last executing test programs: 3.354111297s ago: executing program 2 (id=1513): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 3.20426532s ago: executing program 2 (id=1515): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS(r0, 0x80047456, &(0x7f0000000040)={0xf88, 0x4, 0x3c, 0x9, 0x19, "fbed35c02f508d87dc8e17db11df8ee93797d8"}) 3.044713562s ago: executing program 2 (id=1516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b000000000000f3ff0d"], 0x14}}, 0x0) 2.932514082s ago: executing program 2 (id=1517): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400017e) 2.695345431s ago: executing program 3 (id=1519): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x2000, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 2.630212636s ago: executing program 2 (id=1520): syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 2.522678435s ago: executing program 3 (id=1521): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100004114000200626f6e64300000000000000000000000090001"], 0x40}}, 0x0) 2.353560519s ago: executing program 3 (id=1524): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x91f, 0x4, 0x8, 0x43564548, [0x5, 0x4], [0xfffffff9, 0x8001], 0x2}}) 2.246282607s ago: executing program 3 (id=1526): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000009b80)=ANY=[@ANYBLOB='iocharset=macromanian,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1521, &(0x7f0000007640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.181222933s ago: executing program 1 (id=1527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x10001, 0x1, 0x0, 0x3, 0x1, 0xc, 0xb, 0x5, 0xff, 0x4, 0x4, 0x16, 0x7}, {0x3, 0xe, 0x3, 0x1, 0x4, 0x8, 0x9, 0x0, 0x7, 0x4, 0x6, 0x2, 0xffffffff}, {0x9, 0x200, 0x4, 0xf7, 0x1, 0xe, 0x6, 0xa7, 0x4e, 0x9, 0x3, 0x9, 0x7}], 0xbd}) 2.078412001s ago: executing program 0 (id=1528): r0 = syz_open_dev$video4linux(&(0x7f0000000500), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x20980903, 0x7}) close(r0) 1.992072118s ago: executing program 0 (id=1529): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000340), 0x4) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f0000010000000028000000000000000000000007"], 0x48}, 0x4) 1.927551893s ago: executing program 3 (id=1530): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ce2cbfb69af7f1d23128c0cb2b62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.882181837s ago: executing program 1 (id=1531): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.793541184s ago: executing program 0 (id=1532): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008"], 0x58}}, 0x0) 1.72433504s ago: executing program 3 (id=1533): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x500f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x39, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xb, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0xf, 0x23, {0x23, 0x1, "2fdb9e70781f45b3e690aa9ec4e83842707a6d6228403ed7fd434a0ed28487c60e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.680550233s ago: executing program 1 (id=1534): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000065f9bfff00000000fdffffff850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.560107603s ago: executing program 0 (id=1535): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.391006757s ago: executing program 1 (id=1536): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.145666727s ago: executing program 2 (id=1537): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.131103278s ago: executing program 0 (id=1538): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@prjquota}, {@bsdgroups}, {@inode64}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$NBD_SET_SOCK(r0, 0x8004587d, 0xffffffffffffffff) 438.320874ms ago: executing program 1 (id=1539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000000900010073797a300000e8000900020073797a32000000003c000480380001800b00010064796e7365740000280002800900010073797a320000000008000940000000030800034000000001080004"], 0x90}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) 310.594915ms ago: executing program 1 (id=1540): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) 0s ago: executing program 0 (id=1541): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): 0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 129.361744][ T27] audit: type=1326 audit(1754665712.448:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 129.379911][ T7362] loop0: detected capacity change from 0 to 1024 [ 129.390237][ T27] audit: type=1326 audit(1754665712.448:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 129.418068][ T7362] EXT4-fs: Ignoring removed i_version option [ 129.424158][ T7362] EXT4-fs: Ignoring removed bh option [ 129.479998][ T7362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.502595][ T27] audit: type=1326 audit(1754665712.448:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 129.521913][ T7362] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 129.599888][ T27] audit: type=1326 audit(1754665712.458:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 129.628255][ T7362] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 129.658750][ T7362] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.707946][ T7362] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 129.748726][ T7362] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 130.096560][ T7356] loop1: detected capacity change from 0 to 40427 [ 130.115477][ T7376] loop0: detected capacity change from 0 to 4096 [ 130.127302][ T7376] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 130.159280][ T7356] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 130.193400][ T7356] F2FS-fs (loop1): invalid crc value [ 130.228154][ T7376] ntfs3: loop0: MFT: r=18, expect seq=1 instead of 0! [ 130.235112][ T7376] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 130.236635][ T7356] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.282576][ T7376] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 130.353478][ T7380] netlink: 'syz.3.541': attribute type 30 has an invalid length. [ 130.432853][ T7356] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.729496][ T5778] syz-executor: attempt to access beyond end of device [ 130.729496][ T5778] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.744422][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 130.777871][ T5778] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.780832][ T7387] netlink: 'syz.2.545': attribute type 5 has an invalid length. [ 131.520810][ T7385] loop0: detected capacity change from 0 to 32768 [ 131.548008][ T7385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.543 (7385) [ 131.616951][ T7385] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.656486][ T7385] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 131.688188][ T7385] BTRFS info (device loop0): using free space tree [ 131.916344][ T7385] BTRFS info (device loop0): enabling ssd optimizations [ 131.962069][ T7385] BTRFS info (device loop0): auto enabling async discard [ 132.341623][ T7435] loop3: detected capacity change from 0 to 256 [ 132.344685][ T7437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.557'. [ 132.391953][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.423820][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 132.449079][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 132.468114][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 133.036533][ T7448] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 133.090340][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.353047][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'. [ 133.774966][ T7475] loop2: detected capacity change from 0 to 16 [ 133.823509][ T7475] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.849437][ T7472] loop1: detected capacity change from 0 to 8192 [ 133.863563][ T7472] FAT-fs (loop1): Unrecognized mount option "ÿ]µLî+AX²k÷KÚ" or missing value [ 133.960078][ T7475] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 134.011330][ T7475] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 134.043700][ T7475] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 134.215723][ T7475] block device autoloading is deprecated and will be removed. [ 134.537121][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 134.835405][ T7495] loop2: detected capacity change from 0 to 64 [ 135.106952][ T7504] loop0: detected capacity change from 0 to 64 [ 135.849813][ T7525] loop2: detected capacity change from 0 to 256 [ 135.899366][ T7525] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.023206][ T7525] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.082940][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 136.335793][ T7514] loop1: detected capacity change from 0 to 32768 [ 137.298377][ T5844] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 137.533987][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.568035][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.607936][ T5844] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 137.617118][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.674342][ T5844] usb 3-1: config 0 descriptor?? [ 137.711714][ T5844] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 137.736849][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 137.808218][ T5844] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 137.835624][ T5844] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 137.864083][ T5844] usb 3-1: media controller created [ 137.890371][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.959148][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 137.965501][ T5844] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 137.985495][ T7549] dvb-usb: bulk message failed: -22 (2/0) [ 138.008264][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 138.048835][ T7549] dvb-usb: bulk message failed: -22 (4/0) [ 138.067337][ T5844] dvb-usb: schedule remote query interval to 150 msecs. [ 138.104479][ T5844] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.148900][ T5844] usb 3-1: USB disconnect, device number 9 [ 138.300841][ T5844] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 138.792578][ T7560] loop1: detected capacity change from 0 to 32768 [ 138.942216][ T7560] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.097999][ T7560] XFS (loop1): Ending clean mount [ 139.136975][ T7560] XFS (loop1): Quotacheck needed: Please wait. [ 139.316010][ T7560] XFS (loop1): Quotacheck: Done. [ 139.485888][ T7574] loop2: detected capacity change from 0 to 1024 [ 139.545636][ T5778] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.679233][ T7578] loop0: detected capacity change from 0 to 512 [ 139.723967][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 139.764811][ T7578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.888009][ T7578] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.953085][ T7578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.620: bg 0: block 64: padding at end of block bitmap is not set [ 140.151284][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.573017][ T7607] virtio-fs: tag not found [ 141.077942][ T5831] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.256195][ T7640] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.288110][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.308292][ T5831] usb 3-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 141.358730][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.391612][ T5831] usb 3-1: config 0 descriptor?? [ 141.607974][ T5770] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.824513][ T5770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.848417][ T5770] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.853476][ T5831] wacom 0003:056A:00B2.000B: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 141.878714][ T5770] usb 2-1: config 1 has no interface number 0 [ 141.895227][ T5770] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.912721][ T5831] wacom 0003:056A:00B2.000B: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.2-1/input0 [ 141.935293][ T5831] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B2.000B/input/input7 [ 141.956021][ T5770] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 142.019425][ T5770] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.051765][ T5770] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.084600][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.119331][ T5770] usb 2-1: Product: syz [ 142.123553][ T5770] usb 2-1: Manufacturer: syz [ 142.128141][ T5831] usb 3-1: USB disconnect, device number 10 [ 142.182333][ T5770] usb 2-1: SerialNumber: syz [ 142.226757][ T7665] fido_id[7665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 142.567860][ T7673] syz.0.650 (7673) used greatest stack depth: 20720 bytes left [ 142.823453][ T5770] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 142.838949][ T5770] cdc_ncm 2-1:1.1: bind() failure [ 142.870649][ T5770] usb 2-1: USB disconnect, device number 5 [ 143.022420][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'. [ 143.078084][ T785] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.132556][ T7694] loop0: detected capacity change from 0 to 128 [ 143.173593][ T7694] autofs4:pid:7694:autofs_fill_super: called with bogus options [ 143.277933][ T785] usb 4-1: Using ep0 maxpacket: 16 [ 143.283545][ T27] audit: type=1326 audit(1754665726.528:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 143.314699][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.336634][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.353990][ T27] audit: type=1326 audit(1754665726.528:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 143.364986][ T785] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 143.410055][ T27] audit: type=1326 audit(1754665726.528:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 143.421527][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.461751][ T7700] loop2: detected capacity change from 0 to 512 [ 143.471540][ T27] audit: type=1326 audit(1754665726.528:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 143.513434][ T27] audit: type=1326 audit(1754665726.528:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 143.517078][ T785] usb 4-1: config 0 descriptor?? [ 143.543138][ T7700] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 143.570912][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 143.582366][ T27] audit: type=1326 audit(1754665726.528:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 143.726809][ T27] audit: type=1326 audit(1754665726.968:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80d818ebe9 code=0x0 [ 144.020350][ T785] hid-multitouch 0003:1FD2:6007.000C: report_id 1023902090 is invalid [ 144.038397][ T785] hid-multitouch 0003:1FD2:6007.000C: item 0 4 1 8 parsing failed [ 144.057624][ T785] hid-multitouch: probe of 0003:1FD2:6007.000C failed with error -22 [ 144.250412][ T7726] loop2: detected capacity change from 0 to 512 [ 144.265588][ T7726] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 144.284261][ T7726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.306675][ T5831] usb 4-1: USB disconnect, device number 5 [ 144.320993][ T7726] EXT4-fs (loop2): 1 orphan inode deleted [ 144.326933][ T7726] EXT4-fs (loop2): 1 truncate cleaned up [ 144.351357][ T7726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.450094][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.818852][ T5824] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.019807][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 145.047991][ T5824] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 145.079042][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.106095][ T5824] usb 3-1: config 0 has no interface number 0 [ 145.124281][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 145.137841][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.156101][ T5824] usb 3-1: Product: syz [ 145.176346][ T5824] usb 3-1: Manufacturer: syz [ 145.197866][ T5824] usb 3-1: SerialNumber: syz [ 145.241417][ T5824] usb 3-1: config 0 descriptor?? [ 145.262691][ T5824] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 145.272629][ T5824] usb 3-1: No valid video chain found. [ 145.529839][ T5770] usb 3-1: USB disconnect, device number 11 [ 145.682222][ T7770] loop3: detected capacity change from 0 to 512 [ 145.711600][ T7770] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.695: iget: bad i_size value: 38620345925642 [ 145.724946][ T7770] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.695: couldn't read orphan inode 15 (err -117) [ 145.743729][ T7770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.830394][ T7770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.695: bg 0: block 5: invalid block bitmap [ 145.868991][ T7770] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 145.892373][ T7770] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.892373][ T7770] [ 145.904377][ T7770] EXT4-fs (loop3): Total free blocks count 0 [ 145.915332][ T7770] EXT4-fs (loop3): Free/Dirty block details [ 145.922828][ T7770] EXT4-fs (loop3): free_blocks=0 [ 145.933937][ T7770] EXT4-fs (loop3): dirty_blocks=2 [ 145.940136][ T7770] EXT4-fs (loop3): Block reservation details [ 145.946252][ T7770] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 146.048693][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.677959][ T5770] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.691906][ T7808] loop0: detected capacity change from 0 to 512 [ 146.717708][ T7808] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.761510][ T7808] EXT4-fs (loop0): 1 orphan inode deleted [ 146.770644][ T7808] EXT4-fs (loop0): 1 truncate cleaned up [ 146.777673][ T7808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.890691][ T5770] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 146.900885][ T5770] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.912882][ T5770] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.922836][ T5770] usb 3-1: config 1 has no interface number 1 [ 146.929327][ T5770] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.942637][ T5770] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 146.956083][ T5770] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.965637][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.974107][ T5770] usb 3-1: Product: syz [ 146.978709][ T5770] usb 3-1: Manufacturer: syz [ 146.983328][ T5770] usb 3-1: SerialNumber: syz [ 147.049516][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.225191][ T5770] usb 3-1: Failed to set altset [ 147.236410][ T5770] usb 3-1: 0:2: cannot create sequencer device [ 147.249290][ T5770] usb 3-1: Failed to set altset [ 147.293531][ T5770] snd-usb-audio: probe of 3-1:1.2 failed with error -71 [ 147.309944][ T5791] Bluetooth: hci3: command tx timeout [ 147.325868][ T5770] usb 3-1: USB disconnect, device number 12 [ 147.328257][ T7813] loop1: detected capacity change from 0 to 32768 [ 147.338649][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.362443][ T7813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.714 (7813) [ 147.399972][ T7813] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.431377][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.449103][ T7813] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 147.459900][ T7813] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 147.477648][ T7813] BTRFS info (device loop1): use no compression [ 147.484131][ T7813] BTRFS info (device loop1): using free space tree [ 147.542854][ T7813] BTRFS info (device loop1): enabling ssd optimizations [ 147.550490][ T7813] BTRFS info (device loop1): auto enabling async discard [ 147.558250][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 147.598023][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 147.624577][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.647187][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 147.684365][ T8] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 147.705154][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.755455][ T8] usb 4-1: config 0 descriptor?? [ 147.808432][ T5778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.038699][ T5793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5793) [ 148.185769][ T8] samsung 0003:0419:0001.000D: unknown main item tag 0x0 [ 148.230299][ T8] samsung 0003:0419:0001.000D: unknown main item tag 0x0 [ 148.259280][ T8] samsung 0003:0419:0001.000D: unknown main item tag 0x0 [ 148.286740][ T8] samsung 0003:0419:0001.000D: unknown main item tag 0x0 [ 148.325393][ T8] samsung 0003:0419:0001.000D: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 148.391978][ T8] usb 4-1: USB disconnect, device number 6 [ 148.519167][ T7854] fido_id[7854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 148.589190][ T5770] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.807912][ T5770] usb 3-1: Using ep0 maxpacket: 16 [ 148.825410][ T5770] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 65, using maximum allowed: 30 [ 148.846662][ T5770] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.873153][ T5770] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 148.907893][ T5770] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.917859][ T5770] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 148.926945][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.976179][ T5770] usb 3-1: config 0 descriptor?? [ 149.076451][ T7868] loop3: detected capacity change from 0 to 8 [ 149.259243][ T7873] tipc: Failed to obtain node identity [ 149.264849][ T7873] tipc: Enabling of bearer rejected, failed to enable media [ 149.291381][ T7860] loop0: detected capacity change from 0 to 32768 [ 149.342898][ T7860] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.387972][ T7860] XFS (loop0): Ending clean mount [ 149.410712][ T7860] XFS (loop0): Quotacheck needed: Please wait. [ 149.432204][ T5770] kye 0003:0458:5013.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 149.459149][ T5770] kye 0003:0458:5013.000E: unknown main item tag 0x0 [ 149.465987][ T5770] kye 0003:0458:5013.000E: unknown main item tag 0x0 [ 149.473398][ T5770] kye 0003:0458:5013.000E: unknown main item tag 0x0 [ 149.486136][ T5770] kye 0003:0458:5013.000E: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 149.521492][ T7860] XFS (loop0): Quotacheck: Done. [ 149.530467][ T5770] kye 0003:0458:5013.000E: tablet-enabling feature report not found [ 149.558486][ T5770] kye 0003:0458:5013.000E: tablet enabling failed [ 149.656722][ T7885] loop3: detected capacity change from 0 to 4096 [ 149.669193][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.743172][ T8] usb 3-1: USB disconnect, device number 13 [ 150.096233][ T7888] loop3: detected capacity change from 0 to 1024 [ 150.131806][ T7888] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 150.225152][ T7888] hfsplus: bad catalog entry type [ 150.398338][ T7897] delete_channel: no stack [ 150.454779][ T7900] loop3: detected capacity change from 0 to 256 [ 150.800523][ T27] audit: type=1400 audit(1754665734.038:49): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F2605 pid=7913 comm="syz.3.751" [ 150.902726][ T7918] ALSA: mixer_oss: invalid OSS volume '' [ 151.220459][ T7923] loop3: detected capacity change from 0 to 4096 [ 151.249925][ T7923] ntfs3: loop3: ino=3, Correct links count -> 2. [ 151.437122][ T7923] ntfs3: loop3: failed to convert "0080" to cp874 [ 151.469584][ T7923] ntfs3: loop3: failed to convert name for inode 1e. [ 151.480736][ T7908] loop0: detected capacity change from 0 to 32768 [ 151.519489][ T7908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.749 (7908) [ 151.565450][ T7930] bridge0: entered promiscuous mode [ 151.581911][ T7930] macvlan2: entered promiscuous mode [ 151.596568][ T7908] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.628598][ T7908] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 151.637311][ T7908] BTRFS info (device loop0): using free space tree [ 151.719906][ T7917] loop2: detected capacity change from 0 to 32768 [ 151.766877][ T7917] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 151.914113][ T7908] BTRFS info (device loop0): enabling ssd optimizations [ 151.932295][ T7908] BTRFS info (device loop0): auto enabling async discard [ 151.986097][ T5773] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 152.137658][ T7954] loop1: detected capacity change from 0 to 256 [ 152.197667][ T7954] exfat: Deprecated parameter 'utf8' [ 152.208099][ T7954] exfat: Deprecated parameter 'utf8' [ 152.217013][ T7954] exfat: Deprecated parameter 'utf8' [ 152.283807][ T7954] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 152.298044][ T5831] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 152.330533][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.558153][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.587902][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 152.596874][ T5831] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 152.667979][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.710226][ T5831] usb 4-1: config 0 descriptor?? [ 152.725562][ T5831] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 152.783904][ T5831] dvb-usb: bulk message failed: -22 (3/0) [ 152.809964][ T5831] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.843556][ T5831] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.866228][ T5831] usb 4-1: media controller created [ 152.888890][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.932179][ T7952] dvb-usb: bulk message failed: -22 (2/0) [ 152.958004][ T7952] dvb-usb: bulk message failed: -22 (4/0) [ 152.983752][ T5831] dvb-usb: bulk message failed: -22 (6/0) [ 153.006845][ T5831] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 153.035900][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 153.083978][ T5831] dvb-usb: schedule remote query interval to 150 msecs. [ 153.098032][ T5831] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 153.137709][ T5831] usb 4-1: USB disconnect, device number 7 [ 153.278945][ T5831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 154.193835][ T8012] loop3: detected capacity change from 0 to 4096 [ 154.372396][ T8012] ntfs3: loop3: failed to convert "0000" to iso8859-4 [ 154.434045][ T8012] ntfs3: loop3: failed to convert name for inode 1e. [ 154.511688][ T7996] loop0: detected capacity change from 0 to 32768 [ 154.531266][ T7996] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.783 (7996) [ 154.588347][ T7996] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.602324][ T7996] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 154.612519][ T7996] BTRFS info (device loop0): use zlib compression, level 3 [ 154.620646][ T7996] BTRFS info (device loop0): turning on sync discard [ 154.627639][ T7996] BTRFS info (device loop0): doing ref verification [ 154.634854][ T7996] BTRFS info (device loop0): disabling tree log [ 154.651128][ T7996] BTRFS info (device loop0): enabling tree log [ 154.657485][ T7996] BTRFS info (device loop0): enabling ssd optimizations [ 154.673977][ T7996] BTRFS info (device loop0): using spread ssd allocation scheme [ 154.683577][ T7996] BTRFS info (device loop0): not using ssd optimizations [ 154.693575][ T7996] BTRFS info (device loop0): not using spread ssd allocation scheme [ 154.703656][ T7996] BTRFS info (device loop0): using free space tree [ 154.759113][ T5844] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 154.961698][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.990633][ T5844] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.003390][ T8016] loop2: detected capacity change from 0 to 32768 [ 155.018521][ T5844] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 155.046833][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.049025][ T8016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.792 (8016) [ 155.068290][ T5781] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.078904][ T5844] usb 2-1: config 0 descriptor?? [ 155.139206][ T5844] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 155.145898][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 155.149931][ T8016] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.200703][ T8016] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 155.213558][ T8016] BTRFS info (device loop2): using free space tree [ 155.219575][ T5844] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 155.260690][ T5844] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 155.274505][ T5844] usb 2-1: media controller created [ 155.291648][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.345179][ T8020] dvb-usb: bulk message failed: -22 (2/0) [ 155.387688][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 155.405948][ T8020] dvb-usb: bulk message failed: -22 (4/0) [ 155.411926][ T5844] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 155.436798][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 155.499520][ T8016] BTRFS info (device loop2): enabling ssd optimizations [ 155.506538][ T8016] BTRFS info (device loop2): auto enabling async discard [ 155.516759][ T5844] dvb-usb: schedule remote query interval to 150 msecs. [ 155.577342][ T5844] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 155.640253][ T5844] usb 2-1: USB disconnect, device number 6 [ 155.963629][ T5779] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.994934][ T5844] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 156.558426][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 156.813268][ T8088] loop1: detected capacity change from 0 to 256 [ 157.247699][ T8106] loop3: detected capacity change from 0 to 128 [ 157.294311][ T8106] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 157.327201][ T8108] loop1: detected capacity change from 0 to 256 [ 157.355535][ T8108] exfat: Deprecated parameter 'utf8' [ 157.368483][ T8110] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 157.406781][ T8108] exfat: Deprecated parameter 'namecase' [ 157.426946][ T8108] exfat: Deprecated parameter 'utf8' [ 157.447823][ T8106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.471087][ T8110] CIFS mount error: No usable UNC path provided in device string! [ 157.471087][ T8110] [ 157.483483][ T8110] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 157.539871][ T8108] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 157.769737][ T8117] netlink: 256 bytes leftover after parsing attributes in process `syz.0.812'. [ 157.809004][ T8117] netlink: 72 bytes leftover after parsing attributes in process `syz.0.812'. [ 159.124286][ T8133] loop2: detected capacity change from 0 to 1024 [ 159.143732][ T8133] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 159.209411][ T8136] loop1: detected capacity change from 0 to 1024 [ 159.223471][ T8136] EXT4-fs: Ignoring removed nobh option [ 159.236863][ T8133] hfsplus: bad catalog entry type [ 159.248921][ T8136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.297089][ T8136] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.327852][ T785] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.348886][ T8136] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.820: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 159.370116][ T8136] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.820: couldn't read orphan inode 11 (err -117) [ 159.388358][ T8136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.509293][ T8136] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.820: Invalid block bitmap block 0 in block_group 0 [ 159.524376][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 159.558205][ T785] usb 4-1: Using ep0 maxpacket: 8 [ 159.588202][ T8136] Quota error (device loop1): write_blk: dquota write failed [ 159.590190][ T785] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 159.596555][ T8136] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 159.596667][ T8136] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.820: Failed to acquire dquot type 0 [ 159.664564][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.706609][ T785] usb 4-1: Product: syz [ 159.710974][ T785] usb 4-1: Manufacturer: syz [ 159.715693][ T785] usb 4-1: SerialNumber: syz [ 159.749189][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.770913][ T785] usb 4-1: config 0 descriptor?? [ 159.774146][ T1098] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 159.797938][ T1098] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 0 [ 159.801044][ T785] gspca_main: se401-2.14.0 probing 047d:5003 [ 160.032102][ T8159] loop1: detected capacity change from 0 to 16 [ 160.060922][ T8159] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.099138][ T8162] loop2: detected capacity change from 0 to 1024 [ 160.115264][ T27] audit: type=1800 audit(1754665743.358:50): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.827" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 160.202536][ T785] gspca_se401: Wrong descriptor type [ 160.382701][ T8171] loop0: detected capacity change from 0 to 256 [ 160.476510][ T8171] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 160.503685][ T785] usb 4-1: USB disconnect, device number 8 [ 160.703398][ T27] audit: type=1326 audit(1754665743.948:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 160.781517][ T27] audit: type=1326 audit(1754665743.948:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 160.804581][ T27] audit: type=1326 audit(1754665743.978:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c10b8d550 code=0x7ffc0000 [ 160.873185][ T27] audit: type=1326 audit(1754665743.978:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c10b8d550 code=0x7ffc0000 [ 160.909116][ T27] audit: type=1326 audit(1754665743.978:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 160.932695][ T27] audit: type=1326 audit(1754665743.978:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c10b8ebe9 code=0x7ffc0000 [ 161.167968][ T5824] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.200170][ T8197] loop2: detected capacity change from 0 to 64 [ 161.229636][ T8197] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 161.286488][ T8197] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 161.360158][ T5824] usb 1-1: config 0 has an invalid interface number: 37 but max is 0 [ 161.377580][ T5824] usb 1-1: config 0 has no interface number 0 [ 161.405046][ T5824] usb 1-1: config 0 interface 37 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.425048][ T5824] usb 1-1: config 0 interface 37 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.436808][ T5824] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.453994][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.471015][ T8205] netlink: 588 bytes leftover after parsing attributes in process `syz.1.852'. [ 161.489131][ T5824] usb 1-1: config 0 descriptor?? [ 161.805419][ T8215] loop3: detected capacity change from 0 to 512 [ 161.863876][ T8215] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.858: iget: bad extended attribute block 1 [ 161.921762][ T8215] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.858: couldn't read orphan inode 15 (err -117) [ 161.949140][ T5824] uclogic 0003:256C:006D.000F: interface is invalid, ignoring [ 161.985266][ T8215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.043611][ T8221] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 162.089554][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.203856][ T785] usb 1-1: USB disconnect, device number 5 [ 162.236706][ T8211] loop1: detected capacity change from 0 to 32768 [ 162.296592][ T8211] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.475244][ T8211] XFS (loop1): Ending clean mount [ 162.489767][ T8211] XFS (loop1): Quotacheck needed: Please wait. [ 162.566301][ T8211] XFS (loop1): Quotacheck: Done. [ 162.666360][ T5778] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.193463][ T8257] loop3: detected capacity change from 0 to 128 [ 163.230164][ T8259] loop2: detected capacity change from 0 to 256 [ 163.267582][ T8259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 163.409053][ T5824] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.608070][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 163.621135][ T5824] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.648515][ T5824] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.691142][ T5824] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.707075][ T5824] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 163.726625][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.753988][ T5824] usb 2-1: config 0 descriptor?? [ 163.939983][ T8278] loop0: detected capacity change from 0 to 4096 [ 164.009928][ T8283] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.188955][ T5824] redragon 0003:0C45:760B.0010: item fetching failed at offset 0/4 [ 164.197702][ T5824] redragon: probe of 0003:0C45:760B.0010 failed with error -22 [ 164.457531][ T5824] usb 2-1: USB disconnect, device number 7 [ 164.778009][ T5845] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 164.979671][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.996966][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.007478][ T5845] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 165.017025][ T8316] loop3: detected capacity change from 0 to 1024 [ 165.028077][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.067062][ T5845] usb 1-1: config 0 descriptor?? [ 165.090334][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 165.090348][ T27] audit: type=1800 audit(1754665748.328:60): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.901" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 165.132192][ T8316] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.193237][ T8316] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.494132][ T5845] isku 0003:1E7D:319C.0011: item fetching failed at offset 5/7 [ 165.521012][ T5845] isku 0003:1E7D:319C.0011: parse failed [ 165.533223][ T5845] isku: probe of 0003:1E7D:319C.0011 failed with error -22 [ 165.710851][ T5824] usb 1-1: USB disconnect, device number 6 [ 165.952326][ T8337] capability: warning: `syz.2.911' uses 32-bit capabilities (legacy support in use) [ 166.342184][ T8344] loop2: detected capacity change from 0 to 512 [ 166.359254][ T8344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.394769][ T8344] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.416568][ T8331] loop1: detected capacity change from 0 to 32768 [ 166.427126][ T8331] XFS: ikeep mount option is deprecated. [ 166.443805][ T8344] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 166.459127][ T8344] EXT4-fs (loop2): 1 truncate cleaned up [ 166.466401][ T8344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.526506][ T8331] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.561111][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.623317][ T8331] XFS (loop1): Ending clean mount [ 166.655203][ T8331] XFS (loop1): Quotacheck needed: Please wait. [ 166.771673][ T8331] XFS (loop1): Quotacheck: Done. [ 166.811810][ T8339] loop3: detected capacity change from 0 to 32768 [ 167.046115][ T5778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.310251][ T8373] loop0: detected capacity change from 0 to 22 [ 167.317532][ T8373] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 167.364757][ T8373] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 167.521286][ T8377] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 167.537178][ T8377] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 167.587126][ T8377] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 167.628420][ T8377] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 167.634914][ T8377] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 167.661966][ T8377] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 167.670366][ T8377] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 167.677360][ T8377] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 167.684898][ T8377] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 167.694098][ T8377] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 167.748066][ T8377] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 167.758145][ T8377] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 167.764723][ T8377] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 167.780176][ T8377] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 167.780258][ T8377] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 167.780294][ T8377] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 167.780329][ T8377] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 167.780369][ T8377] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 167.780467][ T8377] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 167.780506][ T8377] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 167.780545][ T8377] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 167.780583][ T8377] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 168.129921][ T8393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.934'. [ 168.477931][ T8403] loop0: detected capacity change from 0 to 2048 [ 168.562117][ T8403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.619762][ T8403] MPI: mpi too large (113288 bits) [ 168.667181][ T8412] loop3: detected capacity change from 0 to 4096 [ 168.684719][ T8412] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 168.723900][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.777330][ T8453] loop3: detected capacity change from 0 to 16 [ 169.850208][ T8453] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.903635][ T8453] syz.3.962: attempt to access beyond end of device [ 169.903635][ T8453] loop3: rw=0, sector=3489784, nr_sectors = 8 limit=16 [ 170.278871][ T8460] netlink: 71 bytes leftover after parsing attributes in process `syz.3.965'. [ 170.542697][ T8446] loop2: detected capacity change from 0 to 32768 [ 170.578930][ T8464] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 ! [ 170.619117][ T8446] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.798891][ T8476] tipc: Invalid UDP bearer configuration [ 170.798950][ T8476] tipc: Enabling of bearer rejected, failed to enable media [ 170.860010][ T8446] XFS (loop2): Ending clean mount [ 170.872513][ T8446] XFS (loop2): Quotacheck needed: Please wait. [ 170.913612][ T8455] loop0: detected capacity change from 0 to 32768 [ 170.940267][ T8455] XFS: ikeep mount option is deprecated. [ 171.020704][ T8455] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.048939][ T8446] XFS (loop2): Quotacheck: Done. [ 171.195572][ T8455] XFS (loop0): Ending clean mount [ 171.226106][ T8455] XFS (loop0): Quotacheck needed: Please wait. [ 171.343442][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.394897][ T8455] XFS (loop0): Quotacheck: Done. [ 171.622107][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.918116][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.975'. [ 172.205721][ T27] audit: type=1326 audit(1754665755.448:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febe638ebe9 code=0x0 [ 172.408238][ T27] audit: type=1326 audit(1754665755.648:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.2.990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c10b8ebe9 code=0x0 [ 172.408907][ T8510] loop1: detected capacity change from 0 to 32768 [ 172.466830][ T8510] JBD2: Ignoring recovery information on journal [ 172.499758][ T8510] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 172.603978][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 173.185480][ T8544] loop1: detected capacity change from 0 to 512 [ 173.266368][ T8544] EXT4-fs (loop1): 1 orphan inode deleted [ 173.276599][ T8544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.291003][ T1015] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 173.306964][ T8544] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.317941][ T1015] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1 [ 173.486442][ T27] audit: type=1800 audit(1754665756.718:63): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.996" name="bus" dev="loop1" ino=16 res=0 errno=0 [ 173.604452][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.695432][ T8562] loop3: detected capacity change from 0 to 2048 [ 173.764451][ T8562] loop3: p1 < > p4 [ 173.786613][ T8562] loop3: p4 size 8388608 extends beyond EOD, truncated [ 173.837212][ T5155] loop3: p1 < > p4 [ 173.862377][ T5155] loop3: p4 size 8388608 extends beyond EOD, truncated [ 174.340542][ T8580] loop3: detected capacity change from 0 to 1024 [ 174.352878][ T8580] hfsplus: failed to load catalog file [ 174.498027][ T5844] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 174.704773][ T5844] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 174.728019][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.730498][ T5844] usb 3-1: config 0 descriptor?? [ 174.761448][ T5844] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 174.768871][ T5844] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 174.784602][ T8586] loop1: detected capacity change from 0 to 512 [ 174.808594][ T8586] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 174.808739][ T8586] System zones: 0-7 [ 174.824422][ T8586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.912498][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.067669][ T785] usb 3-1: USB disconnect, device number 14 [ 175.137685][ T8592] loop0: detected capacity change from 0 to 512 [ 175.169269][ T8592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.169390][ T8592] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.223270][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.704560][ T8609] loop1: detected capacity change from 0 to 2048 [ 175.714580][ T8610] loop0: detected capacity change from 0 to 2048 [ 175.738151][ T8609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.793784][ T8610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.854715][ T8610] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 175.996042][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.162659][ T8623] loop0: detected capacity change from 0 to 512 [ 176.232388][ T8623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.299122][ T8623] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.523743][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.690254][ T8638] sp0: Synchronizing with TNC [ 176.780561][ T8627] loop1: detected capacity change from 0 to 32768 [ 176.811256][ T8627] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.845027][ T8627] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 176.874683][ T8627] BTRFS info (device loop1): using free space tree [ 177.069298][ T8627] BTRFS info (device loop1): enabling ssd optimizations [ 177.076427][ T8627] BTRFS info (device loop1): auto enabling async discard [ 177.202279][ T8652] loop2: detected capacity change from 0 to 4096 [ 177.225511][ T8669] loop3: detected capacity change from 0 to 2048 [ 177.233290][ T8652] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 177.242981][ T5778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.307395][ T8669] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 177.328433][ T8669] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 177.357324][ T8669] UDF-fs: Scanning with blocksize 512 failed [ 177.403191][ T8652] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 177.417665][ T8669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.376931][ T8690] loop2: detected capacity change from 0 to 2048 [ 178.418376][ T8671] loop0: detected capacity change from 0 to 32768 [ 178.435506][ T8690] loop2: p1 < > p4 [ 178.450589][ T8690] loop2: p4 size 8388608 extends beyond EOD, truncated [ 178.597864][ T5824] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 178.620461][ T8671] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 178.620461][ T8671] [ 178.697887][ T8671] ERROR: (device loop0): remounting filesystem as read-only [ 178.719145][ T8682] loop1: detected capacity change from 0 to 32768 [ 178.725737][ T8671] ialloc: diAlloc returned -5! [ 178.800841][ T8682] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.824000][ T5824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.831805][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 178.865001][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.915371][ T5824] usb 4-1: config 0 descriptor?? [ 178.962555][ T8682] XFS (loop1): Ending clean mount [ 178.997416][ T8682] XFS (loop1): Quotacheck needed: Please wait. [ 179.047389][ T8682] XFS (loop1): Quotacheck: Done. [ 179.068906][ T8699] loop2: detected capacity change from 0 to 1024 [ 179.142264][ T8699] hfsplus: failed to load catalog file [ 179.233454][ T5793] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.343516][ T5778] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.612535][ T5824] video4linux radio48: keene_cmd_set failed (-71) [ 179.658162][ T5824] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 179.673633][ T5824] usb 4-1: USB disconnect, device number 9 [ 179.819021][ T8706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1054'. [ 179.998262][ T5770] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 180.020952][ T8715] netlink: 'syz.0.1059': attribute type 28 has an invalid length. [ 180.133769][ T5831] kernel write not supported for file /vcs (pid: 5831 comm: kworker/0:4) [ 180.167864][ T5845] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.205104][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 180.216506][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.228590][ T5770] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 180.238191][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.249620][ T5770] usb 3-1: config 0 descriptor?? [ 180.358400][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 180.368950][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.400396][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.411646][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.437596][ T5845] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 180.457168][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.479458][ T5845] usb 2-1: config 0 descriptor?? [ 180.704143][ T5770] kye 0003:0458:5005.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 180.736388][ T5770] kye 0003:0458:5005.0012: unknown main item tag 0x2 [ 180.768733][ T5770] kye 0003:0458:5005.0012: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 180.787855][ T5770] kye 0003:0458:5005.0012: tablet-enabling feature report not found [ 180.815525][ T5770] kye 0003:0458:5005.0012: tablet enabling failed [ 180.904888][ T5845] ryos 0003:1E7D:31CE.0013: unbalanced collection at end of report description [ 180.936277][ T5845] ryos 0003:1E7D:31CE.0013: parse failed [ 180.952411][ T5845] ryos: probe of 0003:1E7D:31CE.0013 failed with error -22 [ 180.962330][ T5824] usb 3-1: USB disconnect, device number 15 [ 181.097863][ T5844] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 181.118571][ T5845] usb 2-1: USB disconnect, device number 8 [ 181.290502][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.312158][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 181.331082][ T5844] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 181.347808][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.355418][ T8747] loop0: detected capacity change from 0 to 512 [ 181.361244][ T5844] usb 4-1: config 0 descriptor?? [ 181.375372][ T8747] EXT4-fs: Ignoring removed bh option [ 181.399081][ T8747] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.409742][ T8747] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 181.428083][ T8747] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 181.444536][ T8747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 181.458665][ T8747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.518488][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.824632][ T5844] konepure 0003:1E7D:2DB4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 181.848876][ T8759] loop0: detected capacity change from 0 to 256 [ 181.896560][ T8757] loop1: detected capacity change from 0 to 1024 [ 182.003721][ T8757] hfsplus: bad catalog entry type [ 182.009082][ T5844] usb 4-1: USB disconnect, device number 10 [ 182.024797][ T8761] fido_id[8761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 182.157087][ T1098] hfsplus: b-tree write err: -5, ino 4 [ 182.617065][ T8764] loop0: detected capacity change from 0 to 32768 [ 182.664627][ T8764] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1081 (8764) [ 182.690598][ T8774] loop3: detected capacity change from 0 to 64 [ 182.727322][ T8764] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.769370][ T8764] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 182.792150][ T8776] sp0: Synchronizing with TNC [ 182.814582][ T8775] [U] è [ 182.816423][ T8764] BTRFS info (device loop0): enabling auto defrag [ 182.850473][ T8764] BTRFS info (device loop0): doing ref verification [ 182.868675][ T8764] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 182.912482][ T8764] BTRFS info (device loop0): trying to use backup root at mount time [ 182.926172][ T8764] BTRFS info (device loop0): max_inline at 4096 [ 182.943069][ T8764] BTRFS info (device loop0): enabling ssd optimizations [ 182.964668][ T8766] loop2: detected capacity change from 0 to 32768 [ 182.971004][ T8764] BTRFS info (device loop0): using spread ssd allocation scheme [ 183.017611][ T8764] BTRFS info (device loop0): using free space tree [ 183.049928][ T8766] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.158759][ T8764] BTRFS info (device loop0): auto enabling async discard [ 183.298281][ T5781] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.333235][ T8766] XFS (loop2): Ending clean mount [ 183.382209][ T8766] XFS (loop2): Quotacheck needed: Please wait. [ 183.502057][ T785] kernel write not supported for file /vcs (pid: 785 comm: kworker/1:2) [ 183.592960][ T8766] XFS (loop2): Quotacheck: Done. [ 183.732706][ T5908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop0 scanned by udevd (5908) [ 183.921752][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.003061][ T8803] loop1: detected capacity change from 0 to 32768 [ 184.185526][ T8821] loop3: detected capacity change from 0 to 1764 [ 184.586380][ T8823] loop0: detected capacity change from 0 to 4096 [ 184.624876][ T8825] loop1: detected capacity change from 0 to 4096 [ 184.648505][ T8823] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 184.781480][ T8823] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 184.866420][ T8825] ntfs3: loop1: failed to convert "0000" to iso8859-1 [ 184.918047][ T8825] ntfs3: loop1: failed to convert name for inode 1e. [ 185.394436][ T8846] loop1: detected capacity change from 0 to 512 [ 185.404641][ T8845] loop0: detected capacity change from 0 to 2048 [ 185.426875][ T8846] EXT4-fs: Ignoring removed bh option [ 185.434997][ T8845] NILFS (loop0): couldn't find nilfs on the device [ 185.471124][ T8846] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.495564][ T8846] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 185.523611][ T5908] udevd[5908]: incorrect nilfs2 checksum on /dev/loop0 [ 185.578958][ T8846] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 185.638444][ T8846] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 185.694645][ T8846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.900129][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.011180][ T8834] loop2: detected capacity change from 0 to 40427 [ 186.061532][ T8834] F2FS-fs (loop2): heap/no_heap options were deprecated [ 186.075364][ T8834] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 186.104359][ T8834] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77e8c [ 186.130605][ T8834] F2FS-fs (loop2): invalid crc value [ 186.196853][ T8834] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 186.235715][ T8834] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.366511][ T8834] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 186.464112][ T8834] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 186.544843][ T8834] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.771594][ T5779] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 186.792379][ T5779] F2FS-fs (loop2): invalid blkaddr: 1024, type: 10, run fsck to fix. [ 186.806370][ T5779] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 186.818095][ T5779] F2FS-fs (loop2): invalid blkaddr: 512, type: 10, run fsck to fix. [ 186.838731][ T5779] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 186.861372][ T5779] F2FS-fs (loop2): invalid blkaddr: 1025, type: 10, run fsck to fix. [ 187.340823][ T8903] syz.1.1131 uses obsolete (PF_INET,SOCK_PACKET) [ 187.669979][ T8911] sp0: Synchronizing with TNC [ 187.698654][ T8910] [U] è [ 187.983879][ T8900] loop2: detected capacity change from 0 to 32768 [ 188.037936][ T8900] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1127 (8900) [ 188.119513][ T8900] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.146742][ T8900] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 188.177110][ T8900] BTRFS info (device loop2): using free space tree [ 188.331334][ T8900] BTRFS info (device loop2): enabling ssd optimizations [ 188.339198][ T8900] BTRFS info (device loop2): auto enabling async discard [ 188.347975][ T5824] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.535477][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 188.557878][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.586246][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.599841][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 188.613640][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.617858][ T5824] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 188.657821][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.706167][ T5824] usb 1-1: config 0 descriptor?? [ 188.752747][ T5793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5793) [ 188.838306][ T8957] loop1: detected capacity change from 0 to 4096 [ 188.880096][ T8957] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 188.983051][ T8957] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 189.013822][ T5824] usbhid 1-1:0.0: can't add hid device: -71 [ 189.017843][ T8957] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 189.041436][ T5824] usbhid: probe of 1-1:0.0 failed with error -71 [ 189.069708][ T5824] usb 1-1: USB disconnect, device number 7 [ 189.079852][ T8957] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 189.168661][ T8957] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 189.248433][ T8957] ntfs: volume version 3.1. [ 189.293913][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 189.333727][ T8957] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 189.427186][ T8957] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 189.537973][ T8974] netlink: 'syz.3.1161': attribute type 3 has an invalid length. [ 189.846835][ T8986] loop3: detected capacity change from 0 to 1024 [ 189.864410][ T8986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.899756][ T8986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.922822][ T8989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1166'. [ 190.004044][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.688616][ T9009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.818078][ T9013] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 190.892137][ T9013] batman_adv: batadv0: Adding interface: team0 [ 190.908085][ T9013] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.941600][ T9013] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 190.955642][ T9014] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 190.978099][ T9014] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1177'. [ 191.013641][ T9014] team0: entered promiscuous mode [ 191.019171][ T9014] team_slave_0: entered promiscuous mode [ 191.032810][ T9014] team_slave_1: entered promiscuous mode [ 191.043248][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.051478][ T9014] batman_adv: batadv0: Interface activated: team0 [ 191.058810][ T9014] batman_adv: batadv0: Interface deactivated: team0 [ 191.065721][ T9014] batman_adv: batadv0: Removing interface: team0 [ 191.081750][ T9014] bridge0: port 3(team0) entered blocking state [ 191.088597][ T9014] bridge0: port 3(team0) entered disabled state [ 191.095210][ T9014] team0: entered allmulticast mode [ 191.106845][ T9014] team_slave_0: entered allmulticast mode [ 191.114158][ T9014] team_slave_1: entered allmulticast mode [ 191.152267][ T9014] bridge0: port 3(team0) entered blocking state [ 191.159233][ T9014] bridge0: port 3(team0) entered forwarding state [ 191.207223][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.334560][ T9017] bridge_slave_1 (unregistering): left allmulticast mode [ 191.346358][ T9017] bridge_slave_1 (unregistering): left promiscuous mode [ 191.359074][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.469984][ T5101] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.472770][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 191.476090][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 191.562122][ T5831] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.763563][ T5831] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 191.776300][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1192'. [ 191.797944][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.806000][ T5831] usb 2-1: Product: syz [ 191.837831][ T5831] usb 2-1: Manufacturer: syz [ 191.842494][ T5831] usb 2-1: SerialNumber: syz [ 191.862903][ T9047] xt_CT: No such helper "syz1" [ 191.885963][ T5831] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 191.963684][ T5845] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.306130][ T9062] lo: entered promiscuous mode [ 192.317987][ T9061] lo: left promiscuous mode [ 192.421027][ T9064] bridge0: entered promiscuous mode [ 192.425293][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 192.610297][ T785] usb 2-1: USB disconnect, device number 9 [ 192.849319][ T9056] loop3: detected capacity change from 0 to 40427 [ 192.870040][ T9056] F2FS-fs (loop3): heap/no_heap options were deprecated [ 192.888343][ T9056] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 192.911768][ T9056] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77e8c [ 192.951784][ T9056] F2FS-fs (loop3): invalid crc value [ 192.978044][ T9056] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 193.003385][ T5845] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 193.029299][ T9056] F2FS-fs (loop3): Found nat_bits in checkpoint [ 193.034501][ T5845] ath9k_htc: Failed to initialize the device [ 193.068150][ T785] usb 2-1: ath9k_htc: USB layer deinitialized [ 193.115136][ T9056] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 193.151919][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 193.218405][ T9056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.277877][ T5770] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.392411][ T5785] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 193.423281][ C0] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 193.434686][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 193.442011][ T5785] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 193.507952][ T5770] usb 1-1: Using ep0 maxpacket: 16 [ 193.528620][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.564950][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.574418][ T9101] veth1_to_bridge: entered promiscuous mode [ 193.593806][ T9101] veth1_to_bridge: left promiscuous mode [ 193.600598][ T5770] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.616307][ T5770] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.626398][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.662281][ T5770] usb 1-1: config 0 descriptor?? [ 193.796625][ T9103] loop3: detected capacity change from 0 to 64 [ 193.821351][ T9103] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 193.865268][ T9103] block device autoloading is deprecated and will be removed. [ 193.988065][ T9107] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 194.022580][ T9107] batman_adv: batadv0: Adding interface: team0 [ 194.037632][ T9107] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.072202][ T9107] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 194.094021][ T9110] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 194.096613][ T5770] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0015/input/input15 [ 194.136991][ T9110] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1219'. [ 194.158816][ T5770] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 194.180411][ T9110] team0: entered promiscuous mode [ 194.206045][ T9110] team_slave_0: entered promiscuous mode [ 194.238079][ T9110] team_slave_1: entered promiscuous mode [ 194.257097][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.287309][ T9110] batman_adv: batadv0: Interface activated: team0 [ 194.337901][ T9110] batman_adv: batadv0: Interface deactivated: team0 [ 194.344606][ T9110] batman_adv: batadv0: Removing interface: team0 [ 194.400464][ T9110] bridge0: port 3(team0) entered blocking state [ 194.407053][ T9110] bridge0: port 3(team0) entered disabled state [ 194.421281][ T5831] usb 1-1: USB disconnect, device number 8 [ 194.435038][ T9110] team0: entered allmulticast mode [ 194.443161][ T9110] team_slave_0: entered allmulticast mode [ 194.452823][ T9110] team_slave_1: entered allmulticast mode [ 194.487632][ T9110] bridge0: port 3(team0) entered blocking state [ 194.494108][ T9110] bridge0: port 3(team0) entered forwarding state [ 194.520169][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.598203][ T5770] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 194.697809][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.765878][ T9123] bridge_slave_1 (unregistering): left allmulticast mode [ 194.773292][ T9123] bridge_slave_1 (unregistering): left promiscuous mode [ 194.780901][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.797856][ T5770] usb 3-1: Using ep0 maxpacket: 8 [ 194.821884][ T5770] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.837378][ T5770] usb 3-1: config 179 has no interface number 0 [ 194.844497][ T5770] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 194.857423][ T5770] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 194.869374][ T5770] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.881441][ T5770] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 194.891943][ T5770] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.905605][ T5770] usb 3-1: config 179 interface 65 has no altsetting 0 [ 194.912842][ T5770] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 194.926799][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.943220][ T9115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 195.002168][ T5770] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 195.460435][ T5770] usb 3-1: USB disconnect, device number 16 [ 195.460514][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.475482][ T50] Bluetooth: hci3: command tx timeout [ 195.484033][ T5770] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 195.553414][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 195.620049][ T9143] loop3: detected capacity change from 0 to 4096 [ 195.629179][ T9143] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.641831][ T9143] EXT4-fs (loop3): Test dummy encryption mode enabled [ 195.706209][ T9143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.961735][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.349473][ T9164] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 196.378151][ T9164] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 196.385024][ T9164] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 196.465572][ T9166] loop3: detected capacity change from 0 to 1024 [ 196.482988][ T9168] loop1: detected capacity change from 0 to 512 [ 196.530114][ T9166] hfsplus: invalid catalog entry type in lookup [ 196.565217][ T9168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.646260][ T9168] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.672970][ T9151] loop0: detected capacity change from 0 to 40427 [ 196.687915][ T9151] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 196.696547][ T9151] F2FS-fs (loop0): Image doesn't support compression [ 196.704191][ T9151] F2FS-fs (loop0): Image doesn't support compression [ 196.755310][ T9151] F2FS-fs (loop0): invalid crc value [ 196.790309][ T9151] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.812378][ T27] audit: type=1804 audit(1754665780.058:64): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1247" name="/newroot/326/file1/syzkallers" dev="loop1" ino=18 res=1 errno=0 [ 196.904518][ T9151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.906183][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.116793][ T9181] loop3: detected capacity change from 0 to 4096 [ 197.126580][ T9181] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 197.148786][ T5781] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 197.180731][ T5781] F2FS-fs (loop0): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 197.196459][ T9181] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 197.214389][ T9181] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 197.225451][ T9181] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 197.239765][ T9181] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 197.304854][ T9181] ntfs: volume version 3.1. [ 197.400073][ T9181] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 197.450027][ T9181] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 197.785368][ T9197] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 197.814907][ T9197] (unnamed net_device) (uninitialized): option mode: invalid value (145) [ 197.840040][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 198.141891][ T9211] loop0: detected capacity change from 0 to 256 [ 198.168352][ T9211] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.201381][ T9211] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 198.246711][ T9211] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 198.415117][ T9217] loop3: detected capacity change from 0 to 4096 [ 198.489845][ T9222] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.723309][ T9230] loop3: detected capacity change from 0 to 64 [ 198.879910][ T9234] loop0: detected capacity change from 0 to 512 [ 198.899680][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.937142][ T9234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.963484][ T9234] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.013512][ T9232] bridge_slave_1 (unregistering): left allmulticast mode [ 199.030102][ T27] audit: type=1804 audit(1754665782.268:65): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1276" name="/newroot/322/file1/syzkallers" dev="loop0" ino=18 res=1 errno=0 [ 199.032537][ T9232] bridge_slave_1 (unregistering): left promiscuous mode [ 199.077986][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.106361][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.226811][ T9243] loop0: detected capacity change from 0 to 256 [ 199.270095][ T9243] FAT-fs (loop0): Directory bread(block 64) failed [ 199.276847][ T9243] FAT-fs (loop0): Directory bread(block 65) failed [ 199.284563][ T9243] FAT-fs (loop0): Directory bread(block 66) failed [ 199.294852][ T9243] FAT-fs (loop0): Directory bread(block 67) failed [ 199.302065][ T9243] FAT-fs (loop0): Directory bread(block 68) failed [ 199.310202][ T9243] FAT-fs (loop0): Directory bread(block 69) failed [ 199.317045][ T9243] FAT-fs (loop0): Directory bread(block 70) failed [ 199.335157][ T9243] FAT-fs (loop0): Directory bread(block 71) failed [ 199.351459][ T9243] FAT-fs (loop0): Directory bread(block 72) failed [ 199.367931][ T9243] FAT-fs (loop0): Directory bread(block 73) failed [ 199.445865][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 199.801109][ T9257] loop2: detected capacity change from 0 to 128 [ 199.865421][ T27] audit: type=1800 audit(1754665783.108:66): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1286" name="file2" dev="loop2" ino=1048673 res=0 errno=0 [ 199.874830][ T9257] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 199.889499][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.937934][ T9257] FAT-fs (loop2): Filesystem has been set read-only [ 200.013593][ T9259] loop0: detected capacity change from 0 to 1024 [ 200.055482][ T9259] hfsplus: invalid catalog entry type in lookup [ 200.279334][ T9267] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 200.289857][ T9267] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1291'. [ 200.372344][ T9264] loop0: detected capacity change from 0 to 4096 [ 201.317144][ T9270] loop3: detected capacity change from 0 to 40427 [ 201.351641][ T9270] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 201.399855][ T9270] F2FS-fs (loop3): Image doesn't support compression [ 201.424402][ T9270] F2FS-fs (loop3): Image doesn't support compression [ 201.460757][ T9270] F2FS-fs (loop3): invalid crc value [ 201.535076][ T9270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.572793][ T9303] rdma_op ffff88807e4ec9f0 conn xmit_rdma 0000000000000000 [ 201.659405][ T9270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.828155][ T5831] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 201.848303][ T5785] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 201.874840][ T5785] F2FS-fs (loop3): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 202.023937][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 202.051548][ T5831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.087994][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.133769][ T5831] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 202.151995][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 202.179067][ T5831] usb 1-1: Product: syz [ 202.183292][ T5831] usb 1-1: Manufacturer: syz [ 202.208156][ T5831] usb 1-1: SerialNumber: syz [ 202.233374][ T5831] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17 [ 202.380314][ T9321] tipc: Started in network mode [ 202.385263][ T9321] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 202.442557][ T9321] tipc: Enabled bearer , priority 10 [ 202.540920][ T9328] netlink: 'syz.3.1317': attribute type 2 has an invalid length. [ 202.591929][ T5845] usb 1-1: USB disconnect, device number 9 [ 202.658926][ T5845] appletouch 1-1:1.0: input: appletouch disconnected [ 202.881198][ T9334] loop3: detected capacity change from 0 to 8192 [ 202.929677][ T9338] loop1: detected capacity change from 0 to 512 [ 202.946176][ T9338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.030468][ T9338] EXT4-fs (loop1): 1 truncate cleaned up [ 203.052035][ T9338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.270684][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.470737][ T9330] loop2: detected capacity change from 0 to 40427 [ 203.488136][ T9350] netlink: 'syz.3.1327': attribute type 6 has an invalid length. [ 203.504795][ T9330] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 203.525898][ T9330] F2FS-fs (loop2): Image doesn't support compression [ 203.533649][ T9330] F2FS-fs (loop2): Image doesn't support compression [ 203.543940][ T5845] tipc: Node number set to 4269801488 [ 203.575274][ T9330] F2FS-fs (loop2): invalid crc value [ 203.609878][ T9330] F2FS-fs (loop2): Found nat_bits in checkpoint [ 203.640572][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 203.658152][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.756885][ T9330] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.878093][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 203.900121][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.932800][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.936707][ T5779] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 203.968330][ T23] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 203.977060][ T5779] F2FS-fs (loop2): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 203.980505][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.023051][ T23] usb 1-1: config 0 descriptor?? [ 204.412091][ T9371] loop2: detected capacity change from 0 to 8192 [ 204.455182][ T23] nti 0003:0757:0A00.0016: unknown main item tag 0x3 [ 204.470092][ T23] nti 0003:0757:0A00.0016: unknown main item tag 0x2 [ 204.485688][ T23] nti 0003:0757:0A00.0016: unknown main item tag 0x3 [ 204.492988][ T23] nti 0003:0757:0A00.0016: unknown global tag 0xd [ 204.502120][ T23] nti 0003:0757:0A00.0016: item 0 0 1 13 parsing failed [ 204.510777][ T23] nti: probe of 0003:0757:0A00.0016 failed with error -22 [ 204.615332][ T9369] loop3: detected capacity change from 0 to 32768 [ 204.627120][ T9369] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1335 (9369) [ 204.676708][ T9373] loop2: detected capacity change from 0 to 1024 [ 204.684370][ T9369] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 204.700936][ T9369] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 204.713976][ T23] usb 1-1: USB disconnect, device number 10 [ 204.726000][ T9369] BTRFS info (device loop3): force zlib compression, level 3 [ 204.738360][ T9369] BTRFS info (device loop3): force clearing of disk cache [ 204.745799][ T9369] BTRFS info (device loop3): setting nodatasum [ 204.793762][ T9369] BTRFS info (device loop3): allowing degraded mounts [ 204.809249][ T9369] BTRFS info (device loop3): enabling disk space caching [ 204.817408][ T9369] BTRFS info (device loop3): disk space caching is enabled [ 205.015141][ T9369] BTRFS info (device loop3): auto enabling async discard [ 205.074018][ T9369] BTRFS info (device loop3): rebuilding free space tree [ 205.150491][ T9369] BTRFS info (device loop3): disabling free space tree [ 205.162889][ T9369] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.187878][ T9369] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.408411][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1340'. [ 205.422147][ T5785] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 206.009753][ T9393] loop1: detected capacity change from 0 to 32768 [ 206.010541][ T5845] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.039696][ T9393] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1338 (9393) [ 206.145381][ T9393] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 206.176883][ T9393] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 206.196129][ T9393] BTRFS info (device loop1): force zlib compression, level 3 [ 206.215517][ T9418] loop0: detected capacity change from 0 to 512 [ 206.224009][ T9393] BTRFS info (device loop1): force clearing of disk cache [ 206.237643][ T9393] BTRFS info (device loop1): setting nodatasum [ 206.245141][ T9393] BTRFS info (device loop1): use zlib compression, level 3 [ 206.253088][ T9418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.265364][ T9393] BTRFS info (device loop1): allowing degraded mounts [ 206.272705][ T9393] BTRFS info (device loop1): enabling disk space caching [ 206.283719][ T9393] BTRFS info (device loop1): disk space caching is enabled [ 206.290147][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.307072][ T9418] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1350: invalid indirect mapped block 4294967295 (level 1) [ 206.324525][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.339284][ T5845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.343791][ T9418] EXT4-fs (loop0): Remounting filesystem read-only [ 206.356432][ T5845] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 206.370802][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.381933][ T5845] usb 4-1: config 0 descriptor?? [ 206.405966][ T9418] EXT4-fs (loop0): 2 truncates cleaned up [ 206.417644][ T9418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.432515][ T9393] BTRFS info (device loop1): enabling ssd optimizations [ 206.459339][ T9393] BTRFS info (device loop1): auto enabling async discard [ 206.467985][ T5824] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 206.498482][ T9393] BTRFS info (device loop1): rebuilding free space tree [ 206.533059][ T9393] BTRFS info (device loop1): disabling free space tree [ 206.541618][ T9393] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.565064][ T9393] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.589312][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.661929][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 206.699468][ T5824] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 206.717557][ T5824] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 206.731000][ T5824] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.757936][ T5824] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 206.767347][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 206.781441][ T5824] usb 3-1: Product: syz [ 206.785725][ T5824] usb 3-1: Manufacturer: syz [ 206.792034][ T9393] BTRFS info (device loop1): balance: start -f [ 206.800490][ T5824] usb 3-1: SerialNumber: syz [ 206.807424][ T9393] BTRFS info (device loop1): balance: ended with status: 0 [ 206.828284][ T5845] hid-udraw 0003:20D6:CB17.0017: item fetching failed at offset 6/7 [ 206.848223][ T5824] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input18 [ 206.859001][ T5845] hid-udraw 0003:20D6:CB17.0017: parse failed [ 206.865585][ T5845] hid-udraw: probe of 0003:20D6:CB17.0017 failed with error -22 [ 206.994594][ T5778] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 207.139250][ T5845] usb 4-1: USB disconnect, device number 11 [ 207.189360][ T785] usb 3-1: USB disconnect, device number 17 [ 207.301244][ T785] appletouch 3-1:1.0: input: appletouch disconnected [ 207.311583][ T9445] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1353'. [ 208.143836][ T9474] loop3: detected capacity change from 0 to 128 [ 208.211799][ T9474] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.331946][ T9474] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.465482][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.468333][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1374'. [ 208.515273][ T9489] kernel read not supported for file / (pid: 9489 comm: syz.0.1375) [ 208.529748][ T27] audit: type=1800 audit(1754665791.778:67): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1375" name=18 dev="mqueue" ino=17947 res=0 errno=0 [ 208.597853][ T785] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 208.656953][ T9491] loop3: detected capacity change from 0 to 256 [ 208.717641][ T9491] FAT-fs (loop3): Directory bread(block 64) failed [ 208.725554][ T9491] FAT-fs (loop3): Directory bread(block 65) failed [ 208.743491][ T9491] FAT-fs (loop3): Directory bread(block 66) failed [ 208.762667][ T9491] FAT-fs (loop3): Directory bread(block 67) failed [ 208.791086][ T9491] FAT-fs (loop3): Directory bread(block 68) failed [ 208.817877][ T9491] FAT-fs (loop3): Directory bread(block 69) failed [ 208.829452][ T9491] FAT-fs (loop3): Directory bread(block 70) failed [ 208.833841][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.840535][ T9491] FAT-fs (loop3): Directory bread(block 71) failed [ 208.862368][ T9491] FAT-fs (loop3): Directory bread(block 72) failed [ 208.870834][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 208.871694][ T9491] FAT-fs (loop3): Directory bread(block 73) failed [ 208.892860][ T785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.908681][ T785] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 208.922097][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.930133][ T9498] loop0: detected capacity change from 0 to 512 [ 208.978886][ T785] usb 3-1: config 0 descriptor?? [ 208.984729][ T9483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.089632][ T9501] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1381'. [ 209.383638][ T9509] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1384'. [ 209.464673][ T785] uclogic 0003:5543:0004.0018: No inputs registered, leaving [ 209.504030][ T785] uclogic 0003:5543:0004.0018: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 209.687416][ T9518] loop0: detected capacity change from 0 to 4096 [ 209.716053][ T5844] usb 3-1: USB disconnect, device number 18 [ 209.728991][ T9518] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 209.795737][ T9518] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 209.825804][ T9518] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 209.863045][ T9518] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 209.907876][ T9518] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 209.968918][ T9518] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 209.997888][ T9518] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 210.069138][ T9518] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 210.096943][ T9518] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 210.148084][ T9518] ntfs: volume version 3.1. [ 210.770210][ T9540] loop3: detected capacity change from 0 to 8192 [ 210.897177][ T9544] loop0: detected capacity change from 0 to 256 [ 210.915340][ T9544] exfat: Deprecated parameter 'namecase' [ 210.966135][ T9544] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 210.986147][ T9533] loop1: detected capacity change from 0 to 32768 [ 211.047039][ T9533] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.173972][ T9533] XFS (loop1): Ending clean mount [ 211.256723][ T9533] XFS (loop1): Quotacheck needed: Please wait. [ 211.368296][ T9533] XFS (loop1): Quotacheck: Done. [ 211.629740][ T5778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.918182][ T23] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 212.114879][ T9576] loop1: detected capacity change from 0 to 1024 [ 212.134606][ T9576] EXT4-fs: inline encryption not supported [ 212.140953][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.147976][ T9576] EXT4-fs: Ignoring removed i_version option [ 212.166902][ T23] usb 4-1: config 0 has no interface number 0 [ 212.175413][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 212.176427][ T9576] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.185364][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.216312][ T23] usb 4-1: config 0 descriptor?? [ 212.240018][ T23] usb 4-1: selecting invalid altsetting 1 [ 212.259485][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 212.265969][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 212.289471][ T9576] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.1410: lblock 2 mapped to illegal pblock 2 (length 1) [ 212.400738][ T9576] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.1410: lblock 0 mapped to illegal pblock 48 (length 1) [ 212.457481][ T9576] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1410: Failed to acquire dquot type 0 [ 212.466059][ T9583] loop2: detected capacity change from 0 to 4096 [ 212.475403][ T23] DVB: Unable to find symbol cx22700_attach() [ 212.482878][ T9576] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 212.523391][ T9576] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.1410: mark_inode_dirty error [ 212.546121][ T9583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.603070][ T9576] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 212.654287][ T9576] EXT4-fs (loop1): 1 orphan inode deleted [ 212.678941][ T48] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.694091][ T23] DVB: Unable to find symbol tda10046_attach() [ 212.700448][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 212.704828][ T9576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.728062][ T23] usb 4-1: USB disconnect, device number 12 [ 212.763769][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.1415: corrupted inode contents [ 212.777078][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 212.839021][ T9583] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #15: comm syz.2.1415: mark_inode_dirty error [ 212.891742][ T9576] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.1410: Invalid inode table block 1 in block_group 0 [ 212.906860][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.1415: corrupted inode contents [ 212.930277][ T9576] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 212.944098][ T9576] EXT4-fs error (device loop1): ext4_setattr:5488: inode #2: comm syz.1.1410: mark_inode_dirty error [ 212.956547][ T9583] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1415: mark_inode_dirty error [ 212.961328][ T9585] loop0: detected capacity change from 0 to 32768 [ 213.012414][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.1415: corrupted inode contents [ 213.019336][ T9585] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.053343][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.056952][ T9583] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1415: mark_inode_dirty error [ 213.078484][ T48] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.098001][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.1415: corrupted inode contents [ 213.111935][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 213.123539][ T9585] XFS (loop0): Ending clean mount [ 213.143286][ T5778] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 213.228597][ T5778] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 213.249771][ T9583] EXT4-fs error (device loop2): ext4_truncate:4288: inode #15: comm syz.2.1415: mark_inode_dirty error [ 213.269710][ T5778] EXT4-fs error (device loop1): ext4_quota_off:7222: inode #3: comm syz-executor: mark_inode_dirty error [ 213.354497][ T9583] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 213.364166][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.404969][ T9588] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.1415: corrupted inode contents [ 213.498406][ T9602] loop1: detected capacity change from 0 to 64 [ 213.559382][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.030699][ T9600] loop3: detected capacity change from 0 to 32768 [ 214.069103][ T9600] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1419 (9600) [ 214.126452][ T9600] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 214.174091][ T9600] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 214.194306][ T9617] loop1: detected capacity change from 0 to 1024 [ 214.202824][ T9600] BTRFS info (device loop3): force zlib compression, level 3 [ 214.228152][ T9600] BTRFS info (device loop3): force clearing of disk cache [ 214.249789][ T9600] BTRFS info (device loop3): setting nodatasum [ 214.269790][ T9600] BTRFS info (device loop3): use zlib compression, level 3 [ 214.277323][ T9600] BTRFS info (device loop3): allowing degraded mounts [ 214.288072][ T9600] BTRFS info (device loop3): enabling disk space caching [ 214.295166][ T9600] BTRFS info (device loop3): disk space caching is enabled [ 214.339474][ T9617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.501621][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.550601][ T9638] dlm: no local IP address has been set [ 214.558868][ T9638] dlm: cannot start dlm midcomms -107 [ 214.581717][ T9600] BTRFS info (device loop3): enabling ssd optimizations [ 214.626127][ T9600] BTRFS info (device loop3): auto enabling async discard [ 214.686905][ T9600] BTRFS info (device loop3): rebuilding free space tree [ 214.737236][ T9600] BTRFS info (device loop3): disabling free space tree [ 214.760801][ T9600] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.795398][ T9600] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.859476][ T9648] netlink: 'syz.0.1432': attribute type 5 has an invalid length. [ 214.929512][ T9600] BTRFS info (device loop3): balance: start -f [ 214.945351][ T9600] BTRFS info (device loop3): balance: ended with status: 0 [ 215.035708][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.078290][ T5785] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 215.237955][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 215.267365][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.288289][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 215.307427][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.338567][ T23] usb 2-1: config 0 descriptor?? [ 215.618490][ T9664] loop2: detected capacity change from 0 to 8192 [ 215.646478][ T9664] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.684355][ T9664] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 215.708985][ T9664] REISERFS (device loop2): using ordered data mode [ 215.715829][ T9664] reiserfs: using flush barriers [ 215.728155][ T9664] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.765304][ T9664] REISERFS (device loop2): checking transaction log (loop2) [ 215.783978][ T23] wacom 0003:056A:0116.0019: unknown main item tag 0x0 [ 215.793071][ T23] wacom 0003:056A:0116.0019: unknown main item tag 0x0 [ 215.800406][ T23] wacom 0003:056A:0116.0019: unknown main item tag 0x0 [ 215.807802][ T23] wacom 0003:056A:0116.0019: unknown main item tag 0x0 [ 215.818156][ T9664] REISERFS (device loop2): Using r5 hash to sort names [ 215.825715][ T9664] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 215.844602][ T23] wacom 0003:056A:0116.0019: unknown main item tag 0x0 [ 215.891238][ T23] wacom 0003:056A:0116.0019: hidraw0: USB HID v0.03 Device [HID 056a:0116] on usb-dummy_hcd.1-1/input0 [ 216.035377][ T23] usb 2-1: USB disconnect, device number 10 [ 216.083180][ T9657] loop0: detected capacity change from 0 to 32768 [ 216.135357][ T9670] fido_id[9670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 216.176840][ T9657] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 216.183474][ T9674] loop2: detected capacity change from 0 to 512 [ 216.200742][ T9674] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.207143][ T9674] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 216.243587][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 216.256661][ T9674] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 216.279108][ T9674] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1441: attempt to clear invalid blocks 2 len 1 [ 216.314422][ T9674] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1441: invalid indirect mapped block 1819239214 (level 0) [ 216.329475][ T9674] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1441: invalid indirect mapped block 1819239214 (level 1) [ 216.359347][ T9674] EXT4-fs (loop2): 1 truncate cleaned up [ 216.366261][ T9674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.520087][ T9674] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 216.578525][ T9674] EXT4-fs error (device loop2): __ext4_remount:6741: comm syz.2.1441: Abort forced by user [ 216.674279][ T9674] EXT4-fs (loop2): Remounting filesystem read-only [ 216.707965][ T9674] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 216.770146][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.092178][ T9702] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1453'. [ 217.150169][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 217.150183][ T27] audit: type=1326 audit(1754665800.398:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.0.1454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80d818ebe9 code=0x0 [ 217.179341][ T5845] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 217.367865][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 217.377414][ T5845] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 217.386761][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.394831][ T5845] usb 3-1: Product: syz [ 217.399177][ T5845] usb 3-1: Manufacturer: syz [ 217.403806][ T5845] usb 3-1: SerialNumber: syz [ 217.410902][ T5845] usb 3-1: config 0 descriptor?? [ 217.419369][ T5845] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 217.765666][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 217.776179][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 217.789915][ T9711] netlink: 'syz.3.1457': attribute type 14 has an invalid length. [ 217.808077][ T9711] netlink: 'syz.3.1457': attribute type 11 has an invalid length. [ 217.893841][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 217.948349][ T5845] gspca_ov534_9: reg_w failed -110 [ 218.382918][ T9727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1464'. [ 218.488283][ T5845] gspca_ov534_9: Unknown sensor 0000 [ 218.488379][ T5845] ov534_9: probe of 3-1:0.0 failed with error -22 [ 218.515402][ T5845] usb 3-1: USB disconnect, device number 19 [ 218.585872][ T9735] loop1: detected capacity change from 0 to 16 [ 218.599535][ T9735] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 218.622951][ T9735] cramfs: empty filesystem [ 219.127218][ T9733] loop3: detected capacity change from 0 to 40427 [ 219.175797][ T9733] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 219.184573][ T9733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 219.215647][ T9733] F2FS-fs (loop3): heap/no_heap options were deprecated [ 219.229205][ T9733] F2FS-fs (loop3): invalid crc value [ 219.241904][ T9733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 219.358275][ T9733] F2FS-fs (loop3): Start checkpoint disabled! [ 219.385536][ T9733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 219.400595][ T9733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 219.443945][ T9733] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 219.950900][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 220.127962][ T5845] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 220.336359][ T9758] loop1: detected capacity change from 0 to 32768 [ 220.346071][ T5845] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 133, using maximum allowed: 30 [ 220.358992][ T5845] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.369470][ T9758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1478 (9758) [ 220.381885][ T5845] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 133 [ 220.403239][ T9758] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.413563][ T5845] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.425023][ T9758] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 220.434177][ T5845] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 220.443639][ T9758] BTRFS info (device loop1): using free space tree [ 220.450387][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.468957][ T5845] usb 3-1: config 0 descriptor?? [ 220.527859][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 220.529190][ T9758] BTRFS info (device loop1): enabling ssd optimizations [ 220.548269][ T9758] BTRFS info (device loop1): auto enabling async discard [ 220.702531][ T5778] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.717843][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 220.731666][ T23] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 220.742612][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.763594][ T23] usb 4-1: Product: syz [ 220.778101][ T23] usb 4-1: Manufacturer: syz [ 220.784741][ T23] usb 4-1: SerialNumber: syz [ 220.795751][ T23] usb 4-1: config 0 descriptor?? [ 220.817706][ T23] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 220.938258][ T5845] wacom 0003:056A:0084.001A: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.2-1/input0 [ 221.213432][ T5844] usb 3-1: USB disconnect, device number 20 [ 221.341969][ T23] gspca_ov534_9: reg_w failed -110 [ 221.857909][ T23] gspca_ov534_9: Unknown sensor 0000 [ 221.857995][ T23] ov534_9: probe of 4-1:0.0 failed with error -22 [ 221.881395][ T23] usb 4-1: USB disconnect, device number 13 [ 222.323922][ T9803] binder: 9802:9803 ioctl c018620c 200000000380 returned -22 [ 222.437310][ T50] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 222.630694][ T27] audit: type=1326 audit(1754665805.878:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 222.714435][ T27] audit: type=1326 audit(1754665805.878:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 222.774971][ T27] audit: type=1326 audit(1754665805.928:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 222.808576][ T27] audit: type=1326 audit(1754665805.928:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 222.854652][ T27] audit: type=1326 audit(1754665805.928:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 222.897925][ T27] audit: type=1326 audit(1754665805.928:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 222.921618][ T27] audit: type=1326 audit(1754665805.928:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d818ebe9 code=0x7ffc0000 [ 223.629771][ T9818] loop3: detected capacity change from 0 to 40427 [ 223.656293][ T9818] F2FS-fs (loop3): invalid crc value [ 223.682228][ T9818] F2FS-fs (loop3): Found nat_bits in checkpoint [ 223.748691][ T5831] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.808695][ T9818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 223.948389][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 223.966204][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.007982][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.030008][ T5831] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 224.048307][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.049634][ T5785] syz-executor: attempt to access beyond end of device [ 224.049634][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.077590][ T5831] usb 1-1: config 0 descriptor?? [ 224.106088][ T9835] loop1: detected capacity change from 0 to 40427 [ 224.113525][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 224.139855][ T9835] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 224.147971][ T9835] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 224.167463][ T9835] F2FS-fs (loop1): invalid crc value [ 224.200122][ T9835] F2FS-fs (loop1): Found nat_bits in checkpoint [ 224.345069][ T9835] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 224.387998][ T9835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 224.445446][ T9857] loop2: detected capacity change from 0 to 128 [ 224.532745][ T5831] aquacomputer_d5next 0003:0C70:F0B6.001B: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 224.784457][ T5831] usb 1-1: USB disconnect, device number 11 [ 225.078690][ T9869] loop2: detected capacity change from 0 to 256 [ 225.086563][ T9869] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.102809][ T9869] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 225.173877][ T9869] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 225.504868][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 225.763625][ T9889] loop3: detected capacity change from 0 to 256 [ 225.827522][ T9889] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 226.201340][ T9875] loop2: detected capacity change from 0 to 32768 [ 226.229812][ T9875] XFS: ikeep mount option is deprecated. [ 226.235735][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 226.307273][ T9875] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.365497][ T9916] loop0: detected capacity change from 0 to 512 [ 226.373525][ T9916] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.413515][ T9916] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.422966][ T9916] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 226.436716][ T9916] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 226.446332][ T9916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 226.454554][ T9916] System zones: 0-2, 18-18, 34-34 [ 226.470061][ T9916] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1535: iget: bad i_size value: 360287970189639680 [ 226.500997][ T9916] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1535: couldn't read orphan inode 15 (err -117) [ 226.539995][ T9875] XFS (loop2): Ending clean mount [ 226.558929][ T785] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 226.572947][ T9875] XFS (loop2): Quotacheck needed: Please wait. [ 226.573817][ T9916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.646066][ T9916] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1535: path /394/file1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 226.700205][ T9875] XFS (loop2): Quotacheck: Done. [ 226.775032][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 226.793914][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.804263][ T785] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 226.833635][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.834908][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.844640][ T785] usb 4-1: config 0 descriptor?? [ 226.857230][ T9908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.298843][ T785] kye 0003:0458:500F.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 227.310551][ T785] kye 0003:0458:500F.001C: unknown main item tag 0x2 [ 227.322004][ T785] kye 0003:0458:500F.001C: hidraw0: USB HID v0.05 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 227.333345][ T785] kye 0003:0458:500F.001C: tablet-enabling feature report not found [ 227.347204][ T785] kye 0003:0458:500F.001C: tablet enabling failed [ 227.440247][ T9923] loop0: detected capacity change from 0 to 32768 [ 227.519593][ T9923] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.566162][ T5831] usb 4-1: USB disconnect, device number 14 [ 227.697908][ T9923] XFS (loop0): Ending clean mount [ 227.713796][ T9923] XFS (loop0): Quotacheck needed: Please wait. [ 227.774957][ T9938] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 227.786342][ T9923] XFS (loop0): Quotacheck: Done. [ 227.844308][ T9938] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 227.857884][ T9938] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 227.873092][ T9938] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 227.886816][ T9938] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 227.902550][ T9938] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 227.910994][ T9938] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 227.918857][ T9938] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 227.925998][ T9938] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 227.932885][ T5781] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.942547][ T9938] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 227.950675][ T9938] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 227.957267][ T9938] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 228.009759][ T9925] ================================================================== [ 228.017892][ T9925] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 228.025550][ T9925] Read of size 8 at addr ffff88807ede94b8 by task syz.2.1537/9925 [ 228.033370][ T9925] [ 228.035724][ T9925] CPU: 1 PID: 9925 Comm: syz.2.1537 Not tainted 6.6.101-syzkaller #0 [ 228.043803][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.053885][ T9925] Call Trace: [ 228.057180][ T9925] [ 228.058999][ T9940] loop1: detected capacity change from 0 to 65 [ 228.060118][ T9925] dump_stack_lvl+0x16c/0x230 [ 228.070958][ T9925] ? __lock_acquire+0x7c80/0x7c80 [ 228.076009][ T9925] ? show_regs_print_info+0x20/0x20 [ 228.081238][ T9925] ? load_image+0x3b0/0x3b0 [ 228.085778][ T9925] ? __virt_addr_valid+0x469/0x540 [ 228.088260][ T9940] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 228.090900][ T9925] print_report+0xac/0x220 [ 228.090934][ T9925] ? __lock_acquire+0xff/0x7c80 [ 228.112828][ T9925] kasan_report+0x117/0x150 [ 228.117810][ T9925] ? __lock_acquire+0xff/0x7c80 [ 228.122682][ T9925] __lock_acquire+0xff/0x7c80 [ 228.127643][ T9925] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 228.133635][ T9925] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 228.139534][ T9925] ? lockdep_hardirqs_on+0x98/0x150 [ 228.144756][ T9925] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 228.150755][ T9925] ? _raw_spin_unlock+0x40/0x40 [ 228.155627][ T9925] ? verify_lock_unused+0x140/0x140 [ 228.160830][ T9925] ? debug_check_no_obj_freed+0x51f/0x540 [ 228.166552][ T9925] ? __phys_addr+0xba/0x170 [ 228.171223][ T9925] ? kmem_cache_free+0xf8/0x280 [ 228.176076][ T9925] ? ____kasan_slab_free+0xda/0x1e0 [ 228.181266][ T9925] lock_acquire+0x197/0x410 [ 228.185754][ T9925] ? remove_wait_queue+0x24/0x120 [ 228.190854][ T9925] ? p9_req_put+0x19b/0x1f0 [ 228.195342][ T9925] ? read_lock_is_recursive+0x20/0x20 [ 228.200722][ T9925] ? p9_client_rpc+0x798/0xa80 [ 228.205518][ T9925] _raw_spin_lock_irqsave+0xa8/0xf0 [ 228.210830][ T9925] ? remove_wait_queue+0x24/0x120 [ 228.215869][ T9925] ? _raw_spin_lock+0x40/0x40 [ 228.220580][ T9925] ? wake_bit_function+0x200/0x200 [ 228.225700][ T9925] remove_wait_queue+0x24/0x120 [ 228.230593][ T9925] ? p9_fd_close+0x92/0x430 [ 228.235121][ T9925] p9_fd_close+0xa1/0x430 [ 228.239443][ T9925] p9_client_create+0xc26/0xf90 [ 228.244284][ T9925] ? do_trace_9p_fid_put+0x20/0x20 [ 228.249382][ T9925] ? lockdep_softirqs_off+0x430/0x430 [ 228.254755][ T9925] ? __raw_spin_lock_init+0x45/0x100 [ 228.260036][ T9925] v9fs_session_init+0x1d8/0x1990 [ 228.265054][ T9925] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.271125][ T9925] ? v9fs_show_options+0x700/0x700 [ 228.276235][ T9925] v9fs_mount+0xc9/0xb40 [ 228.280470][ T9925] ? end_current_label_crit_section+0x170/0x170 [ 228.286708][ T9925] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 228.292081][ T9925] legacy_get_tree+0xea/0x180 [ 228.296751][ T9925] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 228.302138][ T9925] vfs_get_tree+0x8c/0x280 [ 228.306633][ T9925] do_new_mount+0x24b/0xa40 [ 228.311128][ T9925] __se_sys_mount+0x2da/0x3c0 [ 228.315793][ T9925] ? __x64_sys_mount+0xc0/0xc0 [ 228.320602][ T9925] ? lockdep_hardirqs_on+0x98/0x150 [ 228.325832][ T9925] ? __x64_sys_mount+0x20/0xc0 [ 228.330592][ T9925] do_syscall_64+0x55/0xb0 [ 228.335000][ T9925] ? clear_bhb_loop+0x40/0x90 [ 228.339677][ T9925] ? clear_bhb_loop+0x40/0x90 [ 228.344367][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.350396][ T9925] RIP: 0033:0x7f3c10b8ebe9 [ 228.354831][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.374445][ T9925] RSP: 002b:00007f3c11a7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.382872][ T9925] RAX: ffffffffffffffda RBX: 00007f3c10db5fa0 RCX: 00007f3c10b8ebe9 [ 228.390871][ T9925] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000000000000 [ 228.398832][ T9925] RBP: 00007f3c10c11e19 R08: 00002000000001c0 R09: 0000000000000000 [ 228.406795][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.414773][ T9925] R13: 00007f3c10db6038 R14: 00007f3c10db5fa0 R15: 00007ffe9fe94ed8 [ 228.422759][ T9925] [ 228.425771][ T9925] [ 228.428082][ T9925] Allocated by task 9305: [ 228.432439][ T9925] kasan_set_track+0x4e/0x70 [ 228.437023][ T9925] __kasan_kmalloc+0x8f/0xa0 [ 228.441598][ T9925] comedi_device_postconfig+0x496/0xc50 [ 228.447235][ T9925] comedi_device_attach+0x533/0x660 [ 228.452435][ T9925] comedi_unlocked_ioctl+0x68d/0xf90 [ 228.457713][ T9925] __se_sys_ioctl+0xfd/0x170 [ 228.462329][ T9925] do_syscall_64+0x55/0xb0 [ 228.466744][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.472637][ T9925] [ 228.474953][ T9925] Freed by task 9938: [ 228.478914][ T9925] kasan_set_track+0x4e/0x70 [ 228.483498][ T9925] kasan_save_free_info+0x2e/0x50 [ 228.488512][ T9925] ____kasan_slab_free+0x126/0x1e0 [ 228.493611][ T9925] slab_free_freelist_hook+0x130/0x1b0 [ 228.499064][ T9925] __kmem_cache_free+0xba/0x1f0 [ 228.503907][ T9925] comedi_device_detach+0x363/0x6f0 [ 228.509104][ T9925] comedi_unlocked_ioctl+0xbd0/0xf90 [ 228.514384][ T9925] __se_sys_ioctl+0xfd/0x170 [ 228.519016][ T9925] do_syscall_64+0x55/0xb0 [ 228.523421][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.529309][ T9925] [ 228.531616][ T9925] The buggy address belongs to the object at ffff88807ede9400 [ 228.531616][ T9925] which belongs to the cache kmalloc-256 of size 256 [ 228.545675][ T9925] The buggy address is located 184 bytes inside of [ 228.545675][ T9925] freed 256-byte region [ffff88807ede9400, ffff88807ede9500) [ 228.559565][ T9925] [ 228.561874][ T9925] The buggy address belongs to the physical page: [ 228.568278][ T9925] page:ffffea0001fb7a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807ede8c00 pfn:0x7ede8 [ 228.579718][ T9925] head:ffffea0001fb7a00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.588653][ T9925] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 228.596627][ T9925] page_type: 0xffffffff() [ 228.600949][ T9925] raw: 00fff00000000840 ffff888017841b40 ffffea0001fc0790 ffffea0001fe1710 [ 228.609780][ T9925] raw: ffff88807ede8c00 0000000000100007 00000001ffffffff 0000000000000000 [ 228.618348][ T9925] page dumped because: kasan: bad access detected [ 228.624751][ T9925] page_owner tracks the page as allocated [ 228.630473][ T9925] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5927, tgid 5926 (syz.2.27), ts 75144767945, free_ts 75104484162 [ 228.652166][ T9925] post_alloc_hook+0x1cd/0x210 [ 228.656926][ T9925] get_page_from_freelist+0x195c/0x19f0 [ 228.662468][ T9925] __alloc_pages+0x1e3/0x460 [ 228.667050][ T9925] alloc_slab_page+0x5d/0x170 [ 228.671739][ T9925] new_slab+0x87/0x2e0 [ 228.675802][ T9925] ___slab_alloc+0xc6d/0x12f0 [ 228.680471][ T9925] __kmem_cache_alloc_node+0x1a2/0x260 [ 228.685920][ T9925] kmalloc_trace+0x2a/0xe0 [ 228.690336][ T9925] udf_fiiter_find_entry+0x13f/0x640 [ 228.695613][ T9925] udf_rename+0x615/0xcc0 [ 228.699938][ T9925] vfs_rename+0xb96/0xec0 [ 228.704251][ T9925] do_renameat2+0x8a1/0xc70 [ 228.708738][ T9925] __x64_sys_rename+0x86/0x90 [ 228.713404][ T9925] do_syscall_64+0x55/0xb0 [ 228.717813][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.723705][ T9925] page last free stack trace: [ 228.728360][ T9925] free_unref_page_prepare+0x7ce/0x8e0 [ 228.733994][ T9925] free_unref_page+0x32/0x2e0 [ 228.738662][ T9925] __slab_free+0x35e/0x410 [ 228.743084][ T9925] qlist_free_all+0x75/0xe0 [ 228.747574][ T9925] kasan_quarantine_reduce+0x143/0x160 [ 228.753021][ T9925] __kasan_slab_alloc+0x22/0x80 [ 228.757946][ T9925] slab_post_alloc_hook+0x6e/0x4d0 [ 228.763048][ T9925] __kmem_cache_alloc_node+0x13e/0x260 [ 228.768499][ T9925] __kmalloc+0xa4/0x240 [ 228.772646][ T9925] tomoyo_realpath_from_path+0xe3/0x5d0 [ 228.778184][ T9925] tomoyo_path2_perm+0x282/0x660 [ 228.783112][ T9925] tomoyo_path_rename+0x142/0x190 [ 228.788119][ T9925] security_path_rename+0x16c/0x200 [ 228.793306][ T9925] do_renameat2+0x685/0xc70 [ 228.797798][ T9925] __x64_sys_rename+0x86/0x90 [ 228.802469][ T9925] do_syscall_64+0x55/0xb0 [ 228.806880][ T9925] [ 228.809188][ T9925] Memory state around the buggy address: [ 228.814805][ T9925] ffff88807ede9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.822853][ T9925] ffff88807ede9400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.830905][ T9925] >ffff88807ede9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.838948][ T9925] ^ [ 228.844820][ T9925] ffff88807ede9500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.852865][ T9925] ffff88807ede9580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.860908][ T9925] ================================================================== [ 228.868962][ T9925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.876134][ T9925] CPU: 1 PID: 9925 Comm: syz.2.1537 Not tainted 6.6.101-syzkaller #0 [ 228.884203][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.894247][ T9925] Call Trace: [ 228.897513][ T9925] [ 228.900432][ T9925] dump_stack_lvl+0x16c/0x230 [ 228.905190][ T9925] ? show_regs_print_info+0x20/0x20 [ 228.910419][ T9925] ? load_image+0x3b0/0x3b0 [ 228.914935][ T9925] panic+0x2c0/0x710 [ 228.918825][ T9925] ? bpf_jit_dump+0xd0/0xd0 [ 228.923326][ T9925] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 228.929217][ T9925] ? _raw_spin_unlock+0x40/0x40 [ 228.934075][ T9925] ? print_memory_metadata+0x314/0x400 [ 228.939617][ T9925] ? __lock_acquire+0xff/0x7c80 [ 228.944455][ T9925] check_panic_on_warn+0x84/0xa0 [ 228.949382][ T9925] ? __lock_acquire+0xff/0x7c80 [ 228.954215][ T9925] end_report+0x6f/0x140 [ 228.958446][ T9925] kasan_report+0x128/0x150 [ 228.962951][ T9925] ? __lock_acquire+0xff/0x7c80 [ 228.967862][ T9925] __lock_acquire+0xff/0x7c80 [ 228.972558][ T9925] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 228.978619][ T9925] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 228.984505][ T9925] ? lockdep_hardirqs_on+0x98/0x150 [ 228.989697][ T9925] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 228.995588][ T9925] ? _raw_spin_unlock+0x40/0x40 [ 229.000435][ T9925] ? verify_lock_unused+0x140/0x140 [ 229.005622][ T9925] ? debug_check_no_obj_freed+0x51f/0x540 [ 229.011519][ T9925] ? __phys_addr+0xba/0x170 [ 229.016016][ T9925] ? kmem_cache_free+0xf8/0x280 [ 229.020865][ T9925] ? ____kasan_slab_free+0xda/0x1e0 [ 229.026056][ T9925] lock_acquire+0x197/0x410 [ 229.030551][ T9925] ? remove_wait_queue+0x24/0x120 [ 229.035575][ T9925] ? p9_req_put+0x19b/0x1f0 [ 229.040068][ T9925] ? read_lock_is_recursive+0x20/0x20 [ 229.045426][ T9925] ? p9_client_rpc+0x798/0xa80 [ 229.050186][ T9925] _raw_spin_lock_irqsave+0xa8/0xf0 [ 229.055579][ T9925] ? remove_wait_queue+0x24/0x120 [ 229.060805][ T9925] ? _raw_spin_lock+0x40/0x40 [ 229.065664][ T9925] ? wake_bit_function+0x200/0x200 [ 229.070766][ T9925] remove_wait_queue+0x24/0x120 [ 229.075698][ T9925] ? p9_fd_close+0x92/0x430 [ 229.080193][ T9925] p9_fd_close+0xa1/0x430 [ 229.084540][ T9925] p9_client_create+0xc26/0xf90 [ 229.089472][ T9925] ? do_trace_9p_fid_put+0x20/0x20 [ 229.094744][ T9925] ? lockdep_softirqs_off+0x430/0x430 [ 229.100109][ T9925] ? __raw_spin_lock_init+0x45/0x100 [ 229.105387][ T9925] v9fs_session_init+0x1d8/0x1990 [ 229.110407][ T9925] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.116488][ T9925] ? v9fs_show_options+0x700/0x700 [ 229.121614][ T9925] v9fs_mount+0xc9/0xb40 [ 229.125858][ T9925] ? end_current_label_crit_section+0x170/0x170 [ 229.132283][ T9925] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 229.137669][ T9925] legacy_get_tree+0xea/0x180 [ 229.142335][ T9925] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 229.147700][ T9925] vfs_get_tree+0x8c/0x280 [ 229.152110][ T9925] do_new_mount+0x24b/0xa40 [ 229.156604][ T9925] __se_sys_mount+0x2da/0x3c0 [ 229.161274][ T9925] ? __x64_sys_mount+0xc0/0xc0 [ 229.166036][ T9925] ? lockdep_hardirqs_on+0x98/0x150 [ 229.171226][ T9925] ? __x64_sys_mount+0x20/0xc0 [ 229.175979][ T9925] do_syscall_64+0x55/0xb0 [ 229.180390][ T9925] ? clear_bhb_loop+0x40/0x90 [ 229.185052][ T9925] ? clear_bhb_loop+0x40/0x90 [ 229.189721][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.195693][ T9925] RIP: 0033:0x7f3c10b8ebe9 [ 229.200106][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.219794][ T9925] RSP: 002b:00007f3c11a7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.228224][ T9925] RAX: ffffffffffffffda RBX: 00007f3c10db5fa0 RCX: 00007f3c10b8ebe9 [ 229.236367][ T9925] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000000000000 [ 229.244348][ T9925] RBP: 00007f3c10c11e19 R08: 00002000000001c0 R09: 0000000000000000 [ 229.252336][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.260329][ T9925] R13: 00007f3c10db6038 R14: 00007f3c10db5fa0 R15: 00007ffe9fe94ed8 [ 229.268408][ T9925] [ 229.271702][ T9925] Kernel Offset: disabled [ 229.276018][ T9925] Rebooting in 86400 seconds..