last executing test programs: 5m28.874240486s ago: executing program 5 (id=4817): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x1, &(0x7f0000000a80)='M'}], 0x1}) 5m26.261904804s ago: executing program 5 (id=4854): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0x0, 0xffff}, {0x9}}}, 0x24}}, 0x40080ca) 5m25.955277255s ago: executing program 5 (id=4859): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x6) 5m25.72610468s ago: executing program 5 (id=4862): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m24.966659918s ago: executing program 5 (id=4871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) lsm_list_modules(0x0, 0x0, 0x0) 5m23.873501224s ago: executing program 5 (id=4878): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 5m23.078461476s ago: executing program 32 (id=4878): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3m54.203305675s ago: executing program 2 (id=5661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) 3m53.926158876s ago: executing program 2 (id=5664): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x7c, 0x0, @remote}}}}}, 0x0) 3m53.770308405s ago: executing program 2 (id=5666): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 3m53.420544961s ago: executing program 2 (id=5669): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m52.068920938s ago: executing program 2 (id=5676): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x6) 3m51.181161048s ago: executing program 2 (id=5679): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3m50.308803438s ago: executing program 33 (id=5679): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6.683944942s ago: executing program 1 (id=7810): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB='nodiscard,iocharset=cp861,nodiscard,iocharset=macroman,nointegrity,errors=remount-ro,nointegrity\x00iocharset=ascii,nodiscard,umask=0xfffffffffffffffd,nodiscard,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e687ed7cc92413591118b4c90c38ce6717086f74110d64c905e04106d03caec62ca1fecda507871eca727d8f39b9d782da9a7d0d28312cc6ed5b00392b37b96c8d4cc83a017fa5fca263b"], 0x5, 0x60a5, &(0x7f000000c4c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x42) ftruncate(r0, 0x2007ffc) 4.271675831s ago: executing program 1 (id=7830): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 4.005276688s ago: executing program 7 (id=7833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.689237693s ago: executing program 7 (id=7837): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 3.48224006s ago: executing program 7 (id=7840): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0xffffffff, 0xffffffff, 0x4, 0x7, "7a58bea88a00"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x7fff, 0xbc, 0x4, 0xb94, 0x2, "ba69958b71a027f9788572112a27046b0858de"}) 3.137024735s ago: executing program 7 (id=7843): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") getdents64(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 2.908594005s ago: executing program 6 (id=7845): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.875795396s ago: executing program 7 (id=7846): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4004000, &(0x7f0000000200)={[{@qnoenforce}, {@nodiscard}, {@nouuid}, {@uqnoenforce}, {@pquota}, {@gquota}, {@lazytime}, {@usrquota}, {@gqnoenforce}, {}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2.765713925s ago: executing program 4 (id=7847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x8000) 2.502978776s ago: executing program 3 (id=7848): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086e8a, 0x0) 2.49688894s ago: executing program 4 (id=7849): r0 = epoll_create1(0x80000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000012c0), 0x802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002380)={0x20000000}) 2.496745133s ago: executing program 0 (id=7862): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close(r0) 2.254656785s ago: executing program 4 (id=7850): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) 2.253900553s ago: executing program 0 (id=7851): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0x8aa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 2.004151995s ago: executing program 4 (id=7852): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 2.003973598s ago: executing program 6 (id=7854): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 1.906691385s ago: executing program 0 (id=7856): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 1.820574996s ago: executing program 3 (id=7857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 1.779600784s ago: executing program 1 (id=7858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1.775772168s ago: executing program 0 (id=7871): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x3, 0x9, 0x10001, 0x6, 0x7}, {{@in6=@empty, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x5}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 1.65774672s ago: executing program 6 (id=7859): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 1.58284252s ago: executing program 4 (id=7860): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1.546524616s ago: executing program 0 (id=7861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x10000000, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.453421295s ago: executing program 1 (id=7863): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x24044810) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 1.364675152s ago: executing program 3 (id=7864): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000, 0x1000000}) 1.363903396s ago: executing program 6 (id=7865): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close(r0) 1.061453619s ago: executing program 4 (id=7866): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x23, 0xa0, {0xa0, 0xc, "82a0b506d18388d96a8860aad541520a4843319eabc3da3490ea5a227cf7ec2cea9a503e5d05b0775fd90119fd6c1a82a53552ac1d979939df30db2e596c69486dd650ef60ec5f4c8fc6dce9541d5fff27832e7ab4f8f940758f968e0adf2e647631969f52696b2633b31446e1f0f933bb5c7ad293068ccd90733cd032b878b9c017c67f7fe76826b4e7be5031d6961dd1809a28eba8d68c148302e435ae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 949.063913ms ago: executing program 3 (id=7867): socket$packet(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 849.918461ms ago: executing program 6 (id=7868): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xc, 0x7fffffff, 0x38416761, 0x8, 0xb, 0x7, 0xc, 0x5, 0x0, 0x6, 0x1, 0x4}}) 627.873043ms ago: executing program 3 (id=7869): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) 542.010084ms ago: executing program 1 (id=7870): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0x8aa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 442.191803ms ago: executing program 6 (id=7872): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 439.196241ms ago: executing program 7 (id=7873): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 409.272612ms ago: executing program 3 (id=7874): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000680)='./bus\x00', 0xcc9a, &(0x7f00000002c0)=ANY=[], 0x1, 0x2bd, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) 234.805706ms ago: executing program 0 (id=7875): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=7876): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) kernel console output (not intermixed with test programs): to 4096 [ 760.265408][T22394] loop3: detected capacity change from 0 to 128 [ 760.360515][T22394] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 760.405873][T22394] hpfs: filesystem error: improperly stopped [ 760.431127][T22394] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 760.452174][T22394] hpfs: You really don't want any checks? You are crazy... [ 760.470963][T22394] hpfs: hpfs_map_sector(): read error [ 760.476395][T22394] hpfs: code page support is disabled [ 760.491074][T22394] hpfs: hpfs_map_4sectors(): unaligned read [ 760.498860][T22394] hpfs: hpfs_map_4sectors(): unaligned read [ 760.500983][T19386] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 760.540270][T22394] hpfs: filesystem error: unable to find root dir [ 760.655614][T22394] hpfs: hpfs_map_4sectors(): unaligned read [ 762.062151][T22406] loop7: detected capacity change from 0 to 32768 [ 762.161189][T22406] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 762.272255][T22406] XFS (loop7): Ending clean mount [ 762.277532][T22406] XFS (loop7): Quotacheck needed: Please wait. [ 762.349173][T22406] XFS (loop7): Quotacheck: Done. [ 762.350665][T20442] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 762.521218][T20442] usb 1-1: Using ep0 maxpacket: 16 [ 762.546856][T20442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.590194][T20442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.597662][T19386] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 762.662380][T20442] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.732634][T20442] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 762.791115][T20442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.858954][T20442] usb 1-1: config 0 descriptor?? [ 763.363825][T22479] loop3: detected capacity change from 0 to 1024 [ 763.404251][T20442] microsoft 0003:045E:07DA.0055: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 763.440358][T20442] microsoft 0003:045E:07DA.0055: no inputs found [ 763.447096][T20442] microsoft 0003:045E:07DA.0055: could not initialize ff, continuing anyway [ 763.628273][T19206] usb 1-1: USB disconnect, device number 42 [ 763.742256][ T12] hfsplus: b-tree write err: -5, ino 4 [ 763.767725][T22482] fido_id[22482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 764.520575][T20429] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 764.620273][ T6029] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 764.700362][T20429] usb 8-1: Using ep0 maxpacket: 16 [ 764.722857][T20429] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 764.750999][T20429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.761112][T20442] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 764.764614][T20429] usb 8-1: Product: syz [ 764.775926][T20429] usb 8-1: Manufacturer: syz [ 764.784473][T20429] usb 8-1: SerialNumber: syz [ 764.796337][ T6029] usb 2-1: unable to get BOS descriptor or descriptor too short [ 764.807861][T22523] loop3: detected capacity change from 0 to 16 [ 764.817358][T20429] usb 8-1: config 0 descriptor?? [ 764.830109][ T6029] usb 2-1: config 6 has an invalid interface number: 158 but max is 0 [ 764.849148][T22523] erofs (device loop3): mounted with root inode @ nid 36. [ 764.859234][ T6029] usb 2-1: config 6 has no interface number 0 [ 764.865752][ T6029] usb 2-1: config 6 interface 158 has no altsetting 0 [ 764.886532][ T6029] usb 2-1: string descriptor 0 read error: -22 [ 764.894755][ T6029] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 764.921865][ T6029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.932880][T22523] overlayfs: failed to get metacopy (-117) [ 764.940783][T20442] usb 5-1: Using ep0 maxpacket: 8 [ 764.951920][T20442] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.004895][T20442] usb 5-1: config 0 interface 0 has no altsetting 0 [ 765.023654][T20442] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 765.060362][T20442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.064719][T20429] usb 8-1: Invalid number of CPorts: 0 [ 765.091565][T20442] usb 5-1: config 0 descriptor?? [ 765.100100][T20429] es2_ap_driver 8-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 765.198953][ T6029] rtsx_usb 2-1:6.158: probe with driver rtsx_usb failed with error -71 [ 765.272232][ T6029] usb 2-1: USB disconnect, device number 48 [ 765.390282][T20429] usb 8-1: USB disconnect, device number 15 [ 765.522513][T20442] cypress 0003:04B4:DE64.0056: hidraw0: USB HID v4.06 Device [HID 04b4:de64] on usb-dummy_hcd.4-1/input0 [ 765.714304][ T973] usb 5-1: USB disconnect, device number 45 [ 765.774152][T20442] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 765.961585][T20442] usb 4-1: Using ep0 maxpacket: 16 [ 765.973929][T20442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.028740][T20442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.063499][T20442] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 766.088588][T20442] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 766.099603][T20442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.143949][T20442] usb 4-1: config 0 descriptor?? [ 766.265484][T22557] tmpfs: Bad value for 'mpol' [ 766.443339][T22562] loop4: detected capacity change from 0 to 16 [ 766.484235][T22562] erofs (device loop4): mounted with root inode @ nid 36. [ 766.539121][T22562] overlayfs: failed to get metacopy (-117) [ 766.644281][T20442] microsoft 0003:045E:07DA.0057: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 766.702063][T20442] microsoft 0003:045E:07DA.0057: no inputs found [ 766.708446][T20442] microsoft 0003:045E:07DA.0057: could not initialize ff, continuing anyway [ 766.876987][T20442] usb 4-1: USB disconnect, device number 44 [ 767.241524][ T6029] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 767.406407][ T6029] usb 8-1: unable to get BOS descriptor or descriptor too short [ 767.415497][ T6029] usb 8-1: config 6 has an invalid interface number: 158 but max is 0 [ 767.425043][ T6029] usb 8-1: config 6 has no interface number 0 [ 767.431579][ T6029] usb 8-1: config 6 interface 158 has no altsetting 0 [ 767.452897][ T6029] usb 8-1: string descriptor 0 read error: -22 [ 767.459195][ T6029] usb 8-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 767.498802][ T6029] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.779579][ T6029] rtsx_usb 8-1:6.158: probe with driver rtsx_usb failed with error -71 [ 767.800271][T20442] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 767.820600][ T6029] usb 8-1: USB disconnect, device number 16 [ 767.981611][T20442] usb 5-1: Using ep0 maxpacket: 16 [ 768.015568][T20442] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 768.036512][T20442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.059528][T20442] usb 5-1: Product: syz [ 768.073758][T20442] usb 5-1: Manufacturer: syz [ 768.083753][T20442] usb 5-1: SerialNumber: syz [ 768.148983][T20442] usb 5-1: config 0 descriptor?? [ 768.394588][T20442] usb 5-1: Invalid number of CPorts: 0 [ 768.400115][T20442] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 768.639578][T20442] usb 5-1: USB disconnect, device number 46 [ 768.802007][T22622] loop6: detected capacity change from 0 to 1024 [ 768.863409][T19206] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 769.008116][ T13] hfsplus: b-tree write err: -5, ino 4 [ 769.043226][T19206] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 769.060458][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 769.084753][T19206] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.122495][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 769.143114][T22629] loop6: detected capacity change from 0 to 64 [ 769.180232][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 769.268607][T19206] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 769.313813][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 769.354207][T19206] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.367021][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 769.379225][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 769.394175][T19206] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 769.420288][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 769.438841][T19206] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.489674][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 769.569942][T19206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 769.622779][T19206] usb 4-1: string descriptor 0 read error: -22 [ 769.629088][T19206] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 769.651973][T19206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.729750][T19206] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 769.976743][T19206] usb 4-1: USB disconnect, device number 45 [ 770.118848][T22659] tmpfs: Bad value for 'mpol' [ 771.163622][T22693] tmpfs: Bad value for 'mpol' [ 771.372875][T22698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7005'. [ 771.564934][T19206] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 771.757805][T19206] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 771.776716][T19206] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 771.820316][T19206] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 771.850670][T19206] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.889948][T22696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 771.902722][ T973] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 771.923389][T19206] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 772.090954][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 772.114621][ T973] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 772.139127][ T973] usb 2-1: config 0 has no interface number 0 [ 772.162778][ T973] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 772.189028][ T973] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 772.219956][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.262837][ T973] usb 2-1: Product: syz [ 772.267019][ T973] usb 2-1: Manufacturer: syz [ 772.311377][ T973] usb 2-1: SerialNumber: syz [ 772.321825][T20442] usb 8-1: USB disconnect, device number 17 [ 772.342647][ T973] usb 2-1: config 0 descriptor?? [ 772.382410][T22708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 772.628895][T22708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 772.867218][ T973] asix 2-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 773.141022][ T973] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 773.155489][ T973] asix 2-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 773.182148][ T973] asix 2-1:0.191: probe with driver asix failed with error -71 [ 773.199165][ T973] usb 2-1: USB disconnect, device number 49 [ 773.666225][T22724] loop4: detected capacity change from 0 to 32768 [ 773.713624][T22724] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 773.835008][T22724] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 773.933383][T22724] XFS (loop4): Starting recovery (logdev: internal) [ 773.985994][T22724] XFS (loop4): Ending recovery (logdev: internal) [ 774.154649][T19311] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 774.255902][T22734] loop7: detected capacity change from 0 to 32768 [ 774.353870][T22734] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 774.513368][T22734] XFS (loop7): Ending clean mount [ 774.836301][T19386] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 775.740082][T22806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7047'. [ 776.550262][T20429] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 776.701748][T22804] loop4: detected capacity change from 0 to 40427 [ 776.732615][T20429] usb 1-1: config 0 interface 0 has no altsetting 0 [ 776.736237][T22804] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 776.739250][T20429] usb 1-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00 [ 776.787141][T22804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 776.810353][T20429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.817858][T22804] F2FS-fs (loop4): build fault injection rate: 2 [ 776.848286][T22804] F2FS-fs (loop4): build fault injection type: 0x1f8 [ 776.879629][T20429] usb 1-1: config 0 descriptor?? [ 776.888021][T22804] F2FS-fs (loop4): invalid crc value [ 777.236662][T22804] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 777.265294][T22804] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 777.301231][T22804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 777.334599][T22820] loop3: detected capacity change from 0 to 32768 [ 777.345180][T20429] wacom 0003:056A:0021.0058: unknown main item tag 0x4 [ 777.357492][T22820] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7053 (22820) [ 777.458880][T22820] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 777.501104][T22838] netlink: 'syz.6.7060': attribute type 2 has an invalid length. [ 777.510799][T22820] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 777.529892][ T973] usb 1-1: USB disconnect, device number 43 [ 777.618132][T22821] loop7: detected capacity change from 0 to 32768 [ 777.814871][T22821] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 777.961669][T22820] BTRFS info (device loop3): rebuilding free space tree [ 777.962801][T22821] XFS (loop7): Ending clean mount [ 778.013129][T22820] BTRFS info (device loop3): disabling free space tree [ 778.020065][T22820] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 778.041207][T22820] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 778.070025][T22821] XFS (loop7): Quotacheck needed: Please wait. [ 778.111068][T22820] BTRFS info (device loop3): setting nodatasum [ 778.123033][T22820] BTRFS info (device loop3): setting nodatacow [ 778.140216][T22820] BTRFS info (device loop3): turning off barriers [ 778.169405][T22821] XFS (loop7): Quotacheck: Done. [ 778.175953][T22820] BTRFS info (device loop3): force clearing of disk cache [ 778.355700][T19386] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 778.407482][T22868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7064'. [ 778.439313][T22870] loop6: detected capacity change from 0 to 512 [ 778.469112][ T5831] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 778.499499][T22870] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 778.597761][T22870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.003232][T17363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.254945][T22885] [U] [ 779.258110][T22885] [U] [ 779.260842][T22885] [U] [ 779.263575][T22885] [U] [ 779.266311][T22885] [U] [ 779.269041][T22885] [U] [ 779.271774][T22885] [U] [ 779.274505][T22885] [U] [ 779.318784][T22885] [U] [ 779.321552][T22885] [U] [ 779.324299][T22885] [U] [ 779.341549][T22884] [U] [ 780.011392][T20429] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 780.181431][T20429] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 780.220283][T20429] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 780.241564][T20429] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.258194][T22913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7084'. [ 780.258294][T20429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.303214][T22899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 780.306357][T22913] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7084'. [ 780.339338][T20429] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.339756][T22913] netlink: 'syz.4.7084': attribute type 10 has an invalid length. [ 780.785460][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7089'. [ 780.806141][T20429] usb 4-1: USB disconnect, device number 46 [ 781.478736][T22945] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7100'. [ 781.776762][T22942] loop7: detected capacity change from 0 to 32768 [ 781.805302][T22942] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 781.836325][T22942] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 781.858645][T22942] XFS (loop7): Starting recovery (logdev: internal) [ 781.886010][T22942] XFS (loop7): Ending recovery (logdev: internal) [ 781.959683][T19386] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 783.261200][T20442] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 783.287365][T22971] raw_sendmsg: syz.3.7108 forgot to set AF_INET. Fix it! [ 783.451681][T20442] usb 8-1: Using ep0 maxpacket: 32 [ 783.475930][T20442] usb 8-1: config 0 has an invalid interface number: 191 but max is 0 [ 783.493247][T20442] usb 8-1: config 0 has no interface number 0 [ 783.509992][T20442] usb 8-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 783.537551][T20442] usb 8-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 783.554551][T20442] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.599007][T20442] usb 8-1: Product: syz [ 783.607492][T20442] usb 8-1: Manufacturer: syz [ 783.612800][T20442] usb 8-1: SerialNumber: syz [ 783.626227][T20442] usb 8-1: config 0 descriptor?? [ 783.642204][T22963] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 783.896090][T22963] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 784.117590][T20442] asix 8-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 784.143986][T22984] loop3: detected capacity change from 0 to 32768 [ 784.206837][T22984] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 784.246773][T22986] loop4: detected capacity change from 0 to 32768 [ 784.318977][T20442] asix 8-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 784.331464][T22986] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 784.393101][T20442] asix 8-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 784.406481][T22984] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 784.453813][T22984] XFS (loop3): Starting recovery (logdev: internal) [ 784.492507][T20442] asix 8-1:0.191: probe with driver asix failed with error -71 [ 784.515372][T22986] XFS (loop4): Ending clean mount [ 784.527127][T20442] usb 8-1: USB disconnect, device number 18 [ 784.568225][T22984] XFS (loop3): Ending recovery (logdev: internal) [ 784.663206][T23010] netlink: 'syz.0.7119': attribute type 2 has an invalid length. [ 784.710849][ T973] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 784.738212][T19311] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 784.847475][ T5831] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 784.915120][ T973] usb 2-1: config 0 interface 0 has no altsetting 0 [ 784.960929][ T973] usb 2-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00 [ 784.981964][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.011092][ T973] usb 2-1: config 0 descriptor?? [ 785.195650][T23014] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7122'. [ 785.245460][T23014] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7122'. [ 785.311083][T23014] netlink: 'syz.7.7122': attribute type 10 has an invalid length. [ 785.333423][T23016] loop6: detected capacity change from 0 to 256 [ 785.365737][T23016] exfat: Deprecated parameter 'namecase' [ 785.416828][T23016] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 785.483767][ T973] wacom 0003:056A:0021.0059: unknown main item tag 0x4 [ 785.727708][ T973] usb 2-1: USB disconnect, device number 50 [ 785.870971][T20442] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 786.040976][T20442] usb 8-1: Using ep0 maxpacket: 32 [ 786.056806][T20442] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 786.083094][T20442] usb 8-1: config 0 has no interface number 0 [ 786.113211][T20442] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 786.130306][T20442] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.146589][T20442] usb 8-1: Product: syz [ 786.160964][T20442] usb 8-1: Manufacturer: syz [ 786.176087][T20442] usb 8-1: SerialNumber: syz [ 786.202861][T20442] usb 8-1: config 0 descriptor?? [ 786.217641][T20442] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 786.426870][T23036] loop6: detected capacity change from 0 to 128 [ 786.479610][T23036] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.538375][T23036] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 786.659188][ T31] audit: type=1800 audit(2000000642.920:224): pid=23036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7132" name="file2" dev="loop6" ino=12 res=0 errno=0 [ 786.746056][T17363] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.825752][T20442] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 786.884141][T20442] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 787.025726][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 787.026289][T20429] usb 8-1: USB disconnect, device number 19 [ 787.099859][T23049] netlink: 'syz.4.7137': attribute type 2 has an invalid length. [ 787.119174][T20429] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 787.173051][T20429] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 787.211805][T20429] quatech2 8-1:0.51: device disconnected [ 787.230102][T23029] loop3: detected capacity change from 0 to 40427 [ 787.303598][T23029] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 787.332087][T23029] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 787.359172][T23029] F2FS-fs (loop3): invalid crc value [ 787.660670][T20442] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 787.668591][T23029] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 787.694075][T23029] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 787.712172][T23029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 787.755443][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7141'. [ 787.766275][T23060] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7141'. [ 787.800279][T23060] netlink: 'syz.1.7141': attribute type 10 has an invalid length. [ 787.821177][T20442] usb 5-1: Using ep0 maxpacket: 32 [ 787.859860][T20442] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 787.883669][T20442] usb 5-1: config 0 has no interface number 0 [ 787.892280][T20442] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 787.917244][T20442] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 787.948219][T20442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.959391][T20442] usb 5-1: Product: syz [ 787.978878][T20442] usb 5-1: Manufacturer: syz [ 787.983403][ T5831] syz-executor: attempt to access beyond end of device [ 787.983403][ T5831] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 787.984927][T20442] usb 5-1: SerialNumber: syz [ 788.025882][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 788.025939][ T5831] Tainted: [L]=SOFTLOCKUP [ 788.025953][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.025976][ T5831] Call Trace: [ 788.025988][ T5831] [ 788.026003][ T5831] dump_stack_lvl+0x16c/0x1f0 [ 788.026070][ T5831] f2fs_handle_critical_error+0x624/0x9f0 [ 788.026114][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.026159][ T5831] ? f2fs_build_fault_attr+0x53/0x1f0 [ 788.026229][ T5831] f2fs_write_end_io+0x958/0xcf0 [ 788.026277][ T5831] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 788.026333][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.026387][ T5831] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 788.026429][ T5831] bio_endio+0x751/0x8a0 [ 788.026492][ T5831] submit_bio_noacct+0x306/0x1f40 [ 788.026547][ T5831] __submit_merged_bio+0x33c/0x710 [ 788.026599][ T5831] __submit_merged_write_cond+0x315/0x3f0 [ 788.026655][ T5831] f2fs_write_cache_pages+0x2075/0x2570 [ 788.026734][ T5831] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 788.026793][ T5831] ? __lock_acquire+0x436/0x2890 [ 788.026848][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.026893][ T5831] ? __lock_acquire+0x436/0x2890 [ 788.026974][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.027055][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.027099][ T5831] ? rcu_is_watching+0x12/0xc0 [ 788.027134][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.027179][ T5831] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 788.027244][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.027298][ T5831] f2fs_write_data_pages+0x5ac/0x1080 [ 788.027366][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 788.027437][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 788.027492][ T5831] do_writepages+0x27a/0x600 [ 788.027541][ T5831] ? __pfx_do_writepages+0x10/0x10 [ 788.027582][ T5831] ? do_raw_spin_unlock+0x172/0x230 [ 788.027635][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.027679][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 788.027737][ T5831] filemap_writeback+0x225/0x2d0 [ 788.027784][ T5831] ? __pfx_filemap_writeback+0x10/0x10 [ 788.027880][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.027925][ T5831] ? find_held_lock+0x2b/0x80 [ 788.027984][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.028041][ T5831] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 788.028115][ T5831] block_operations+0x2b0/0xff0 [ 788.028182][ T5831] ? __pfx_block_operations+0x10/0x10 [ 788.028288][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.028342][ T5831] ? ktime_get+0x200/0x310 [ 788.028385][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.028430][ T5831] ? lockdep_hardirqs_on+0x7c/0x110 [ 788.028489][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.028534][ T5831] ? rcu_is_watching+0x12/0xc0 [ 788.028575][ T5831] f2fs_write_checkpoint+0x326/0x52f0 [ 788.028640][ T5831] ? f2fs_stop_gc_thread+0x79/0xd0 [ 788.028703][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.028749][ T5831] ? rcu_is_watching+0x12/0xc0 [ 788.028783][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.028827][ T5831] ? kthread_stop+0x272/0x5d0 [ 788.028876][ T5831] kill_f2fs_super+0x3d0/0x480 [ 788.028932][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 788.029004][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.029063][ T5831] deactivate_locked_super+0xc1/0x1a0 [ 788.029104][ T5831] deactivate_super+0xde/0x100 [ 788.029145][ T5831] cleanup_mnt+0x225/0x450 [ 788.029195][ T5831] task_work_run+0x150/0x240 [ 788.029247][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 788.029316][ T5831] exit_to_user_mode_loop+0xfb/0x540 [ 788.029371][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.029423][ T5831] do_syscall_64+0x4ee/0xf80 [ 788.029486][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.029525][ T5831] RIP: 0033:0x7fe092f90a77 [ 788.029554][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 788.029592][ T5831] RSP: 002b:00007ffcba06cde8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 788.029628][ T5831] RAX: 0000000000000000 RBX: 00007fe093013d7d RCX: 00007fe092f90a77 [ 788.029653][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcba06cea0 [ 788.029678][ T5831] RBP: 00007ffcba06cea0 R08: 0000000000000000 R09: 0000000000000000 [ 788.029703][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcba06df30 [ 788.029728][ T5831] R13: 00007fe093013d7d R14: 00000000000c0534 R15: 00007ffcba06df70 [ 788.029779][ T5831] [ 788.489788][T20442] usb 5-1: config 0 descriptor?? [ 788.496823][T23056] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 788.550975][ T5831] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 788.769812][T23056] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 789.054480][T20442] asix 5-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 789.256949][T20442] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 789.269774][T20442] asix 5-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 789.306151][T20442] asix 5-1:0.191: probe with driver asix failed with error -71 [ 789.339580][T20442] usb 5-1: USB disconnect, device number 47 [ 789.540922][T20418] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 789.703062][T20418] usb 4-1: config 0 interface 0 has no altsetting 0 [ 789.709927][T20418] usb 4-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00 [ 789.740117][T20418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.762797][T20418] usb 4-1: config 0 descriptor?? [ 789.853653][T23071] loop6: detected capacity change from 0 to 32768 [ 789.908149][T23071] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 790.087410][T23071] XFS (loop6): Ending clean mount [ 790.138526][T23071] XFS (loop6): Quotacheck needed: Please wait. [ 790.237868][T20418] wacom 0003:056A:0021.005A: unknown main item tag 0x4 [ 790.269487][T23071] XFS (loop6): Quotacheck: Done. [ 790.327386][T23086] loop7: detected capacity change from 0 to 32768 [ 790.353080][T23086] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7154 (23086) [ 790.394590][T23086] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 790.424498][T23086] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 790.475841][T20418] usb 4-1: USB disconnect, device number 47 [ 790.611795][T17363] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 790.633833][T23114] loop4: detected capacity change from 0 to 512 [ 790.677273][T23086] BTRFS info (device loop7): rebuilding free space tree [ 790.752735][T23086] BTRFS info (device loop7): disabling free space tree [ 790.775229][T23119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7158'. [ 790.798287][T23114] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.4.7160: corrupted xattr block 95: invalid header [ 790.821677][T23114] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.7160: bg 0: block 7: invalid block bitmap [ 790.831054][T23086] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 790.851050][T23119] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7158'. [ 790.863029][T23114] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 790.891310][T23119] netlink: 'syz.0.7158': attribute type 10 has an invalid length. [ 790.906164][T23114] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #11: comm syz.4.7160: corrupted xattr block 95: invalid header [ 790.912507][T23086] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 790.995366][T23086] BTRFS info (device loop7): setting nodatasum [ 791.023588][T23114] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 791.041329][T23086] BTRFS info (device loop7): setting nodatacow [ 791.047739][T23086] BTRFS info (device loop7): turning off barriers [ 791.080261][T23114] EXT4-fs (loop4): 1 orphan inode deleted [ 791.103160][T23086] BTRFS info (device loop7): force clearing of disk cache [ 791.108403][T23114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.365861][T19311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.458391][T19386] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 791.749206][T23138] loop4: detected capacity change from 0 to 1024 [ 792.159291][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7173'. [ 792.451301][T23156] loop3: detected capacity change from 0 to 128 [ 792.573105][T23156] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 792.600506][T23156] ext4 filesystem being mounted at /1176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 792.700721][T20418] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 792.733419][ T31] audit: type=1800 audit(2000000649.000:225): pid=23156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7177" name="file2" dev="loop3" ino=12 res=0 errno=0 [ 792.864662][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 792.944418][T20418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.992456][T20418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.046608][T20418] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 793.076513][T20418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.136000][T20418] usb 2-1: config 0 descriptor?? [ 793.593571][T20418] hid-retrode 0003:0403:97C1.005B: unknown global tag 0xe [ 793.631837][T20418] hid-retrode 0003:0403:97C1.005B: item 0 2 1 14 parsing failed [ 793.654509][T23144] loop7: detected capacity change from 0 to 40427 [ 793.661761][T20418] hid-retrode 0003:0403:97C1.005B: probe with driver hid-retrode failed with error -22 [ 793.711777][T23144] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 793.752541][T23154] loop4: detected capacity change from 0 to 32768 [ 793.757003][T23144] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 793.791569][T23144] F2FS-fs (loop7): build fault injection rate: 2 [ 793.821011][T23154] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 793.840232][T23144] F2FS-fs (loop7): build fault injection type: 0x1f8 [ 793.859925][T20418] usb 2-1: USB disconnect, device number 51 [ 793.893129][T23144] F2FS-fs (loop7): invalid crc value [ 793.906874][T23181] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7183'. [ 793.979124][T23154] XFS (loop4): Ending clean mount [ 794.017638][T23154] XFS (loop4): Quotacheck needed: Please wait. [ 794.078854][T23162] loop6: detected capacity change from 0 to 32768 [ 794.144273][T23162] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7178 (23162) [ 794.182949][T23154] XFS (loop4): Quotacheck: Done. [ 794.259183][T23162] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 794.318535][T23162] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 794.422866][T23144] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 794.483096][T23144] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 794.508603][T19311] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 794.517560][T23144] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 794.676460][T23162] BTRFS info (device loop6): rebuilding free space tree [ 794.742235][T23162] BTRFS info (device loop6): disabling free space tree [ 794.762213][T23162] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 794.804204][T23162] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 794.871784][T23162] BTRFS info (device loop6): setting nodatasum [ 794.916829][T23162] BTRFS info (device loop6): setting nodatacow [ 794.926911][T23162] BTRFS info (device loop6): turning off barriers [ 794.965255][T23162] BTRFS info (device loop6): force clearing of disk cache [ 795.011704][T20418] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 795.210945][T20418] usb 2-1: Using ep0 maxpacket: 8 [ 795.220238][T20418] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 795.248915][T20418] usb 2-1: config 179 has no interface number 0 [ 795.286482][T20418] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 795.313341][T20418] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 795.351865][T20418] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 795.381928][T20418] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 795.416654][T17363] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 795.421553][T20418] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 795.470355][T20418] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 795.501004][T20418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.523786][T23209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 795.792879][T23209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.841789][T23209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.096645][T20418] usb 2-1: USB disconnect, device number 52 [ 796.096721][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 796.110923][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 796.647588][T23234] [U] [ 796.650370][T23234] [U] [ 796.653103][T23234] [U] [ 796.655826][T23234] [U] [ 796.658539][T23234] [U] [ 796.661253][T23234] [U] [ 796.663966][T23234] [U] [ 796.666678][T23234] [U] [ 796.723145][T23234] [U] [ 796.725915][T23234] [U] [ 796.728649][T23234] [U] [ 796.776433][T23233] [U] [ 797.011648][T20442] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 797.170211][T20442] usb 4-1: Using ep0 maxpacket: 16 [ 797.185073][T20442] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 797.241663][T20442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 797.268095][T20442] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 797.300984][T20442] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 797.310114][T20442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.323676][T20442] usb 4-1: config 0 descriptor?? [ 797.793057][T20442] logitech 0003:046D:C295.005C: hidraw0: USB HID v0.01 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 797.824035][T20442] logitech 0003:046D:C295.005C: no inputs found [ 798.034150][T20429] usb 4-1: USB disconnect, device number 48 [ 798.169573][T23256] loop7: detected capacity change from 0 to 40427 [ 798.226060][T23256] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0) [ 798.251265][T23256] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 798.272131][T23256] F2FS-fs (loop7): invalid crc value [ 798.482327][T23280] loop4: detected capacity change from 0 to 256 [ 798.538624][T23256] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 798.560306][T23256] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 798.567358][T23256] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 798.576871][T23280] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 798.709679][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7223'. [ 798.815371][T19386] syz-executor: attempt to access beyond end of device [ 798.815371][T19386] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 798.845188][T19386] CPU: 0 UID: 0 PID: 19386 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 798.845247][T19386] Tainted: [L]=SOFTLOCKUP [ 798.845261][T19386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.845284][T19386] Call Trace: [ 798.845296][T19386] [ 798.845319][T19386] dump_stack_lvl+0x16c/0x1f0 [ 798.845382][T19386] f2fs_handle_critical_error+0x624/0x9f0 [ 798.845427][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.845473][T19386] ? f2fs_build_fault_attr+0x53/0x1f0 [ 798.845547][T19386] f2fs_write_end_io+0x958/0xcf0 [ 798.845598][T19386] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 798.845651][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.845708][T19386] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 798.845753][T19386] bio_endio+0x751/0x8a0 [ 798.845815][T19386] submit_bio_noacct+0x306/0x1f40 [ 798.845873][T19386] __submit_merged_bio+0x33c/0x710 [ 798.845926][T19386] __submit_merged_write_cond+0x315/0x3f0 [ 798.845987][T19386] f2fs_write_cache_pages+0x2075/0x2570 [ 798.846075][T19386] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 798.846130][T19386] ? unwind_next_frame+0x3fe/0x20b0 [ 798.846183][T19386] ? exit_to_user_mode_loop+0xfb/0x540 [ 798.846244][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.846289][T19386] ? __lock_acquire+0x436/0x2890 [ 798.846341][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.846386][T19386] ? arch_stack_walk+0x88/0x100 [ 798.846459][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.846528][T19386] ? debug_check_no_obj_freed+0x31f/0x600 [ 798.846586][T19386] ? find_held_lock+0x2b/0x80 [ 798.846690][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.846734][T19386] ? _raw_spin_unlock+0x28/0x50 [ 798.846785][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.846830][T19386] ? free_unref_folios+0x108f/0x1610 [ 798.846891][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.846945][T19386] f2fs_write_data_pages+0x5ac/0x1080 [ 798.847014][T19386] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 798.847089][T19386] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 798.847145][T19386] do_writepages+0x27a/0x600 [ 798.847195][T19386] ? __pfx_do_writepages+0x10/0x10 [ 798.847235][T19386] ? do_raw_spin_unlock+0x172/0x230 [ 798.847288][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.847340][T19386] ? _raw_spin_unlock+0x28/0x50 [ 798.847399][T19386] filemap_writeback+0x225/0x2d0 [ 798.847447][T19386] ? __pfx_filemap_writeback+0x10/0x10 [ 798.847555][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.847600][T19386] ? find_held_lock+0x2b/0x80 [ 798.847660][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.847720][T19386] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 798.847800][T19386] block_operations+0x2b0/0xff0 [ 798.847851][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.847896][T19386] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.847960][T19386] ? finish_task_switch.isra.0+0x8c3/0xbd0 [ 798.848030][T19386] ? __pfx_block_operations+0x10/0x10 [ 798.848082][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.848128][T19386] ? __schedule+0x10b9/0x6150 [ 798.848241][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.848290][T19386] ? ktime_get+0x200/0x310 [ 798.848339][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.848383][T19386] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.848443][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.848488][T19386] ? rcu_is_watching+0x12/0xc0 [ 798.848531][T19386] f2fs_write_checkpoint+0x326/0x52f0 [ 798.848590][T19386] ? __pfx_try_to_wake_up+0x10/0x10 [ 798.848654][T19386] ? f2fs_stop_gc_thread+0x79/0xd0 [ 798.848718][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.848764][T19386] ? rcu_is_watching+0x12/0xc0 [ 798.848798][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.848843][T19386] ? kthread_stop+0x272/0x5d0 [ 798.848893][T19386] kill_f2fs_super+0x3d0/0x480 [ 798.848950][T19386] ? __pfx_kill_f2fs_super+0x10/0x10 [ 798.849027][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.849091][T19386] deactivate_locked_super+0xc1/0x1a0 [ 798.849134][T19386] deactivate_super+0xde/0x100 [ 798.849176][T19386] cleanup_mnt+0x225/0x450 [ 798.849227][T19386] task_work_run+0x150/0x240 [ 798.849279][T19386] ? __pfx_task_work_run+0x10/0x10 [ 798.849350][T19386] exit_to_user_mode_loop+0xfb/0x540 [ 798.849404][T19386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.849458][T19386] do_syscall_64+0x4ee/0xf80 [ 798.849523][T19386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.849561][T19386] RIP: 0033:0x7f1080390a77 [ 798.849591][T19386] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 798.849629][T19386] RSP: 002b:00007ffe6a6fdd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 798.849666][T19386] RAX: 0000000000000000 RBX: 00007f1080413d7d RCX: 00007f1080390a77 [ 798.849691][T19386] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6a6fde40 [ 798.849715][T19386] RBP: 00007ffe6a6fde40 R08: 0000000000000000 R09: 0000000000000000 [ 798.849740][T19386] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6a6feed0 [ 798.849764][T19386] R13: 00007f1080413d7d R14: 00000000000c2fba R15: 00007ffe6a6fef10 [ 798.849821][T19386] [ 798.849837][T19386] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 799.352804][T23293] mkiss: ax0: crc mode is auto. [ 800.133695][T23309] Bluetooth: MGMT ver 1.23 [ 800.191126][T19206] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 800.360239][T19206] usb 5-1: Using ep0 maxpacket: 16 [ 800.389205][T19206] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 800.441926][T19206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 800.473221][T23320] program syz.6.7243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 800.478640][T19206] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 800.498000][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7242'. [ 800.559988][T19206] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 800.581336][T19206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.585296][T23325] program syz.6.7243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 800.602834][T19206] usb 5-1: config 0 descriptor?? [ 800.881416][T20442] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 800.974852][T23332] loop6: detected capacity change from 0 to 512 [ 801.036547][T23332] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.6.7247: corrupted xattr block 95: invalid header [ 801.061890][T20442] usb 4-1: Using ep0 maxpacket: 32 [ 801.068661][T19206] logitech 0003:046D:C295.005D: hidraw0: USB HID v0.01 Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 801.080960][T19206] logitech 0003:046D:C295.005D: no inputs found [ 801.087634][T23332] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.7247: bg 0: block 7: invalid block bitmap [ 801.126166][T20442] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 801.194962][T20442] usb 4-1: config 0 has no interface number 0 [ 801.201942][T23332] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 801.213538][T20442] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 801.241262][T23332] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #11: comm syz.6.7247: corrupted xattr block 95: invalid header [ 801.251631][T20442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.290962][T20442] usb 4-1: Product: syz [ 801.302433][T20442] usb 4-1: Manufacturer: syz [ 801.311874][T23332] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 801.320192][T20442] usb 4-1: SerialNumber: syz [ 801.346732][T20442] usb 4-1: config 0 descriptor?? [ 801.349864][T19206] usb 5-1: USB disconnect, device number 48 [ 801.366603][T20442] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 801.381084][T23332] EXT4-fs (loop6): 1 orphan inode deleted [ 801.389233][T23332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.451838][T23335] fido_id[23335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 801.526634][T23337] loop7: detected capacity change from 0 to 4096 [ 801.645103][T17363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.668578][T23337] ntfs3(loop7): ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 801.955162][T20442] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 802.011168][T20442] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 802.227792][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 802.240136][T20442] usb 4-1: USB disconnect, device number 49 [ 802.309778][T20442] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 802.389826][T20442] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 802.404058][T20442] quatech2 4-1:0.51: device disconnected [ 802.718950][T23355] loop6: detected capacity change from 0 to 1024 [ 803.264437][T23342] loop7: detected capacity change from 0 to 32768 [ 803.299411][T23342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7250 (23342) [ 803.402157][T23342] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 803.456687][T23342] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 803.642038][T23342] BTRFS info (device loop7): turning off barriers [ 803.697709][T23342] BTRFS info (device loop7): enabling free space tree [ 803.739132][T20442] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 803.774203][T23342] BTRFS info (device loop7): use zstd compression, level 3 [ 803.948527][T20442] usb 4-1: config 0 has no interfaces? [ 803.978370][T20442] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 804.017986][T20442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.041739][T20442] usb 4-1: Product: syz [ 804.045920][T20442] usb 4-1: Manufacturer: syz [ 804.072471][T20442] usb 4-1: SerialNumber: syz [ 804.102410][T20442] usb 4-1: config 0 descriptor?? [ 804.119144][T19386] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 804.351505][T20442] usb 4-1: USB disconnect, device number 50 [ 806.352885][T23427] loop4: detected capacity change from 0 to 32768 [ 806.411139][T23427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7277 (23427) [ 806.437306][T23427] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 806.448717][T23427] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 806.640965][T20442] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 806.666325][T23427] BTRFS info (device loop4): enabling ssd optimizations [ 806.681871][T23427] BTRFS info (device loop4): turning on async discard [ 806.688670][T23427] BTRFS info (device loop4): enabling free space tree [ 806.831119][T20442] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.842811][T20442] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.881699][T20442] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 806.920201][T20442] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.926215][T23486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7299'. [ 806.951436][T20442] usb 8-1: config 0 descriptor?? [ 807.026198][T19311] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 807.353861][T23491] mkiss: ax0: crc mode is auto. [ 807.359448][T23492] loop3: detected capacity change from 0 to 4096 [ 807.385867][T20442] hid-picolcd 0003:04D8:C002.005E: unbalanced collection at end of report description [ 807.446898][T20442] hid-picolcd 0003:04D8:C002.005E: device report parse failed [ 807.486017][T20442] hid-picolcd 0003:04D8:C002.005E: probe with driver hid-picolcd failed with error -22 [ 807.578022][ T6029] usb 8-1: USB disconnect, device number 20 [ 807.589171][T23492] ntfs3(loop3): ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 808.562408][T23511] loop3: detected capacity change from 0 to 4096 [ 809.451359][T23534] program syz.0.7332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 809.552433][T23541] program syz.0.7332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 809.581228][T23535] mkiss: ax0: crc mode is auto. [ 809.702049][T23539] loop6: detected capacity change from 0 to 4096 [ 809.715048][T23509] loop4: detected capacity change from 0 to 40427 [ 809.759627][T23509] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 809.790992][T23509] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 809.849909][T23539] ntfs3(loop6): ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 809.869063][T23509] F2FS-fs (loop4): invalid crc value [ 810.265340][T23509] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 810.319831][T23509] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 810.342438][T23509] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 810.351099][T23551] tipc: Enabling of bearer rejected, failed to enable media [ 810.758150][T19311] syz-executor: attempt to access beyond end of device [ 810.758150][T19311] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 810.866119][T19311] CPU: 1 UID: 0 PID: 19311 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 810.866178][T19311] Tainted: [L]=SOFTLOCKUP [ 810.866192][T19311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.866215][T19311] Call Trace: [ 810.866228][T19311] [ 810.866243][T19311] dump_stack_lvl+0x16c/0x1f0 [ 810.866316][T19311] f2fs_handle_critical_error+0x624/0x9f0 [ 810.866360][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.866407][T19311] ? f2fs_build_fault_attr+0x53/0x1f0 [ 810.866480][T19311] f2fs_write_end_io+0x958/0xcf0 [ 810.866529][T19311] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 810.866581][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.866636][T19311] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 810.866680][T19311] bio_endio+0x751/0x8a0 [ 810.866742][T19311] submit_bio_noacct+0x306/0x1f40 [ 810.866799][T19311] __submit_merged_bio+0x33c/0x710 [ 810.866851][T19311] __submit_merged_write_cond+0x315/0x3f0 [ 810.866910][T19311] f2fs_write_cache_pages+0x2075/0x2570 [ 810.866995][T19311] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 810.867057][T19311] ? __lock_acquire+0x436/0x2890 [ 810.867168][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.867256][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.867305][T19311] ? rcu_is_watching+0x12/0xc0 [ 810.867340][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.867384][T19311] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 810.867447][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.867499][T19311] f2fs_write_data_pages+0x5ac/0x1080 [ 810.867564][T19311] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 810.867639][T19311] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 810.867696][T19311] do_writepages+0x27a/0x600 [ 810.867747][T19311] ? __pfx_do_writepages+0x10/0x10 [ 810.867787][T19311] ? do_raw_spin_unlock+0x172/0x230 [ 810.867841][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.867886][T19311] ? _raw_spin_unlock+0x28/0x50 [ 810.867945][T19311] filemap_writeback+0x225/0x2d0 [ 810.867992][T19311] ? __pfx_filemap_writeback+0x10/0x10 [ 810.868099][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.868143][T19311] ? find_held_lock+0x2b/0x80 [ 810.868201][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.868260][T19311] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 810.868347][T19311] block_operations+0x2b0/0xff0 [ 810.868398][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.868442][T19311] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.868506][T19311] ? finish_task_switch.isra.0+0x8c3/0xbd0 [ 810.868573][T19311] ? __pfx_block_operations+0x10/0x10 [ 810.868625][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.868671][T19311] ? __schedule+0x10b9/0x6150 [ 810.868784][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.868833][T19311] ? ktime_get+0x200/0x310 [ 810.868875][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.868920][T19311] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.868979][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.869024][T19311] ? rcu_is_watching+0x12/0xc0 [ 810.869067][T19311] f2fs_write_checkpoint+0x326/0x52f0 [ 810.869123][T19311] ? __pfx_try_to_wake_up+0x10/0x10 [ 810.869185][T19311] ? f2fs_stop_gc_thread+0x79/0xd0 [ 810.869248][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.869293][T19311] ? rcu_is_watching+0x12/0xc0 [ 810.869337][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.869382][T19311] ? kthread_stop+0x272/0x5d0 [ 810.869432][T19311] kill_f2fs_super+0x3d0/0x480 [ 810.869489][T19311] ? __pfx_kill_f2fs_super+0x10/0x10 [ 810.869564][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.869627][T19311] deactivate_locked_super+0xc1/0x1a0 [ 810.869669][T19311] deactivate_super+0xde/0x100 [ 810.869711][T19311] cleanup_mnt+0x225/0x450 [ 810.869762][T19311] task_work_run+0x150/0x240 [ 810.869814][T19311] ? __pfx_task_work_run+0x10/0x10 [ 810.869881][T19311] exit_to_user_mode_loop+0xfb/0x540 [ 810.869936][T19311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.869988][T19311] do_syscall_64+0x4ee/0xf80 [ 810.870053][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.870090][T19311] RIP: 0033:0x7fb52f990a77 [ 810.870121][T19311] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 810.870159][T19311] RSP: 002b:00007ffe3c357238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 810.870196][T19311] RAX: 0000000000000000 RBX: 00007fb52fa13d7d RCX: 00007fb52f990a77 [ 810.870221][T19311] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3c3572f0 [ 810.870245][T19311] RBP: 00007ffe3c3572f0 R08: 0000000000000000 R09: 0000000000000000 [ 810.870269][T19311] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3c358380 [ 810.870294][T19311] R13: 00007fb52fa13d7d R14: 00000000000c5e66 R15: 00007ffe3c3583c0 [ 810.870356][T19311] [ 811.351879][T19311] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 811.881147][T20418] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 811.938991][T23581] program syz.3.7336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.018434][T23584] loop4: detected capacity change from 0 to 4096 [ 812.022357][T23588] program syz.3.7336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.103982][T20418] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.142004][T20418] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.175694][T20418] usb 8-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 812.205335][T20418] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.239411][T20418] usb 8-1: config 0 descriptor?? [ 812.715249][T20418] hid-retrode 0003:0403:97C1.005F: unknown global tag 0xe [ 812.762390][T20418] hid-retrode 0003:0403:97C1.005F: item 0 2 1 14 parsing failed [ 812.773817][T20418] hid-retrode 0003:0403:97C1.005F: probe with driver hid-retrode failed with error -22 [ 812.842788][T20442] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 812.947551][T20418] usb 8-1: USB disconnect, device number 21 [ 813.021340][T20442] usb 4-1: Using ep0 maxpacket: 8 [ 813.034107][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7348'. [ 813.035712][T20442] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 813.062532][T20442] usb 4-1: config 179 has no interface number 0 [ 813.069023][T20442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 813.082560][T20442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 813.095597][T20442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 813.138103][T20442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 813.193419][T20442] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 813.219313][T20442] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 813.235559][T20442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.254119][T23602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 813.648224][T23602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.665485][T23602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.975462][T20429] usb 4-1: USB disconnect, device number 51 [ 813.975529][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 813.989734][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 814.057179][T23635] mkiss: ax0: crc mode is auto. [ 814.172972][T23618] loop6: detected capacity change from 0 to 32768 [ 814.195707][T23618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7350 (23618) [ 814.258679][T23618] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 814.309768][T23618] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 814.513820][T23618] BTRFS info (device loop6): turning off barriers [ 814.531500][T23618] BTRFS info (device loop6): enabling free space tree [ 814.546498][T23618] BTRFS info (device loop6): use zstd compression, level 3 [ 814.824761][T17363] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 815.732486][T23689] tipc: Enabling of bearer rejected, failed to enable media [ 816.484630][T23706] loop6: detected capacity change from 0 to 1024 [ 816.492578][T23707] loop3: detected capacity change from 0 to 512 [ 816.515429][T23707] EXT4-fs: Ignoring removed bh option [ 816.531040][T23707] EXT4-fs: Ignoring removed mblk_io_submit option [ 816.544462][T23706] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 816.576618][T23707] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 816.662116][T23707] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 816.731653][T23707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 816.742559][T23706] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.7382: lblock 2 mapped to illegal pblock 2 (length 1) [ 816.743235][T23707] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 816.777971][T23706] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 816.788637][T23706] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.7382: lblock 0 mapped to illegal pblock 48 (length 1) [ 816.810639][T23707] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 816.843138][T23707] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.7381: Failed to acquire dquot type 1 [ 816.891270][T23707] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.7381: Invalid block bitmap block 0 in block_group 0 [ 816.906160][T23706] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 816.921913][T23706] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.7382: Failed to acquire dquot type 0 [ 816.954965][T23707] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.7381: Invalid block bitmap block 0 in block_group 0 [ 816.955841][T23706] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 816.979800][T23706] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.7382: mark_inode_dirty error [ 817.000065][T23707] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.7381: Invalid block bitmap block 0 in block_group 0 [ 817.009977][T23706] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 817.025358][T23706] EXT4-fs (loop6): 1 orphan inode deleted [ 817.033789][T23706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.071211][T20434] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 817.091534][T20434] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 817.111371][T20434] EXT4-fs error (device loop6): ext4_release_dquot:7020: comm kworker/u8:11: Failed to release dquot type 0 [ 817.124060][T23707] Quota error (device loop3): write_blk: dquota write failed [ 817.135549][T23691] loop4: detected capacity change from 0 to 32768 [ 817.160931][T23707] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 817.192019][T23691] JBD2: Ignoring recovery information on journal [ 817.202478][T23691] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 817.246654][T23707] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.7381: Failed to acquire dquot type 1 [ 817.271393][T23691] JBD2: bad block at offset 32 [ 817.333041][T23691] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 817.349303][T23707] Quota error (device loop3): write_blk: dquota write failed [ 817.388922][T23706] EXT4-fs error (device loop6): __ext4_get_inode_loc:4829: comm syz.6.7382: Invalid inode table block 1 in block_group 0 [ 817.393775][T23707] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 817.469602][T23707] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.7381: Failed to acquire dquot type 1 [ 817.496278][T23706] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 817.530571][T23707] EXT4-fs (loop3): 1 orphan inode deleted [ 817.627606][T23707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 817.694723][T19311] ocfs2: Unmounting device (7,4) on (node local) [ 817.737974][T17363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.776889][T17363] EXT4-fs error (device loop6): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 817.815107][T17363] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 817.868346][T17363] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 817.912559][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.000381][T20429] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 818.032273][T23726] tipc: Enabling of bearer rejected, failed to enable media [ 818.182820][T20429] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 818.203959][T20429] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 818.220559][T20429] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.234970][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.257237][T20429] usb 8-1: config 0 descriptor?? [ 818.263575][T23724] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 818.639655][T23741] loop6: detected capacity change from 0 to 4096 [ 818.688223][T20429] elan 0003:04F3:0755.0060: unknown main item tag 0x0 [ 818.721934][T20429] elan 0003:04F3:0755.0060: item fetching failed at offset 3/5 [ 818.751786][T20429] elan 0003:04F3:0755.0060: Hid Parse failed [ 818.776559][T20429] elan 0003:04F3:0755.0060: probe with driver elan failed with error -22 [ 818.886912][T20429] usb 8-1: USB disconnect, device number 22 [ 819.391949][T23762] loop4: detected capacity change from 0 to 1024 [ 819.414578][T23762] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 819.479617][T23762] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.7405: lblock 2 mapped to illegal pblock 2 (length 1) [ 819.523538][T23763] loop3: detected capacity change from 0 to 4096 [ 819.576749][T23762] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 819.585839][T23762] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.7405: lblock 0 mapped to illegal pblock 48 (length 1) [ 819.619433][T23762] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.7405: Failed to acquire dquot type 0 [ 819.655177][T23769] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 819.702865][T23762] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 819.757759][T23762] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.7405: mark_inode_dirty error [ 819.804835][T23762] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 819.818791][T23762] EXT4-fs (loop4): 1 orphan inode deleted [ 819.839758][ T6203] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 819.869228][T23762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.892600][ T6203] EXT4-fs error (device loop4): ext4_release_dquot:7020: comm kworker/u8:18: Failed to release dquot type 0 [ 820.071120][T23762] EXT4-fs error (device loop4): __ext4_get_inode_loc:4829: comm syz.4.7405: Invalid inode table block 1 in block_group 0 [ 820.098810][T23762] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 820.134716][T23764] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 820.181402][T23764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 820.283881][T19311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.321575][T19311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 820.377128][T19311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 820.408327][T19311] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 820.685483][T23793] loop7: detected capacity change from 0 to 64 [ 821.080033][T23799] loop7: detected capacity change from 0 to 4096 [ 821.144707][T23806] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 821.444261][T23815] loop7: detected capacity change from 0 to 1024 [ 821.474773][T23815] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 821.510409][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 821.519521][T23815] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.7431: lblock 2 mapped to illegal pblock 2 (length 1) [ 821.619739][T23815] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.7431: lblock 0 mapped to illegal pblock 48 (length 1) [ 821.647055][T23815] EXT4-fs error (device loop7): ext4_acquire_dquot:6984: comm syz.7.7431: Failed to acquire dquot type 0 [ 821.661210][T23815] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 821.699893][T23815] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.7431: mark_inode_dirty error [ 821.722908][T23815] EXT4-fs warning (device loop7): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 821.734220][T23815] EXT4-fs (loop7): 1 orphan inode deleted [ 821.742588][T23815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.758227][T20116] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 821.817565][T20116] __quota_error: 4 callbacks suppressed [ 821.817590][T20116] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 821.841772][T23830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7435'. [ 821.857594][T20116] EXT4-fs error (device loop7): ext4_release_dquot:7020: comm kworker/u8:10: Failed to release dquot type 0 [ 821.858898][T23815] EXT4-fs error (device loop7): __ext4_get_inode_loc:4829: comm syz.7.7431: Invalid inode table block 1 in block_group 0 [ 821.892023][T23815] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 822.014735][T19386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.048115][T19386] EXT4-fs error (device loop7): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 822.094405][T19386] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 822.119067][T19386] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 822.380976][T20429] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 822.453006][T23843] mkiss: ax0: crc mode is auto. [ 822.532469][T20429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.532538][T20429] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 822.532578][T20429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.536317][T20429] usb 5-1: config 0 descriptor?? [ 822.857286][T23851] syz.1.7447 (23851) used obsolete PPPIOCDETACH ioctl [ 822.943259][T23853] loop7: detected capacity change from 0 to 64 [ 822.964933][T20429] hid-retrode 0003:0403:97C1.0061: unknown main item tag 0x0 [ 822.990337][T20429] hid-retrode 0003:0403:97C1.0061: unknown main item tag 0x0 [ 823.008616][T20429] hid-retrode 0003:0403:97C1.0061: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.4-1/input0 [ 823.050932][ T31] audit: type=1800 audit(2000000679.310:226): pid=23853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7448" name="file1" dev="loop7" ino=22 res=0 errno=0 [ 823.167753][T20429] usb 5-1: USB disconnect, device number 49 [ 823.216992][T23857] sp0: Synchronizing with TNC [ 823.391887][T23858] fido_id[23858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 823.590551][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 823.627292][T23868] loop3: detected capacity change from 0 to 1024 [ 823.654030][T23868] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 823.749422][T23868] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.7454: lblock 2 mapped to illegal pblock 2 (length 1) [ 823.835017][T23868] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 823.844533][T23868] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.7454: lblock 0 mapped to illegal pblock 48 (length 1) [ 823.866480][T23868] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 823.912281][T23868] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.7454: Failed to acquire dquot type 0 [ 823.940532][T23868] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 824.021621][T23868] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.7454: mark_inode_dirty error [ 824.075832][T23868] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 824.091008][T23868] EXT4-fs (loop3): 1 orphan inode deleted [ 824.098911][T23868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.141287][T19821] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 824.161613][T23868] EXT4-fs error (device loop3): __ext4_get_inode_loc:4829: comm syz.3.7454: Invalid inode table block 1 in block_group 0 [ 824.195142][T19821] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 824.212050][T23868] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 824.224741][T19821] EXT4-fs error (device loop3): ext4_release_dquot:7020: comm kworker/u8:9: Failed to release dquot type 0 [ 824.311425][ T973] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 824.382138][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.414993][ T5831] EXT4-fs error (device loop3): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 824.461521][ T5831] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 824.477379][T23864] loop7: detected capacity change from 0 to 32768 [ 824.488591][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.511075][ T5831] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 824.539879][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.551572][T23864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7453 (23864) [ 824.581103][ T973] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 824.613401][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.625389][T23864] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 824.660985][T23864] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 824.687763][ T973] usb 2-1: config 0 descriptor?? [ 824.726218][T23879] loop6: detected capacity change from 0 to 764 [ 824.978841][T23893] mkiss: ax0: crc mode is auto. [ 825.064054][T23864] BTRFS info (device loop7): enabling ssd optimizations [ 825.091033][T23864] BTRFS info (device loop7): turning on async discard [ 825.123064][T23864] BTRFS info (device loop7): enabling free space tree [ 825.161946][ T973] hid-picolcd 0003:04D8:C002.0062: unbalanced collection at end of report description [ 825.199875][ T973] hid-picolcd 0003:04D8:C002.0062: device report parse failed [ 825.232733][ T973] hid-picolcd 0003:04D8:C002.0062: probe with driver hid-picolcd failed with error -22 [ 825.479870][ T973] usb 2-1: USB disconnect, device number 53 [ 825.501348][T19386] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 825.558366][T23877] loop4: detected capacity change from 0 to 32768 [ 825.583388][T23877] BTRFS info: device /dev/loop4 (7:4) using temp-fsid ca9ea9d2-be25-40cb-ab84-8a14d211f6a8 [ 825.610346][T23899] loop6: detected capacity change from 0 to 4096 [ 825.630371][T23899] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 825.681066][T23877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7456 (23877) [ 825.731779][T23899] ntfs3(loop6): Failed to load $Extend (-22). [ 825.737934][T23899] ntfs3(loop6): Failed to initialize $Extend. [ 825.826141][T23877] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 825.911964][T23877] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 826.218684][T23877] BTRFS info (device loop4): turning off barriers [ 826.218726][T23877] BTRFS info (device loop4): enabling free space tree [ 826.218757][T23877] BTRFS info (device loop4): use zstd compression, level 3 [ 826.480467][ T973] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 826.639243][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 826.639318][ T973] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 826.639361][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.644538][T19311] BTRFS info (device loop4): last unmount of filesystem ca9ea9d2-be25-40cb-ab84-8a14d211f6a8 [ 826.696052][ T973] usb 1-1: config 0 descriptor?? [ 826.720671][T23928] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 826.906521][T23932] loop6: detected capacity change from 0 to 4096 [ 826.939757][T23932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.197078][ T973] elan 0003:04F3:0755.0063: unknown main item tag 0x0 [ 827.197122][ T973] elan 0003:04F3:0755.0063: item fetching failed at offset 3/5 [ 827.197854][ T973] elan 0003:04F3:0755.0063: Hid Parse failed [ 827.197978][ T973] elan 0003:04F3:0755.0063: probe with driver elan failed with error -22 [ 827.313410][T17363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.438586][ T973] usb 1-1: USB disconnect, device number 44 [ 828.262901][T23965] loop6: detected capacity change from 0 to 64 [ 828.594702][T23971] sp0: Synchronizing with TNC [ 828.921351][T23951] loop3: detected capacity change from 0 to 32768 [ 828.947837][T23975] loop4: detected capacity change from 0 to 4096 [ 828.955937][T23951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7478 (23951) [ 829.010990][T23951] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 829.026283][T23975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.052914][T23951] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 829.305066][T19311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.412276][T23951] BTRFS info (device loop3): enabling ssd optimizations [ 829.419266][T23951] BTRFS info (device loop3): turning on async discard [ 829.494984][T23951] BTRFS info (device loop3): enabling free space tree [ 830.182917][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 830.730489][ T6029] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 830.909511][T24032] loop6: detected capacity change from 0 to 64 [ 830.912747][ T6029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 830.968582][ T6029] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 831.000946][ T6029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.127749][ T6029] usb 4-1: config 0 descriptor?? [ 831.128495][ T31] audit: type=1800 audit(2000000687.390:227): pid=24032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7508" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 831.145164][T24036] sp0: Synchronizing with TNC [ 831.174853][T24018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 831.538283][T19206] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 831.613466][T24044] netlink: 'syz.4.7514': attribute type 1 has an invalid length. [ 831.636124][ T6029] elan 0003:04F3:0755.0064: unknown main item tag 0x0 [ 831.652257][ T6029] elan 0003:04F3:0755.0064: item fetching failed at offset 3/5 [ 831.672577][ T6029] elan 0003:04F3:0755.0064: Hid Parse failed [ 831.730364][ T6029] elan 0003:04F3:0755.0064: probe with driver elan failed with error -22 [ 831.741452][T19206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.756375][T19206] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 831.766470][T19206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.777919][T19206] usb 1-1: config 0 descriptor?? [ 831.822028][T24044] bond1: entered promiscuous mode [ 831.855795][T24044] bond1: entered allmulticast mode [ 831.868624][ T6029] usb 4-1: USB disconnect, device number 52 [ 831.890610][T24044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.908320][T24054] random: crng reseeded on system resumption [ 832.242761][T19206] hid-retrode 0003:0403:97C1.0065: unknown main item tag 0x0 [ 832.253957][T19206] hid-retrode 0003:0403:97C1.0065: unknown main item tag 0x0 [ 832.267789][T19206] hid-retrode 0003:0403:97C1.0065: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 832.478102][ T24] usb 1-1: USB disconnect, device number 45 [ 832.598359][T24059] fido_id[24059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 833.271553][T24089] loop7: detected capacity change from 0 to 764 [ 833.880995][T20418] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 834.063306][T20418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 834.101644][T20418] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 834.135189][T20418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.182762][T20418] usb 2-1: config 0 descriptor?? [ 834.188488][T24097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 834.257267][T24085] loop6: detected capacity change from 0 to 32768 [ 834.359583][T24085] JBD2: Ignoring recovery information on journal [ 834.390667][T24085] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 834.441049][T24085] JBD2: bad block at offset 32 [ 834.472394][T24085] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 834.670888][T20444] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 834.692187][T20418] elan 0003:04F3:0755.0066: unknown main item tag 0x0 [ 834.698998][T20418] elan 0003:04F3:0755.0066: item fetching failed at offset 3/5 [ 834.768816][T20418] elan 0003:04F3:0755.0066: Hid Parse failed [ 834.785219][T20418] elan 0003:04F3:0755.0066: probe with driver elan failed with error -22 [ 834.857339][T17363] ocfs2: Unmounting device (7,6) on (node local) [ 834.870996][T20444] usb 4-1: Using ep0 maxpacket: 16 [ 834.883962][T20444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.930619][T20444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.949439][ T24] usb 2-1: USB disconnect, device number 54 [ 834.971822][T20444] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 835.008424][T20444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.065681][T20444] usb 4-1: config 0 descriptor?? [ 835.121029][T20429] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 835.139601][T24105] loop4: detected capacity change from 0 to 32768 [ 835.223074][T24105] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 835.289130][T24105] XFS (loop4): Ending clean mount [ 835.301147][T20429] usb 1-1: Using ep0 maxpacket: 8 [ 835.302889][T24105] XFS (loop4): Quotacheck needed: Please wait. [ 835.334162][T20429] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 835.396220][T24105] XFS (loop4): Quotacheck: Done. [ 835.412734][T20429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.447029][T20429] usb 1-1: config 0 descriptor?? [ 835.558274][T20444] bigben 0003:146B:0902.0067: unexpected rdesc, please submit for review [ 835.596710][T20444] bigben 0003:146B:0902.0067: item fetching failed at offset 3/5 [ 835.626279][T20444] bigben 0003:146B:0902.0067: parse failed [ 835.647853][T19311] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 835.653578][T20444] bigben 0003:146B:0902.0067: probe with driver bigben failed with error -22 [ 835.766629][T20444] usb 4-1: USB disconnect, device number 53 [ 835.915400][T20429] uclogic 0003:145F:0212.0068: interface is invalid, ignoring [ 836.114479][T20429] usb 1-1: USB disconnect, device number 46 [ 836.312331][T24149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.324431][T24151] ALSA: mixer_oss: invalid OSS volume '' [ 836.585081][T24158] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7565'. [ 836.643076][T24155] loop6: detected capacity change from 0 to 2048 [ 836.703499][T24155] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 836.751004][T24155] NILFS (loop6): mounting unchecked fs [ 836.773264][ T6088] udevd[6088]: incorrect nilfs2 checksum on /dev/loop6 [ 836.818702][T24155] NILFS (loop6): recovery complete [ 836.865456][T24163] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 836.916993][ T31] audit: type=1326 audit(2000000693.170:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd097d8f749 code=0x7ffc0000 [ 837.003803][ T31] audit: type=1326 audit(2000000693.210:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd097d8f749 code=0x7ffc0000 [ 837.090965][ T31] audit: type=1326 audit(2000000693.230:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd097d8f749 code=0x7ffc0000 [ 837.164809][ T31] audit: type=1326 audit(2000000693.230:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd097d8f749 code=0x7ffc0000 [ 837.254314][ T31] audit: type=1326 audit(2000000693.230:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fd097d8f749 code=0x7ffc0000 [ 837.356618][ T31] audit: type=1326 audit(2000000693.240:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd097d8f749 code=0x7ffc0000 [ 837.503990][T24178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7575'. [ 837.650991][T24186] nbd: couldn't find a device at index 34 [ 838.434389][T24201] loop3: detected capacity change from 0 to 64 [ 838.709235][T24207] loop6: detected capacity change from 0 to 128 [ 838.762324][T24207] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 838.804965][T24207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 839.282698][T24224] loop6: detected capacity change from 0 to 256 [ 839.395851][T24224] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 839.510558][T24224] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 840.001708][T24240] loop7: detected capacity change from 0 to 2048 [ 840.094894][T24240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.109502][T24240] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.296099][T19386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.310607][ T24] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 840.518114][T24259] loop6: detected capacity change from 0 to 256 [ 840.538299][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 840.601439][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.617325][T24258] sp0: Synchronizing with TNC [ 840.641622][ T24] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 840.669550][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.706224][ T24] usb 1-1: config 0 descriptor?? [ 841.168228][ T24] bigben 0003:146B:0902.0069: unexpected rdesc, please submit for review [ 841.227100][ T24] bigben 0003:146B:0902.0069: unknown main item tag 0x0 [ 841.264720][ T24] bigben 0003:146B:0902.0069: unknown main item tag 0x0 [ 841.314934][ T24] bigben 0003:146B:0902.0069: unknown main item tag 0x0 [ 841.352365][ T24] bigben 0003:146B:0902.0069: unknown main item tag 0x0 [ 841.375579][ T24] bigben 0003:146B:0902.0069: unknown main item tag 0x0 [ 841.424699][ T24] bigben 0003:146B:0902.0069: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 841.470216][ T24] bigben 0003:146B:0902.0069: missing HID_OUTPUT_REPORT 0 [ 841.513396][ T24] bigben 0003:146B:0902.0069: no output report found [ 841.570552][ T24] usb 1-1: USB disconnect, device number 47 [ 841.761315][T24282] fido_id[24282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 842.159864][T24266] loop3: detected capacity change from 0 to 32768 [ 842.242786][T24266] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 842.352668][T20444] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 842.371736][T24266] XFS (loop3): Ending clean mount [ 842.434266][T24266] XFS (loop3): Quotacheck needed: Please wait. [ 842.537069][T24266] XFS (loop3): Quotacheck: Done. [ 842.549801][T20444] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.590933][T20444] usb 8-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 842.600127][ T31] audit: type=1800 audit(2000000698.860:234): pid=24266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7615" name="mnt" dev="loop3" ino=6155 res=0 errno=0 [ 842.660938][T20444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.694483][T20444] usb 8-1: config 0 descriptor?? [ 842.783136][T24312] loop4: detected capacity change from 0 to 512 [ 842.824263][T24312] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 842.844969][ T5831] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 842.874185][T24312] EXT4-fs (loop4): invalid journal inode [ 842.890978][T24312] EXT4-fs (loop4): can't get journal size [ 842.925360][T24312] EXT4-fs (loop4): 1 truncate cleaned up [ 843.081632][T24312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.162251][T20444] magicmouse 0003:05AC:0323.006A: hidraw0: USB HID v0.0c Device [HID 05ac:0323] on usb-dummy_hcd.7-1/input0 [ 843.332997][T20444] usb 8-1: USB disconnect, device number 23 [ 843.502433][T19311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.504710][T24317] fido_id[24317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 844.028301][ T5846] Bluetooth: hci3: unexpected event for opcode 0x042e [ 844.048770][T24332] loop6: detected capacity change from 0 to 512 [ 844.472247][ T5846] Bluetooth: hci6: command 0x1003 tx timeout [ 844.479547][T24346] loop4: detected capacity change from 0 to 256 [ 844.486609][ T5835] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 844.645527][T24346] FAT-fs (loop4): Directory bread(block 64) failed [ 844.698609][T24346] FAT-fs (loop4): Directory bread(block 65) failed [ 844.708794][T24346] FAT-fs (loop4): Directory bread(block 66) failed [ 844.741792][T24346] FAT-fs (loop4): Directory bread(block 67) failed [ 844.748521][T24346] FAT-fs (loop4): Directory bread(block 68) failed [ 844.818837][T24346] FAT-fs (loop4): Directory bread(block 69) failed [ 844.844736][T24346] FAT-fs (loop4): Directory bread(block 70) failed [ 844.844785][T24346] FAT-fs (loop4): Directory bread(block 71) failed [ 844.844888][T24346] FAT-fs (loop4): Directory bread(block 72) failed [ 844.844931][T24346] FAT-fs (loop4): Directory bread(block 73) failed [ 845.637932][T24369] loop4: detected capacity change from 0 to 512 [ 845.666229][T24342] loop7: detected capacity change from 0 to 32768 [ 845.681335][T24369] EXT4-fs: Ignoring removed mblk_io_submit option [ 845.712960][T24342] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7646 (24342) [ 845.740583][T24369] EXT4-fs: inline encryption not supported [ 845.787376][T24342] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 845.805744][T24369] EXT4-fs (loop4): Test dummy encryption mode enabled [ 845.820991][T20444] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 845.835151][T24369] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 845.839927][T24374] loop6: detected capacity change from 0 to 1024 [ 845.865084][T24342] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 845.954634][T24369] EXT4-fs (loop4): 1 truncate cleaned up [ 845.973391][T24369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.013169][T20444] usb 1-1: Using ep0 maxpacket: 16 [ 846.043596][T20444] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 846.145317][T20444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.195774][T24342] BTRFS info (device loop7): enabling ssd optimizations [ 846.230981][T24342] BTRFS info (device loop7): turning on async discard [ 846.237784][T24342] BTRFS info (device loop7): enabling free space tree [ 846.246578][T20444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.298303][T20444] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 846.317873][ T1133] hfsplus: b-tree write err: -5, ino 4 [ 846.351639][T19311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.372458][T20444] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 846.415280][T20444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.468470][T20444] usb 1-1: config 0 descriptor?? [ 846.669587][T24399] usb usb8: usbfs: process 24399 (syz.4.7666) did not claim interface 5 before use [ 846.720275][T24342] BTRFS warning (device loop7): failed to trim 3 block group(s), last error -512 [ 846.947507][T20444] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.006B/input/input57 [ 846.974513][T24403] loop6: detected capacity change from 0 to 1024 [ 847.049641][T24403] EXT4-fs: Ignoring removed bh option [ 847.072094][T24342] BTRFS warning (device loop7): failed to trim 1 device(s), last error -512 [ 847.126960][T20444] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.006B/input/input58 [ 847.147197][T24403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 847.257066][T20444] kye 0003:0458:5013.006B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 847.260990][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 847.304298][T20444] usb 1-1: USB disconnect, device number 48 [ 847.319397][ T31] audit: type=1800 audit(2000000703.580:235): pid=24403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7668" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 847.384990][T19386] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 847.454786][T24407] loop3: detected capacity change from 0 to 4096 [ 847.541972][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 847.569788][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.592586][T17363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 847.638151][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 847.684295][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.716634][T24407] ntfs3(loop3): failed to convert "0000" to iso8859-7 [ 847.745434][T24410] fido_id[24410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 847.753382][ T24] usb 5-1: config 0 descriptor?? [ 847.854709][T24407] ntfs3(loop3): failed to convert name for inode 1e. [ 847.899298][T24407] ntfs3(loop3): ino=1f, mi_enum_attr [ 848.009898][T24417] loop7: detected capacity change from 0 to 512 [ 848.080924][T24417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 848.170434][T24417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 848.214705][T24417] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.307625][ T24] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.006C/input/input59 [ 848.414109][ T24] creative-sb0540 0003:041E:3100.006C: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 848.528699][T19386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 848.542486][ T24] usb 5-1: USB disconnect, device number 50 [ 848.799565][T24437] loop7: detected capacity change from 0 to 512 [ 848.836266][T24430] fido_id[24430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 848.885425][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7683'. [ 848.945127][T24437] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.7681: bg 0: block 248: padding at end of block bitmap is not set [ 849.048562][T24437] Quota error (device loop7): write_blk: dquota write failed [ 849.110984][T24437] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 849.129681][T24437] EXT4-fs error (device loop7): ext4_acquire_dquot:6984: comm syz.7.7681: Failed to acquire dquot type 1 [ 849.199293][T24437] EXT4-fs (loop7): 1 truncate cleaned up [ 849.225246][T24437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.310831][T24437] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.478099][T24454] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7689'. [ 849.533614][T19386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.586732][ T6078] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 849.608976][ T6078] EXT4-fs error (device loop7): ext4_release_dquot:7020: comm kworker/u8:15: Failed to release dquot type 1 [ 850.342401][T24477] loop7: detected capacity change from 0 to 1024 [ 851.281067][ T6029] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 851.446638][ T6029] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 851.496938][ T6029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 851.543994][ T6029] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 851.564170][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.597134][ T6029] usb 5-1: config 0 descriptor?? [ 851.714541][T24515] netlink: 'syz.0.7719': attribute type 10 has an invalid length. [ 851.759509][T24515] batadv0: entered allmulticast mode [ 851.792047][T24515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.802903][T24515] batadv0: entered promiscuous mode [ 851.808796][T24515] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 851.824162][T24519] netlink: 'syz.0.7719': attribute type 10 has an invalid length. [ 851.880884][T24519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7719'. [ 851.895697][T24521] loop7: detected capacity change from 0 to 16 [ 851.923322][T24521] erofs (device loop7): mounted with root inode @ nid 36. [ 851.944741][T24519] bond0: (slave batadv0): Releasing backup interface [ 852.015541][T24519] bridge0: port 3(batadv0) entered blocking state [ 852.055659][T24519] bridge0: port 3(batadv0) entered disabled state [ 852.072453][ T6029] magicmouse 0003:05AC:0269.006D: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 852.261988][T20424] usb 5-1: USB disconnect, device number 51 [ 852.393154][ T8289] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 852.403178][ T8289] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 852.442632][T24524] fido_id[24524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 853.345180][T24562] loop6: detected capacity change from 0 to 512 [ 853.367276][T24562] EXT4-fs: Ignoring removed bh option [ 853.380334][T24562] EXT4-fs: Ignoring removed mblk_io_submit option [ 853.387915][T24563] loop4: detected capacity change from 0 to 256 [ 853.401444][T24563] exfat: Deprecated parameter 'utf8' [ 853.436957][T24562] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 853.449503][T24563] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 853.497996][T24562] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 853.511968][T24562] EXT4-fs (loop6): orphan cleanup on readonly fs [ 853.556020][T24562] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 853.624200][T24562] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 853.630931][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7741'. [ 853.663220][T24562] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.7736: Failed to acquire dquot type 1 [ 853.731609][T24562] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:482: comm syz.6.7736: Invalid block bitmap block 0 in block_group 0 [ 853.766747][T24562] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:482: comm syz.6.7736: Invalid block bitmap block 0 in block_group 0 [ 853.790480][T24562] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:482: comm syz.6.7736: Invalid block bitmap block 0 in block_group 0 [ 853.841542][T24562] Quota error (device loop6): write_blk: dquota write failed [ 853.859343][T24562] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 853.921028][T24562] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.7736: Failed to acquire dquot type 1 [ 853.968655][T24562] Quota error (device loop6): write_blk: dquota write failed [ 854.030442][T24562] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 854.098832][T24562] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.7736: Failed to acquire dquot type 1 [ 854.151768][T24562] EXT4-fs (loop6): 1 orphan inode deleted [ 854.194694][T24562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 854.556846][ T31] audit: type=1326 audit(2000000710.820:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24595 comm="syz.3.7754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe092f8f749 code=0x0 [ 854.583048][T17363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.905987][T24574] loop7: detected capacity change from 0 to 32768 [ 854.933746][T24574] (syz.7.7742,24574,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 854.992380][T24574] (syz.7.7742,24574,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 855.094292][T24574] (syz.7.7742,24574,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 855.194031][T24574] (syz.7.7742,24574,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 855.225039][T24574] JBD2: Ignoring recovery information on journal [ 855.301002][T24616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 855.307801][T24616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 855.323953][T24574] (syz.7.7742,24574,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 855.339676][T24616] vhci_hcd vhci_hcd.0: Device attached [ 855.353625][T24574] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 855.368409][T24574] (syz.7.7742,24574,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 855.429436][T24574] (syz.7.7742,24574,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 855.560650][ T6029] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 855.600325][T20424] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 855.723555][T19386] ocfs2: Unmounting device (7,7) on (node local) [ 855.732233][T24630] loop4: detected capacity change from 0 to 512 [ 855.774446][T20424] usb 1-1: config 0 has no interfaces? [ 855.780005][T20424] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 855.793019][T24630] EXT4-fs: Ignoring removed bh option [ 855.808840][T20424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.844650][T24630] EXT4-fs: Ignoring removed mblk_io_submit option [ 855.864464][T20424] usb 1-1: config 0 descriptor?? [ 855.887174][T24630] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 855.925887][T24630] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 855.948617][T24630] EXT4-fs (loop4): orphan cleanup on readonly fs [ 855.964942][T24630] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 855.989304][T24630] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 856.017443][T24630] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.7769: Failed to acquire dquot type 1 [ 856.047650][T24630] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:482: comm syz.4.7769: Invalid block bitmap block 0 in block_group 0 [ 856.084736][T20424] usb 1-1: USB disconnect, device number 49 [ 856.095343][T24617] usbip_core: unknown command [ 856.102941][T24617] vhci_hcd: unknown pdu 0 [ 856.125963][T24617] usbip_core: unknown command [ 856.133761][T24630] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:482: comm syz.4.7769: Invalid block bitmap block 0 in block_group 0 [ 856.154684][ T6279] vhci_hcd vhci_hcd.0: stop threads [ 856.162392][ T6279] vhci_hcd vhci_hcd.0: release socket [ 856.169858][ T6279] vhci_hcd vhci_hcd.0: disconnect device [ 856.177683][T24630] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:482: comm syz.4.7769: Invalid block bitmap block 0 in block_group 0 [ 856.205354][T24630] Quota error (device loop4): write_blk: dquota write failed [ 856.214010][T24630] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 856.231033][ T6029] usb 33-1: device descriptor read/64, error -71 [ 856.237790][T24630] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.7769: Failed to acquire dquot type 1 [ 856.252171][T24630] Quota error (device loop4): write_blk: dquota write failed [ 856.259856][T24630] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 856.272992][T24630] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.7769: Failed to acquire dquot type 1 [ 856.286492][T24630] EXT4-fs (loop4): 1 orphan inode deleted [ 856.325182][T24630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 856.416068][ T6029] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 856.623333][T19311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.991702][T24655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.771019][T24680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.823930][T24683] loop7: detected capacity change from 0 to 512 [ 857.842136][T24683] EXT4-fs: Ignoring removed bh option [ 857.847559][T24683] EXT4-fs: Ignoring removed mblk_io_submit option [ 857.901309][T24683] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 858.026192][T24683] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 858.034848][T24683] EXT4-fs (loop7): orphan cleanup on readonly fs [ 858.044825][T24683] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 858.055165][T24683] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 858.069698][T24683] EXT4-fs error (device loop7): ext4_acquire_dquot:6984: comm syz.7.7793: Failed to acquire dquot type 1 [ 858.084354][T24688] loop3: detected capacity change from 0 to 128 [ 858.102689][T24683] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:482: comm syz.7.7793: Invalid block bitmap block 0 in block_group 0 [ 858.132740][T24683] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:482: comm syz.7.7793: Invalid block bitmap block 0 in block_group 0 [ 858.221972][T24683] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:482: comm syz.7.7793: Invalid block bitmap block 0 in block_group 0 [ 858.265319][T24683] Quota error (device loop7): write_blk: dquota write failed [ 858.300073][T24683] EXT4-fs error (device loop7): ext4_acquire_dquot:6984: comm syz.7.7793: Failed to acquire dquot type 1 [ 858.316327][T24683] EXT4-fs error (device loop7): ext4_acquire_dquot:6984: comm syz.7.7793: Failed to acquire dquot type 1 [ 858.328455][T24683] EXT4-fs (loop7): 1 orphan inode deleted [ 858.338197][T24683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 858.603853][T19386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.819315][T24700] loop7: detected capacity change from 0 to 512 [ 858.863749][T24700] EXT4-fs (loop7): Test dummy encryption mode enabled [ 858.889612][T24700] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 858.934869][T24700] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.7802: bad orphan inode 131083 [ 858.952801][T24700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.033951][T19386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.225767][T24713] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7806'. [ 859.636044][T24725] loop3: detected capacity change from 0 to 256 [ 859.724068][T24725] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 859.736272][T24692] loop4: detected capacity change from 0 to 32768 [ 859.820095][T24725] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 859.852016][T24692] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 860.047869][T24692] XFS (loop4): Ending clean mount [ 860.189300][T24742] loop7: detected capacity change from 0 to 128 [ 860.330383][T19311] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 860.537141][T24746] tipc: Enabled bearer , priority 10 [ 860.739695][T24753] loop7: detected capacity change from 0 to 512 [ 860.827591][T24753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 860.918710][T24753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.976133][T24753] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.101113][T24760] loop3: detected capacity change from 0 to 128 [ 861.138523][T24753] EXT4-fs: Ignoring removed orlov option [ 861.153031][T24760] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 861.191105][T24753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 861.221690][T24760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.240252][T24753] EXT4-fs (loop7): can't enable nombcache during remount [ 861.371017][T20444] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 861.389176][T19386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.564030][T20444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 861.620998][T20444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 861.654329][ T6029] tipc: Node number set to 3758096386 [ 861.690931][T20444] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 861.725267][T20444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.763439][T20444] usb 5-1: config 0 descriptor?? [ 861.768577][T24776] netlink: 'syz.3.7832': attribute type 1 has an invalid length. [ 861.789496][T24762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 861.922555][T24776] bond2: entered promiscuous mode [ 861.927678][T24776] bond2: entered allmulticast mode [ 861.951709][T24776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 862.213208][T20444] hkems 0003:2006:0118.006E: item fetching failed at offset 5/7 [ 862.253656][T20444] hkems 0003:2006:0118.006E: parse failed [ 862.259493][T20444] hkems 0003:2006:0118.006E: probe with driver hkems failed with error -22 [ 862.421038][T20444] usb 5-1: USB disconnect, device number 52 [ 862.668637][T24798] netlink: 'syz.6.7855': attribute type 10 has an invalid length. [ 862.668766][T24798] batadv0: entered allmulticast mode [ 862.681662][T24798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.683928][T24798] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 862.700680][T24798] netlink: 'syz.6.7855': attribute type 10 has an invalid length. [ 862.700714][T24798] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7855'. [ 862.700752][T24798] batadv0: entered promiscuous mode [ 862.713075][T24798] bond0: (slave batadv0): Releasing backup interface [ 862.755764][T24798] bridge0: port 1(batadv0) entered blocking state [ 862.800426][T24798] bridge0: port 1(batadv0) entered disabled state [ 862.831190][T24802] loop7: detected capacity change from 0 to 128 [ 862.849752][T24802] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 862.861332][T24802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 863.161163][ T1133] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 863.161228][ T1133] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 863.592744][T24816] loop3: detected capacity change from 0 to 2048 [ 863.637697][T24816] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 863.691238][T24816] NILFS (loop3): mounting unchecked fs [ 863.760118][T24816] NILFS (loop3): recovery complete [ 863.783977][T24821] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 863.911032][ T5835] Bluetooth: hci6: command 0x1003 tx timeout [ 863.911446][T17366] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 864.435785][T24838] loop4: detected capacity change from 0 to 128 [ 864.479583][T24838] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 864.537352][T24838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 864.555167][T24841] netlink: 'syz.1.7863': attribute type 10 has an invalid length. [ 864.586224][T24809] loop7: detected capacity change from 0 to 32768 [ 864.596301][T24841] batadv0: entered allmulticast mode [ 864.635856][T24841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.674134][T24851] netlink: 'syz.1.7863': attribute type 10 has an invalid length. [ 864.674958][T24841] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 864.719280][T24809] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 864.759973][T24851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7863'. [ 864.780007][T24851] batadv0: entered promiscuous mode [ 864.832536][T24851] bond0: (slave batadv0): Releasing backup interface [ 864.884951][T24809] XFS (loop7): Ending clean mount [ 864.936185][T24809] XFS (loop7): Quotacheck needed: Please wait. [ 864.936718][T24851] bridge0: port 1(batadv0) entered blocking state [ 865.056723][T24851] bridge0: port 1(batadv0) entered disabled state [ 865.095360][T24809] XFS (loop7): Quotacheck: Done. [ 865.211491][T20434] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 865.220858][T20434] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 865.240307][T20444] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 865.412445][T20444] usb 5-1: Using ep0 maxpacket: 16 [ 865.423210][T20444] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 865.456827][T19386] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 865.471723][T20444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.540304][T20444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.555046][T20444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 865.571624][T20444] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 865.630276][T20444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.654637][T20444] usb 5-1: config 0 descriptor?? [ 865.699184][T24869] loop3: detected capacity change from 0 to 64 [ 865.866088][T24869] [ 865.868442][T24869] ====================================================== [ 865.875465][T24869] WARNING: possible circular locking dependency detected [ 865.882488][T24869] syzkaller #0 Tainted: G L [ 865.888491][T24869] ------------------------------------------------------ [ 865.895592][T24869] syz.3.7874/24869 is trying to acquire lock: [ 865.901656][T24869] ffff888055b81af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa5/0xd60 [ 865.912411][T24869] [ 865.912411][T24869] but task is already holding lock: [ 865.919772][T24869] ffff888079ece0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x340 [ 865.929336][T24869] [ 865.929336][T24869] which lock already depends on the new lock. [ 865.929336][T24869] [ 865.939734][T24869] [ 865.939734][T24869] the existing dependency chain (in reverse order) is: [ 865.948739][T24869] [ 865.948739][T24869] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 865.956865][T24869] __mutex_lock+0x1aa/0x1ca0 [ 865.961988][T24869] hfs_find_init+0x19c/0x340 [ 865.967118][T24869] hfs_ext_read_extent+0x19b/0x9e0 [ 865.972755][T24869] hfs_extend_file+0x519/0xd60 [ 865.978047][T24869] hfs_bmap_reserve+0x2ab/0x3a0 [ 865.983446][T24869] hfs_cat_create+0x351/0x990 [ 865.988646][T24869] hfs_mkdir+0x6f/0xe0 [ 865.993236][T24869] vfs_mkdir+0x731/0xb60 [ 865.998010][T24869] do_mkdirat+0x442/0x5e0 [ 866.002877][T24869] __x64_sys_mkdirat+0x83/0xb0 [ 866.008176][T24869] do_syscall_64+0xcd/0xf80 [ 866.013225][T24869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.019664][T24869] [ 866.019664][T24869] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 866.028893][T24869] __lock_acquire+0x1669/0x2890 [ 866.034278][T24869] lock_acquire+0x179/0x330 [ 866.039312][T24869] __mutex_lock+0x1aa/0x1ca0 [ 866.044427][T24869] hfs_extend_file+0xa5/0xd60 [ 866.049721][T24869] hfs_bmap_reserve+0x2ab/0x3a0 [ 866.055122][T24869] __hfs_ext_write_extent+0x3cf/0x520 [ 866.061029][T24869] hfs_ext_read_extent+0x807/0x9e0 [ 866.066680][T24869] hfs_extend_file+0x519/0xd60 [ 866.071971][T24869] hfs_get_block+0x17f/0x830 [ 866.077089][T24869] __block_write_begin_int+0x4f4/0x16d0 [ 866.083167][T24869] block_write_begin+0x9d/0x1d0 [ 866.088549][T24869] cont_write_begin+0x61a/0x950 [ 866.093929][T24869] hfs_write_begin+0x64/0x120 [ 866.099134][T24869] cont_write_begin+0x34f/0x950 [ 866.104516][T24869] hfs_write_begin+0x64/0x120 [ 866.109726][T24869] hfs_file_truncate+0xd2a/0x1150 [ 866.115278][T24869] hfs_inode_setattr+0x497/0x5e0 [ 866.120748][T24869] notify_change+0x6d2/0x1290 [ 866.125949][T24869] do_truncate+0x1d7/0x230 [ 866.130896][T24869] do_ftruncate+0x59e/0x920 [ 866.135926][T24869] do_sys_ftruncate+0x61/0xb0 [ 866.141135][T24869] __x64_sys_ftruncate+0x58/0x80 [ 866.146622][T24869] do_syscall_64+0xcd/0xf80 [ 866.151674][T24869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.158098][T24869] [ 866.158098][T24869] other info that might help us debug this: [ 866.158098][T24869] [ 866.168323][T24869] Possible unsafe locking scenario: [ 866.168323][T24869] [ 866.175851][T24869] CPU0 CPU1 [ 866.181207][T24869] ---- ---- [ 866.186560][T24869] lock(&tree->tree_lock#2/1); [ 866.191440][T24869] lock(&HFS_I(tree->inode)->extents_lock); [ 866.199945][T24869] lock(&tree->tree_lock#2/1); [ 866.207350][T24869] lock(&HFS_I(tree->inode)->extents_lock); [ 866.213333][T24869] [ 866.213333][T24869] *** DEADLOCK *** [ 866.213333][T24869] [ 866.221463][T24869] 4 locks held by syz.3.7874/24869: [ 866.226651][T24869] #0: ffff888078b7a420 (sb_writers#26){.+.+}-{0:0}, at: do_sys_ftruncate+0x61/0xb0 [ 866.236121][T24869] #1: ffff888055b80fa0 (&sb->s_type->i_mutex_key#42){+.+.}-{4:4}, at: do_truncate+0x146/0x230 [ 866.246535][T24869] #2: ffff888055b80df8 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa5/0xd60 [ 866.257200][T24869] #3: ffff888079ece0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x340 [ 866.267206][T24869] [ 866.267206][T24869] stack backtrace: [ 866.273093][T24869] CPU: 1 UID: 0 PID: 24869 Comm: syz.3.7874 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.273145][T24869] Tainted: [L]=SOFTLOCKUP [ 866.273158][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.273180][T24869] Call Trace: [ 866.273191][T24869] [ 866.273204][T24869] dump_stack_lvl+0x116/0x1f0 [ 866.273263][T24869] print_circular_bug+0x275/0x340 [ 866.273321][T24869] check_noncircular+0x146/0x160 [ 866.273366][T24869] __lock_acquire+0x1669/0x2890 [ 866.273418][T24869] lock_acquire+0x179/0x330 [ 866.273458][T24869] ? hfs_extend_file+0xa5/0xd60 [ 866.273497][T24869] ? __pfx___might_resched+0x10/0x10 [ 866.273536][T24869] __mutex_lock+0x1aa/0x1ca0 [ 866.273573][T24869] ? hfs_extend_file+0xa5/0xd60 [ 866.273610][T24869] ? hfs_extend_file+0xa5/0xd60 [ 866.273646][T24869] ? hfs_get_block+0x17f/0x830 [ 866.273684][T24869] ? block_write_begin+0x9d/0x1d0 [ 866.273725][T24869] ? __pfx___mutex_lock+0x10/0x10 [ 866.273757][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.273801][T24869] ? lock_acquire+0x179/0x330 [ 866.273843][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.273887][T24869] ? __pfx___might_resched+0x10/0x10 [ 866.273921][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.273965][T24869] ? trace_contention_end+0xdd/0x110 [ 866.274009][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.274051][T24869] ? __mutex_lock+0x27b/0x1ca0 [ 866.274088][T24869] ? hfs_extend_file+0xa5/0xd60 [ 866.274123][T24869] hfs_extend_file+0xa5/0xd60 [ 866.274162][T24869] ? __pfx_hfs_extend_file+0x10/0x10 [ 866.274198][T24869] ? hfs_brec_find+0x4dc/0x650 [ 866.274255][T24869] hfs_bmap_reserve+0x2ab/0x3a0 [ 866.274311][T24869] ? __kmalloc_noprof+0x35d/0x910 [ 866.274368][T24869] __hfs_ext_write_extent+0x3cf/0x520 [ 866.274404][T24869] ? hfs_find_init+0x19c/0x340 [ 866.274451][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.274498][T24869] hfs_ext_read_extent+0x807/0x9e0 [ 866.274536][T24869] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 866.274589][T24869] hfs_extend_file+0x519/0xd60 [ 866.274628][T24869] ? __pfx_hfs_extend_file+0x10/0x10 [ 866.274673][T24869] hfs_get_block+0x17f/0x830 [ 866.274713][T24869] ? __pfx_hfs_get_block+0x10/0x10 [ 866.274749][T24869] __block_write_begin_int+0x4f4/0x16d0 [ 866.274795][T24869] ? __pfx_hfs_get_block+0x10/0x10 [ 866.274832][T24869] ? xas_set_mark+0x2cd/0x370 [ 866.274887][T24869] ? __pfx___block_write_begin_int+0x10/0x10 [ 866.274930][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.274978][T24869] ? __pfx_hfs_get_block+0x10/0x10 [ 866.275014][T24869] block_write_begin+0x9d/0x1d0 [ 866.275058][T24869] cont_write_begin+0x61a/0x950 [ 866.275097][T24869] ? rcu_is_watching+0x12/0xc0 [ 866.275130][T24869] ? __mark_inode_dirty+0x2bc/0x1670 [ 866.275166][T24869] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 866.275220][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.275265][T24869] ? __pfx_hfs_get_block+0x10/0x10 [ 866.275303][T24869] ? __pfx_cont_write_begin+0x10/0x10 [ 866.275344][T24869] ? block_commit_write+0x243/0x290 [ 866.275399][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.275446][T24869] hfs_write_begin+0x64/0x120 [ 866.275485][T24869] ? __pfx_hfs_get_block+0x10/0x10 [ 866.275524][T24869] cont_write_begin+0x34f/0x950 [ 866.275573][T24869] ? __pfx_hfs_get_block+0x10/0x10 [ 866.275613][T24869] ? __pfx_cont_write_begin+0x10/0x10 [ 866.275661][T24869] hfs_write_begin+0x64/0x120 [ 866.275699][T24869] ? __pfx_hfs_get_block+0x10/0x10 [ 866.275740][T24869] hfs_file_truncate+0xd2a/0x1150 [ 866.275779][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.275821][T24869] ? __up_read+0x2d1/0x700 [ 866.275866][T24869] ? down_read+0x13d/0x460 [ 866.275903][T24869] ? __pfx___up_read+0x10/0x10 [ 866.275952][T24869] ? __pfx_hfs_file_truncate+0x10/0x10 [ 866.275992][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.276041][T24869] ? inode_newsize_ok+0x13b/0x200 [ 866.276077][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.276125][T24869] hfs_inode_setattr+0x497/0x5e0 [ 866.276168][T24869] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 866.276207][T24869] notify_change+0x6d2/0x1290 [ 866.276249][T24869] do_truncate+0x1d7/0x230 [ 866.276290][T24869] ? __pfx_do_truncate+0x10/0x10 [ 866.276337][T24869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.276385][T24869] do_ftruncate+0x59e/0x920 [ 866.276427][T24869] ? __pfx_do_ftruncate+0x10/0x10 [ 866.276468][T24869] ? __x64_sys_openat+0xf0/0x210 [ 866.276527][T24869] do_sys_ftruncate+0x61/0xb0 [ 866.276574][T24869] __x64_sys_ftruncate+0x58/0x80 [ 866.276617][T24869] do_syscall_64+0xcd/0xf80 [ 866.276672][T24869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.276711][T24869] RIP: 0033:0x7fe092f8f749 [ 866.276738][T24869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.276773][T24869] RSP: 002b:00007fe093ee5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 866.276806][T24869] RAX: ffffffffffffffda RBX: 00007fe0931e5fa0 RCX: 00007fe092f8f749 [ 866.276830][T24869] RDX: 0000000000000000 RSI: 000000000000c17a RDI: 0000000000000004 [ 866.276854][T24869] RBP: 00007fe093013f91 R08: 0000000000000000 R09: 0000000000000000 [ 866.276877][T24869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.276899][T24869] R13: 00007fe0931e6038 R14: 00007fe0931e5fa0 R15: 00007ffcba06db58 [ 866.276935][T24869] [ 866.931445][T20424] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 867.016028][T20444] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.006F/input/input60 [ 867.105477][T20444] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.006F/input/input61 [ 867.120634][T20424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 867.138101][T20424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 867.151891][T20424] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 867.181214][T20444] kye 0003:0458:5013.006F: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 867.210444][T20424] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 867.225185][T20424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.239356][T20444] usb 5-1: USB disconnect, device number 53 [ 867.248255][T20424] usb 1-1: config 0 descriptor?? [ 867.267886][T24871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 867.275734][T24876] fido_id[24876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 867.699309][T20424] aureal 0003:0755:2626.0070: unknown main item tag 0x6 [ 867.707461][T20424] aureal 0003:0755:2626.0070: report_id 29495 is invalid [ 867.715277][T20424] aureal 0003:0755:2626.0070: item 0 2 1 8 parsing failed [ 867.723522][T20424] aureal 0003:0755:2626.0070: probe with driver aureal failed with error -22 [ 867.750257][T17366] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 867.750322][ T5835] Bluetooth: hci6: command 0x1003 tx timeout [ 867.901987][T20424] usb 1-1: USB disconnect, device number 50