last executing test programs: 1m9.670698791s ago: executing program 2 (id=246): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000fa070000bf6500000600000000000000", @ANYRES32=0x1, @ANYBLOB="02cb00000000000000000001"], 0x50) r0 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 1m9.49549683s ago: executing program 2 (id=247): mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000700)=0x1, 0x4) 1m9.427301467s ago: executing program 2 (id=248): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) 1m9.290128525s ago: executing program 2 (id=250): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2cd, &(0x7f0000000b80)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x892, 0x0) 1m9.09534894s ago: executing program 2 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000004c00000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002009400000008000340000000f50800044000000001080006400000000408000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1m8.53878284s ago: executing program 2 (id=253): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0xc1, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000080)={0x20, 0x11, 0x74, {0x74, 0x9, "7135d94820d9cdbc1decabd4964aca837a2dddfbd1cff85ec89ab779e12fd24f246561e5016a544c5eb20f82a10ca8dc05334d6d407b76062f11d41e0b25575ed412c83ae3cae05a518562b88dc7aae3e38ca132800279713f7fed354446838e038702cde5ae43f5da99b95efe0757949e46"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m8.205542132s ago: executing program 32 (id=253): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0xc1, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000080)={0x20, 0x11, 0x74, {0x74, 0x9, "7135d94820d9cdbc1decabd4964aca837a2dddfbd1cff85ec89ab779e12fd24f246561e5016a544c5eb20f82a10ca8dc05334d6d407b76062f11d41e0b25575ed412c83ae3cae05a518562b88dc7aae3e38ca132800279713f7fed354446838e038702cde5ae43f5da99b95efe0757949e46"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.830215717s ago: executing program 1 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x3, 0x0, &(0x7f0000000000)="d26ab4"}, 0x50) 4.554839613s ago: executing program 1 (id=793): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.375921208s ago: executing program 1 (id=794): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 4.054218985s ago: executing program 4 (id=797): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4103, 0x1007}], 0x1, 0x18, 0x2) 3.81613086s ago: executing program 4 (id=800): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.47500514s ago: executing program 4 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2501000000000000000b"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.269227942s ago: executing program 4 (id=805): open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 3.056020183s ago: executing program 4 (id=810): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_usb_connect$uac3(0x5, 0xb2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086307302040000102030109026e0003010ac007080b0002012430e50904000000010130000a2401060a0007000000090401000001023000090401010101023000090501092001"], 0x0) 2.953292516s ago: executing program 3 (id=811): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000b40)={0x0, 0x23, 0x37, {0x37, 0x30, "d0269c69d59d984dcce5238cdcd74ef82d71bc78e9d61a9f86c4d508a78d3f8b545de2ae05385622fbeee0356c662d3e03c207fd2a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.655473022s ago: executing program 1 (id=816): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.43803396s ago: executing program 1 (id=818): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 2.239460202s ago: executing program 0 (id=821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, r1, 0x321, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xfd4f15852b0b2911}, 0x40) 2.118544761s ago: executing program 0 (id=822): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.963691591s ago: executing program 0 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f00000001c0)={0x0, 0x12000}) 1.804697319s ago: executing program 0 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]}) 1.716496527s ago: executing program 4 (id=827): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006150083000000002a90a08538b3c83e25038a39b52bb09ea549b3"], 0x0}, 0x0) 1.607616599s ago: executing program 0 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.405355186s ago: executing program 5 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0xe, 0x4) 1.208634581s ago: executing program 3 (id=831): io_setup(0x7f, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x4, 0x71}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r1, 0x0}]) 1.083843778s ago: executing program 5 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000007"], 0x60}}, 0x0) 1.056644311s ago: executing program 3 (id=833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000400)) 957.84488ms ago: executing program 5 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2503000000580001800d0001007564913a73"], 0x6c}, 0x1, 0x0, 0x0, 0x20008190}, 0x4040) 836.108699ms ago: executing program 3 (id=835): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61}, {&(0x7f0000000040)=""/37}], 0x0, &(0x7f0000000180)=""/193}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/22}, {&(0x7f0000000340)=""/122}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/238}, {&(0x7f0000001600)=""/17}, {&(0x7f0000001640)=""/242}, {&(0x7f0000001740)=""/171}, {&(0x7f0000001800)=""/153}, {&(0x7f00000018c0)=""/225}, {&(0x7f00000019c0)=""/44}]}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66}, {&(0x7f0000001c80)=""/184}, {&(0x7f0000001d40)=""/116}, {&(0x7f0000001dc0)=""/8, 0xfffffffffffffee3}], 0x0, &(0x7f0000001e40)=""/84, 0x48}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8}, {&(0x7f0000001f80)=""/43}, {&(0x7f0000001fc0)=""/244}, {&(0x7f00000020c0)=""/54}, {&(0x7f00000000c0)=""/27}, {&(0x7f00000003c0)=""/61}, {&(0x7f0000000400)=""/61}, {&(0x7f0000005340)=""/209}, {&(0x7f0000005440)=""/45}], 0x0, &(0x7f0000002140)=""/59}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x0, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1}, {&(0x7f0000002240)=""/172}], 0x0, &(0x7f0000002340)=""/53}, 0x7fd}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68}, {&(0x7f0000002480)=""/246}, {&(0x7f0000002580)=""/225}, {&(0x7f0000002680)=""/4096}, {&(0x7f0000003680)=""/102}, {&(0x7f0000003700)=""/161}, {&(0x7f00000037c0)=""/135}], 0x0, &(0x7f0000003900)=""/239}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32}, {&(0x7f0000003ac0)=""/246}, {&(0x7f0000003bc0)=""/253}, {&(0x7f0000003cc0)=""/212}, {&(0x7f0000003dc0)=""/127}, {&(0x7f0000003e40)=""/190}, {&(0x7f0000003f00)=""/161}, {&(0x7f0000003fc0)=""/4096}, {&(0x7f0000004fc0)=""/42}], 0x0, &(0x7f00000050c0)=""/173}, 0x16}], 0x400000000000213, 0x40002002, 0x0) 692.867658ms ago: executing program 5 (id=836): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0880c, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x5, 0x2ea, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 331.440777ms ago: executing program 1 (id=837): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c000000ff001005"], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000010) 270.025259ms ago: executing program 5 (id=838): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 196.709748ms ago: executing program 0 (id=839): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x40, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x34, 0x29, 0x0, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0xc}, {0x4}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x4}}]}, 0x34}}, 0x4000) 74.316889ms ago: executing program 5 (id=840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 46.137372ms ago: executing program 3 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001900)=@delchain={0x2c, 0x5f, 0x333, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) 0s ago: executing program 3 (id=842): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) kernel console output (not intermixed with test programs): tamps until 2038-01-19 (0x7fffffff) [ 97.044324][ T6061] loop4: detected capacity change from 0 to 32768 [ 97.090563][ T6061] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.193347][ T6061] XFS (loop4): Ending clean mount [ 97.216007][ T5616] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.408737][ T5614] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.467547][ T5740] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.627986][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 97.642273][ T5740] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.642346][ T5740] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 97.659764][ T5348] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 97.672774][ T5740] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.680396][ T6104] loop0: detected capacity change from 0 to 1024 [ 97.690627][ T5740] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.712876][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.712923][ T5740] usb 4-1: Product: syz [ 97.712959][ T5740] usb 4-1: Manufacturer: syz [ 97.712977][ T5740] usb 4-1: SerialNumber: syz [ 97.840623][ T5348] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 97.856107][ T5348] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 97.856192][ T5348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.856245][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.870871][ T6104] hfsplus: walked past end of dir [ 97.924043][ T5348] usb 3-1: config 0 descriptor?? [ 97.932566][ T6098] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.183515][ T6114] loop0: detected capacity change from 0 to 128 [ 98.190764][ T5718] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.223790][ T6116] loop1: detected capacity change from 0 to 64 [ 98.250813][ T5740] usb 4-1: unit 0 not found! [ 98.342318][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 98.344274][ T5718] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.345661][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.345688][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.345722][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.358360][ T5718] usb 5-1: config 0 descriptor?? [ 98.382338][ T5718] hub 5-1:0.0: USB hub found [ 98.408989][ T5348] hid-rmi 0003:17EF:6085.0002: collection stack underflow [ 98.418030][ T5348] hid-rmi 0003:17EF:6085.0002: item 0 4 0 12 parsing failed [ 98.429256][ T5348] hid-rmi 0003:17EF:6085.0002: parse failed [ 98.439861][ T5348] hid-rmi 0003:17EF:6085.0002: probe with driver hid-rmi failed with error -22 [ 98.566039][ T5740] usb 4-1: USB disconnect, device number 3 [ 98.609673][ T5718] hub 5-1:0.0: 26 ports detected [ 98.610160][ T5718] hub 5-1:0.0: insufficient power available to use all downstream ports [ 98.690739][ T5348] usb 3-1: USB disconnect, device number 2 [ 98.717089][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.845592][ T5718] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 98.890414][ T5718] usbhid 5-1:0.0: can't add hid device: -71 [ 98.890564][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.914754][ T5718] usb 5-1: USB disconnect, device number 3 [ 99.294251][ T6133] loop0: detected capacity change from 0 to 512 [ 99.312677][ T6133] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 99.382743][ T6133] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.130: corrupted in-inode xattr: e_value size too large [ 99.382823][ T6133] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.387594][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 99.387617][ C0] EXT4-fs (loop0): initial error at time 1786976883: ext4_iget_extra_inode:5210: inode 15 [ 99.387646][ C0] EXT4-fs (loop0): last error at time 1786976883: ext4_iget_extra_inode:5210: inode 15 [ 99.396340][ T13] IPVS: starting estimator thread 0... [ 99.405557][ T6133] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.130: couldn't read orphan inode 15 (err -117) [ 99.405590][ T6133] loop0: lost filesystem error report for type 5 error -117 [ 99.437956][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.557574][ T6141] IPVS: using max 30 ests per chain, 72000 per kthread [ 99.620643][ T6145] loop1: detected capacity change from 0 to 4096 [ 99.806115][ T6145] ntfs3(loop1): ino=b, mi_enum_attr [ 99.806163][ T6145] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 99.807075][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.830705][ T6145] ntfs3(loop1): Failed to load $Extend (-22). [ 99.830749][ T6145] ntfs3(loop1): Failed to initialize $Extend. [ 100.601713][ T6182] loop0: detected capacity change from 0 to 256 [ 100.625108][ T6182] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 100.852610][ T6186] loop2: detected capacity change from 0 to 128 [ 100.874796][ T6186] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.913199][ T6186] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.080073][ T6171] loop4: detected capacity change from 0 to 32768 [ 101.114108][ T6171] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.318939][ T6171] XFS (loop4): Ending clean mount [ 101.477592][ T6208] 9p: p9: multiple sources not supported [ 101.505820][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.784673][ T6217] loop4: detected capacity change from 0 to 512 [ 101.830710][ T6217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.035349][ T6217] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.162: Unimplemented hash flags: 0x0001 [ 102.066334][ T6217] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.162: Corrupt directory, running e2fsck is recommended [ 102.095460][ T6223] loop2: detected capacity change from 0 to 256 [ 102.132163][ T6223] exFAT-fs (loop2): error, no upcase table entry. Please run fsck [ 102.132219][ T6223] exFAT-fs (loop2): Filesystem has been set read-only [ 102.132808][ T6223] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 102.160385][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 102.442587][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.724138][ T6239] loop4: detected capacity change from 0 to 4096 [ 102.786957][ T6246] loop0: detected capacity change from 0 to 512 [ 102.807165][ T6202] loop1: detected capacity change from 0 to 32768 [ 102.865597][ T6246] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 102.865669][ T6244] loop3: detected capacity change from 0 to 4096 [ 102.885056][ T6239] NILFS (loop4): invalid segment: Checksum error in segment payload [ 102.885111][ T6239] NILFS (loop4): trying rollback from an earlier position [ 102.901569][ T6246] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.178: corrupted in-inode xattr: e_value size too large [ 102.901606][ T6246] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.916802][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 102.916828][ C1] EXT4-fs (loop0): initial error at time 1786976887: ext4_iget_extra_inode:5210: inode 15 [ 102.916862][ C1] EXT4-fs (loop0): last error at time 1786976887: ext4_iget_extra_inode:5210: inode 15 [ 102.959451][ T6246] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.178: couldn't read orphan inode 15 (err -117) [ 102.959506][ T6246] loop0: lost filesystem error report for type 5 error -117 [ 102.990677][ T6246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.000603][ T6202] jfs_mkdir: dtInsert returned -EIO [ 103.000622][ T6202] ERROR: (device loop1): jfs_mkdir: [ 103.000622][ T6202] [ 103.019137][ T6202] ERROR: (device loop1): remounting filesystem as read-only [ 103.084173][ T6239] NILFS (loop4): recovery complete [ 103.159096][ T6251] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.184620][ T6244] ntfs3(loop3): Failed to load $Extend (-22). [ 103.184683][ T6244] ntfs3(loop3): Failed to initialize $Extend. [ 103.323745][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.013254][ T6272] loop0: detected capacity change from 0 to 512 [ 104.363582][ T6282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.577927][ T6291] block nbd0: not configured, cannot reconfigure [ 104.874601][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 104.886830][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 104.897624][ T6306] netlink: 'syz.0.204': attribute type 23 has an invalid length. [ 104.912979][ T6305] Zero length message leads to an empty skb [ 104.987595][ T48] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 105.089127][ T6308] loop3: detected capacity change from 0 to 512 [ 105.140444][ T48] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 105.141941][ T48] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 105.141966][ T48] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 105.141984][ T48] usb 5-1: config 150 has no interface number 0 [ 105.142021][ T48] usb 5-1: config 150 interface 204 has no altsetting 0 [ 105.147555][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.147579][ T48] usb 5-1: Product: syz [ 105.147592][ T48] usb 5-1: Manufacturer: syz [ 105.147605][ T48] usb 5-1: SerialNumber: syz [ 105.263064][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.263231][ T6308] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.405510][ T6302] loop1: detected capacity change from 0 to 40427 [ 105.432901][ T6302] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 105.440378][ T6302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.449103][ T6302] F2FS-fs (loop1): Image doesn't support compression [ 105.455942][ T6302] F2FS-fs (loop1): build fault injection rate: 690 [ 105.459523][ T48] xr_serial 5-1:150.204: skipping garbage [ 105.459576][ T48] xr_serial 5-1:150.204: xr_serial converter detected [ 105.475786][ T6302] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 105.487506][ T6302] F2FS-fs (loop1): invalid crc value [ 105.490829][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.629413][ T6280] loop2: detected capacity change from 0 to 32768 [ 105.664457][ T6280] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 105.683336][ T6302] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.748045][ T6280] XFS (loop2): Ending clean mount [ 105.778428][ T6302] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 105.778478][ T6302] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 105.779484][ T6302] F2FS-fs (loop1): Start checkpoint disabled! [ 105.827659][ T48] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 105.827744][ T48] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 105.838290][ T6302] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 105.862567][ T6302] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.862633][ T6302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 105.888011][ T48] usb 5-1: USB disconnect, device number 4 [ 105.965799][ T5616] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 106.017968][ T6330] capability: warning: `syz.0.210' uses 32-bit capabilities (legacy support in use) [ 106.025774][ T48] xr_serial 5-1:150.204: device disconnected [ 106.098788][ T42] kworker/u8:2: attempt to access beyond end of device [ 106.098788][ T42] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.104849][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 106.104879][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.104891][ T42] Workqueue: writeback wb_workfn (flush-7:1) [ 106.104928][ T42] Call Trace: [ 106.104937][ T42] [ 106.104949][ T42] dump_stack_lvl+0xe8/0x150 [ 106.104979][ T42] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 106.105008][ T42] f2fs_write_end_bio+0x1211/0x16e0 [ 106.105038][ T42] ? blkg_put+0x22/0x240 [ 106.105074][ T42] __submit_merged_bio+0x258/0x6a0 [ 106.105095][ T42] ? rcu_is_watching+0x16/0xb0 [ 106.105123][ T42] __submit_merged_write_cond+0x3c9/0x4e0 [ 106.105155][ T42] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 106.105213][ T42] f2fs_write_data_pages+0x2a27/0x36f0 [ 106.105275][ T42] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.105313][ T42] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 106.105374][ T42] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 106.105414][ T42] ? __lock_acquire+0x6df/0x2e50 [ 106.105449][ T42] ? set_shrinker_bit+0x7c/0x350 [ 106.105477][ T42] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.105504][ T42] do_writepages+0x338/0x560 [ 106.105536][ T42] ? reacquire_held_locks+0x117/0x1a0 [ 106.105557][ T42] ? writeback_sb_inodes+0x450/0x1b00 [ 106.105581][ T42] __writeback_single_inode+0x136/0x1220 [ 106.105604][ T42] ? do_raw_spin_unlock+0xf5/0x200 [ 106.105633][ T42] writeback_sb_inodes+0x9de/0x1b00 [ 106.105650][ T42] ? __lock_acquire+0x6df/0x2e50 [ 106.105684][ T42] ? lock_acquire+0x115/0x350 [ 106.105709][ T42] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 106.105769][ T42] ? rcu_is_watching+0x16/0xb0 [ 106.105791][ T42] ? queue_io+0x2d3/0x470 [ 106.105813][ T42] wb_writeback+0x41c/0xad0 [ 106.105844][ T42] ? queue_io+0x1f1/0x470 [ 106.105867][ T42] ? __pfx_wb_writeback+0x10/0x10 [ 106.105893][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.105933][ T42] wb_workfn+0x431/0x10f0 [ 106.105976][ T42] ? __pfx_wb_workfn+0x10/0x10 [ 106.106003][ T42] ? rcu_is_watching+0x16/0xb0 [ 106.106025][ T42] ? trace_hrtimer_start+0x82/0x200 [ 106.106057][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.106091][ T42] ? lock_acquire+0x115/0x350 [ 106.106118][ T42] ? rcu_is_watching+0x16/0xb0 [ 106.106141][ T42] ? process_scheduled_works+0x97a/0x1630 [ 106.106166][ T42] process_scheduled_works+0xc3d/0x1630 [ 106.106229][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.106260][ T42] ? assign_work+0x3cf/0x5d0 [ 106.106289][ T42] worker_thread+0xa47/0xfb0 [ 106.106328][ T42] ? __kthread_parkme+0x71/0x1f0 [ 106.106365][ T42] kthread+0x38b/0x480 [ 106.106384][ T42] ? __pfx_worker_thread+0x10/0x10 [ 106.106406][ T42] ? __pfx_kthread+0x10/0x10 [ 106.106427][ T42] ret_from_fork+0x514/0xb70 [ 106.106449][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 106.106477][ T42] ? __switch_to+0xc89/0x1420 [ 106.106505][ T42] ? __pfx_kthread+0x10/0x10 [ 106.106525][ T42] ret_from_fork_asm+0x1a/0x30 [ 106.106569][ T42] [ 106.128117][ T42] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 107.284840][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 107.284933][ T30] audit: type=1326 audit(1786976891.514:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.318880][ T6356] loop1: detected capacity change from 0 to 2048 [ 107.319165][ T30] audit: type=1326 audit(1786976891.554:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.352071][ T30] audit: type=1326 audit(1786976891.554:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.352129][ T30] audit: type=1326 audit(1786976891.554:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.352174][ T30] audit: type=1326 audit(1786976891.554:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.352217][ T30] audit: type=1326 audit(1786976891.554:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.352259][ T30] audit: type=1326 audit(1786976891.554:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.358867][ T30] audit: type=1326 audit(1786976891.584:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.358920][ T30] audit: type=1326 audit(1786976891.584:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.358959][ T30] audit: type=1326 audit(1786976891.584:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.4.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f53c0d9e0d9 code=0x7ffc0000 [ 107.388414][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.403826][ T5740] hid-generic 004C:0007:0004.0003: item fetching failed at offset 5/6 [ 107.415168][ T5740] hid-generic 004C:0007:0004.0003: probe with driver hid-generic failed with error -22 [ 107.453397][ T6356] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 107.453552][ T6356] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 107.453565][ T6356] UDF-fs: Scanning with blocksize 512 failed [ 107.482238][ T6356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.570933][ T48] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.571947][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.571998][ T48] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.572020][ T48] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.574445][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.574465][ T48] usb 1-1: Product: syz [ 107.574478][ T48] usb 1-1: Manufacturer: syz [ 107.574492][ T48] usb 1-1: SerialNumber: syz [ 107.590276][ T48] hub 1-1:1.0: bad descriptor, ignoring hub [ 107.590302][ T48] hub 1-1:1.0: probe with driver hub failed with error -5 [ 107.986170][ T48] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 108.065299][ T6374] loop2: detected capacity change from 0 to 512 [ 108.083935][ T6371] loop4: detected capacity change from 0 to 164 [ 108.093134][ T6374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.093156][ T6374] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.164714][ T6374] EXT4-fs (loop2): 1 truncate cleaned up [ 108.174515][ T6374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.234522][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.235051][ T48] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 108.682119][ T6392] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 108.740801][ T6396] loop2: detected capacity change from 0 to 64 [ 108.804995][ T5348] usb 1-1: USB disconnect, device number 2 [ 108.843593][ T5348] usblp0: removed [ 108.900219][ T5718] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 109.027638][ T5619] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.058933][ T5718] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 109.070189][ T5718] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.081930][ T5718] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.088786][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.104058][ T5718] usb 4-1: config 0 descriptor?? [ 109.188228][ T5619] usb 5-1: Using ep0 maxpacket: 16 [ 109.194648][ T5619] usb 5-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.40 [ 109.221632][ T5619] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 9038, setting to 1024 [ 109.221734][ T5619] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.221765][ T5619] usb 5-1: config 1 interface 0 has no altsetting 0 [ 109.257223][ T5619] usb 5-1: language id specifier not provided by device, defaulting to English [ 109.266567][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.280458][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.280504][ T5619] usb 5-1: Product: syz [ 109.280543][ T5619] usb 5-1: Manufacturer: 栓회ꜟᵾ֩䦪뉄ϵ䔓튝鈰ࠟ鱈뱎ꍃ등穢ᚘ荏䶪滋뜍ႈ⟝ࡶᨷ쌐햷㆒䴴䬴攩쾚䧍鷘虷 [ 109.280567][ T5619] usb 5-1: SerialNumber: syz [ 109.418448][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 109.421721][ T6414] loop2: detected capacity change from 0 to 256 [ 109.434751][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 109.445931][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.445975][ T10] usb 2-1: config 0 has no interface number 0 [ 109.463637][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.463717][ T10] usb 2-1: Product: syz [ 109.463758][ T10] usb 2-1: Manufacturer: syz [ 109.463777][ T10] usb 2-1: SerialNumber: syz [ 109.493588][ T10] usb 2-1: config 0 descriptor?? [ 109.503830][ T5616] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 109.517532][ T5616] FAT-fs (loop2): Filesystem has been set read-only [ 109.541354][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 109.558743][ T5616] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 109.572852][ T5718] prodikeys 0003:041E:2801.0004: reserved main item tag 0xd [ 109.583753][ T5718] prodikeys 0003:041E:2801.0004: unknown global tag 0xe [ 109.583935][ T5718] prodikeys 0003:041E:2801.0004: item 0 2 1 14 parsing failed [ 109.602102][ T5718] prodikeys 0003:041E:2801.0004: hid parse failed [ 109.602276][ T5718] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 109.624665][ T5619] usbhid 5-1:1.0: can't add hid device: -71 [ 109.624819][ T5619] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 109.664323][ T5619] usb 5-1: USB disconnect, device number 5 [ 109.831331][ T5348] usb 4-1: USB disconnect, device number 4 [ 110.149908][ T10] gspca_spca1528: reg_w err -71 [ 110.167923][ T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 110.172358][ T10] usb 2-1: USB disconnect, device number 2 [ 110.214822][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.301904][ T6416] loop0: detected capacity change from 0 to 32768 [ 110.635341][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.746944][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.757641][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.767978][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.788116][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.799148][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.900412][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.172588][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.548511][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 111.577508][ T5348] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.738288][ T5348] usb 4-1: Using ep0 maxpacket: 16 [ 111.745304][ T5348] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.758501][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.758555][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.758594][ T5348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.758642][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.815041][ T5348] usb 4-1: config 0 descriptor?? [ 111.951236][ T6459] loop0: detected capacity change from 0 to 1024 [ 111.971297][ T6459] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.995411][ T42] bridge_slave_1: left allmulticast mode [ 111.995486][ T42] bridge_slave_1: left promiscuous mode [ 112.014298][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.056972][ T42] bridge_slave_0: left allmulticast mode [ 112.057040][ T42] bridge_slave_0: left promiscuous mode [ 112.058300][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.087330][ T6459] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #3: block 1: comm syz.0.269: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.094424][ T6459] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.096536][ T6459] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.269: Failed to acquire dquot type 0 [ 112.096566][ T6459] loop0: lost filesystem error report for type 5 error -117 [ 112.097534][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 112.097555][ C0] EXT4-fs (loop0): initial error at time 1786976896: ext4_map_blocks:832: inode 3: block 1 [ 112.097592][ C0] EXT4-fs (loop0): last error at time 1786976896: ext4_acquire_dquot:7069 [ 112.106317][ T6459] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.269: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.106350][ T6459] loop0: lost filesystem error report for type 5 error -117 [ 112.140154][ T6459] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.269: Invalid inode bitmap blk 0 in block_group 0 [ 112.140188][ T6459] loop0: lost filesystem error report for type 5 error -117 [ 112.140496][ T6459] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 112.140515][ T6459] loop0: lost filesystem error report for type 5 error -117 [ 112.140767][ T6459] EXT4-fs (loop0): 1 orphan inode deleted [ 112.149663][ T6459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.153453][ T3396] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.194727][ T3396] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 0 [ 112.265242][ T6459] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 112.277787][ T5348] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 112.285290][ T5348] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 112.315132][ T5348] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input5 [ 112.399311][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.492834][ T5348] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 112.563538][ T5348] usb 4-1: USB disconnect, device number 5 [ 112.879734][ T5624] Bluetooth: hci2: command tx timeout [ 112.923119][ T6473] fido_id[6473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 113.153812][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.185338][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.215606][ T42] bond0 (unregistering): Released all slaves [ 113.248935][ T6465] loop4: detected capacity change from 0 to 40427 [ 113.268651][ T6465] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.268705][ T6465] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.287716][ T6465] F2FS-fs (loop4): invalid crc value [ 113.497043][ T6479] netlink: 168 bytes leftover after parsing attributes in process `syz.1.276'. [ 113.803699][ T6465] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 113.863652][ T9] bridge0: entered promiscuous mode [ 113.905747][ T6465] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.925000][ T6465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.931380][ T6500] loop3: detected capacity change from 0 to 512 [ 113.976380][ T6500] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.282: corrupted in-inode xattr: invalid ea_ino [ 113.976927][ T6500] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.977643][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 113.977664][ C0] EXT4-fs (loop3): initial error at time 1786976898: ext4_iget_extra_inode:5210: inode 15 [ 113.977693][ C0] EXT4-fs (loop3): last error at time 1786976898: ext4_iget_extra_inode:5210: inode 15 [ 113.982008][ T6500] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.282: couldn't read orphan inode 15 (err -117) [ 113.982037][ T6500] loop3: lost filesystem error report for type 5 error -117 [ 114.075366][ T6500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.141057][ T6500] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 114.141129][ T6500] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 114.146596][ T6500] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.282: Corrupt directory, running e2fsck is recommended [ 114.258943][ T6509] loop0: detected capacity change from 0 to 4096 [ 114.340582][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.949102][ T42] hsr_slave_0: left promiscuous mode [ 114.957525][ T5624] Bluetooth: hci2: command tx timeout [ 114.965816][ T42] hsr_slave_1: left promiscuous mode [ 114.974398][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.983329][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.003820][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.003863][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.041718][ T42] veth1_macvtap: left promiscuous mode [ 115.047462][ T42] veth0_macvtap: left promiscuous mode [ 115.053236][ T42] veth1_vlan: left promiscuous mode [ 115.062014][ T42] veth0_vlan: left promiscuous mode [ 115.192822][ T5718] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.340583][ T5718] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 115.341900][ T5718] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 115.341927][ T5718] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 115.341944][ T5718] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 115.341962][ T5718] usb 4-1: config 220 has no interface number 2 [ 115.342019][ T5718] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 115.342044][ T5718] usb 4-1: config 220 interface 0 has no altsetting 0 [ 115.342061][ T5718] usb 4-1: config 220 interface 76 has no altsetting 0 [ 115.342077][ T5718] usb 4-1: config 220 interface 1 has no altsetting 0 [ 115.347286][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.347309][ T5718] usb 4-1: Product: syz [ 115.347323][ T5718] usb 4-1: Manufacturer: syz [ 115.347336][ T5718] usb 4-1: SerialNumber: syz [ 115.382749][ T6526] loop1: detected capacity change from 0 to 4096 [ 115.468733][ T6533] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.709862][ T5718] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 115.709921][ T5718] uvcvideo 4-1:220.0: No valid video chain found. [ 115.710026][ T5718] usb 4-1: selecting invalid altsetting 0 [ 115.794057][ T5718] usb 4-1: selecting invalid altsetting 0 [ 115.794118][ T5718] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 115.839700][ T5718] usb 4-1: USB disconnect, device number 6 [ 116.046095][ T42] team0 (unregistering): Port device team_slave_1 removed [ 116.085963][ T42] team0 (unregistering): Port device team_slave_0 removed [ 116.211030][ T6539] loop1: detected capacity change from 0 to 32768 [ 116.221744][ T6539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.294 (6539) [ 116.243442][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 116.266592][ T6539] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.266662][ T6539] BTRFS info (device loop1): using crc32c checksum algorithm [ 116.472990][ T6539] BTRFS info (device loop1): enabling ssd optimizations [ 116.483837][ T6539] BTRFS info (device loop1): turning on flush-on-commit [ 116.491547][ T6539] BTRFS info (device loop1): enabling free space tree [ 116.498661][ T6539] BTRFS info (device loop1): enabling auto defrag [ 116.505299][ T6539] BTRFS info (device loop1): use lzo compression, level 1 [ 116.513916][ T6539] BTRFS info (device loop1): max_inline set to 4096 [ 116.819224][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 116.890094][ T6531] team0: Device vlan2 is already an upper device of the team interface [ 117.043798][ T52] Bluetooth: hci2: command tx timeout [ 117.127690][ T6567] loop3: detected capacity change from 0 to 32768 [ 117.662050][ T5618] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.081099][ T42] IPVS: stop unused estimator thread 0... [ 118.266457][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.292166][ T5748] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.305633][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.313419][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.323350][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.331138][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.344671][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.352720][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.360310][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.367983][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.375583][ T5740] hid-generic 0006:0008:0001.0006: unknown main item tag 0x0 [ 118.408766][ T5740] hid-generic 0006:0008:0001.0006: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 118.467585][ T5748] usb 1-1: Using ep0 maxpacket: 8 [ 118.473655][ T5748] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 118.485424][ T5748] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 118.485473][ T5748] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.485526][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.565466][ T5748] usb 1-1: config 0 descriptor?? [ 118.605314][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 118.715089][ T6610] fido_id[6610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.983215][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.984971][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.985140][ T6425] bridge_slave_0: entered allmulticast mode [ 118.991858][ T6425] bridge_slave_0: entered promiscuous mode [ 119.002473][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.004300][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.004448][ T6425] bridge_slave_1: entered allmulticast mode [ 119.011572][ T6425] bridge_slave_1: entered promiscuous mode [ 119.037025][ T6623] loop3: detected capacity change from 0 to 128 [ 119.070185][ T5748] lenovo 0003:17EF:60A4.0007: reserved main item tag 0xd [ 119.075124][ T6623] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.117875][ T5624] Bluetooth: hci2: command tx timeout [ 119.140984][ T6623] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.159767][ T5748] lenovo 0003:17EF:60A4.0007: hidraw0: USB HID v0.7f Device [HID 17ef:60a4] on usb-dummy_hcd.0-1/input0 [ 119.166166][ T6623] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.255242][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.271849][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.287304][ T5748] usb 1-1: USB disconnect, device number 3 [ 119.525600][ T6425] team0: Port device team_slave_0 added [ 119.539660][ T6425] team0: Port device team_slave_1 added [ 119.544203][ T6630] fido_id[6630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 119.676206][ T6623] EXT4-fs: Ignoring removed nobh option [ 119.686853][ T6623] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.686881][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.697608][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.697637][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.708716][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.708732][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.708755][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.836514][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.050585][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 120.115127][ T6425] hsr_slave_0: entered promiscuous mode [ 120.122897][ T6425] hsr_slave_1: entered promiscuous mode [ 120.123810][ T6425] debugfs: 'hsr0' already exists in 'hsr' [ 120.123830][ T6425] Cannot create hsr debugfs directory [ 120.323687][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 120.323740][ T6654] netlink: 44 bytes leftover after parsing attributes in process `syz.3.327'. [ 120.545167][ T6662] loop0: detected capacity change from 0 to 512 [ 120.549968][ T6662] EXT4-fs: Ignoring removed nobh option [ 120.552703][ T6662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.605116][ T6662] EXT4-fs (loop0): 1 truncate cleaned up [ 120.608817][ T6662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.192445][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.377701][ T6425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.431630][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.448608][ T6425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.464300][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.520402][ T6425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.543318][ T6697] loop3: detected capacity change from 0 to 256 [ 121.580199][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.587359][ T6425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.619747][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.640150][ T6697] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 122.337329][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.504127][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.550315][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.550466][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.585066][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.585195][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.624572][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 122.745639][ T6729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.352'. [ 122.797208][ T6729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.352'. [ 122.960408][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.818346][ T6747] loop3: detected capacity change from 0 to 4096 [ 123.956712][ T6747] ntfs3(loop3): Failed to load $Extend (-22). [ 123.956773][ T6747] ntfs3(loop3): Failed to initialize $Extend. [ 124.324707][ T6734] loop0: detected capacity change from 0 to 32768 [ 124.335922][ T6734] BTRFS warning: excessive commit interval 43283, use with care [ 124.381176][ T6734] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.353 (6734) [ 124.412607][ T6734] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.412667][ T6734] BTRFS info (device loop0): using sha256 checksum algorithm [ 124.494228][ T6735] loop4: detected capacity change from 0 to 32768 [ 124.536769][ T6735] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.354 (6735) [ 124.595860][ T6774] loop3: detected capacity change from 0 to 256 [ 124.604927][ T6774] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.632943][ T6735] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 124.633011][ T6735] BTRFS info (device loop4): using blake2b checksum algorithm [ 124.670040][ T6734] BTRFS info (device loop0): rebuilding free space tree [ 124.870788][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 124.921984][ T6735] BTRFS info (device loop4): enabling ssd optimizations [ 124.927214][ T6735] BTRFS info (device loop4): turning on async discard [ 124.927240][ T6735] BTRFS info (device loop4): enabling free space tree [ 124.927257][ T6735] BTRFS info (device loop4): use lzo compression, level 1 [ 125.032577][ T6734] BTRFS info (device loop0): turning on sync discard [ 125.041721][ T6734] BTRFS info (device loop0): enabling free space tree [ 125.048743][ T6734] BTRFS info (device loop0): force clearing of disk cache [ 125.056075][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 125.056095][ T30] audit: type=1800 audit(1786976909.284:31): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.354" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 125.191474][ T6759] loop1: detected capacity change from 0 to 32768 [ 125.210903][ T6759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.357 (6759) [ 125.266533][ T6759] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.266589][ T6759] BTRFS info (device loop1): using sha256 checksum algorithm [ 125.320120][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.383749][ T5614] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.579787][ T6759] BTRFS info (device loop1): enabling ssd optimizations [ 125.579861][ T6759] BTRFS info (device loop1): turning on async discard [ 125.579899][ T6759] BTRFS info (device loop1): enabling free space tree [ 125.906132][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.973804][ T5617] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.108125][ T6829] loop3: detected capacity change from 0 to 512 [ 126.140719][ T6829] EXT4-fs: Ignoring removed nobh option [ 126.184433][ T6829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.217234][ T6829] EXT4-fs (loop3): 1 truncate cleaned up [ 126.241737][ T6829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.773869][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.004121][ T6425] veth0_vlan: entered promiscuous mode [ 127.110055][ T6425] veth1_vlan: entered promiscuous mode [ 127.273368][ T6425] veth0_macvtap: entered promiscuous mode [ 127.301586][ T6425] veth1_macvtap: entered promiscuous mode [ 127.452196][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.562445][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.657847][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.663750][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.740353][ T6855] loop3: detected capacity change from 0 to 1024 [ 127.741880][ T6856] F2FS-fs: Conflicting test_dummy_encryption options [ 127.814530][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.888017][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.185494][ T1026] IPVS: starting estimator thread 0... [ 128.208332][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.208362][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.297576][ T6861] IPVS: using max 27 ests per chain, 64800 per kthread [ 128.383650][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.383702][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.052962][ T6888] loop1: detected capacity change from 0 to 256 [ 129.369961][ T6892] loop4: detected capacity change from 0 to 8192 [ 129.583827][ T6903] openvswitch: netlink: Missing key (keys=40, expected=100) [ 129.762258][ T6909] netlink: 36 bytes leftover after parsing attributes in process `syz.4.395'. [ 130.102457][ T5748] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 130.157591][ T5348] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.268762][ T5748] usb 6-1: Using ep0 maxpacket: 16 [ 130.272140][ T5748] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 130.274490][ T5748] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.274527][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.298273][ T5748] usb 6-1: config 0 descriptor?? [ 130.337743][ T5348] usb 2-1: Using ep0 maxpacket: 32 [ 130.338718][ T5348] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 130.341154][ T5348] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 130.341175][ T5348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.341192][ T5348] usb 2-1: config 0 has no interface number 0 [ 130.341255][ T5348] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.347052][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.347076][ T5348] usb 2-1: Product: syz [ 130.347090][ T5348] usb 2-1: Manufacturer: syz [ 130.347103][ T5348] usb 2-1: SerialNumber: syz [ 130.363315][ T5348] usb 2-1: config 0 descriptor?? [ 130.448988][ T5348] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input7 [ 130.501287][ T6927] loop0: detected capacity change from 0 to 1024 [ 130.610006][ T5348] usb 2-1: USB disconnect, device number 3 [ 130.797103][ T5748] hid_parser_main: 8 callbacks suppressed [ 130.797170][ T5748] logitech 0003:046D:CA03.0008: unknown main item tag 0x2 [ 130.797210][ T5748] logitech 0003:046D:CA03.0008: unknown main item tag 0x6 [ 130.797279][ T5748] logitech 0003:046D:CA03.0008: ignoring exceeding usage max [ 130.819166][ T5748] logitech 0003:046D:CA03.0008: hidraw0: USB HID vcc.5e Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0 [ 130.819202][ T5748] logitech 0003:046D:CA03.0008: no inputs found [ 130.994829][ T5348] usb 6-1: USB disconnect, device number 2 [ 131.044154][ T6931] loop0: detected capacity change from 0 to 32768 [ 131.052235][ T6931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.405 (6931) [ 131.078033][ T6931] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.088805][ T6931] BTRFS info (device loop0): using sha256 checksum algorithm [ 131.141229][ T6931] BTRFS info (device loop0): rebuilding free space tree [ 131.162493][ T6931] BTRFS info (device loop0): enabling ssd optimizations [ 131.162556][ T6931] BTRFS info (device loop0): using spread ssd allocation scheme [ 131.162971][ T6931] BTRFS info (device loop0): turning on async discard [ 131.162990][ T6931] BTRFS info (device loop0): enabling free space tree [ 131.163005][ T6931] BTRFS info (device loop0): force clearing of disk cache [ 131.370001][ T5617] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.446903][ T6952] netlink: 'syz.1.406': attribute type 15 has an invalid length. [ 131.446987][ T6952] netlink: 'syz.1.406': attribute type 7 has an invalid length. [ 131.447016][ T6952] netlink: 52 bytes leftover after parsing attributes in process `syz.1.406'. [ 132.095505][ T6967] loop0: detected capacity change from 0 to 2048 [ 132.132087][ T6967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.296878][ T30] audit: type=1800 audit(1786976916.524:32): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.413" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 132.467637][ T5711] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.547375][ T6982] loop3: detected capacity change from 0 to 256 [ 132.627625][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 132.633716][ T5711] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 132.644915][ T5711] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 132.644970][ T5711] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.645022][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.645063][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.692357][ T5711] usb 2-1: config 0 descriptor?? [ 132.787568][ T5619] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.937643][ T5619] usb 5-1: Using ep0 maxpacket: 32 [ 132.943640][ T5619] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.954663][ T5619] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.954745][ T5619] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.981665][ T5619] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.981713][ T5619] usb 5-1: Product: syz [ 132.981779][ T5619] usb 5-1: Manufacturer: syz [ 133.029995][ T5619] hub 5-1:4.0: USB hub found [ 133.042317][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042422][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.256708][ T5619] hub 5-1:4.0: 6 ports detected [ 133.262490][ T5619] hub 5-1:4.0: insufficient power available to use all downstream ports [ 133.319011][ T5711] hid-alps 0003:044E:120B.0009: failed to read command (-71) [ 133.326772][ T5711] hid-alps 0003:044E:120B.0009: failed U1_DEV_CTRL_1 (-71) [ 133.353492][ T5711] hid-alps 0003:044E:120B.0009: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.1-1/input0 [ 133.375159][ T5711] usb 2-1: USB disconnect, device number 4 [ 133.433686][ T6986] loop0: detected capacity change from 0 to 32768 [ 133.444901][ T6986] xfs: Deprecated parameter 'attr2' [ 133.455328][ T6986] XFS: attr2 mount option is deprecated. [ 133.458698][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 133.470294][ T5619] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 133.508486][ T6986] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 133.521737][ T6986] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 133.551606][ T5619] usb 5-1: USB disconnect, device number 6 [ 133.563842][ T6997] fido_id[6997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 133.618150][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 133.618933][ T25] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 133.620035][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.620069][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.639148][ T25] usb 6-1: config 0 descriptor?? [ 133.696003][ T6986] XFS (loop0): Ending clean mount [ 133.743759][ T6986] XFS (loop0): Quotacheck needed: Please wait. [ 133.841186][ T6986] XFS (loop0): Quotacheck: Done. [ 133.904414][ T5617] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.097950][ T25] pantherlord 0003:0810:0001.000A: unknown global tag 0xd [ 134.098002][ T25] pantherlord 0003:0810:0001.000A: item 0 2 1 13 parsing failed [ 134.108099][ T25] pantherlord 0003:0810:0001.000A: parse failed [ 134.108174][ T25] pantherlord 0003:0810:0001.000A: probe with driver pantherlord failed with error -22 [ 134.312053][ T5619] usb 6-1: USB disconnect, device number 3 [ 135.030521][ T7015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.043528][ T7015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.093544][ T7015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.138946][ T7015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.146057][ T7015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.233486][ T7015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.263967][ T7015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.264135][ T7015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.271915][ T7047] loop5: detected capacity change from 0 to 256 [ 135.285671][ T7047] exfat: Deprecated parameter 'utf8' [ 135.285727][ T7047] exfat: Deprecated parameter 'utf8' [ 135.285820][ T7047] exfat: Deprecated parameter 'namecase' [ 135.353692][ T7015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.392626][ T7015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.392795][ T7015] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.400425][ T7047] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 135.426659][ T7015] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.503036][ T7015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.503198][ T7015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.531602][ T7015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.593258][ T7041] loop4: detected capacity change from 0 to 40427 [ 135.610712][ T7050] loop0: detected capacity change from 0 to 8 [ 135.634378][ T7041] F2FS-fs (loop4): invalid crc value [ 135.974578][ T7041] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 136.005698][ T7041] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 136.013572][ T7041] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 136.024530][ T7041] F2FS-fs (loop4): Start checkpoint disabled! [ 136.106354][ T7041] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 136.115860][ T7041] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 136.406684][ T7072] loop3: detected capacity change from 0 to 512 [ 136.474802][ T7072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.474927][ T7072] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.497647][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.745337][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.064539][ T7093] loop3: detected capacity change from 0 to 2048 [ 137.138509][ T7093] NILFS (loop3): invalid segment: Magic number mismatch [ 137.138567][ T7093] NILFS (loop3): trying rollback from an earlier position [ 137.181470][ T7093] NILFS (loop3): recovery complete [ 137.194363][ T7097] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.207533][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.277808][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.403984][ T7093] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=3, cno=3, offset=234, blocknr=0, vblocknr=107374182 [ 137.404057][ T7093] NILFS (loop3): error -2 preparing GC: cannot read source blocks [ 137.437588][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.522646][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.600727][ T7101] loop4: detected capacity change from 0 to 4096 [ 137.613820][ T7101] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 137.740427][ T7101] ntfs3(loop4): ino=19, mi_enum_attr [ 137.740490][ T7101] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 137.752946][ T7101] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 138.233085][ T7115] gretap0: entered promiscuous mode [ 138.241611][ T7115] vlan2: entered promiscuous mode [ 138.462916][ T7089] loop0: detected capacity change from 0 to 32768 [ 138.558076][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.560783][ T7089] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 138.753336][ T7123] netlink: 96 bytes leftover after parsing attributes in process `syz.5.470'. [ 138.794775][ T7080] loop1: detected capacity change from 0 to 65536 [ 138.855230][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 138.916689][ T7080] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.101863][ T7080] XFS (loop1): Ending clean mount [ 139.265680][ T7111] loop4: detected capacity change from 0 to 32768 [ 139.277576][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.332622][ T7111] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 139.353965][ T5618] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.368964][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.412426][ T7111] XFS (loop4): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 139.531605][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.587337][ T5614] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 139.599886][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.637496][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.964893][ T7182] loop3: detected capacity change from 0 to 512 [ 141.063592][ T7182] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.110130][ T7182] EXT4-fs (loop3): 1 truncate cleaned up [ 141.124866][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 141.145908][ T7182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.244151][ T7184] gretap0: entered promiscuous mode [ 141.273433][ T7190] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 141.301608][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.360533][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.437558][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.597963][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.687644][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.702849][ T7202] loop1: detected capacity change from 0 to 256 [ 141.745092][ T7202] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.745166][ T7202] FAT-fs (loop1): Filesystem has been set read-only [ 141.745279][ T7202] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.745313][ T7202] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.861384][ T5711] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.879171][ T5619] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.012219][ T5711] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 142.016757][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.016785][ T5711] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.016821][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.028882][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 142.032151][ T5619] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 142.036861][ T5619] usb 4-1: config 0 has no interfaces? [ 142.036900][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.048652][ T5619] usb 4-1: config 0 descriptor?? [ 142.282918][ T5719] usb 4-1: USB disconnect, device number 7 [ 142.483203][ T5711] gud 1-1:1.0: No supported pixel formats found [ 142.483266][ T5711] gud 1-1:1.0: probe with driver gud failed with error -22 [ 142.673103][ T5740] usb 1-1: USB disconnect, device number 4 [ 143.007036][ T7208] loop4: detected capacity change from 0 to 32768 [ 143.043600][ T7208] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.071836][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.500'. [ 143.254697][ T7208] XFS (loop4): Ending clean mount [ 143.508551][ T5718] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 143.592096][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.665760][ T5718] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 143.692716][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.492827][ T7267] loop4: detected capacity change from 0 to 512 [ 144.499383][ T7267] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.525575][ T7267] EXT4-fs (loop4): 1 truncate cleaned up [ 144.592271][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.662443][ T5718] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 144.679455][ T7267] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 144.702428][ T5718] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 144.712618][ T5718] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 144.925607][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.964198][ T5718] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 145.002521][ T5718] usb 6-1: USB disconnect, device number 4 [ 145.140299][ T7265] loop3: detected capacity change from 0 to 131072 [ 145.145741][ T5719] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.156442][ T7265] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 145.156488][ T7265] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 145.156528][ T7265] F2FS-fs (loop3): Test dummy encryption mode enabled [ 145.186060][ T7265] F2FS-fs (loop3): invalid crc value [ 145.204516][ T7265] F2FS-fs (loop3): invalid journal entries nats 15 sits 774 [ 145.204571][ T7265] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-22) [ 145.281739][ T7277] loop1: detected capacity change from 0 to 2048 [ 145.308138][ T7277] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 145.325024][ T7277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.329669][ T5719] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 145.331169][ T5719] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.331198][ T5719] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.331221][ T5719] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.331251][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.359919][ T5719] usb 1-1: config 0 descriptor?? [ 145.809699][ T7290] loop1: detected capacity change from 0 to 64 [ 145.977170][ T5719] hid-multitouch 0003:0EEF:72C4.000B: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 146.115931][ T5718] usb 1-1: USB disconnect, device number 5 [ 146.341239][ T7295] fido_id[7295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 146.399610][ T7301] loop1: detected capacity change from 0 to 1024 [ 146.413803][ T7301] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.460153][ T7301] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.522: lblock 2 mapped to illegal pblock 2 (length 1) [ 146.474572][ T7301] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 146.474943][ T7301] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 146.484323][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 146.484350][ C0] EXT4-fs (loop1): initial error at time 1786976930: ext4_map_blocks:790: inode 3: block 2 [ 146.484389][ C0] EXT4-fs (loop1): last error at time 1786976930: ext4_map_blocks:790: inode 3: block 2 [ 146.525072][ T7301] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.522: lblock 0 mapped to illegal pblock 48 (length 1) [ 146.525632][ T7301] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 146.540286][ T7301] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 146.540332][ T7301] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.522: Failed to acquire dquot type 0 [ 146.540373][ T7301] loop1: lost filesystem error report for type 5 error -117 [ 146.572430][ T7301] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 146.572474][ T7301] loop1: lost filesystem error report for type 5 error -117 [ 146.589804][ T7301] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.522: mark_inode_dirty error [ 146.622535][ T7301] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 146.622891][ T7301] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 146.623010][ T7301] EXT4-fs (loop1): 1 orphan inode deleted [ 146.650295][ T1100] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 146.650357][ T1100] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 146.651698][ T1100] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 146.651734][ T1100] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 0 [ 146.651753][ T1100] loop1: lost filesystem error report for type 5 error -117 [ 146.692948][ T7284] loop5: detected capacity change from 0 to 40427 [ 146.699149][ T7301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.758836][ T7284] F2FS-fs (loop5): invalid crc value [ 147.024392][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.035801][ T62] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.035855][ T62] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.036718][ T62] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 147.036754][ T62] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 147.036774][ T62] loop1: lost filesystem error report for type 5 error -117 [ 147.052822][ T5618] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 147.052853][ T5618] loop1: lost filesystem error report for type 5 error -117 [ 147.100145][ T5618] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 147.100172][ T5618] loop1: lost filesystem error report for type 5 error -117 [ 147.118617][ T5618] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 147.118648][ T5618] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.118965][ T5618] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 147.118990][ T5618] loop1: lost filesystem error report for type 5 error -117 [ 147.244909][ T7314] loop4: detected capacity change from 0 to 4096 [ 147.292972][ T7314] NILFS (loop4): invalid segment: Checksum error in segment payload [ 147.293028][ T7314] NILFS (loop4): trying rollback from an earlier position [ 147.444307][ T7314] NILFS (loop4): recovery complete [ 147.485143][ T7322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.528734][ T7284] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 147.678868][ T7284] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.824877][ T7317] loop0: detected capacity change from 0 to 40427 [ 147.836559][ T7317] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 147.844501][ T7317] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 147.863924][ T7317] F2FS-fs (loop0): Image doesn't support compression [ 147.885990][ T7317] F2FS-fs (loop0): invalid crc value [ 148.302108][ T7317] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 148.346443][ T7317] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 148.365498][ T7317] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 148.377768][ T7317] F2FS-fs (loop0): Start checkpoint disabled! [ 148.550071][ T7317] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 148.561354][ T7317] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 148.561405][ T7317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 148.900056][ T3396] kworker/u8:11: attempt to access beyond end of device [ 148.900056][ T3396] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.900161][ T3396] CPU: 1 UID: 0 PID: 3396 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 148.900183][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.900194][ T3396] Workqueue: writeback wb_workfn (flush-7:0) [ 148.900232][ T3396] Call Trace: [ 148.900240][ T3396] [ 148.900248][ T3396] dump_stack_lvl+0xe8/0x150 [ 148.900279][ T3396] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 148.900309][ T3396] f2fs_write_end_bio+0x1211/0x16e0 [ 148.900339][ T3396] ? blkg_put+0x22/0x240 [ 148.900378][ T3396] __submit_merged_bio+0x258/0x6a0 [ 148.900400][ T3396] ? rcu_is_watching+0x16/0xb0 [ 148.900429][ T3396] __submit_merged_write_cond+0x3c9/0x4e0 [ 148.900462][ T3396] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 148.900519][ T3396] f2fs_write_data_pages+0x2a27/0x36f0 [ 148.900584][ T3396] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.900624][ T3396] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 148.900694][ T3396] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 148.900737][ T3396] ? __lock_acquire+0x6df/0x2e50 [ 148.900778][ T3396] ? __lock_acquire+0x6df/0x2e50 [ 148.900797][ T3396] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.900824][ T3396] do_writepages+0x338/0x560 [ 148.900857][ T3396] ? reacquire_held_locks+0x117/0x1a0 [ 148.900879][ T3396] ? writeback_sb_inodes+0x450/0x1b00 [ 148.900904][ T3396] __writeback_single_inode+0x136/0x1220 [ 148.900927][ T3396] ? do_raw_spin_unlock+0xf5/0x200 [ 148.900958][ T3396] writeback_sb_inodes+0x9de/0x1b00 [ 148.900975][ T3396] ? __lock_acquire+0x6df/0x2e50 [ 148.901021][ T3396] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 148.901087][ T3396] ? rcu_is_watching+0x16/0xb0 [ 148.901109][ T3396] ? queue_io+0x2d3/0x470 [ 148.901132][ T3396] wb_writeback+0x41c/0xad0 [ 148.901163][ T3396] ? queue_io+0x1f1/0x470 [ 148.901188][ T3396] ? __pfx_wb_writeback+0x10/0x10 [ 148.901214][ T3396] ? do_raw_spin_lock+0x12b/0x2f0 [ 148.901257][ T3396] wb_workfn+0x431/0x10f0 [ 148.901303][ T3396] ? __pfx_wb_workfn+0x10/0x10 [ 148.901330][ T3396] ? rcu_is_watching+0x16/0xb0 [ 148.901353][ T3396] ? trace_hrtimer_start+0x82/0x200 [ 148.901386][ T3396] ? do_raw_spin_lock+0x12b/0x2f0 [ 148.901421][ T3396] ? lock_acquire+0x115/0x350 [ 148.901450][ T3396] ? rcu_is_watching+0x16/0xb0 [ 148.901474][ T3396] ? process_scheduled_works+0x97a/0x1630 [ 148.901506][ T3396] process_scheduled_works+0xc3d/0x1630 [ 148.901566][ T3396] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.901598][ T3396] ? assign_work+0x3cf/0x5d0 [ 148.901629][ T3396] worker_thread+0xa47/0xfb0 [ 148.901670][ T3396] ? __kthread_parkme+0x71/0x1f0 [ 148.901709][ T3396] kthread+0x38b/0x480 [ 148.901729][ T3396] ? __pfx_worker_thread+0x10/0x10 [ 148.901752][ T3396] ? __pfx_kthread+0x10/0x10 [ 148.901773][ T3396] ret_from_fork+0x514/0xb70 [ 148.901796][ T3396] ? __pfx_ret_from_fork+0x10/0x10 [ 148.901825][ T3396] ? __switch_to+0xc89/0x1420 [ 148.901854][ T3396] ? __pfx_kthread+0x10/0x10 [ 148.901875][ T3396] ret_from_fork_asm+0x1a/0x30 [ 148.901921][ T3396] [ 148.903314][ T3396] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 148.924456][ T5711] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 149.081991][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 149.095770][ T5711] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 149.111782][ T5711] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 149.111817][ T5711] usb 6-1: config 0 interface 0 has no altsetting 0 [ 149.111854][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.120189][ T5711] usb 6-1: config 0 descriptor?? [ 149.591625][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.591843][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.591889][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.591919][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.591948][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.591977][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.592007][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.592036][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.592065][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.592094][ T5711] logitech 0003:046D:C626.000C: unknown main item tag 0x0 [ 149.689337][ T5711] logitech 0003:046D:C626.000C: hidraw0: USB HID v0.04 Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 149.720430][ T7332] loop1: detected capacity change from 0 to 32768 [ 149.736542][ T7354] jffs2: notice: (7354) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.763943][ T5711] usb 6-1: USB disconnect, device number 5 [ 149.959094][ T7332] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.102277][ T7356] fido_id[7356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 150.161501][ T7332] XFS (loop1): Ending clean mount [ 150.371371][ T5618] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.804985][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.556'. [ 151.110809][ T7394] loop5: detected capacity change from 0 to 1024 [ 151.120638][ T7394] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 151.163897][ T7394] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.558: lblock 2 mapped to illegal pblock 2 (length 1) [ 151.163966][ T7394] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 151.180745][ T7394] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 151.180823][ T7394] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.558: lblock 0 mapped to illegal pblock 48 (length 1) [ 151.180874][ T7394] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 151.187419][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 151.187445][ C1] EXT4-fs (loop5): initial error at time 1786976935: ext4_map_blocks:790: inode 3: block 2 [ 151.187480][ C1] EXT4-fs (loop5): last error at time 1786976935: ext4_map_blocks:790: inode 3: block 48 [ 151.190998][ T7394] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 151.191036][ T7394] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.558: Failed to acquire dquot type 0 [ 151.191061][ T7394] loop5: lost filesystem error report for type 5 error -117 [ 151.229540][ T7394] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 151.229567][ T7394] loop5: lost filesystem error report for type 5 error -117 [ 151.236529][ T7394] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.558: mark_inode_dirty error [ 151.236560][ T7394] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.236775][ T7394] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 151.236860][ T7394] EXT4-fs (loop5): 1 orphan inode deleted [ 151.245176][ T7394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.253230][ T62] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.337898][ T5748] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.388406][ T62] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 151.388473][ T62] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 151.436453][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.445940][ T6425] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.445971][ T6425] loop5: lost filesystem error report for type 5 error -117 [ 151.446269][ T6425] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 151.446470][ T6425] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 151.446491][ T6425] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 151.446722][ T6425] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.511703][ T5748] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 151.517795][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.517821][ T5748] usb 2-1: Product: syz [ 151.517834][ T5748] usb 2-1: Manufacturer: syz [ 151.517847][ T5748] usb 2-1: SerialNumber: syz [ 151.534623][ T5748] usb 2-1: config 0 descriptor?? [ 151.570112][ T5748] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 151.713345][ T5748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.714656][ T5748] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 151.714711][ T5748] usb 2-1: media controller created [ 151.836346][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.869351][ T5718] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.029828][ T5718] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 152.040521][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.040594][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.043347][ T7419] loop5: detected capacity change from 0 to 256 [ 152.071923][ T7419] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 152.095173][ T5748] DVB: Unable to find symbol mt352_attach() [ 152.113812][ T30] audit: type=1800 audit(1786976936.344:33): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.570" name="file2" dev="loop5" ino=1048649 res=0 errno=0 [ 152.142630][ T5718] usb 4-1: config 0 descriptor?? [ 152.238867][ T5748] DVB: Unable to find symbol nxt6000_attach() [ 152.238909][ T5748] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 152.242935][ T5748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 152.255519][ T5748] dvb-usb: schedule remote query interval to 1000 msecs. [ 152.255541][ T5748] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 152.256538][ T5748] dvb-usb: bulk message failed: -22 (7/0) [ 152.256558][ T5748] dvb-usb: bulk message failed: -22 (7/0) [ 152.264606][ T5748] usb 2-1: USB disconnect, device number 5 [ 152.563695][ T5718] ath6kl: Unsupported hardware version: 0x0 [ 152.570843][ T5718] ath6kl: Failed to init ath6kl core: -22 [ 152.571745][ T5718] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 152.609797][ T5748] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 152.773452][ T5711] usb 4-1: USB disconnect, device number 8 [ 152.891085][ T7427] loop1: detected capacity change from 0 to 512 [ 152.896255][ T7427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.934729][ T7427] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 152.934805][ T7427] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 152.938805][ T7427] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.583: bad orphan inode 15 [ 152.938833][ T7427] fserror_report: 2 callbacks suppressed [ 152.938843][ T7427] loop1: lost filesystem error report for type 5 error -117 [ 152.939268][ T7427] EXT4-fs (loop1): Remounting filesystem read-only [ 152.939283][ T7427] ext4_test_bit(bit=14, block=4) = 1 [ 152.939296][ T7427] is_bad_inode(inode)=0 [ 152.939303][ T7427] NEXT_ORPHAN(inode)=0 [ 152.939310][ T7427] max_ino=32 [ 152.939317][ T7427] i_nlink=1 [ 152.943738][ T7427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.058373][ T7423] loop4: detected capacity change from 0 to 32768 [ 153.065109][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.128176][ T5748] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 153.151339][ T7423] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 153.280413][ T5614] ocfs2: Unmounting device (7,4) on (node local) [ 153.280845][ T5748] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 153.282412][ T5748] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 153.282458][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.282482][ T5748] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.282530][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.282563][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 153.283572][ T5748] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 153.283612][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.283634][ T5748] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.283656][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.283744][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 153.285217][ T5748] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 153.285256][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.285281][ T5748] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.285304][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.285327][ T5748] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 153.290702][ T5748] usb 1-1: string descriptor 0 read error: -22 [ 153.290834][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.398441][ T5748] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 153.686832][ T5711] usb 1-1: USB disconnect, device number 6 [ 153.696717][ T7431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.697037][ T7431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.698871][ T7431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.699121][ T7431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.699337][ T7431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.763183][ T7447] netlink: 'syz.4.579': attribute type 2 has an invalid length. [ 154.020183][ T25] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 154.084671][ T7447] : entered promiscuous mode [ 154.099971][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 154.100012][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.586'. [ 154.136302][ T7457] loop1: detected capacity change from 0 to 1024 [ 154.180916][ T25] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 154.183614][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 154.183656][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 154.183680][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 154.183719][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.215183][ T25] usb 4-1: config 0 descriptor?? [ 154.217844][ T7445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.359396][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.361912][ T3326] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.361966][ T3326] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.362005][ T3326] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.642672][ T30] audit: type=1326 audit(1786976938.874:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.0.588" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a799e0d9 code=0x7ffc0000 [ 154.643019][ T30] audit: type=1326 audit(1786976938.874:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.0.588" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a799e0d9 code=0x7ffc0000 [ 154.686160][ T30] audit: type=1326 audit(1786976938.904:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.0.588" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a799e0d9 code=0x7ffc0000 [ 154.693983][ T25] hid_parser_main: 30 callbacks suppressed [ 154.694009][ T25] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x2 [ 154.712506][ T30] audit: type=1326 audit(1786976938.934:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.0.588" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a799e0d9 code=0x7ffc0000 [ 154.721369][ T30] audit: type=1326 audit(1786976938.934:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.0.588" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f28a799e0d9 code=0x7ffc0000 [ 154.721419][ T30] audit: type=1326 audit(1786976938.934:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.0.588" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a799e0d9 code=0x7ffc0000 [ 154.758349][ T25] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 154.892886][ T5740] usb 4-1: USB disconnect, device number 9 [ 155.028224][ T7472] capability: warning: `syz.0.591' uses deprecated v2 capabilities in a way that may be insecure [ 155.048441][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.378748][ T7482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.546889][ T7488] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.757604][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.757623][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.757663][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.757668][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.782668][ T5711] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.794985][ T7496] loop1: detected capacity change from 0 to 64 [ 155.938183][ T5711] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.951504][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.959736][ T5711] usb 1-1: Product: syz [ 155.964461][ T5711] usb 1-1: Manufacturer: syz [ 155.969839][ T5711] usb 1-1: SerialNumber: syz [ 155.984655][ T7461] loop4: detected capacity change from 0 to 65536 [ 156.040895][ T7461] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 156.097610][ T7498] loop5: detected capacity change from 0 to 4096 [ 156.103535][ T7461] XFS (loop4): Ending clean mount [ 156.188644][ T5718] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.267620][ T7498] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 156.305344][ T5614] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 156.514819][ T7498] ntfs3(loop5): Failed to load $Extend (-22). [ 156.514877][ T7498] ntfs3(loop5): Failed to initialize $Extend. [ 156.690394][ T10] usb 1-1: USB disconnect, device number 7 [ 156.739519][ T7493] loop3: detected capacity change from 0 to 40427 [ 156.807356][ T7493] F2FS-fs (loop3): invalid crc value [ 156.893156][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 156.893212][ T30] audit: type=1800 audit(1786976941.124:43): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.605" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 157.280634][ T7493] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 157.301976][ T5718] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 157.324281][ T5718] ath9k_htc: Failed to initialize the device [ 157.346892][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 157.353894][ T7493] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.754387][ T7508] loop1: detected capacity change from 0 to 32768 [ 157.836500][ T7508] JBD2: Ignoring recovery information on journal [ 157.845332][ T7508] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 157.845663][ T7508] JBD2: bad block at offset 32 [ 157.901004][ T7508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 158.090910][ T5618] ocfs2: Unmounting device (7,1) on (node local) [ 158.183805][ T7547] loop4: detected capacity change from 0 to 256 [ 158.408051][ T7551] loop0: detected capacity change from 0 to 1024 [ 158.409048][ T7551] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.483539][ T7551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.626066][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.822476][ T7559] netlink: Failed to add $ helper -22 [ 158.822563][ T7559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.960877][ T7563] loop0: detected capacity change from 0 to 1024 [ 159.075737][ T30] audit: type=1800 audit(1786976943.304:44): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.629" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 159.129798][ T7563] syz.0.629: attempt to access beyond end of device [ 159.129798][ T7563] loop0: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 159.366157][ T7576] loop0: detected capacity change from 0 to 16 [ 159.373836][ T7575] loop1: detected capacity change from 0 to 512 [ 159.383626][ T7575] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.436730][ T7575] EXT4-fs (loop1): 1 truncate cleaned up [ 159.461320][ T7575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.505227][ T7576] erofs (device loop0): mounted with root inode @ nid 36. [ 159.554274][ T7575] EXT4-fs: Cannot specify journal on remount [ 159.633873][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.835337][ T30] audit: type=1800 audit(1786976944.064:45): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.633" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 160.200260][ T7607] warning: `syz.5.646' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.480292][ T7613] loop1: detected capacity change from 0 to 1024 [ 160.649141][ T7620] loop0: detected capacity change from 0 to 2048 [ 160.700064][ T7620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.700207][ T7620] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.854033][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 160.917184][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.274663][ T7610] loop3: detected capacity change from 0 to 32768 [ 161.477723][ T5711] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.629764][ T5711] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 161.640233][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.640313][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.640359][ T5711] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.640388][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.640436][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.772636][ T7631] loop1: detected capacity change from 0 to 32768 [ 161.808099][ T7631] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.865326][ T7631] XFS (loop1): Ending clean mount [ 161.995262][ T7631] XFS (loop1): Quotacheck needed: Please wait. [ 162.144633][ T5711] gud 1-1:1.0: probe with driver gud failed with error -71 [ 162.172426][ T7658] netlink: get zone limit has 8 unknown bytes [ 162.180924][ T5711] usb 1-1: USB disconnect, device number 8 [ 162.287343][ T7631] XFS (loop1): Quotacheck: Done. [ 162.384156][ T7661] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.547029][ T5618] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.660474][ T7699] set_capacity_and_notify: 1 callbacks suppressed [ 163.660524][ T7699] loop4: detected capacity change from 0 to 512 [ 163.712714][ T7699] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 163.712850][ T7699] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 163.712953][ T7699] System zones: 0-1, 15-15, 18-18, 34-34 [ 163.713230][ T7699] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.713324][ T7699] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 163.713397][ T7699] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 163.713421][ T7699] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 163.762568][ T7699] EXT4-fs (loop4): 1 truncate cleaned up [ 163.805570][ T7699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.010033][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.018404][ T7693] loop5: detected capacity change from 0 to 40427 [ 165.038959][ T7693] F2FS-fs (loop5): invalid crc value [ 165.405578][ T7693] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 165.553808][ T7693] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 165.553862][ T7693] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 165.556859][ T7693] F2FS-fs (loop5): Start checkpoint disabled! [ 165.606658][ T7724] loop0: detected capacity change from 0 to 32768 [ 165.617030][ T7724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.692 (7724) [ 165.656366][ T7724] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.674544][ T7724] BTRFS info (device loop0): using sha256 checksum algorithm [ 165.681685][ T7693] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 165.681712][ T7693] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 165.881389][ T7772] loop1: detected capacity change from 0 to 512 [ 165.881607][ T7724] BTRFS info (device loop0): enabling ssd optimizations [ 165.881629][ T7724] BTRFS info (device loop0): turning on sync discard [ 165.881645][ T7724] BTRFS info (device loop0): enabling free space tree [ 165.881663][ T7724] BTRFS info (device loop0): use zlib compression, level 3 [ 165.960769][ T7772] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.241876][ T5617] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.246447][ T7772] EXT4-fs (loop1): 1 orphan inode deleted [ 166.246471][ T7772] EXT4-fs (loop1): 1 truncate cleaned up [ 166.259445][ T7772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.301383][ T3326] kworker/u8:10: attempt to access beyond end of device [ 166.301383][ T3326] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.301484][ T3326] CPU: 1 UID: 0 PID: 3326 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 166.301509][ T3326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.301522][ T3326] Workqueue: writeback wb_workfn (flush-7:5) [ 166.301560][ T3326] Call Trace: [ 166.301569][ T3326] [ 166.301580][ T3326] dump_stack_lvl+0xe8/0x150 [ 166.301612][ T3326] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 166.301644][ T3326] f2fs_write_end_bio+0x1211/0x16e0 [ 166.301677][ T3326] ? blkg_put+0x22/0x240 [ 166.301718][ T3326] __submit_merged_bio+0x258/0x6a0 [ 166.301743][ T3326] ? rcu_is_watching+0x16/0xb0 [ 166.301774][ T3326] __submit_merged_write_cond+0x3c9/0x4e0 [ 166.301809][ T3326] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 166.301857][ T3326] f2fs_write_data_pages+0x2a27/0x36f0 [ 166.301915][ T3326] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.301954][ T3326] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 166.302015][ T3326] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 166.302057][ T3326] ? __lock_acquire+0x6df/0x2e50 [ 166.302096][ T3326] ? set_shrinker_bit+0x7c/0x350 [ 166.302124][ T3326] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.302150][ T3326] do_writepages+0x338/0x560 [ 166.302182][ T3326] ? reacquire_held_locks+0x117/0x1a0 [ 166.302203][ T3326] ? writeback_sb_inodes+0x450/0x1b00 [ 166.302228][ T3326] __writeback_single_inode+0x136/0x1220 [ 166.302250][ T3326] ? do_raw_spin_unlock+0xf5/0x200 [ 166.302280][ T3326] writeback_sb_inodes+0x9de/0x1b00 [ 166.302297][ T3326] ? __lock_acquire+0x6df/0x2e50 [ 166.302339][ T3326] ? lock_acquire+0x115/0x350 [ 166.302365][ T3326] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 166.302424][ T3326] ? rcu_is_watching+0x16/0xb0 [ 166.302447][ T3326] ? queue_io+0x2d3/0x470 [ 166.302469][ T3326] wb_writeback+0x41c/0xad0 [ 166.302499][ T3326] ? queue_io+0x1f1/0x470 [ 166.302523][ T3326] ? __pfx_wb_writeback+0x10/0x10 [ 166.302549][ T3326] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.302590][ T3326] wb_workfn+0x431/0x10f0 [ 166.302633][ T3326] ? __pfx_wb_workfn+0x10/0x10 [ 166.302666][ T3326] ? update_protect_slice+0x128/0x210 [ 166.302708][ T3326] ? lock_acquire+0x115/0x350 [ 166.302736][ T3326] ? rcu_is_watching+0x16/0xb0 [ 166.302759][ T3326] ? process_scheduled_works+0x97a/0x1630 [ 166.302784][ T3326] process_scheduled_works+0xc3d/0x1630 [ 166.302839][ T3326] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.302870][ T3326] ? assign_work+0x3cf/0x5d0 [ 166.302900][ T3326] worker_thread+0xa47/0xfb0 [ 166.302952][ T3326] kthread+0x38b/0x480 [ 166.302972][ T3326] ? __pfx_worker_thread+0x10/0x10 [ 166.302995][ T3326] ? __pfx_kthread+0x10/0x10 [ 166.303016][ T3326] ret_from_fork+0x514/0xb70 [ 166.303038][ T3326] ? __pfx_ret_from_fork+0x10/0x10 [ 166.303066][ T3326] ? __switch_to+0xc89/0x1420 [ 166.303095][ T3326] ? __pfx_kthread+0x10/0x10 [ 166.303115][ T3326] ret_from_fork_asm+0x1a/0x30 [ 166.303159][ T3326] [ 166.330222][ T3326] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 166.376179][ T7772] EXT4-fs error (device loop1): ext4_search_dir:1476: inode #12: block 7: comm syz.1.703: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 166.742148][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.998165][ T7793] loop1: detected capacity change from 0 to 256 [ 167.070042][ T7793] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 167.235735][ T7786] loop3: detected capacity change from 0 to 32768 [ 167.279461][ T7786] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 167.465703][ T7786] XFS (loop3): Ending clean mount [ 167.536352][ T30] audit: type=1326 audit(1786976951.764:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.4.713" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53c0d9e0d9 code=0x0 [ 167.630648][ T5615] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 168.210522][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.722'. [ 168.626296][ T7845] loop0: detected capacity change from 0 to 256 [ 168.657695][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.667840][ T5748] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.807534][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 168.815863][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 168.829028][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.830012][ T5748] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 168.831387][ T5748] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.831421][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.840499][ T5748] usb 4-1: config 0 descriptor?? [ 168.870815][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.880860][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.907110][ T10] usb 6-1: config 0 descriptor?? [ 168.920144][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 168.931696][ T7852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.980539][ T7853] loop1: detected capacity change from 0 to 512 [ 169.004425][ T7853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.178032][ T7856] loop0: detected capacity change from 0 to 2048 [ 169.240302][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.264006][ T7856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.410553][ T10] wacom 0003:056A:0084.000E: collection stack underflow [ 169.419617][ T10] wacom 0003:056A:0084.000E: item 0 4 0 12 parsing failed [ 169.441346][ T10] wacom 0003:056A:0084.000E: parse failed [ 169.447633][ T10] wacom 0003:056A:0084.000E: probe with driver wacom failed with error -22 [ 169.488963][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.492185][ T5748] video4linux radio48: keene_cmd_set failed (-71) [ 169.492211][ T5748] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 169.530954][ T5748] usb 4-1: USB disconnect, device number 10 [ 169.586392][ T10] usb 6-1: USB disconnect, device number 6 [ 169.989158][ T5711] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.993157][ T7878] loop0: detected capacity change from 0 to 4096 [ 170.161670][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 170.168868][ T5711] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 170.182819][ T5711] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 170.182865][ T5711] usb 2-1: config 0 has no interface number 0 [ 170.200127][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.200174][ T5711] usb 2-1: Product: syz [ 170.200213][ T5711] usb 2-1: Manufacturer: syz [ 170.200234][ T5711] usb 2-1: SerialNumber: syz [ 170.229391][ T5711] usb 2-1: config 0 descriptor?? [ 170.611822][ T7898] loop3: detected capacity change from 0 to 256 [ 170.659138][ T5711] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 170.659258][ T5711] uvcvideo 2-1:0.31: No valid video chain found. [ 170.906708][ T5619] usb 2-1: USB disconnect, device number 6 [ 171.162705][ T7896] loop0: detected capacity change from 0 to 32768 [ 171.177613][ T7896] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.749 (7896) [ 171.201989][ T7896] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.212993][ T7896] BTRFS info (device loop0): using sha256 checksum algorithm [ 171.277501][ T5711] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.302640][ T7896] BTRFS info (device loop0): enabling ssd optimizations [ 171.310081][ T7896] BTRFS info (device loop0): turning on async discard [ 171.317054][ T7896] BTRFS info (device loop0): enabling free space tree [ 171.317120][ T7896] BTRFS info (device loop0): enabling auto defrag [ 171.317144][ T7896] BTRFS info (device loop0): max_inline set to 4096 [ 171.410495][ T5617] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.433126][ T5711] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 171.434402][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.445334][ T5711] usb 4-1: config 0 descriptor?? [ 171.479853][ T5711] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 171.590049][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.742656][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 171.747577][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.747663][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 171.747704][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.924462][ T5711] gspca_cpia1: usb_control_msg 03, error -32 [ 171.931866][ T5711] gspca_cpia1: usb_control_msg 03, error -71 [ 171.932333][ T5711] gspca_cpia1: usb_control_msg 01, error -71 [ 171.932366][ T5711] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 171.940893][ T5711] usb 4-1: USB disconnect, device number 11 [ 172.047773][ T10] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 172.047993][ T10] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -2 [ 172.282238][ T5711] usb 5-1: USB disconnect, device number 7 [ 172.695737][ T7954] netlink: 'syz.3.770': attribute type 30 has an invalid length. [ 173.102952][ T7967] loop5: detected capacity change from 0 to 4096 [ 173.205995][ T7975] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.468468][ T7985] loop1: detected capacity change from 0 to 1024 [ 173.609581][ T7988] tipc: Enabling of bearer rejected, failed to enable media [ 173.716768][ T7989] hfsplus: catalog searching failed [ 173.910393][ T7999] loop4: detected capacity change from 0 to 256 [ 173.922540][ T7999] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 173.947110][ T7995] loop3: detected capacity change from 0 to 512 [ 173.952056][ T7995] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.953906][ T5740] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 173.989928][ T7995] EXT4-fs (loop3): 1 truncate cleaned up [ 174.017194][ T7995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.107700][ T7995] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6537: inode #12: comm syz.3.788: bad extra_isize 62 (inode size 256) [ 174.121900][ T5740] usb 6-1: Using ep0 maxpacket: 8 [ 174.127736][ T5740] usb 6-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 174.129029][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.146297][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.146348][ T5740] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.146401][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 174.146442][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.190351][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.793'. [ 174.202917][ T7995] EXT4-fs (loop3): Remounting filesystem read-only [ 174.202975][ T7995] EXT4-fs warning (device loop3): ext4_rename_delete:3741: inode #12: comm syz.3.788: Deleting old file: nlink 2, error=-30 [ 174.225264][ T5740] usb 6-1: config 0 descriptor?? [ 174.278586][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 174.281174][ T10] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 174.283611][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.283659][ T10] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.283684][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.283716][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.302188][ T10] usb 1-1: config 0 descriptor?? [ 174.389218][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.678282][ T5748] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 174.760336][ T10] petalynx 0003:18B1:0037.0010: reserved main item tag 0xd [ 174.760411][ T10] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 174.760438][ T10] petalynx 0003:18B1:0037.0010: unknown main item tag 0x1 [ 174.760461][ T10] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 174.760484][ T10] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 174.760508][ T10] petalynx 0003:18B1:0037.0010: unknown main item tag 0x3 [ 174.760531][ T10] petalynx 0003:18B1:0037.0010: item fetching failed at offset 43/44 [ 174.761234][ T10] petalynx 0003:18B1:0037.0010: parse failed [ 174.761304][ T10] petalynx 0003:18B1:0037.0010: probe with driver petalynx failed with error -22 [ 174.831651][ T5748] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 174.842175][ T5748] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.842222][ T5748] usb 2-1: config 179 has no interface number 0 [ 174.842314][ T5748] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 174.842348][ T5748] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 174.842382][ T5748] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 174.842442][ T5748] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 174.842475][ T5748] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 174.842524][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.929764][ T5740] usb 6-1: string descriptor 0 read error: -71 [ 174.936609][ T5740] uclogic 0003:5543:0045.000F: failed retrieving string descriptor #200: -71 [ 174.945738][ T5740] uclogic 0003:5543:0045.000F: failed retrieving pen parameters: -71 [ 174.954075][ T5740] uclogic 0003:5543:0045.000F: failed probing pen v2 parameters: -71 [ 174.962891][ T5740] uclogic 0003:5543:0045.000F: failed probing parameters: -71 [ 174.963035][ T5740] uclogic 0003:5543:0045.000F: probe with driver uclogic failed with error -71 [ 174.969361][ T10] usb 1-1: USB disconnect, device number 9 [ 174.993328][ T5740] usb 6-1: USB disconnect, device number 7 [ 175.012612][ T8010] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 175.012777][ T8010] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 175.204690][ T8025] netlink: 256 bytes leftover after parsing attributes in process `syz.3.802'. [ 175.347876][ T10] usb 2-1: USB disconnect, device number 7 [ 175.347876][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 175.347924][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 175.805648][ T8047] loop5: detected capacity change from 0 to 512 [ 175.830380][ T8047] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.812: bad orphan inode 15 [ 175.844893][ T8047] loop5: lost filesystem error report for type 5 error -117 [ 175.845639][ T8047] ext4_test_bit(bit=14, block=5) = 0 [ 175.866450][ T8047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.907955][ T5748] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 175.947846][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.006473][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.057530][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 176.058295][ T5748] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 176.059277][ T5748] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.059297][ T5748] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.059350][ T5748] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 176.061270][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.061290][ T5748] usb 5-1: Product: syz [ 176.061303][ T5748] usb 5-1: Manufacturer: syz [ 176.061316][ T5748] usb 5-1: SerialNumber: syz [ 176.119675][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 176.121055][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.121077][ T25] usb 4-1: config 0 has no interface number 0 [ 176.121117][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.121167][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.121203][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.128137][ T25] usb 4-1: config 0 descriptor?? [ 176.374850][ T5748] usb 5-1: Can't get UAC3 power state for id 10 [ 176.402488][ T5748] usb 5-1: BAAD HEADSET c_chmask mismatch [ 176.645671][ T25] prodikeys 0003:041E:2801.0011: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 176.671448][ T25] hid_prodikeys: hid-prodikeys: failed to find output report [ 176.671448][ T25] [ 176.878949][ T5711] usb 4-1: USB disconnect, device number 12 [ 177.245660][ T5748] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.265163][ T5748] usb 5-1: USB disconnect, device number 8 [ 177.352115][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.588040][ T5748] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 177.714274][ T8062] loop1: detected capacity change from 0 to 40427 [ 177.739391][ T8062] F2FS-fs (loop1): invalid crc value [ 177.747598][ T5748] usb 5-1: Using ep0 maxpacket: 16 [ 177.748699][ T5748] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.750086][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.750113][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.750133][ T5748] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.750180][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.787067][ T5748] usb 5-1: config 0 descriptor?? [ 177.850057][ T8097] netlink: 68 bytes leftover after parsing attributes in process `syz.5.834'. [ 177.881413][ T8097] tipc: Enabling of bearer rejected, media not registered [ 177.982221][ T8062] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.086180][ T8062] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.143803][ T8106] loop5: detected capacity change from 0 to 64 [ 178.281791][ T8106] hfs: request for non-existent node 65538 in B*Tree [ 178.293637][ T8106] hfs: request for non-existent node 65538 in B*Tree [ 178.297227][ T8106] hfs: fail to find leaf node: node ID 65538 [ 178.316525][ T5618] syz-executor: attempt to access beyond end of device [ 178.316525][ T5618] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.330851][ T5748] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 178.342899][ T5748] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 178.400033][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 178.400064][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 ** replaying previous printk message ** [ 178.400064][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.400077][ T5618] Call Trace: [ 178.400086][ T5618] [ 178.400095][ T5618] dump_stack_lvl+0xe8/0x150 [ 178.400139][ T5618] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 178.400173][ T5618] f2fs_write_end_bio+0x1211/0x16e0 [ 178.400207][ T5618] ? blkg_put+0x22/0x240 [ 178.400248][ T5618] __submit_merged_bio+0x258/0x6a0 [ 178.400273][ T5618] ? rcu_is_watching+0x16/0xb0 [ 178.400304][ T5618] __submit_merged_write_cond+0x3c9/0x4e0 [ 178.400338][ T5618] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 178.400388][ T5618] f2fs_write_data_pages+0x2a27/0x36f0 [ 178.400458][ T5618] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.400484][ T5618] ? is_bpf_text_address+0x26/0x2b0 [ 178.400532][ T5618] ? arch_stack_walk+0xfb/0x150 [ 178.400588][ T5618] ? add_lock_to_list+0xc7/0x100 [ 178.400616][ T5618] ? lockdep_unlock+0x5c/0xd0 [ 178.400644][ T5618] ? __lock_acquire+0x14b9/0x2e50 [ 178.400695][ T5618] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.400736][ T5618] ? do_raw_spin_unlock+0xf5/0x200 [ 178.400764][ T5618] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.400793][ T5618] do_writepages+0x338/0x560 [ 178.400832][ T5618] ? do_raw_spin_unlock+0xf5/0x200 [ 178.400864][ T5618] filemap_fdatawrite+0x1e9/0x2f0 [ 178.400896][ T5618] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 178.400974][ T5618] ? do_raw_spin_unlock+0xf5/0x200 [ 178.401017][ T5618] f2fs_sync_dirty_inodes+0x30e/0x830 [ 178.401063][ T5618] f2fs_write_checkpoint+0xa3d/0x2710 [ 178.401097][ T5618] ? __lock_acquire+0x6df/0x2e50 [ 178.401153][ T5618] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 178.401220][ T5618] ? try_to_wake_up+0x8b6/0x14d0 [ 178.401260][ T5618] kill_f2fs_super+0x2dd/0x700 [ 178.401301][ T5618] ? __pfx_kill_f2fs_super+0x10/0x10 [ 178.401343][ T5618] ? call_rcu+0x64d/0x8b0 [ 178.401366][ T5618] ? lockdep_hardirqs_on+0x7b/0x110 [ 178.401406][ T5618] deactivate_locked_super+0xbc/0x110 [ 178.401432][ T5618] cleanup_mnt+0x3d3/0x460 [ 178.401462][ T5618] task_work_run+0x1d9/0x270 [ 178.401490][ T5618] ? __pfx_task_work_run+0x10/0x10 [ 178.401533][ T5618] exit_to_user_mode_loop+0x204/0x770 [ 178.401554][ T5618] ? rcu_is_watching+0x16/0xb0 [ 178.401583][ T5618] do_syscall_64+0x328/0x520 [ 178.401605][ T5618] ? trace_irq_disable+0x3b/0x140 [ 178.401624][ T5618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.401646][ T5618] ? clear_bhb_loop+0x70/0xc0 [ 178.401672][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.401694][ T5618] RIP: 0033:0x7f57e2d9f317 [ 178.401723][ T5618] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 178.401740][ T5618] RSP: 002b:00007ffd3b7bb7e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.401765][ T5618] RAX: 0000000000000000 RBX: 00007f57e2e34474 RCX: 00007f57e2d9f317 [ 178.401780][ T5618] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3b7bb8a0 [ 178.401793][ T5618] RBP: 00007ffd3b7bb8a0 R08: 00007ffd3b7bc8a0 R09: 00000000ffffffff [ 178.401808][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3b7bc930 [ 178.401821][ T5618] R13: 00007f57e2e34474 R14: 000000000002b815 R15: 00007ffd3b7bc970 [ 178.401856][ T5618] [ 178.418191][ T5618] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 178.421429][ T5618] [ 178.758679][ T5618] ============================= [ 178.763554][ T5618] WARNING: suspicious RCU usage [ 178.768694][ T5618] syzkaller #0 Not tainted [ 178.773152][ T5618] ----------------------------- [ 178.778133][ T5618] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 178.786925][ T5618] [ 178.786925][ T5618] other info that might help us debug this: [ 178.786925][ T5618] [ 178.797353][ T5618] [ 178.797353][ T5618] rcu_scheduler_active = 2, debug_locks = 1 [ 178.805556][ T5618] locks held by syz-executor/5618: 2, last CPU#1: [ 178.812157][ T5618] #0: ffff888032e520e8 (&type->s_umount_key#60){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 178.822504][ T5618] #1: ffff8880538b08c8 (&im->ino_lock){+.+.}-{3:3}, at: f2fs_remove_ino_entry+0x18d/0x3f0 [ 178.832646][ T5618] [ 178.832646][ T5618] stack backtrace: [ 178.838633][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 178.848129][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.858268][ T5618] Call Trace: [ 178.861584][ T5618] [ 178.864552][ T5618] dump_stack_lvl+0xe8/0x150 [ 178.869184][ T5618] lockdep_rcu_suspicious+0x140/0x1d0 [ 178.874582][ T5618] f2fs_remove_ino_entry+0x3ae/0x3f0 [ 178.879893][ T5618] f2fs_evict_inode+0x83d/0x21f0 [ 178.884864][ T5618] ? add_lock_to_list+0xc7/0x100 [ 178.889946][ T5618] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 178.895349][ T5618] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.900589][ T5618] ? do_raw_spin_unlock+0xf5/0x200 [ 178.905746][ T5618] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 178.911141][ T5618] evict+0x624/0xb50 [ 178.915075][ T5618] ? __pfx_evict+0x10/0x10 [ 178.919514][ T5618] ? do_raw_spin_unlock+0xf5/0x200 [ 178.924663][ T5618] ? _raw_spin_unlock+0x28/0x50 [ 178.929523][ T5618] ? iput+0xb84/0xf00 [ 178.933521][ T5618] f2fs_evict_inode+0x20f/0x21f0 [ 178.938477][ T5618] ? inode_wait_for_writeback+0x16d/0x3b0 [ 178.944214][ T5618] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 178.949589][ T5618] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.954637][ T5618] ? do_raw_spin_unlock+0xf5/0x200 [ 178.959773][ T5618] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 178.965151][ T5618] evict+0x624/0xb50 [ 178.969124][ T5618] ? __pfx_evict+0x10/0x10 [ 178.973555][ T5618] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.978694][ T5618] evict_inodes+0x7e3/0x870 [ 178.983211][ T5618] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 178.989310][ T5618] ? __pfx_evict_inodes+0x10/0x10 [ 178.994491][ T5618] ? sync_filesystem+0x1f9/0x240 [ 178.999466][ T5618] generic_shutdown_super+0xaa/0x2d0 [ 179.004786][ T5618] kill_block_super+0x44/0xa0 [ 179.009484][ T5618] kill_f2fs_super+0x3b3/0x700 [ 179.014279][ T5618] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.019634][ T5618] ? call_rcu+0x64d/0x8b0 [ 179.023983][ T5618] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.029228][ T5618] deactivate_locked_super+0xbc/0x110 [ 179.034712][ T5618] cleanup_mnt+0x3d3/0x460 [ 179.039155][ T5618] task_work_run+0x1d9/0x270 [ 179.043774][ T5618] ? __pfx_task_work_run+0x10/0x10 [ 179.048904][ T5618] exit_to_user_mode_loop+0x204/0x770 [ 179.054304][ T5618] ? rcu_is_watching+0x16/0xb0 [ 179.059108][ T5618] do_syscall_64+0x328/0x520 [ 179.063803][ T5618] ? trace_irq_disable+0x3b/0x140 [ 179.068848][ T5618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.074927][ T5618] ? clear_bhb_loop+0x70/0xc0 [ 179.079621][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.085530][ T5618] RIP: 0033:0x7f57e2d9f317 [ 179.089966][ T5618] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.109685][ T5618] RSP: 002b:00007ffd3b7bb7e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.118309][ T5618] RAX: 0000000000000000 RBX: 00007f57e2e34474 RCX: 00007f57e2d9f317 [ 179.126304][ T5618] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3b7bb8a0 [ 179.134285][ T5618] RBP: 00007ffd3b7bb8a0 R08: 00007ffd3b7bc8a0 R09: 00000000ffffffff [ 179.142273][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3b7bc930 [ 179.150439][ T5618] R13: 00007f57e2e34474 R14: 000000000002b815 R15: 00007ffd3b7bc970 [ 179.158483][ T5618] [ 179.216494][ T5748] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 179.216563][ T5748] microsoft 0003:045E:07DA.0012: no inputs found [ 179.216596][ T5748] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 179.229060][ T5748] usb 5-1: USB disconnect, device number 9 [ 179.443887][ T8118] fido_id[8118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory