? __i2c_transfer+0x2100/0x2100 [ 151.241235][ T5731] ? __lock_acquire+0x1ff0/0x1ff0 [ 151.246281][ T5731] i2c_transfer_buffer_flags+0x17c/0x260 [ 151.251935][ T5731] ? i2c_transfer+0x3a0/0x3a0 [ 151.256803][ T5731] ? _copy_from_user+0x10f/0x170 [ 151.261764][ T5731] i2cdev_write+0x88/0x130 [ 151.266086][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.266221][ T5731] do_iter_write+0x39c/0x760 [ 151.276162][ T5756] loop3: detected capacity change from 0 to 8192 [ 151.279654][ T5731] do_writev+0x281/0x470 [ 151.290211][ T5731] ? do_readv+0x460/0x460 [ 151.293498][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.294572][ T5731] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 151.311374][ T5731] ? vtime_user_exit+0x2d1/0x400 [ 151.316345][ T5731] ? syscall_enter_from_user_mode+0x2e/0x240 [ 151.322348][ T5731] ? lockdep_hardirqs_on+0x94/0x130 [ 151.327570][ T5731] ? syscall_enter_from_user_mode+0x2e/0x240 [ 151.333476][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.333562][ T5731] do_syscall_64+0x3b/0xb0 [ 151.344549][ T5731] ? clear_bhb_loop+0x15/0x70 [ 151.349253][ T5731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.355163][ T5731] RIP: 0033:0x7fab0987e169 [ 151.359592][ T5731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.379213][ T5731] RSP: 002b:00007fab076e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 151.387648][ T5731] RAX: ffffffffffffffda RBX: 00007fab09a96fa0 RCX: 00007fab0987e169 [ 151.395642][ T5731] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000004 [ 151.403635][ T5731] RBP: 00007fab098ff2a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.411624][ T5731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.419621][ T5731] R13: 0000000000000000 R14: 00007fab09a96fa0 R15: 00007ffe968f1c88 [ 151.427628][ T5731] [ 151.430665][ T5731] Modules linked in: [ 151.434599][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.446743][ T4651] usb 2-1: USB disconnect, device number 12 [ 151.461923][ T5731] ---[ end trace b1d3d00c209dc7b0 ]--- [ 151.470915][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.473600][ T5731] RIP: 0010:mcp_i2c_xfer+0x5a/0x430 [ 151.487749][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.497170][ T5731] Code: 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 aa 2f f6 f9 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 87 2f f6 f9 49 8b 1e 48 8d ab 70 [ 151.503915][ T5756] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 151.519134][ T5731] RSP: 0018:ffffc900030cf958 EFLAGS: 00010246 [ 151.535070][ T5731] RAX: dffffc0000000000 RBX: ffff8880256fa1d8 RCX: 0000000000080000 [ 151.541977][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.552729][ T5731] RDX: ffffc90004074000 RSI: 0000000000000095 RDI: 0000000000000096 [ 151.555674][ T5756] REISERFS (device loop3): using ordered data mode [ 151.561354][ T5731] RBP: dffffc0000000000 R08: ffffffff86bbc579 R09: ffffed1004adf4d3 [ 151.567499][ T5756] reiserfs: using flush barriers [ 151.582594][ T5731] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 151.584271][ T5756] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.591266][ T5731] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc900030cfbc0 [ 151.611624][ T5756] REISERFS (device loop3): checking transaction log (loop3) [ 151.615363][ T5731] FS: 00007fab076e76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 151.631451][ T5731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.638239][ T5731] CR2: 000055ee20aa5268 CR3: 0000000056d69000 CR4: 00000000003506f0 [ 151.650908][ T5731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.658994][ T5731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.667146][ T5731] Kernel panic - not syncing: Fatal exception [ 151.673487][ T5731] Kernel Offset: disabled [ 151.677819][ T5731] Rebooting in 86400 seconds..