last executing test programs: 3m2.2851661s ago: executing program 1 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x2, 0x0, 0x932, {[@timestamp={0x8, 0xa, 0x2, 0xb}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 3m2.190977988s ago: executing program 1 (id=181): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x59091fd, 0x2}, 0x0, 0x7, 0x0, 0x1, 0x0}}) socket$unix(0x1, 0x1, 0x0) 3m2.137349792s ago: executing program 1 (id=183): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x70bd26, 0x8080, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x4014) 3m2.057771568s ago: executing program 1 (id=185): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0/file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 3m1.893993202s ago: executing program 1 (id=188): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x40, 0x2, 0xa3, {0xa3, 0x4, "4db6f28a580a9eae780db5622f8a0a03fc781cc9c9a00f11aed8a0d84530c18338954cf7be261094bb1c9ecd79a72a51cf256a372c5ad2e1a89c8dc1b173b68cbd3752cf8f087207ec7a8cc8d202705e4b5ddc9772b95f3bcfb2f3e8dc6f5e2592b29379be17a48645febbfc209fd2096a813abd6448afb27cc1ec10af311dbf17f7d5f97720fd7f65fb7a25624034c4730f9ec800b1320f74ab3165053ab9f3a3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m53.313794006s ago: executing program 1 (id=310): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 2m53.153715219s ago: executing program 32 (id=310): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 2m48.572961379s ago: executing program 3 (id=357): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) 2m48.445133989s ago: executing program 3 (id=358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) 2m48.291243172s ago: executing program 3 (id=359): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_setup(0x1261, &(0x7f0000000000)={0x0, 0x5d20, 0x1, 0x0, 0x8e}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000000)) 2m48.113447676s ago: executing program 3 (id=360): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0/file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 2m47.81940649s ago: executing program 3 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 2m38.031532052s ago: executing program 3 (id=424): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000680)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x4e1e, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0x2, 0x31, 0x9d}}], 0x58, 0x4000005}, 0x4000000) 2m37.776774352s ago: executing program 33 (id=424): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000680)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x4e1e, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0x2, 0x31, 0x9d}}], 0x58, 0x4000005}, 0x4000000) 1m51.709683977s ago: executing program 5 (id=992): unshare(0x6a040000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) 1m51.470557586s ago: executing program 5 (id=994): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="002214000000b3"], 0x0}, 0x0) 1m49.356900267s ago: executing program 5 (id=1013): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") getdents(r0, 0x0, 0x0) 1m49.008634926s ago: executing program 5 (id=1014): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f00000016c0)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="2c836f64653d3078303030303035303038303030303030310086cb4be138f89f69aed82c696f636861727365743d6d6163696e7569742c66756e633d4250524d5f43484543904771793dc06c06611e04e903f5e2c7602f64a99beff40c21fbbb1601b5869235b81f95cf0a39f6c3195e5125f94f2f8c75c38fc0c09c03ea3fbd2e76cce2a69c86a047ad17d0db289cbb207d32db67514e59f271e76fb943f96cbc734be7f5f87b4f17b44a6eaeb832436386d4060000000000000077d44c6accfaa75c7ae620d71699794e59af4cb377883fc3e4c9dfdb6340cb6395e3776c2b7eede91e42537942c5e62bf46bf7b8542c03f6240d54d761466db4e9134915ca2839bbf4d798c1defbffffff9b142b4e603178a6862a8b03340d309cab1a0cd33fb757910ccc8420000000934038e92ed734e0eb7d200c8283ff14dcc7b61114a4fef9561fa90000000000000000000000000000bbb7d9d89141b840e8d38e45316a131352664cd897520a1623cd7d9aa5ab982fc9968f69a317673f024ce50b536c66a16e97fcc7e57a6d59af60de9e4322d805c67ae041da714d6ee821944f76339c5f456bd13aff607c6edc6a0dee8bfb78ad55679465a6f19f952a32863d527189730988491ebbf21ded552eba02e1"], 0x1, 0x5a7, &(0x7f0000000f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 1m48.261581036s ago: executing program 5 (id=1017): r0 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xffffffffffffffff, 0x4) 1m47.855538329s ago: executing program 5 (id=1022): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0x8, {0x0, r1}}, 0x18) 1m47.649067375s ago: executing program 34 (id=1022): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0x8, {0x0, r1}}, 0x18) 21.232536763s ago: executing program 7 (id=2354): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x318, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xa, '\a\x00'}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0xa}]}}, 0x0}, 0x0) 19.159017611s ago: executing program 7 (id=2395): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e029, &(0x7f0000000400)={[{@huge_within_size}, {@inode32}]}) 19.084675297s ago: executing program 7 (id=2397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {0x0, 0x4102}}}, 0x1c}, 0x1, 0x0, 0x0, 0x101}, 0x24000040) 18.935758809s ago: executing program 7 (id=2401): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x1818418, &(0x7f0000000200)=ANY=[], 0xde, 0x4b1, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x2010040, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 18.30256488s ago: executing program 7 (id=2407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 17.294991111s ago: executing program 7 (id=2418): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r0, 0xffffffffffffffff, 0x0) 16.999658405s ago: executing program 35 (id=2418): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r0, 0xffffffffffffffff, 0x0) 3.497123287s ago: executing program 8 (id=2584): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200090700f1ffffffffffff07000000000000001000008004000000080031"], 0x28}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0) 3.309308063s ago: executing program 8 (id=2586): syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0], 0x1, 0x215, &(0x7f0000000080)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x20000000) 2.593650511s ago: executing program 4 (id=2593): r0 = syz_io_uring_setup(0x7a6e, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[0xffffffffffffffff]}, 0x1) 2.488631919s ago: executing program 4 (id=2595): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4103, 0x1007}], 0x1, 0x12, 0x5) 2.452717212s ago: executing program 8 (id=2597): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.333083662s ago: executing program 8 (id=2600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x0, 0x6d, "00001000", "8173828d"}}, 0x0}, 0x0) 1.724134811s ago: executing program 2 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000008000500000000001400038010000380"], 0x48}}, 0x0) 1.669802995s ago: executing program 2 (id=2605): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x85a416, &(0x7f00000043c0)=ANY=[], 0x2, 0x1a2, &(0x7f0000000440)="$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") r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffff7, 0x8, 0x7, {0xb, 0x200, 0x1ff, 0x3, 0x62c, 0x80, 0x7f, 0x4, 0x1000, 0x977e, 0x0, 0x0, 0x3, 0x80000001, "3a3176b66aaf637bfe6f5203afde5fe24ed9e2c7de1cf632cc2446c5bc2171f6"}}) 1.60721656s ago: executing program 2 (id=2606): semget$private(0x0, 0x3, 0x108) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) 1.560857414s ago: executing program 2 (id=2607): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 1.461467122s ago: executing program 2 (id=2608): syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@loccookie}, {@discard}, {}, {@meta}, {@rgrplvb}, {@nodiscard}, {@noquota}, {@upgrade}, {@barrier}, {@statfs_percent={'statfs_percent', 0x3d, 0x5}}, {@quota_on}, {@statfs_quantum}, {}, {@norecovery}]}, 0x11, 0x125bb, &(0x7f0000037080)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 1.328572133s ago: executing program 4 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4000) 1.23406289s ago: executing program 4 (id=2610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, r1, 0x1, 0x70bd27}, 0x14}}, 0x0) 1.061824674s ago: executing program 4 (id=2612): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000700)={@mcast2, 0x26, r1}) 1.010569398s ago: executing program 4 (id=2614): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x7, 0x1ff, 0x0, 0x81, 0x81, "cf3d73e2b33e6d4a786ae8f4dc44aa8e35554d", 0x8e93, 0x2}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1051}}, 0x1006) 589.864342ms ago: executing program 6 (id=2619): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003d00)={0x4}) 547.519026ms ago: executing program 6 (id=2620): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000080)="0008501ef663", 0x0, 0x800004, 0x10030, 0x3, 0x0}) 526.716607ms ago: executing program 0 (id=2621): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) flock(r0, 0x2) 444.207514ms ago: executing program 8 (id=2622): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) 416.007896ms ago: executing program 0 (id=2623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be080005"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 403.160267ms ago: executing program 6 (id=2624): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @name="bd23836a01fcafd0a3467aeb1c1d19884bfac62a84fb53315044081ef5b849a6"}) 353.770272ms ago: executing program 2 (id=2625): r0 = msgget$private(0x0, 0x4e) msgsnd(r0, &(0x7f0000000080)={0x3}, 0x8, 0x800) msgrcv(r0, &(0x7f0000001240)={0x0, ""/105}, 0x71, 0x3, 0x800) 333.865103ms ago: executing program 8 (id=2626): socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16], 0x0) 253.871249ms ago: executing program 6 (id=2627): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) process_mrelease(r0, 0x0) 253.614329ms ago: executing program 0 (id=2628): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) 181.843045ms ago: executing program 0 (id=2629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 137.887369ms ago: executing program 6 (id=2630): r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf) kernel console output (not intermixed with test programs): op2: detected capacity change from 0 to 256 [ 168.734233][ T8657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1408'. [ 168.882393][ T8666] loop7: detected capacity change from 0 to 4096 [ 169.011485][ T8666] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 169.137547][ T8666] EXT4-fs error (device loop7): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.7.1411: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 169.158394][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.188553][ T8666] EXT4-fs (loop7): Remounting filesystem read-only [ 169.199672][ T8666] EXT4-fs error (device loop7): ext4_get_first_dir_block:3619: inode #12: comm syz.7.1411: directory missing '..' [ 169.228512][ T8666] EXT4-fs (loop7): Remounting filesystem read-only [ 169.425878][ T8692] loop6: detected capacity change from 0 to 8 [ 169.480403][ T8695] loop0: detected capacity change from 0 to 2048 [ 169.487490][ T7157] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.494201][ T8698] program syz.7.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.571951][ T8700] loop7: detected capacity change from 0 to 512 [ 169.580988][ T8695] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.750396][ T8700] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.809872][ T8700] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.874975][ T7157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.882508][ T8714] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1432'. [ 170.013306][ T7157] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 170.022422][ T7157] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 170.071692][ T7157] usb 5-1: Manufacturer: syz [ 170.081545][ T7157] usb 5-1: SerialNumber: syz [ 170.133403][ T7157] usb 5-1: config 0 descriptor?? [ 170.140480][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1438'. [ 170.376331][ T7821] usb 5-1: USB disconnect, device number 9 [ 170.405720][ T8745] loop7: detected capacity change from 0 to 64 [ 170.421864][ T8740] overlayfs: failed to set xattr on upper [ 170.440965][ T8740] overlayfs: ...falling back to index=off,metacopy=off. [ 170.453782][ T8740] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 170.473233][ T8745] hfs: small file entry [ 170.512367][ T8746] loop6: detected capacity change from 0 to 4096 [ 170.571602][ T8750] loop2: detected capacity change from 0 to 64 [ 170.616727][ T8746] ntfs3: loop6: ino=3, Correct links count -> 2. [ 170.679360][ T7185] Bluetooth: hci3: command 0x0406 tx timeout [ 170.686518][ T7185] Bluetooth: hci2: command 0x0406 tx timeout [ 170.704812][ T7185] Bluetooth: hci1: command 0x0406 tx timeout [ 170.754103][ T8758] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 171.077247][ T8760] loop0: detected capacity change from 0 to 8192 [ 171.113827][ T8772] loop4: detected capacity change from 0 to 24 [ 171.133616][ T8760] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 171.133726][ T8760] REISERFS (device loop0): using ordered data mode [ 171.133736][ T8760] reiserfs: using flush barriers [ 171.136624][ T8760] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.136964][ T8760] REISERFS (device loop0): checking transaction log (loop0) [ 171.173140][ T8772] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 171.271352][ T8772] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 171.337111][ T8760] REISERFS (device loop0): Using tea hash to sort names [ 171.337400][ T8760] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 171.696197][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1470'. [ 171.737603][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1471'. [ 171.896891][ T8804] overlayfs: workdir and upperdir must be separate subtrees [ 171.985376][ T8808] comedi: valid board names for 8255 driver are: [ 172.024452][ T8808] 8255 [ 172.027323][ T8808] comedi: valid board names for vmk80xx driver are: [ 172.045117][ T8808] vmk80xx [ 172.045169][ T8808] comedi: valid board names for usbduxsigma driver are: [ 172.045179][ T8808] usbduxsigma [ 172.045187][ T8808] comedi: valid board names for usbduxfast driver are: [ 172.045207][ T8808] usbduxfast [ 172.045214][ T8808] comedi: valid board names for usbdux driver are: [ 172.045223][ T8808] usbdux [ 172.045233][ T8808] comedi: valid board names for ni6501 driver are: [ 172.045242][ T8808] ni6501 [ 172.045248][ T8808] comedi: valid board names for dt9812 driver are: [ 172.045257][ T8808] dt9812 [ 172.045263][ T8808] comedi: valid board names for ni_labpc_cs driver are: [ 172.045651][ T8808] ni_labpc_cs [ 172.045661][ T8808] comedi: valid board names for ni_daq_700 driver are: [ 172.045670][ T8808] ni_daq_700 [ 172.045676][ T8808] comedi: valid board names for labpc_pci driver are: [ 172.045684][ T8808] labpc_pci [ 172.045690][ T8808] comedi: valid board names for adl_pci9118 driver are: [ 172.045700][ T8808] pci9118dg [ 172.045706][ T8808] pci9118hg [ 172.045713][ T8808] pci9118hr [ 172.045719][ T8808] comedi: valid board names for 8255_pci driver are: [ 172.045728][ T8808] 8255_pci [ 172.045734][ T8808] comedi: valid board names for s526 driver are: [ 172.045742][ T8808] s526 [ 172.045749][ T8808] comedi: valid board names for multiq3 driver are: [ 172.045756][ T8808] multiq3 [ 172.045763][ T8808] comedi: valid board names for pcmuio driver are: [ 172.045771][ T8808] pcmuio48 [ 172.045778][ T8808] pcmuio96 [ 172.045784][ T8808] comedi: valid board names for pcmmio driver are: [ 172.045793][ T8808] pcmmio [ 172.045799][ T8808] comedi: valid board names for pcmda12 driver are: [ 172.045807][ T8808] pcmda12 [ 172.045813][ T8808] comedi: valid board names for pcmad driver are: [ 172.045822][ T8808] pcmad12 [ 172.045828][ T8808] pcmad16 [ 172.045834][ T8808] comedi: valid board names for ni_labpc driver are: [ 172.045842][ T8808] lab-pc-1200 [ 172.045849][ T8808] lab-pc-1200ai [ 172.045854][ T8808] lab-pc+ [ 172.045860][ T8808] comedi: valid board names for atmio16 driver are: [ 172.045868][ T8808] atmio16 [ 172.045874][ T8808] atmio16d [ 172.045880][ T8808] comedi: valid board names for ni_at_ao driver are: [ 172.045888][ T8808] at-ao-6 [ 172.045894][ T8808] at-ao-10 [ 172.045901][ T8808] comedi: valid board names for ni_at_a2150 driver are: [ 172.045909][ T8808] ni_at_a2150 [ 172.045996][ T8808] comedi: valid board names for adq12b driver are: [ 172.046005][ T8808] adq12b [ 172.046012][ T8808] comedi: valid board names for mpc624 driver are: [ 172.046019][ T8808] mpc624 [ 172.046025][ T8808] comedi: valid board names for c6xdigio driver are: [ 172.046033][ T8808] c6xdigio [ 172.046039][ T8808] comedi: valid board names for aio_iiro_16 driver are: [ 172.046047][ T8808] aio_iiro_16 [ 172.046054][ T8808] comedi: valid board names for aio_aio12_8 driver are: [ 172.046061][ T8808] aio_aio12_8 [ 172.046067][ T8808] aio_ai12_8 [ 172.046073][ T8808] aio_ao12_4 [ 172.046080][ T8808] comedi: valid board names for fl512 driver are: [ 172.046089][ T8808] fl512 [ 172.046095][ T8808] comedi: valid board names for dmm32at driver are: [ 172.046104][ T8808] dmm32at [ 172.046110][ T8808] comedi: valid board names for dt282x driver are: [ 172.046119][ T8808] dt2821 [ 172.046125][ T8808] dt2821-f [ 172.046131][ T8808] dt2821-g [ 172.046136][ T8808] dt2823 [ 172.046142][ T8808] dt2824-pgh [ 172.046148][ T8808] dt2824-pgl [ 172.046154][ T8808] dt2825 [ 172.046161][ T8808] dt2827 [ 172.046180][ T8808] dt2828 [ 172.046187][ T8808] dt2829 [ 172.046204][ T8808] dt21-ez [ 172.046211][ T8808] dt23-ez [ 172.046218][ T8808] dt24-ez [ 172.046224][ T8808] dt24-ez-pgl [ 172.046230][ T8808] comedi: valid board names for dt2817 driver are: [ 172.046237][ T8808] dt2817 [ 172.046242][ T8808] comedi: valid board names for dt2815 driver are: [ 172.046250][ T8808] dt2815 [ 172.046256][ T8808] comedi: valid board names for dt2814 driver are: [ 172.046265][ T8808] dt2814 [ 172.046270][ T8808] comedi: valid board names for dt2811 driver are: [ 172.046278][ T8808] dt2811-pgh [ 172.046284][ T8808] dt2811-pgl [ 172.046290][ T8808] comedi: valid board names for dt2801 driver are: [ 172.046298][ T8808] dt2801 [ 172.046304][ T8808] comedi: valid board names for das6402 driver are: [ 172.046312][ T8808] das6402-12 [ 172.046317][ T8808] das6402-16 [ 172.046323][ T8808] comedi: valid board names for das1800 driver are: [ 172.046331][ T8808] das-1701st [ 172.046337][ T8808] das-1701st-da [ 172.046343][ T8808] das-1702st [ 172.046349][ T8808] das-1702st-da [ 172.046356][ T8808] das-1702hr [ 172.046362][ T8808] das-1702hr-da [ 172.046369][ T8808] das-1701ao [ 172.046375][ T8808] das-1702ao [ 172.046381][ T8808] das-1801st [ 172.046386][ T8808] das-1801st-da [ 172.046393][ T8808] das-1802st [ 172.046399][ T8808] das-1802st-da [ 172.046405][ T8808] das-1802hr [ 172.046410][ T8808] das-1802hr-da [ 172.046415][ T8808] das-1801hc [ 172.046422][ T8808] das-1802hc [ 172.046428][ T8808] das-1801ao [ 172.046434][ T8808] das-1802ao [ 172.046440][ T8808] comedi: valid board names for das800 driver are: [ 172.046450][ T8808] das-800 [ 172.046456][ T8808] cio-das800 [ 172.046462][ T8808] das-801 [ 172.046470][ T8808] cio-das801 [ 172.046476][ T8808] das-802 [ 172.046483][ T8808] cio-das802 [ 172.046490][ T8808] cio-das802/16 [ 172.046497][ T8808] comedi: valid board names for isa-das08 driver are: [ 172.046505][ T8808] isa-das08 [ 172.046510][ T8808] das08-pgm [ 172.046516][ T8808] das08-pgh [ 172.046521][ T8808] das08-pgl [ 172.046527][ T8808] das08-aoh [ 172.046532][ T8808] das08-aol [ 172.046537][ T8808] das08-aom [ 172.046543][ T8808] das08/jr-ao [ 172.046550][ T8808] das08jr-16-ao [ 172.046556][ T8808] pc104-das08 [ 172.046561][ T8808] das08jr/16 [ 172.046568][ T8808] comedi: valid board names for das16m1 driver are: [ 172.046576][ T8808] das16m1 [ 172.046582][ T8808] comedi: valid board names for dac02 driver are: [ 172.046590][ T8808] dac02 [ 172.046596][ T8808] comedi: valid board names for rti802 driver are: [ 172.046605][ T8808] rti802 [ 172.046611][ T8808] comedi: valid board names for rti800 driver are: [ 172.046619][ T8808] rti800 [ 172.046625][ T8808] rti815 [ 172.046631][ T8808] comedi: valid board names for pcm3724 driver are: [ 172.046639][ T8808] pcm3724 [ 172.046646][ T8808] comedi: valid board names for pcl818 driver are: [ 172.046654][ T8808] pcl818l [ 172.046659][ T8808] pcl818h [ 172.046666][ T8808] pcl818hd [ 172.046672][ T8808] pcl818hg [ 172.046678][ T8808] pcl818 [ 172.046684][ T8808] pcl718 [ 172.046690][ T8808] pcm3718 [ 172.046697][ T8808] comedi: valid board names for pcl816 driver are: [ 172.046704][ T8808] pcl816 [ 172.046709][ T8808] pcl814b [ 172.046716][ T8808] comedi: valid board names for pcl812 driver are: [ 172.046723][ T8808] pcl812 [ 172.046729][ T8808] pcl812pg [ 172.046735][ T8808] acl8112pg [ 172.046740][ T8808] acl8112dg [ 172.046747][ T8808] acl8112hg [ 172.046752][ T8808] a821pgl [ 172.046756][ T8808] a821pglnda [ 172.046763][ T8808] a821pgh [ 172.046768][ T8808] a822pgl [ 172.046773][ T8808] a822pgh [ 172.046780][ T8808] a823pgl [ 172.046785][ T8808] a823pgh [ 172.046790][ T8808] pcl813 [ 172.046797][ T8808] pcl813b [ 172.046802][ T8808] acl8113 [ 172.046808][ T8808] iso813 [ 172.046814][ T8808] acl8216 [ 172.046821][ T8808] a826pg [ 172.046827][ T8808] comedi: valid board names for pcl730 driver are: [ 172.046836][ T8808] pcl730 [ 172.046842][ T8808] iso730 [ 172.046847][ T8808] acl7130 [ 172.046853][ T8808] pcm3730 [ 172.046859][ T8808] pcl725 [ 172.046864][ T8808] p8r8dio [ 172.046870][ T8808] acl7225b [ 172.046876][ T8808] p16r16dio [ 172.046883][ T8808] pcl733 [ 172.046889][ T8808] pcl734 [ 172.046895][ T8808] opmm-1616-xt [ 172.046901][ T8808] pearl-mm-p [ 172.046908][ T8808] ir104-pbf [ 172.046914][ T8808] comedi: valid board names for pcl726 driver are: [ 172.046923][ T8808] pcl726 [ 172.046929][ T8808] pcl727 [ 172.046935][ T8808] pcl728 [ 172.046942][ T8808] acl6126 [ 172.046947][ T8808] acl6128 [ 172.046953][ T8808] comedi: valid board names for pcl724 driver are: [ 172.046961][ T8808] pcl724 [ 172.046967][ T8808] pcl722 [ 172.046974][ T8808] pcl731 [ 172.046980][ T8808] acl7122 [ 172.046986][ T8808] acl7124 [ 172.046992][ T8808] pet48dio [ 172.046998][ T8808] pcmio48 [ 172.047004][ T8808] onyx-mm-dio [ 172.047010][ T8808] comedi: valid board names for pcl711 driver are: [ 172.047093][ T8808] pcl711 [ 172.047101][ T8808] pcl711b [ 172.047107][ T8808] acl8112hg [ 172.047113][ T8808] acl8112dg [ 172.047120][ T8808] comedi: valid board names for amplc_pc263 driver are: [ 172.047129][ T8808] pc263 [ 172.047135][ T8808] comedi: valid board names for amplc_pc236 driver are: [ 172.047143][ T8808] pc36at [ 172.047149][ T8808] comedi: valid board names for amplc_dio200 driver are: [ 172.047157][ T8808] pc212e [ 172.047163][ T8808] pc214e [ 172.047169][ T8808] pc215e [ 172.047176][ T8808] pc218e [ 172.047182][ T8808] pc272e [ 172.047188][ T8808] comedi: valid board names for comedi_parport driver are: [ 172.047204][ T8808] comedi_parport [ 172.047211][ T8808] comedi: valid board names for comedi_test driver are: [ 172.047221][ T8808] comedi_test [ 172.047227][ T8808] comedi: valid board names for comedi_bond driver are: [ 172.047236][ T8808] comedi_bond [ 172.351782][ T8834] loop2: detected capacity change from 0 to 1024 [ 172.487287][ T7185] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 172.773541][ T7426] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 173.144384][ T7185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.154117][ T144] hfsplus: b-tree write err: -5, ino 4 [ 173.173408][ T7185] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 173.312294][ T8844] loop7: detected capacity change from 0 to 40427 [ 173.366490][ T8844] F2FS-fs (loop7): invalid crc value [ 173.526429][ T7426] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 173.547229][ T8844] F2FS-fs (loop7): Found nat_bits in checkpoint [ 173.554094][ T7426] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.655026][ T8848] loop0: detected capacity change from 0 to 32768 [ 173.656614][ T8844] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 173.661851][ T7185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.679074][ T7185] usb 5-1: config 0 descriptor?? [ 173.691477][ T7426] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 173.711105][ T7426] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 173.720648][ T8844] F2FS-fs (loop7): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 173.724868][ T7426] usb 7-1: Manufacturer: syz [ 173.749873][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®: Trying to join cluster "lock_nolock", "#ãvúSÖñ^ѰÕ~oó»Á$®" [ 173.761237][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®: Now mounting FS (format 1801)... [ 173.783189][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®.s: fatal: filesystem consistency error [ 173.783189][ T8848] inode = 1 19 [ 173.783189][ T8848] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 173.786758][ T7426] usb 7-1: config 0 descriptor?? [ 173.803403][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®.s: about to withdraw this file system [ 173.817542][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®.s: Journal recovery skipped for jid 0 until next mount. [ 173.827844][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®.s: Glock dequeues delayed: 0 [ 173.835985][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®.s: File system withdrawn [ 173.843550][ T8848] CPU: 1 PID: 8848 Comm: syz.0.1494 Not tainted 5.15.189-syzkaller #0 [ 173.851773][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.861860][ T8848] Call Trace: [ 173.865147][ T8848] [ 173.868082][ T8848] dump_stack_lvl+0x168/0x230 [ 173.872773][ T8848] ? kobject_uevent_env+0x371/0x890 [ 173.877992][ T8848] ? show_regs_print_info+0x20/0x20 [ 173.883956][ T8848] ? load_image+0x3b0/0x3b0 [ 173.888527][ T8848] ? kobject_uevent_env+0x371/0x890 [ 173.893775][ T8848] gfs2_withdraw+0x111b/0x1460 [ 173.898566][ T8848] ? gfs2_lm+0x220/0x220 [ 173.902937][ T8848] ? _raw_spin_unlock+0x24/0x40 [ 173.907805][ T8848] ? gfs2_glock_nq+0xcb0/0x1550 [ 173.912671][ T8848] ? gfs2_consist_inode_i+0xc0/0xe0 [ 173.917883][ T8848] gfs2_jdesc_check+0x137/0x290 [ 173.922912][ T8848] check_journal_clean+0x151/0x300 [ 173.928058][ T8848] ? gfs2_trans_remove_revoke+0x370/0x370 [ 173.933807][ T8848] ? check_journal_clean+0x10d/0x300 [ 173.939117][ T8848] ? __rwlock_init+0x140/0x140 [ 173.943904][ T8848] ? do_raw_spin_unlock+0x11d/0x230 [ 173.949125][ T8848] ? _raw_spin_unlock+0x24/0x40 [ 173.953993][ T8848] ? gfs2_jdesc_find+0xa7/0xc0 [ 173.958773][ T8848] init_journal+0x179c/0x2220 [ 173.963482][ T8848] ? end_bio_io_page+0x100/0x100 [ 173.968434][ T8848] ? vsnprintf+0x1905/0x1a00 [ 173.973048][ T8848] ? snprintf+0xd7/0x120 [ 173.977343][ T8848] ? init_journal+0x710/0x2220 [ 173.982119][ T8848] ? vscnprintf+0x80/0x80 [ 173.986464][ T8848] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 173.991688][ T8848] init_inodes+0xdb/0x320 [ 173.996039][ T8848] gfs2_fill_super+0x1701/0x1f50 [ 173.996280][ T8846] loop2: detected capacity change from 0 to 32768 [ 174.000993][ T8848] ? gfs2_reconfigure+0xcd0/0xcd0 [ 174.001013][ T8848] ? gfs2_glock_nq_num+0x82/0x1b0 [ 174.001028][ T8848] ? preempt_count_add+0x8d/0x190 [ 174.001056][ T8848] ? sb_set_blocksize+0xa5/0xe0 [ 174.001076][ T8848] get_tree_bdev+0x3f1/0x610 [ 174.001094][ T8848] ? gfs2_reconfigure+0xcd0/0xcd0 [ 174.001111][ T8848] gfs2_get_tree+0x4d/0x1e0 [ 174.001130][ T8848] vfs_get_tree+0x88/0x270 [ 174.001147][ T8848] do_new_mount+0x24a/0xa40 [ 174.001171][ T8848] __se_sys_mount+0x2d6/0x3c0 [ 174.001194][ T8848] ? __x64_sys_mount+0xc0/0xc0 [ 174.001215][ T8848] ? lockdep_hardirqs_on+0x94/0x140 [ 174.001231][ T8848] ? __x64_sys_mount+0x1c/0xc0 [ 174.001247][ T8848] do_syscall_64+0x4c/0xa0 [ 174.001264][ T8848] ? clear_bhb_loop+0x30/0x80 [ 174.001280][ T8848] ? clear_bhb_loop+0x30/0x80 [ 174.001295][ T8848] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.001313][ T8848] RIP: 0033:0x7f8d0cb4f38a [ 174.001330][ T8848] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.001344][ T8848] RSP: 002b:00007f8d0adb4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.123201][ T8848] RAX: ffffffffffffffda RBX: 00007f8d0adb4ef0 RCX: 00007f8d0cb4f38a [ 174.131189][ T8848] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f8d0adb4eb0 [ 174.139175][ T8848] RBP: 0000200000000400 R08: 00007f8d0adb4ef0 R09: 0000000000200001 [ 174.147163][ T8848] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 174.155187][ T8848] R13: 00007f8d0adb4eb0 R14: 00000000000125bb R15: 0000200000000f00 [ 174.155907][ T7426] rc_core: IR keymap rc-hauppauge not found [ 174.164028][ T8848] [ 174.164123][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.164870][ T8848] gfs2: fsid=#ãvúSÖñ^ѰÕ~oó»Á$®.s: Error checking journal for spectator mount. [ 174.205623][ T7426] Registered IR keymap rc-empty [ 174.221792][ T7426] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 174.235443][ T7426] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 174.433053][ T7185] asus 0003:0B05:17E0.0015: item fetching failed at offset 2/5 [ 174.471261][ T7185] asus 0003:0B05:17E0.0015: Asus hid parse failed: -22 [ 174.478189][ T7185] asus: probe of 0003:0B05:17E0.0015 failed with error -22 [ 174.550473][ C0] igorplugusb 7-1:0.0: receive overflow, at least 23 lost [ 174.572790][ T8856] loop0: detected capacity change from 0 to 2048 [ 174.679391][ T8856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.690293][ T8858] loop2: detected capacity change from 0 to 4096 [ 174.759909][ T7426] usb 5-1: USB disconnect, device number 10 [ 174.764422][ T8860] loop7: detected capacity change from 0 to 4096 [ 174.769823][ T7317] usb 7-1: USB disconnect, device number 9 [ 174.878358][ T8858] ntfs3: loop2: ino=5, "/" directory corrupted [ 174.900253][ T8858] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 174.944046][ T8858] ntfs3: loop2: ino=5, "/" directory corrupted [ 175.056196][ T7461] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 175.073180][ T7461] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 175.788726][ T8862] loop0: detected capacity change from 0 to 40427 [ 175.884472][ T8862] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 175.912126][ T8895] loop6: detected capacity change from 0 to 8 [ 175.918486][ T8862] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 175.940202][ T8895] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 175.962323][ T8862] F2FS-fs (loop0): invalid crc value [ 175.976625][ T4202] udevd[4202]: incorrect cramfs checksum on /dev/loop6 [ 175.992058][ T8895] cramfs: Error -3 while decompressing! [ 175.998234][ T8895] cramfs: ffffffff961ea028(26)->ffff88800ec97000(4096) [ 176.024289][ T8862] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.038750][ T8866] loop2: detected capacity change from 0 to 32768 [ 176.055527][ T8895] cramfs: Error -3 while decompressing! [ 176.084548][ T8895] cramfs: ffffffff961ea042(282)->ffff888054df4000(4096) [ 176.107288][ T8895] cramfs: bad data blocksize 4294966884 [ 176.119692][ T8895] cramfs: Error -3 while decompressing! [ 176.131513][ T8862] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.132701][ T8895] cramfs: ffffffff961ea028(26)->ffff88800ec97000(4096) [ 176.138572][ T8862] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.161202][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 176.161215][ T26] audit: type=1800 audit(1755229256.528:76): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1514" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 176.294229][ T8866] XFS (loop2): Mounting V5 Filesystem [ 176.464442][ T8918] loop4: detected capacity change from 0 to 512 [ 176.498180][ T8866] XFS (loop2): Ending clean mount [ 176.506517][ T8866] XFS (loop2): Quotacheck needed: Please wait. [ 176.538464][ T8920] loop7: detected capacity change from 0 to 64 [ 176.617672][ T8866] XFS (loop2): Quotacheck: Done. [ 176.739880][ T4185] XFS (loop2): Unmounting Filesystem [ 177.549106][ T7185] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 177.793182][ T7185] usb 5-1: Using ep0 maxpacket: 32 [ 177.918709][ T7185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.944264][ T7185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.957565][ T7185] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 177.980476][ T7185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.993696][ T7185] usb 5-1: config 0 descriptor?? [ 178.158263][ T7317] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 178.306065][ T9001] loop2: detected capacity change from 0 to 1024 [ 178.363775][ T9001] hfsplus: bad catalog entry type [ 178.421411][ T9] hfsplus: b-tree write err: -5, ino 4 [ 178.479815][ T7185] ft260 0003:0403:6030.0016: item fetching failed at offset 0/2 [ 178.487783][ T7185] ft260 0003:0403:6030.0016: failed to parse HID [ 178.529964][ T7185] ft260: probe of 0003:0403:6030.0016 failed with error -22 [ 178.564074][ T7317] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 178.583381][ T7317] usb 7-1: config 0 interface 0 has no altsetting 0 [ 178.596305][ T7317] usb 7-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 178.607494][ T7317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.633332][ T7317] usb 7-1: config 0 descriptor?? [ 178.660885][ T8990] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 178.681598][ T7426] usb 5-1: USB disconnect, device number 11 [ 178.826811][ T9005] loop7: detected capacity change from 0 to 32768 [ 178.899112][ T9005] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 178.943104][ T7461] ocfs2: Unmounting device (7,7) on (node local) [ 179.079931][ T9024] loop7: detected capacity change from 0 to 8 [ 179.090900][ T7185] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 179.141794][ T7317] thrustmaster 0003:044F:B323.0017: hidraw0: USB HID v0.00 Device [HID 044f:b323] on usb-dummy_hcd.6-1/input0 [ 179.153776][ T7317] thrustmaster 0003:044F:B323.0017: no inputs found [ 179.208838][ T9024] fuse: Unexpected value for 'default_permissions' [ 179.362456][ T7157] usb 7-1: USB disconnect, device number 10 [ 179.453680][ T9033] loop7: detected capacity change from 0 to 2048 [ 179.492354][ T9033] loop7: p1 < > p4 [ 179.497726][ T7185] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.499876][ T9033] loop7: p4 size 8388608 extends beyond EOD, truncated [ 179.537567][ T7185] usb 3-1: not running at top speed; connect to a high speed hub [ 179.617544][ T7185] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 179.626182][ T7185] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 179.636241][ T7185] usb 3-1: config 2 has no interface number 0 [ 179.642747][ T7185] usb 3-1: config 2 has no interface number 1 [ 179.649223][ T7185] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 179.717126][ T7185] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 179.752514][ T7185] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 179.752624][ T9045] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.764696][ T7185] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.844481][ T7185] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.880686][ T7185] usb 3-1: config 2 interface 212 has no altsetting 0 [ 180.087188][ T7185] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 180.096551][ T7185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.133462][ T7185] usb 3-1: Product: syz [ 180.137139][ T9062] netlink: 'syz.0.1584': attribute type 6 has an invalid length. [ 180.172087][ T7185] usb 3-1: Manufacturer: syz [ 180.184433][ T7185] usb 3-1: SerialNumber: syz [ 180.258312][ T9067] loop0: detected capacity change from 0 to 128 [ 180.491442][ T9073] loop7: detected capacity change from 0 to 256 [ 180.549352][ T7185] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input12 [ 180.567524][ T9053] loop4: detected capacity change from 0 to 32768 [ 180.581018][ T26] audit: type=1800 audit(1755229260.951:77): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1588" name="file1" dev="loop7" ino=1048679 res=0 errno=0 [ 180.594271][ T9073] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 180.647107][ T7185] usb 3-1: USB disconnect, device number 12 [ 180.829525][ T4361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4361) [ 180.931817][ T9071] loop0: detected capacity change from 0 to 32768 [ 180.966197][ T9082] genirq: Flags mismatch irq 5. 00000000 (pcl812) vs. 00000000 (comedi_parport) [ 181.092438][ T9094] loop2: detected capacity change from 0 to 64 [ 181.197689][ T9071] XFS (loop0): Mounting V5 Filesystem [ 181.322770][ T9107] loop7: detected capacity change from 0 to 64 [ 181.491884][ T9107] hfs: request for non-existent node 131072 in B*Tree [ 181.495758][ T9071] XFS (loop0): Ending clean mount [ 181.505144][ T9107] hfs: request for non-existent node 131072 in B*Tree [ 181.532500][ T9071] XFS (loop0): Quotacheck needed: Please wait. [ 181.659392][ T9071] XFS (loop0): Quotacheck: Done. [ 181.731486][ T4182] XFS (loop0): Unmounting Filesystem [ 181.938769][ T9117] loop6: detected capacity change from 0 to 8192 [ 181.988982][ T9117] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 182.019255][ T9117] REISERFS (device loop6): using ordered data mode [ 182.046992][ T9117] reiserfs: using flush barriers [ 182.097802][ T9117] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.176131][ T9117] REISERFS (device loop6): checking transaction log (loop6) [ 182.201974][ T9114] loop2: detected capacity change from 0 to 32768 [ 182.226356][ T9117] REISERFS (device loop6): Using r5 hash to sort names [ 182.234412][ T9117] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 182.270775][ T26] audit: type=1800 audit(1755229262.642:78): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1605" name="file2" dev="loop6" ino=2 res=0 errno=0 [ 182.444263][ T9114] XFS (loop2): Mounting V5 Filesystem [ 182.508824][ T9113] loop4: detected capacity change from 0 to 32768 [ 182.564064][ T9114] XFS (loop2): Ending clean mount [ 182.582572][ T9114] XFS (loop2): Quotacheck needed: Please wait. [ 182.620375][ T9113] XFS (loop4): Mounting V5 Filesystem [ 182.680931][ T9160] loop6: detected capacity change from 0 to 128 [ 182.747103][ T9113] XFS (loop4): Ending clean mount [ 182.761113][ T9160] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.763688][ T9113] XFS (loop4): Quotacheck needed: Please wait. [ 182.790719][ T9160] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.870768][ T9114] XFS (loop2): Quotacheck: Done. [ 182.959423][ T9113] XFS (loop4): Quotacheck: Done. [ 183.049543][ T4185] XFS (loop2): Unmounting Filesystem [ 183.136049][ T4184] XFS (loop4): Unmounting Filesystem [ 183.267753][ T9171] loop6: detected capacity change from 0 to 16 [ 183.336926][ T9171] erofs: (device loop6): mounted with root inode @ nid 36. [ 183.626675][ T9179] program syz.7.1629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.676680][ T9181] netlink: 'syz.6.1630': attribute type 1 has an invalid length. [ 183.715084][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1630'. [ 184.398216][ T7821] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 184.514067][ T9230] loop6: detected capacity change from 0 to 2048 [ 184.538150][ T9230] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 184.539455][ T9203] loop4: detected capacity change from 0 to 32768 [ 184.618493][ T9203] jfs_lookup: iget failed on inum 4 [ 184.642143][ T9203] jfs_lookup: iget failed on inum 4 [ 184.717294][ T9230] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,usrjquota=,errors=remount-ro,discard,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 184.765472][ T9244] netlink: 'syz.7.1658': attribute type 2 has an invalid length. [ 184.775202][ T9244] netlink: 'syz.7.1658': attribute type 2 has an invalid length. [ 184.784414][ T7821] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 184.801061][ T7821] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 184.814277][ T7821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.820968][ T7821] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 184.831004][ T7821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.850334][ T7821] usb 3-1: config 0 descriptor?? [ 184.867077][ T9246] loop7: detected capacity change from 0 to 1024 [ 184.888160][ T9212] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 185.009270][ T1235] hfsplus: b-tree write err: -5, ino 8 [ 185.204176][ T7157] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 185.336204][ T9264] loop7: detected capacity change from 0 to 4096 [ 185.367638][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.370798][ T9264] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 185.387978][ T9264] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 4096) [ 185.404646][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.420007][ T9265] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.425070][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.473873][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.492913][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.509188][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.516899][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.529880][ T7821] hid-rmi 0003:1532:011D.0018: unknown main item tag 0x0 [ 185.552972][ T7821] hid-rmi 0003:1532:011D.0018: hidraw0: USB HID v10.00 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0 [ 185.565173][ T7157] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.583580][ T7157] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.616588][ T7821] usb 3-1: USB disconnect, device number 13 [ 185.632718][ T7157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 185.646138][ T7157] usb 7-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 185.673724][ T7157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.712810][ T7157] usb 7-1: config 0 descriptor?? [ 185.801864][ T9275] fido_id[9275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 186.030385][ T9283] loop0: detected capacity change from 0 to 4096 [ 186.143227][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'. [ 186.206783][ T7157] hid-led 0003:04D8:F372.0019: unknown main item tag 0x0 [ 186.217099][ T4182] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 186.222856][ T7157] hid-led 0003:04D8:F372.0019: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.6-1/input0 [ 186.242307][ T4182] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 186.354423][ T7157] hid-led 0003:04D8:F372.0019: Greynut Luxafor initialized [ 186.418374][ T7157] usb 7-1: USB disconnect, device number 11 [ 186.455959][ T7821] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 186.478348][ T4257] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 186.496173][ T4257] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 186.525265][ T4257] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 186.566544][ T4257] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 186.595045][ T4257] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 186.610263][ T4257] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 186.618841][ T9300] fido_id[9300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 186.625769][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 186.642025][ T4257] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 186.652568][ T4257] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 186.660851][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 186.665909][ T4257] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 186.698763][ T4257] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 186.718399][ T4257] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 186.739735][ T4257] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 186.759519][ T4257] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 186.777872][ T4257] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 186.794005][ T4257] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 186.816449][ T4257] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 186.838703][ T7821] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 187.257741][ T9309] loop7: detected capacity change from 0 to 40427 [ 187.355088][ T9337] loop6: detected capacity change from 0 to 512 [ 187.363376][ T9309] F2FS-fs (loop7): Found nat_bits in checkpoint [ 187.458795][ T9337] EXT4-fs error (device loop6): __ext4_iget:4894: inode #11: block 1: comm syz.6.1697: invalid block [ 187.480556][ T9309] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 187.502106][ T9337] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1697: couldn't read orphan inode 11 (err -117) [ 187.532283][ T9337] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue. Quota mode: writeback. [ 187.592615][ T7317] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.610394][ T7461] attempt to access beyond end of device [ 187.610394][ T7461] loop7: rw=2049, want=45104, limit=40427 [ 187.626666][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1700'. [ 187.753272][ T9347] loop6: detected capacity change from 0 to 512 [ 187.848251][ T9347] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33349!=33292) [ 187.860497][ T9347] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x00000000000000a7,abort,noblock_validity,,errors=continue. Quota mode: none. [ 187.884592][ T9347] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.1702: Unimplemented hash flags: 0x0001 [ 187.898226][ T9347] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1702: Corrupt directory, running e2fsck is recommended [ 188.102553][ T4293] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 188.163624][ T7317] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 188.181465][ T7317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.194380][ T7317] usb 3-1: Product: syz [ 188.199065][ T7317] usb 3-1: Manufacturer: syz [ 188.208643][ T7317] usb 3-1: SerialNumber: syz [ 188.216129][ T7317] usb 3-1: config 0 descriptor?? [ 188.267367][ T7317] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 188.287198][ T9368] loop7: detected capacity change from 0 to 4096 [ 188.317778][ T9368] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 188.402111][ T4293] usb 5-1: Using ep0 maxpacket: 16 [ 188.702511][ T4293] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 188.726837][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.733284][ T9387] loop7: detected capacity change from 0 to 4096 [ 188.735673][ T4293] usb 5-1: Product: syz [ 188.754601][ T9387] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 188.766371][ T4293] usb 5-1: Manufacturer: syz [ 188.792722][ T9389] loop6: detected capacity change from 0 to 4096 [ 188.799310][ T4293] usb 5-1: SerialNumber: syz [ 188.800174][ T9387] ntfs: (device loop7): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 188.823330][ T9387] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 188.830613][ T4293] usb 5-1: config 0 descriptor?? [ 188.833252][ T9387] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 188.861346][ T9387] ntfs: (device loop7): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 188.914148][ T7317] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 188.919939][ T9387] ntfs: volume version 3.1. [ 188.923143][ T4293] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 188.943288][ T7317] sq905c: probe of 3-1:0.0 failed with error -71 [ 188.973243][ T7317] usb 3-1: USB disconnect, device number 14 [ 189.009654][ T5462] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 189.018659][ T5462] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 189.046675][ T9387] ntfs: (device loop7): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 189.090565][ T9387] ntfs: (device loop7): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 189.107651][ T9387] ntfs: (device loop7): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 189.134712][ T9387] ntfs: (device loop7): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 189.343032][ T4293] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 189.355758][ T4293] visor: probe of 5-1:0.0 failed with error -5 [ 189.447698][ T9393] loop6: detected capacity change from 0 to 32768 [ 189.468758][ T9393] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1722 (9393) [ 189.535970][ T9393] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 189.556063][ T9393] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 189.562521][ T4293] usb 5-1: USB disconnect, device number 12 [ 189.571397][ T9393] BTRFS info (device loop6): use zstd compression, level 3 [ 189.603686][ T9393] BTRFS info (device loop6): using free space tree [ 189.637099][ T9393] BTRFS info (device loop6): has skinny extents [ 189.748509][ T9421] loop0: detected capacity change from 0 to 1024 [ 189.788107][ T9428] [U] ¹é [ 189.827242][ T9432] loop2: detected capacity change from 0 to 64 [ 189.839343][ T9393] BTRFS info (device loop6): enabling ssd optimizations [ 189.908991][ T151] hfsplus: b-tree write err: -5, ino 4 [ 190.174014][ T9443] sp0: Synchronizing with TNC [ 190.474625][ T9455] loop7: detected capacity change from 0 to 64 [ 190.800316][ T9464] loop7: detected capacity change from 0 to 256 [ 191.022922][ T9464] FAT-fs (loop7): Directory bread(block 64) failed [ 191.065059][ T9482] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 191.067594][ T9464] FAT-fs (loop7): Directory bread(block 65) failed [ 191.105066][ T9484] loop2: detected capacity change from 0 to 1024 [ 191.121690][ T9464] FAT-fs (loop7): Directory bread(block 66) failed [ 191.128369][ T9464] FAT-fs (loop7): Directory bread(block 67) failed [ 191.159537][ T9484] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 191.195317][ T9464] FAT-fs (loop7): Directory bread(block 68) failed [ 191.222830][ T9464] FAT-fs (loop7): Directory bread(block 69) failed [ 191.229643][ T9464] FAT-fs (loop7): Directory bread(block 70) failed [ 191.286908][ T9464] FAT-fs (loop7): Directory bread(block 71) failed [ 191.320557][ T9464] FAT-fs (loop7): Directory bread(block 72) failed [ 191.327754][ T9464] FAT-fs (loop7): Directory bread(block 73) failed [ 191.455045][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.499355][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.531916][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.555278][ T9507] loop0: detected capacity change from 0 to 1024 [ 191.572623][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.591712][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.602956][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.668798][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.690544][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.721635][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 191.736853][ T5089] hfsplus: b-tree write err: -5, ino 4 [ 191.770317][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 192.165948][ T9476] loop6: detected capacity change from 0 to 40427 [ 192.279904][ T9476] F2FS-fs (loop6): Mismatch start address, segment0(0) cp_blkaddr(512) [ 192.291855][ T9476] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 192.376497][ T9476] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 192.467162][ T9476] F2FS-fs (loop6): Found nat_bits in checkpoint [ 192.586871][ T9476] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 192.603097][ T9476] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 192.639197][ T9512] loop7: detected capacity change from 0 to 32768 [ 192.702107][ T9476] attempt to access beyond end of device [ 192.702107][ T9476] loop6: rw=2049, want=45104, limit=40427 [ 192.803506][ T9512] ERROR: (device loop7): dbAdjCtl: Corrupt dmapctl page [ 192.803506][ T9512] [ 192.872072][ T9512] ERROR: (device loop7): remounting filesystem as read-only [ 192.900370][ T9512] ERROR: (device loop7): dbDiscardAG: -EIO [ 192.900370][ T9512] [ 193.145338][ T9528] loop4: detected capacity change from 0 to 32768 [ 193.330624][ T9528] XFS (loop4): Mounting V5 Filesystem [ 193.571614][ T9528] XFS (loop4): Ending clean mount [ 193.600376][ T9528] XFS (loop4): Quotacheck needed: Please wait. [ 193.639200][ T9588] program syz.6.1788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.726375][ T9528] XFS (loop4): Quotacheck: Done. [ 193.732347][ T9593] loop2: detected capacity change from 0 to 1024 [ 193.763715][ T9598] loop6: detected capacity change from 0 to 64 [ 193.811534][ T4184] XFS (loop4): Unmounting Filesystem [ 194.020644][ T9607] loop6: detected capacity change from 0 to 136 [ 194.043193][ T9610] loop7: detected capacity change from 0 to 16 [ 194.109134][ T9613] loop2: detected capacity change from 0 to 1024 [ 194.173543][ T9610] erofs: (device loop7): mounted with root inode @ nid 36. [ 194.183550][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183639][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.251879][ T1235] hfsplus: b-tree write err: -5, ino 4 [ 194.269344][ T9610] attempt to access beyond end of device [ 194.269344][ T9610] loop7: rw=524288, want=720, limit=16 [ 194.301519][ T9610] attempt to access beyond end of device [ 194.301519][ T9610] loop7: rw=524288, want=19328, limit=16 [ 194.329458][ T9610] attempt to access beyond end of device [ 194.329458][ T9610] loop7: rw=524288, want=6227189768, limit=16 [ 194.396170][ T9610] attempt to access beyond end of device [ 194.396170][ T9610] loop7: rw=524288, want=13478624032, limit=16 [ 194.456027][ T9610] attempt to access beyond end of device [ 194.456027][ T9610] loop7: rw=524288, want=13612829496, limit=16 [ 194.476096][ T9626] loop6: detected capacity change from 0 to 128 [ 194.488391][ T9610] attempt to access beyond end of device [ 194.488391][ T9610] loop7: rw=524288, want=14550774152, limit=16 [ 194.533549][ T9610] attempt to access beyond end of device [ 194.533549][ T9610] loop7: rw=524288, want=14146439984, limit=16 [ 194.534132][ T9632] syz.2.1821 (9632): /proc/9631/oom_adj is deprecated, please use /proc/9631/oom_score_adj instead. [ 194.548310][ T9610] attempt to access beyond end of device [ 194.548310][ T9610] loop7: rw=524288, want=13716630376, limit=16 [ 194.611452][ T9610] attempt to access beyond end of device [ 194.611452][ T9610] loop7: rw=524288, want=6898279248, limit=16 [ 194.822289][ T9639] loop2: detected capacity change from 0 to 4096 [ 194.908108][ T9639] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 194.984132][ T9639] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 195.013007][ T9639] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 195.121003][ T4185] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 195.130838][ T4185] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 195.247871][ T5956] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 195.539218][ T5956] usb 7-1: Using ep0 maxpacket: 16 [ 195.607755][ T4242] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 195.667996][ T5956] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 195.687569][ T5956] usb 7-1: config 0 has no interface number 0 [ 195.712805][ T5956] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 195.744393][ T5956] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 195.767801][ T5956] usb 7-1: config 0 interface 41 has no altsetting 0 [ 195.967510][ T4242] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 195.967688][ T5956] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 195.987435][ T4242] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.998944][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.007384][ T4242] usb 8-1: config 0 interface 0 has no altsetting 0 [ 196.013596][ T5956] usb 7-1: Product: syz [ 196.019773][ T4242] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 196.024360][ T5956] usb 7-1: Manufacturer: syz [ 196.034944][ T5956] usb 7-1: SerialNumber: syz [ 196.036413][ T4242] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.057502][ T4242] usb 8-1: config 0 descriptor?? [ 196.061076][ T5956] usb 7-1: config 0 descriptor?? [ 196.090744][ T9653] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.097610][ T9670] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 196.107560][ T9653] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.348506][ T9704] loop4: detected capacity change from 0 to 128 [ 196.379338][ T9704] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.394807][ T9704] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.421445][ T5956] dm9601: probe of 7-1:0.41 failed with error -71 [ 196.436530][ T9708] loop2: detected capacity change from 0 to 1024 [ 196.467449][ T5956] sr9700: probe of 7-1:0.41 failed with error -71 [ 196.488976][ T5956] usb 7-1: USB disconnect, device number 12 [ 196.574992][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.582236][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.589756][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.597431][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.608733][ T9708] EXT4-fs (loop2): Ignoring removed nobh option [ 196.623553][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.632489][ T9708] EXT4-fs (loop2): Ignoring removed bh option [ 196.662924][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.675858][ T9708] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.694888][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.703524][ T4242] hid-rmi 0003:1532:011D.001A: unknown main item tag 0x0 [ 196.723842][ T4242] hid-rmi 0003:1532:011D.001A: hidraw0: USB HID v10.00 Device [HID 1532:011d] on usb-dummy_hcd.7-1/input0 [ 196.751541][ T9708] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 196.811121][ T5956] usb 8-1: USB disconnect, device number 4 [ 196.983238][ T9720] loop2: detected capacity change from 0 to 16 [ 196.986924][ T7157] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 197.053632][ T9720] erofs: (device loop2): mounted with root inode @ nid 36. [ 197.082491][ T9720] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 197.114236][ T9720] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 197.164745][ T9720] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 197.173315][ T26] audit: type=1800 audit(1755229277.551:79): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1858" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 197.302507][ T9725] netlink: 'syz.2.1860': attribute type 10 has an invalid length. [ 197.361856][ T7157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.406499][ T7157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.437207][ T7157] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 197.459641][ T7157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.504478][ T7157] usb 5-1: config 0 descriptor?? [ 197.578667][ T9722] loop6: detected capacity change from 0 to 32768 [ 197.658927][ T9722] XFS (loop6): Mounting V5 Filesystem [ 197.713181][ T9747] loop7: detected capacity change from 0 to 1024 [ 197.723015][ T9747] hfsplus: unable to parse mount options [ 197.733448][ T9747] kAFS: unable to lookup cell '°ÇÈsYSÝ‹ñ½øAœ‹Ù¸ë±?Š¥hÆrÌF5=‰XŠ$jÕÎÓ‹Zçîñ^îÛº2Ûéí׳Hªq=V²ØÎÇÕJt›dçŽùzÏh¬D ŒøAšä[¹st­ç÷õëü¹L®ýâˆ}ŽZvæ“݌̥¹Ï³ñÒðÜy Ž4¥î3¨“Û£¤›ƒ#9ÿá89?‘¯Ó\ÿ¢?çmÌGiƒ™XˆR~õE¼ÚŸó[_¼÷rã/ÿó¯Wn”ÖnÞ¸¾qîOéPM…ÁLÔ{2ñÚð«/ÏD#ÍDkôLLî˜~‚ó8@•<ÙT4âlùݬ´oô\‚ïŵXŽ‹1óq)æâ±õ¾+ìT_^ËõÕþœd÷ZiçüVü™/õTúå>•Vš——zòÚ;ÓÕ²cùžË¿Š¹ž,½<üêû¯@' [ 197.792233][ T9722] XFS (loop6): Ending clean mount [ 198.009025][ T7157] aquacomputer-d5next 0003:0C70:F00E.001B: unknown main item tag 0x0 [ 198.033845][ T7157] aquacomputer-d5next 0003:0C70:F00E.001B: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.4-1/input0 [ 198.072573][ T5462] XFS (loop6): Unmounting Filesystem [ 198.210636][ T6522] usb 5-1: USB disconnect, device number 13 [ 198.293239][ T9758] fido_id[9758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 198.293506][ T9760] loop7: detected capacity change from 0 to 256 [ 198.492985][ T9760] FAT-fs (loop7): IO charset cpush not found [ 198.519369][ T9760] smb3: Unexpected value for 'acl' [ 198.644053][ T9768] program syz.7.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.328361][ T9810] __nla_validate_parse: 14 callbacks suppressed [ 199.328379][ T9810] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1895'. [ 199.336124][ T9806] loop0: detected capacity change from 0 to 512 [ 199.430770][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1895'. [ 199.458797][ T9815] loop2: detected capacity change from 0 to 512 [ 199.498210][ T9806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.520367][ T9806] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.669960][ T9815] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 199.745551][ T9815] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.840223][ T9815] fscrypt (loop2, inode 15): Error -61 getting encryption context [ 200.232170][ T9853] loop4: detected capacity change from 0 to 512 [ 200.315159][ T9853] FAT-fs (loop4): Invalid FSINFO signature: 0x41008052, 0x61417272 (sector = 1) [ 200.417998][ T26] audit: type=1326 audit(1755229280.803:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.7.1917" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff79027bbe9 code=0x0 [ 200.621918][ T9859] loop0: detected capacity change from 0 to 8192 [ 200.742413][ T9859] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 200.784901][ T9859] REISERFS (device loop0): using ordered data mode [ 200.792657][ T9859] reiserfs: using flush barriers [ 200.817628][ T9859] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.923849][ T9859] REISERFS (device loop0): checking transaction log (loop0) [ 201.001123][ T9859] REISERFS (device loop0): Using r5 hash to sort names [ 201.015177][ T9859] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 201.122548][ T9877] loop4: detected capacity change from 0 to 32768 [ 201.136203][ T4293] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 201.169147][ T9885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1928'. [ 201.443313][ T9895] loop2: detected capacity change from 0 to 512 [ 201.463602][ T9893] loop4: detected capacity change from 0 to 2048 [ 201.564218][ T4293] usb 7-1: config 64 has an invalid interface number: 157 but max is 0 [ 201.572748][ T4293] usb 7-1: config 64 has no interface number 0 [ 201.579340][ T9898] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.596254][ T9895] EXT4-fs (loop2): Ignoring removed bh option [ 201.616589][ T4293] usb 7-1: config 64 interface 157 has no altsetting 0 [ 201.634145][ T9895] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.644006][ T9895] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 201.780640][ T9895] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 201.865911][ T4293] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=39.96 [ 201.895386][ T4293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.905509][ T9895] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 201.940020][ T4293] usb 7-1: Product: syz [ 201.956404][ T9895] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 201.963779][ T4293] usb 7-1: Manufacturer: syz [ 201.999250][ T4293] usb 7-1: SerialNumber: syz [ 202.057953][ T9909] loop0: detected capacity change from 0 to 1024 [ 202.196672][ T9895] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 202.394399][ T4293] comedi comedi5: Wrong number of endpoints [ 202.400807][ T4293] ni6501 7-1:64.157: driver 'ni6501' failed to auto-configure device. [ 202.485133][ T4293] usb 7-1: USB disconnect, device number 13 [ 202.573248][ T9897] loop7: detected capacity change from 0 to 32768 [ 202.652284][ T9897] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.1933 (9897) [ 202.748123][ T9897] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 202.834582][ T9897] BTRFS info (device loop7): turning off barriers [ 202.851097][ T9925] loop0: detected capacity change from 0 to 1024 [ 202.879937][ T9897] BTRFS info (device loop7): setting nodatacow, compression disabled [ 202.896825][ T9929] misc userio: Invalid payload size [ 202.920322][ T9897] BTRFS info (device loop7): ignoring bad roots [ 202.933795][ T9929] misc userio: The device must be registered before sending interrupts [ 202.954510][ T9897] BTRFS info (device loop7): max_inline at 0 [ 202.983150][ T9897] BTRFS info (device loop7): turning on async discard [ 203.010974][ T9897] BTRFS info (device loop7): metadata ratio 128 [ 203.050427][ T9897] BTRFS info (device loop7): using free space tree [ 203.071436][ T9925] hfsplus: bad catalog entry type [ 203.088029][ T9897] BTRFS info (device loop7): has skinny extents [ 203.165828][ T4242] kernel read not supported for file /vcs (pid: 4242 comm: kworker/1:4) [ 203.243448][ T431] hfsplus: b-tree write err: -5, ino 4 [ 203.393708][ T9897] BTRFS info (device loop7): enabling ssd optimizations [ 203.455653][ T9897] BTRFS error (device loop7): ignorebadroots must be used with ro mount option [ 203.645550][ T9976] loop2: detected capacity change from 0 to 8 [ 203.799238][ T4363] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by udevd (4363) [ 203.886947][ T9988] usb usb8: usbfs: process 9988 (syz.6.1966) did not claim interface 0 before use [ 204.487405][T10004] loop2: detected capacity change from 0 to 1024 [ 204.580379][T10011] netlink: 'syz.7.1975': attribute type 4 has an invalid length. [ 204.607462][T10011] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1975'. [ 204.800266][T10004] handle_bad_sector: 10 callbacks suppressed [ 204.800286][T10004] attempt to access beyond end of device [ 204.800286][T10004] loop2: rw=2049, want=5780, limit=1024 [ 204.899427][T10004] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 204.917434][T10026] loop0: detected capacity change from 0 to 128 [ 204.986876][T10026] EXT4-fs (loop0): Ignoring removed nobh option [ 205.123975][T10032] loop4: detected capacity change from 0 to 4096 [ 205.195955][T10026] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 205.213344][T10026] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.251629][T10032] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.402027][T10044] netlink: 'syz.2.1988': attribute type 196 has an invalid length. [ 205.607539][T10049] loop2: detected capacity change from 0 to 1024 [ 205.751197][T10030] loop7: detected capacity change from 0 to 32768 [ 205.753209][T10049] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.803283][T10049] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.807894][T10030] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1985 (10030) [ 205.945297][T10030] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 206.003363][T10030] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 206.034579][T10030] BTRFS info (device loop7): use lzo compression, level 0 [ 206.044275][T10030] BTRFS info (device loop7): using free space tree [ 206.050930][T10030] BTRFS info (device loop7): has skinny extents [ 206.335224][T10080] loop0: detected capacity change from 0 to 4096 [ 206.398008][T10080] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 206.451553][T10110] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2013'. [ 206.549495][T10030] BTRFS info (device loop7): enabling ssd optimizations [ 206.671074][ T5959] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 206.732679][T10123] loop0: detected capacity change from 0 to 64 [ 206.865582][T10123] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 207.131024][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.159242][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.210581][ T5959] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 207.259316][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.318356][ T5959] usb 3-1: config 0 descriptor?? [ 207.406021][T10126] loop6: detected capacity change from 0 to 32768 [ 207.455288][ T6523] hid-generic 0000:FFFFFFFD:0000.001C: unknown main item tag 0x0 [ 207.479381][ T6523] hid-generic 0000:FFFFFFFD:0000.001C: unknown main item tag 0x0 [ 207.492210][T10143] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2027'. [ 207.510732][T10143] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 207.544675][ T6523] hid-generic 0000:FFFFFFFD:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 207.592009][T10143] openvswitch: netlink: Message has 1 unknown bytes. [ 207.603850][T10147] tipc: Enabling of bearer rejected, failed to enable media [ 207.735733][T10148] fido_id[10148]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.804990][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'. [ 207.822757][ T5959] logitech-hidpp-device 0003:046D:C343.001D: unbalanced delimiter at end of report description [ 207.858328][ T5959] logitech-hidpp-device 0003:046D:C343.001D: hidpp_probe:parse failed [ 207.858764][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2032'. [ 207.894359][T10157] device ipvlan2 entered promiscuous mode [ 207.903724][ T5959] logitech-hidpp-device: probe of 0003:046D:C343.001D failed with error -22 [ 208.011071][T10164] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 208.061545][ T5959] usb 3-1: USB disconnect, device number 15 [ 208.078835][T10167] loop4: detected capacity change from 0 to 256 [ 208.121087][T10167] exfat: Deprecated parameter 'utf8' [ 208.199874][T10167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 208.261234][T10178] netlink: 'syz.7.2044': attribute type 1 has an invalid length. [ 208.279203][T10178] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.2044'. [ 208.412358][T10183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2046'. [ 208.422056][T10183] tipc: Started in network mode [ 208.426957][T10183] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 208.455376][ T7157] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 208.463737][T10183] tipc: Enabling of bearer rejected, failed to enable media [ 208.524782][T10190] loop4: detected capacity change from 0 to 512 [ 208.632246][T10190] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 208.664689][ T6523] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 208.710070][ T7157] usb 7-1: Using ep0 maxpacket: 16 [ 208.770383][T10201] loop0: detected capacity change from 0 to 512 [ 208.829869][ T7157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 208.849915][ T7157] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 208.859076][ T7157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.885478][ T7157] usb 7-1: config 0 descriptor?? [ 208.903000][ T151] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 208.919848][ T6523] usb 8-1: Using ep0 maxpacket: 8 [ 209.039734][ T6523] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.089485][ T6523] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.138135][ T6523] usb 8-1: config 0 interface 0 has no altsetting 0 [ 209.159225][ T6523] usb 8-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 209.175040][ T6523] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.205094][ T6523] usb 8-1: config 0 descriptor?? [ 209.215975][T10197] loop2: detected capacity change from 0 to 32768 [ 209.270318][ T26] audit: type=1800 audit(1755229289.658:81): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2053" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 209.390437][ T7157] hid (null): unknown global tag 0xd [ 209.524929][T10227] loop0: detected capacity change from 0 to 64 [ 209.605183][ T7312] usb 7-1: USB disconnect, device number 14 [ 209.717040][ T6523] waltop 0003:172F:0502.001F: unknown main item tag 0x0 [ 209.726930][ T6523] waltop 0003:172F:0502.001F: unknown main item tag 0x0 [ 209.743143][ T6523] waltop 0003:172F:0502.001F: unknown main item tag 0x0 [ 209.754242][ T6523] waltop 0003:172F:0502.001F: unknown main item tag 0x0 [ 209.763857][ T6523] waltop 0003:172F:0502.001F: unknown main item tag 0x0 [ 209.796851][ T6523] waltop 0003:172F:0502.001F: hidraw0: USB HID v80.03 Device [HID 172f:0502] on usb-dummy_hcd.7-1/input0 [ 209.806848][T10231] PKCS8: Unsupported PKCS#8 version [ 209.939798][ T7312] usb 8-1: USB disconnect, device number 5 [ 209.981569][T10232] fido_id[10232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 210.107362][T10246] loop2: detected capacity change from 0 to 512 [ 210.224396][T10246] EXT4-fs (loop2): orphan cleanup on readonly fs [ 210.242258][T10246] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz.2.2075: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 210.386366][T10246] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 210.418821][T10246] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.451391][T10261] loop0: detected capacity change from 0 to 8 [ 210.481713][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2083'. [ 210.489731][T10246] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 210.519324][T10261] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 210.554949][T10246] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.636030][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2085'. [ 210.941745][T10277] loop2: detected capacity change from 0 to 8 [ 211.117735][T10287] loop6: detected capacity change from 0 to 256 [ 211.192210][T10277] SQUASHFS error: lzo decompression failed, data probably corrupt [ 211.222166][T10287] FAT-fs (loop6): Directory bread(block 64) failed [ 211.223846][T10289] loop4: detected capacity change from 0 to 1024 [ 211.248335][T10277] SQUASHFS error: Failed to read block 0x1d2: -5 [ 211.252427][T10287] FAT-fs (loop6): Directory bread(block 65) failed [ 211.254889][T10277] SQUASHFS error: Unable to read metadata cache entry [1d0] [ 211.284819][T10287] FAT-fs (loop6): Directory bread(block 66) failed [ 211.288166][T10277] SQUASHFS error: Unable to read directory block [1d0:26] [ 211.300580][T10287] FAT-fs (loop6): Directory bread(block 67) failed [ 211.315178][T10287] FAT-fs (loop6): Directory bread(block 68) failed [ 211.328631][T10287] FAT-fs (loop6): Directory bread(block 69) failed [ 211.356176][T10287] FAT-fs (loop6): Directory bread(block 70) failed [ 211.362993][T10287] FAT-fs (loop6): Directory bread(block 71) failed [ 211.379486][T10287] FAT-fs (loop6): Directory bread(block 72) failed [ 211.403866][T10287] FAT-fs (loop6): Directory bread(block 73) failed [ 211.539214][ T144] hfsplus: b-tree write err: -5, ino 4 [ 211.794736][T10303] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2103'. [ 211.826611][T10303] openvswitch: netlink: Message has 13056 unknown bytes. [ 211.923267][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2106'. [ 211.956193][T10310] loop7: detected capacity change from 0 to 24 [ 212.060466][T10310] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 212.075549][T10318] loop4: detected capacity change from 0 to 256 [ 212.100237][T10310] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 212.211574][T10318] FAT-fs (loop4): Directory bread(block 64) failed [ 212.245385][T10318] FAT-fs (loop4): Directory bread(block 65) failed [ 212.288563][T10318] FAT-fs (loop4): Directory bread(block 66) failed [ 212.295188][T10318] FAT-fs (loop4): Directory bread(block 67) failed [ 212.312601][T10318] FAT-fs (loop4): Directory bread(block 68) failed [ 212.324012][T10318] FAT-fs (loop4): Directory bread(block 69) failed [ 212.357359][T10318] FAT-fs (loop4): Directory bread(block 70) failed [ 212.371703][T10318] FAT-fs (loop4): Directory bread(block 71) failed [ 212.394396][T10318] FAT-fs (loop4): Directory bread(block 72) failed [ 212.403051][T10318] FAT-fs (loop4): Directory bread(block 73) failed [ 212.604213][T10352] loop0: detected capacity change from 0 to 64 [ 212.700900][T10356] sp0: Synchronizing with TNC [ 212.875274][T10366] loop0: detected capacity change from 0 to 64 [ 212.927480][ T7312] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 212.941955][T10370] netlink: 'syz.2.2136': attribute type 5 has an invalid length. [ 213.207275][ T7312] usb 7-1: Using ep0 maxpacket: 8 [ 213.507351][ T7312] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 213.533154][ T7312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.551482][ T7312] usb 7-1: Product: syz [ 213.555682][ T7312] usb 7-1: Manufacturer: syz [ 213.599877][ T7312] usb 7-1: SerialNumber: syz [ 213.619340][ T7312] usb 7-1: config 0 descriptor?? [ 213.764099][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2157'. [ 213.814522][T10414] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2157'. [ 213.828847][T10414] netlink: 'syz.7.2157': attribute type 6 has an invalid length. [ 213.848602][T10414] netlink: 'syz.7.2157': attribute type 5 has an invalid length. [ 213.870929][T10414] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2157'. [ 213.889820][ T7312] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 214.110567][T10437] netlink: 2724 bytes leftover after parsing attributes in process `syz.2.2167'. [ 214.287787][ T7157] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 214.306509][ T7312] usb write operation failed. (-71) [ 214.335225][ T7312] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.358508][ T7312] dvbdev: DVB: registering new adapter (Terratec H7) [ 214.385462][ T7312] usb 7-1: media controller created [ 214.424256][T10450] loop2: detected capacity change from 0 to 4096 [ 214.426324][ T7312] usb read operation failed. (-71) [ 214.473863][T10452] loop4: detected capacity change from 0 to 8192 [ 214.480661][ T7312] usb write operation failed. (-71) [ 214.492084][ T7312] dvb_usb_az6007: probe of 7-1:0.0 failed with error -5 [ 214.517372][T10450] ntfs: (device loop2): parse_options(): NLS character set maccenteuroAdmask=0000000000004000 not found. Using previous one default. [ 214.517433][ T7312] usb 7-1: USB disconnect, device number 15 [ 214.531306][ T7157] usb 8-1: Using ep0 maxpacket: 32 [ 214.557839][T10450] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 214.592127][T10452] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 214.613963][T10452] REISERFS (device loop4): using ordered data mode [ 214.621006][T10452] reiserfs: using flush barriers [ 214.631450][T10452] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.657045][T10452] REISERFS (device loop4): checking transaction log (loop4) [ 214.666336][ T7157] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.666402][T10452] REISERFS (device loop4): Using r5 hash to sort names [ 214.674391][ T7157] usb 8-1: config 0 has no interface number 0 [ 214.691704][T10450] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 214.693319][T10452] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 214.728975][T10450] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 214.815318][T10450] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 214.846937][T10450] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 214.894416][T10450] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 214.932568][T10450] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 214.946395][ T7157] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 214.968314][ T7157] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.980312][T10450] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 214.995158][ T7157] usb 8-1: Product: syz [ 214.999936][ T7157] usb 8-1: Manufacturer: syz [ 215.004545][ T7157] usb 8-1: SerialNumber: syz [ 215.010330][T10450] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 215.031077][ T7157] usb 8-1: config 0 descriptor?? [ 215.064537][T10450] ntfs: volume version 3.1. [ 215.090643][ T7157] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 215.091479][T10471] netlink: 'syz.6.2184': attribute type 1 has an invalid length. [ 215.102959][ T7157] usb 8-1: selecting invalid altsetting 1 [ 215.119062][ T7157] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 215.144755][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2184'. [ 215.173679][ T7157] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 215.193414][ T7157] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 215.247408][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2187'. [ 215.250811][ T7157] usb 8-1: media controller created [ 215.359487][ T7157] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.438124][T10486] loop6: detected capacity change from 0 to 1024 [ 215.495691][ T7157] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 215.503628][ T7157] zl10353_read_register: readreg error (reg=127, ret==-71) [ 215.503873][T10488] 9pnet: Could not find request transport: 0xffffffffffffffff [ 215.532694][ T7157] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 215.576980][T10486] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,i_version,nolazytime,user_xattr,dax=never,mb_optimize_scan=0x0000000000000001,noauto_da_alloc,nombcache,norecovery,min_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 215.603781][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.648275][T10493] syz.4.2192[10493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.648373][T10493] syz.4.2192[10493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.694341][ T7157] usb 8-1: USB disconnect, device number 6 [ 215.931197][T10501] loop4: detected capacity change from 0 to 1024 [ 216.010573][T10501] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 216.079024][T10508] loop7: detected capacity change from 0 to 512 [ 216.088842][T10484] loop2: detected capacity change from 0 to 32768 [ 216.116373][T10514] netlink: 'syz.0.2202': attribute type 29 has an invalid length. [ 216.124803][T10514] netlink: 'syz.0.2202': attribute type 29 has an invalid length. [ 216.135923][T10514] netlink: 'syz.0.2202': attribute type 29 has an invalid length. [ 216.218894][T10508] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 216.300876][T10508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 216.314638][T10484] XFS (loop2): Mounting V5 Filesystem [ 216.323011][T10508] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2228: inode #15: comm syz.7.2199: corrupted in-inode xattr [ 216.368165][T10508] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2199: couldn't read orphan inode 15 (err -117) [ 216.383754][T10529] sg_write: data in/out 41084/4 bytes for SCSI command 0x1c-- guessing data in; [ 216.383754][T10529] program syz.4.2205 not setting count and/or reply_len properly [ 216.463461][T10508] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 216.487780][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.567036][T10484] XFS (loop2): Ending clean mount [ 216.796077][T10553] sctp: [Deprecated]: syz.7.2214 (pid 10553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.796077][T10553] Use struct sctp_sack_info instead [ 216.854371][ T4185] XFS (loop2): Unmounting Filesystem [ 217.006576][T10555] loop6: detected capacity change from 0 to 2048 [ 217.145803][T10561] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.204805][ T5956] Bluetooth: hci4: command 0x0405 tx timeout [ 217.493859][T10550] loop4: detected capacity change from 0 to 32768 [ 217.674414][T10583] loop2: detected capacity change from 0 to 1024 [ 217.693676][T10575] loop6: detected capacity change from 0 to 8192 [ 217.696328][T10550] XFS (loop4): Mounting V5 Filesystem [ 217.770141][T10598] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 217.776663][T10594] loop7: detected capacity change from 0 to 8192 [ 217.819404][T10583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.826923][T10597] IPVS: stopping backup sync thread 10598 ... [ 217.833540][T10583] ext4 filesystem being mounted at /439/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.917404][T10594] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 217.954237][T10594] REISERFS (device loop7): using ordered data mode [ 217.960931][T10594] reiserfs: using flush barriers [ 217.966426][T10550] XFS (loop4): Ending clean mount [ 217.977688][T10575] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 218.006940][T10575] REISERFS (device loop6): using ordered data mode [ 218.013935][T10594] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.029880][T10575] reiserfs: using flush barriers [ 218.031288][T10594] REISERFS (device loop7): checking transaction log (loop7) [ 218.051060][T10594] REISERFS (device loop7): Using r5 hash to sort names [ 218.058513][T10594] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 218.100583][T10575] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.202028][ T4184] XFS (loop4): Unmounting Filesystem [ 218.224326][T10575] REISERFS (device loop6): checking transaction log (loop6) [ 218.249985][T10575] REISERFS (device loop6): Using r5 hash to sort names [ 218.383899][ T6522] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 218.623902][ T6522] usb 3-1: Using ep0 maxpacket: 16 [ 218.675544][T10618] loop6: detected capacity change from 0 to 64 [ 218.763956][ T6522] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 218.793570][ T6522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.829924][ T6522] usb 3-1: config 0 descriptor?? [ 218.843745][ T6527] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 219.213621][ T6527] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.215928][T10648] loop6: detected capacity change from 0 to 512 [ 219.242926][ T6527] usb 8-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 219.274123][ T6527] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.283724][ T7317] Bluetooth: hci4: command 0x0411 tx timeout [ 219.298487][T10648] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.320382][ T6527] usb 8-1: config 0 descriptor?? [ 219.343523][ T6522] a4tech 0003:09DA:0006.0020: hidraw0: USB HID v20.00 Device [HID 09da:0006] on usb-dummy_hcd.2-1/input0 [ 219.392368][T10648] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2250: invalid indirect mapped block 4294967295 (level 1) [ 219.422145][T10648] EXT4-fs (loop6): Remounting filesystem read-only [ 219.477793][T10648] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2250: invalid indirect mapped block 4294967295 (level 1) [ 219.492473][T10648] EXT4-fs (loop6): Remounting filesystem read-only [ 219.501054][T10648] EXT4-fs (loop6): 2 truncates cleaned up [ 219.508895][T10648] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,. Quota mode: writeback. [ 219.545525][ T6522] usb 3-1: USB disconnect, device number 16 [ 219.561446][T10648] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.2250: bg 0: block 5: invalid block bitmap [ 219.576572][T10648] EXT4-fs (loop6): Remounting filesystem read-only [ 219.583463][T10648] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 219.594257][T10648] EXT4-fs (loop6): Remounting filesystem read-only [ 219.736574][T10669] loop0: detected capacity change from 0 to 512 [ 219.798370][T10669] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 219.839452][T10669] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.859156][ T6527] hid-generic 0003:057E:200E.0021: unbalanced delimiter at end of report description [ 219.917606][T10669] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.2258: Block bitmap for bg 0 marked uninitialized [ 219.940237][ T6527] hid-generic: probe of 0003:057E:200E.0021 failed with error -22 [ 220.068047][ T6527] usb 8-1: USB disconnect, device number 7 [ 220.090923][T10669] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 220.121796][T10669] EXT4-fs (loop0): 1 orphan inode deleted [ 220.124589][T10682] netlink: zone id is out of range [ 220.156455][T10669] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.489310][T10671] loop4: detected capacity change from 0 to 40427 [ 220.574111][T10671] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 220.608807][T10671] F2FS-fs (loop4): invalid crc value [ 220.651472][T10671] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.861905][T10671] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.936323][T10706] attempt to access beyond end of device [ 220.936323][T10706] loop4: rw=2049, want=45104, limit=40427 [ 221.002429][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 221.002441][ T26] audit: type=1800 audit(1755229301.405:82): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2260" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 221.196987][T10734] loop6: detected capacity change from 0 to 256 [ 221.241945][T10737] block nbd0: NBD_DISCONNECT [ 221.334277][T10734] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 221.548526][T10750] loop6: detected capacity change from 0 to 512 [ 221.654919][T10750] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 221.733726][T10750] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.2295: invalid indirect mapped block 83886080 (level 1) [ 221.808700][T10756] loop0: detected capacity change from 0 to 2048 [ 221.871977][T10766] loop4: detected capacity change from 0 to 1024 [ 221.883927][T10750] EXT4-fs (loop6): Remounting filesystem read-only [ 221.890660][T10750] EXT4-fs (loop6): 1 orphan inode deleted [ 221.907538][T10756] EXT4-fs (loop0): Unrecognized mount option "obj_role=seclabel" or missing value [ 221.921259][T10750] EXT4-fs (loop6): 1 truncate cleaned up [ 221.930783][T10750] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,quota,. Quota mode: writeback. [ 221.964832][T10750] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #2: block 13: comm syz.6.2295: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 221.989278][T10750] EXT4-fs (loop6): Remounting filesystem read-only [ 222.001115][T10750] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #2: comm syz.6.2295: directory missing '..' [ 222.235108][ T4292] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 222.491503][ T4292] usb 8-1: Using ep0 maxpacket: 16 [ 222.623669][ T4292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 222.641344][ T7157] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 222.662893][ T4292] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.715660][ T4292] usb 8-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 222.749399][ T4292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.776074][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'. [ 222.786742][ T4292] usb 8-1: config 0 descriptor?? [ 222.809291][T10819] loop0: detected capacity change from 0 to 1024 [ 222.889347][T10821] IPVS: Error joining to the multicast group [ 223.013258][ T7157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.049886][ T7157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.088192][T10828] loop4: detected capacity change from 0 to 64 [ 223.099855][ T7157] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 223.121605][ T7157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.139299][ T7157] usb 7-1: config 0 descriptor?? [ 223.286939][T10836] loop0: detected capacity change from 0 to 2048 [ 223.294591][ T4292] kye 0003:0458:5019.0022: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.7-1/input0 [ 223.312375][ T4292] kye 0003:0458:5019.0022: tablet-enabling feature report not found [ 223.312397][ T4292] kye 0003:0458:5019.0022: tablet enabling failed [ 223.356084][T10836] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.417887][T10839] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.441999][ T6522] Bluetooth: hci2: command 0x0401 tx timeout [ 223.491252][ T5956] usb 8-1: USB disconnect, device number 8 [ 223.628879][ T7157] konepure 0003:1E7D:2DBE.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.6-1/input0 [ 223.729371][T10846] overlayfs: './file1' not a directory [ 223.840013][ T4292] usb 7-1: USB disconnect, device number 16 [ 224.308845][T10873] loop7: detected capacity change from 0 to 256 [ 224.393073][T10873] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 224.482299][ T6522] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.510175][ T7157] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 224.730947][T10886] loop0: detected capacity change from 0 to 8192 [ 224.789930][ T4292] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 224.814686][T10886] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 224.835176][T10886] REISERFS (device loop0): using ordered data mode [ 224.844992][T10886] reiserfs: using flush barriers [ 224.870180][ T7157] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 224.878080][T10886] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.885825][ T7157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.915919][T10886] REISERFS (device loop0): checking transaction log (loop0) [ 224.924382][ T7157] usb 5-1: config 0 descriptor?? [ 224.939713][T10886] REISERFS (device loop0): Using r5 hash to sort names [ 224.947652][T10886] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 224.969075][ T7157] cp210x 5-1:0.0: cp210x converter detected [ 225.069932][ T4292] usb 8-1: Using ep0 maxpacket: 16 [ 225.223792][ T4292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.241475][ T4292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.252144][ T4292] usb 8-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 225.261481][ T4292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.273375][ T4292] usb 8-1: config 0 descriptor?? [ 225.281188][T10909] genirq: Flags mismatch irq 5. 00000000 (pcl818) vs. 00000000 (comedi_parport) [ 225.396091][ T7157] usb 5-1: cp210x converter now attached to ttyUSB0 [ 225.442634][T10922] loop0: detected capacity change from 0 to 64 [ 225.596509][ T5956] usb 5-1: USB disconnect, device number 14 [ 225.617426][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 225.643575][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2374'. [ 225.660740][ T5956] cp210x 5-1:0.0: device disconnected [ 225.752436][ T4292] wacom 0003:056A:0318.0024: unbalanced collection at end of report description [ 225.771703][T10932] loop0: detected capacity change from 0 to 256 [ 225.780277][ T4292] wacom 0003:056A:0318.0024: parse failed [ 225.786054][ T4292] wacom: probe of 0003:056A:0318.0024 failed with error -22 [ 225.818111][T10937] loop2: detected capacity change from 0 to 8 [ 225.840383][T10932] exfat: Deprecated parameter 'namecase' [ 225.848313][T10937] SQUASHFS error: zlib decompression failed, data probably corrupt [ 225.857236][T10937] SQUASHFS error: Failed to read block 0x9b: -5 [ 225.864032][T10937] SQUASHFS error: Unable to read metadata cache entry [99] [ 225.871348][T10937] SQUASHFS error: Unable to read inode 0x127 [ 225.910321][T10932] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441a860, utbl_chksum : 0xe619d30d) [ 225.966848][ T4292] usb 8-1: USB disconnect, device number 9 [ 225.973348][ T26] audit: type=1804 audit(1755229306.358:83): pid=10932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2378" name=2F6E6577726F6F742F3532312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop0" ino=1048725 res=1 errno=0 [ 226.449001][ T5956] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 226.560339][ T7157] Bluetooth: hci0: command 0x0406 tx timeout [ 226.809983][T10986] loop7: detected capacity change from 0 to 128 [ 226.845302][T10986] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 226.854714][T10979] loop0: detected capacity change from 0 to 4096 [ 226.925705][T10995] loop6: detected capacity change from 0 to 2048 [ 226.933073][ T5956] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 226.948348][T10979] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 226.955056][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 226.965037][T10986] overlayfs: upper fs needs to support d_type. [ 226.966336][ T5956] usb 5-1: SerialNumber: syz [ 226.987072][ T5956] usb 5-1: config 0 descriptor?? [ 227.061850][T10986] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 227.069758][T10995] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.106915][T10986] overlayfs: failed to set xattr on upper [ 227.133087][T10995] EXT4-fs error (device loop6): ext4_find_extent:929: inode #2: comm syz.6.2404: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 227.138645][T10986] overlayfs: ...falling back to index=off,metacopy=off. [ 227.161188][ T7317] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 227.246318][ T4182] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 227.295712][ T4182] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 227.348414][ T4182] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 227.458681][ T7317] usb 3-1: Using ep0 maxpacket: 32 [ 227.478732][ T5956] hackrf 5-1:0.0: Board ID: 00 [ 227.483532][ T5956] hackrf 5-1:0.0: Firmware version: Ñ5fgýC‹ [ 227.513149][ T7461] UDF-fs: error (device loop7): udf_read_inode: (ino 114) failed !bh [ 227.522130][ T5956] hackrf 5-1:0.0: Registered as swradio24 [ 227.529363][ T7461] UDF-fs: error (device loop7): udf_read_inode: (ino 114) failed !bh [ 227.574439][ T5956] hackrf 5-1:0.0: Registered as swradio25 [ 227.598719][ T7317] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 227.606896][ T7317] usb 3-1: config 0 has no interface number 0 [ 227.617897][ T5956] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 227.683649][ T7317] usb 3-1: config 0 interface 85 has no altsetting 0 [ 227.696970][ T5956] usb 5-1: USB disconnect, device number 15 [ 227.888333][ T7317] usb 3-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice=55.a1 [ 227.921328][ T7317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.955018][ T7317] usb 3-1: Product: syz [ 227.987117][ T7317] usb 3-1: Manufacturer: syz [ 227.998467][ T7317] usb 3-1: SerialNumber: syz [ 228.020211][ T7317] usb 3-1: config 0 descriptor?? [ 228.267423][T11047] syz.4.2415 uses old SIOCAX25GETINFO [ 228.319643][ T151] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.494527][ T151] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.508051][ T7317] mxuport 3-1:0.85: mxuport_recv_ctrl_urb - short read (0 / 4) [ 228.519198][ T7317] mxuport: probe of 3-1:0.85 failed with error -5 [ 228.528227][T11056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2420'. [ 228.545816][T11037] loop0: detected capacity change from 0 to 32768 [ 228.601736][T11037] JBD2: Ignoring recovery information on journal [ 228.621854][ T151] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.713628][ T7317] usb 3-1: USB disconnect, device number 17 [ 228.723537][ T151] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.814205][T11037] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 228.826002][T11066] loop6: detected capacity change from 0 to 64 [ 228.881980][T11037] (syz.0.2413,11037,1):ocfs2_remount:631 ERROR: Cannot change data mode on remount [ 229.017994][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 229.845202][T11068] chnl_net:caif_netlink_parms(): no params data found [ 230.191350][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.210412][T11137] loop2: detected capacity change from 0 to 8192 [ 230.219991][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.269088][T11068] device bridge_slave_0 entered promiscuous mode [ 230.273338][ T4363] loop2: p4 < > [ 230.287519][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.294844][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.306785][T11068] device bridge_slave_1 entered promiscuous mode [ 230.367932][T11137] loop2: p4 < > [ 230.412674][T11149] loop0: detected capacity change from 0 to 764 [ 230.485987][T11149] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 230.646229][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.738998][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.776768][ T4363] udevd[4363]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 230.858187][T11159] loop4: detected capacity change from 0 to 4096 [ 230.926172][T11159] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 230.930611][ T4363] udevd[4363]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 231.004097][T11068] team0: Port device team_slave_0 added [ 231.036210][ T6519] Bluetooth: hci4: command 0x0409 tx timeout [ 231.063056][T11068] team0: Port device team_slave_1 added [ 231.086562][T11120] loop6: detected capacity change from 0 to 32768 [ 231.253220][ T151] device hsr_slave_0 left promiscuous mode [ 231.314996][ T151] device hsr_slave_1 left promiscuous mode [ 231.336349][T11120] XFS (loop6): Mounting V5 Filesystem [ 231.347665][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.355120][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.466849][T11120] XFS (loop6): Ending clean mount [ 231.481506][T11181] loop0: detected capacity change from 0 to 512 [ 231.559609][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.576668][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.584654][ T151] device bridge_slave_1 left promiscuous mode [ 231.610325][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.629069][T11181] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2463: casefold flag without casefold feature [ 231.632287][ T151] device bridge_slave_0 left promiscuous mode [ 231.652004][T11181] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2463: couldn't read orphan inode 15 (err -117) [ 231.652107][T11154] loop2: detected capacity change from 0 to 32768 [ 231.671365][T11181] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.689113][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.697145][ T5462] XFS (loop6): Unmounting Filesystem [ 231.897808][ T151] device veth1_macvtap left promiscuous mode [ 231.906816][ T151] device veth0_macvtap left promiscuous mode [ 231.912955][ T151] device veth1_vlan left promiscuous mode [ 231.924611][T11154] find_entry called with index = 0 [ 231.933540][ T151] device veth0_vlan left promiscuous mode [ 231.965993][T11154] find_entry called with index = 0 [ 232.059795][T11154] read_mapping_page failed! [ 232.072716][T11154] ERROR: (device loop2): txCommit: [ 232.072716][T11154] [ 232.389835][T11206] loop6: detected capacity change from 0 to 64 [ 232.494099][T11206] hfs: bad catalog entry type 0 [ 232.567139][ T151] team0 (unregistering): Port device team_slave_1 removed [ 232.618571][ T151] team0 (unregistering): Port device team_slave_0 removed [ 232.634634][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.651321][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.674317][T11216] loop6: detected capacity change from 0 to 64 [ 232.794615][ T151] bond0 (unregistering): Released all slaves [ 232.951637][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.979551][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.050946][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'. [ 233.104923][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.125177][ T7312] Bluetooth: hci4: command 0x041b tx timeout [ 233.149052][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'. [ 233.189414][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'. [ 233.218676][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.234020][T11238] loop6: detected capacity change from 0 to 1024 [ 233.250220][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.365958][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.551671][T11068] device hsr_slave_0 entered promiscuous mode [ 233.594149][T11068] device hsr_slave_1 entered promiscuous mode [ 233.649565][T11068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.667736][T11068] Cannot create hsr debugfs directory [ 233.825996][T11249] loop4: detected capacity change from 0 to 4096 [ 234.390553][T11068] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 234.439057][T11068] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 234.444751][T11236] loop0: detected capacity change from 0 to 32768 [ 234.465836][T11068] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 234.515311][T11068] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 234.625147][T11236] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 234.640794][T11242] loop2: detected capacity change from 0 to 32768 [ 234.701440][T11236] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 234.756422][T11242] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 234.799041][T11242] CPU: 0 PID: 11242 Comm: syz.2.2486 Not tainted 5.15.189-syzkaller #0 [ 234.807323][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.817401][T11242] Call Trace: [ 234.820685][T11242] [ 234.823627][T11242] dump_stack_lvl+0x168/0x230 [ 234.828326][T11242] ? show_regs_print_info+0x20/0x20 [ 234.833543][T11242] ? load_image+0x3b0/0x3b0 [ 234.838079][T11242] sysfs_create_dir_ns+0x252/0x280 [ 234.843221][T11242] ? __lock_acquire+0x7c60/0x7c60 [ 234.848356][T11242] ? sysfs_warn_dup+0xa0/0xa0 [ 234.853069][T11242] ? do_raw_spin_unlock+0x11d/0x230 [ 234.858286][T11242] kobject_add_internal+0x662/0xd00 [ 234.858493][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.863495][T11242] kobject_init_and_add+0x122/0x190 [ 234.863519][T11242] ? lockdep_softirqs_off+0x420/0x420 [ 234.863543][T11242] ? kobject_add+0x210/0x210 [ 234.885527][T11242] ? __init_swait_queue_head+0xa5/0x150 [ 234.891188][T11242] gfs2_sys_fs_add+0x234/0x480 [ 234.895976][T11242] ? gfs2_recover_set+0x240/0x240 [ 234.901031][T11242] ? snprintf+0xd7/0x120 [ 234.905295][T11242] ? __free_pages+0x95/0x1a0 [ 234.909904][T11242] ? vscnprintf+0x80/0x80 [ 234.914348][T11242] gfs2_fill_super+0x128d/0x1f50 [ 234.919313][T11242] ? gfs2_reconfigure+0xcd0/0xcd0 [ 234.924359][T11242] ? preempt_count_add+0x8d/0x190 [ 234.929416][T11242] ? sb_set_blocksize+0xa5/0xe0 [ 234.934369][T11242] get_tree_bdev+0x3f1/0x610 [ 234.938971][T11242] ? gfs2_reconfigure+0xcd0/0xcd0 [ 234.944022][T11242] gfs2_get_tree+0x4d/0x1e0 [ 234.948550][T11242] vfs_get_tree+0x88/0x270 [ 234.952993][T11242] do_new_mount+0x24a/0xa40 [ 234.957525][T11242] __se_sys_mount+0x2d6/0x3c0 [ 234.962231][T11242] ? __x64_sys_mount+0xc0/0xc0 [ 234.967017][T11242] ? lockdep_hardirqs_on+0x94/0x140 [ 234.972233][T11242] ? __x64_sys_mount+0x1c/0xc0 [ 234.977022][T11242] do_syscall_64+0x4c/0xa0 [ 234.978830][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.981451][T11242] ? clear_bhb_loop+0x30/0x80 [ 234.993308][T11242] ? clear_bhb_loop+0x30/0x80 [ 234.998008][T11242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.003920][T11242] RIP: 0033:0x7fd3cd94f38a [ 235.007098][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.008345][T11242] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.035155][T11242] RSP: 002b:00007fd3cbbb4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.043581][T11242] RAX: ffffffffffffffda RBX: 00007fd3cbbb4ef0 RCX: 00007fd3cd94f38a [ 235.051566][T11242] RDX: 00002000000002c0 RSI: 0000200000000100 RDI: 00007fd3cbbb4eb0 [ 235.057877][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.059542][T11242] RBP: 00002000000002c0 R08: 00007fd3cbbb4ef0 R09: 0000000000008c9b [ 235.073754][ T7157] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 235.074068][T11242] R10: 0000000000008c9b R11: 0000000000000246 R12: 0000200000000100 [ 235.089649][T11242] R13: 00007fd3cbbb4eb0 R14: 0000000000012760 R15: 0000200000000400 [ 235.095339][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.097865][T11242] [ 235.143046][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.160363][T11236] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 235.189051][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.196195][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.203733][ T7317] Bluetooth: hci4: command 0x040f tx timeout [ 235.291813][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.309673][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.323246][T11236] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 235.342093][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.383229][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.390497][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.446431][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.448581][ T7157] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.465813][T11242] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 235.483557][T11242] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 235.498289][ T7157] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.498496][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.508740][ T7157] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.525679][ T7157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.545712][T11274] loop6: detected capacity change from 0 to 40427 [ 235.584943][T11287] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.603526][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.657037][T11274] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 235.696885][T11274] F2FS-fs (loop6): invalid crc value [ 235.697115][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.724134][T11274] F2FS-fs (loop6): Found nat_bits in checkpoint [ 235.744521][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.805937][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.827874][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.868908][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.961201][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.997753][T11274] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 236.020597][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.074221][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.125347][T11293] attempt to access beyond end of device [ 236.125347][T11293] loop6: rw=2049, want=45104, limit=40427 [ 236.178200][ T26] audit: type=1800 audit(1755229316.584:84): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2497" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 236.469687][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.479076][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.508642][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.871743][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.898757][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.950849][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.969380][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.993160][T11068] device veth0_vlan entered promiscuous mode [ 237.009500][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.038369][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.076441][T11068] device veth1_vlan entered promiscuous mode [ 237.133225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.171893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.232762][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.274047][ T7312] Bluetooth: hci4: command 0x0419 tx timeout [ 237.283142][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.323819][ T7312] usb 5-1: USB disconnect, device number 16 [ 237.325264][T11068] device veth0_macvtap entered promiscuous mode [ 237.390059][T11068] device veth1_macvtap entered promiscuous mode [ 237.442519][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.472063][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.507502][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.527285][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.537641][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.553701][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.567375][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.581271][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.600023][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.619884][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.630861][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.646142][ T7157] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 237.654053][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.687967][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.707319][T11339] loop6: detected capacity change from 0 to 32768 [ 237.716376][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.737008][T11339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.6.2506 (11339) [ 237.749810][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.779004][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.797128][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.797453][T11339] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 237.808668][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.828182][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.831807][T11339] BTRFS info (device loop6): turning on sync discard [ 237.843165][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.845029][T11339] BTRFS info (device loop6): turning on flush-on-commit [ 237.859379][T11339] BTRFS info (device loop6): using free space tree [ 237.867678][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.877288][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.892818][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.901128][T11339] BTRFS info (device loop6): has skinny extents [ 237.913467][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.941050][T11068] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.996894][T11068] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.027762][ T7157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.043930][ T7157] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.074970][ T7157] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 238.077109][T11359] loop4: detected capacity change from 0 to 4096 [ 238.091463][ T7157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.092368][T11068] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.110718][T11068] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.121511][ T7157] usb 3-1: config 0 descriptor?? [ 238.303564][T11359] ntfs3: loop4: failed to convert "0080" to koi8-ru [ 238.324272][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.341852][T11339] BTRFS info (device loop6): enabling ssd optimizations [ 238.363980][T11359] ntfs3: loop4: failed to convert name for inode 1e. [ 238.400267][ T5089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.411047][ T5089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.416721][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.425909][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.526663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.623659][ T7157] ortek 0003:1223:3F07.0025: unknown main item tag 0x6 [ 238.630621][ T7157] ortek 0003:1223:3F07.0025: bogus close delimiter [ 238.671634][ T7157] ortek 0003:1223:3F07.0025: item 0 0 2 10 parsing failed [ 238.679289][ T7157] ortek: probe of 0003:1223:3F07.0025 failed with error -22 [ 238.944440][ T6529] usb 3-1: USB disconnect, device number 18 [ 239.379723][T11411] loop4: detected capacity change from 0 to 128 [ 239.960228][T11450] loop2: detected capacity change from 0 to 256 [ 240.019098][T11453] netlink: 364 bytes leftover after parsing attributes in process `syz.6.2539'. [ 240.050796][T11453] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 240.058638][T11458] loop4: detected capacity change from 0 to 512 [ 240.096165][ T26] audit: type=1800 audit(1755229320.497:85): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2538" name="file0" dev="loop2" ino=1048729 res=0 errno=0 [ 240.181899][T11458] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 240.335373][T11476] loop8: detected capacity change from 0 to 1024 [ 240.471819][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2552'. [ 240.496191][ T9] hfsplus: b-tree write err: -5, ino 4 [ 240.520476][T11486] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2552'. [ 240.555802][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2552'. [ 240.660866][T11497] loop8: detected capacity change from 0 to 128 [ 240.752778][T11497] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.797597][T11497] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.818438][T11510] loop4: detected capacity change from 0 to 256 [ 240.840474][T11510] exfat: Deprecated parameter 'utf8' [ 240.926000][T11510] exfat: Deprecated parameter 'namecase' [ 240.938620][T11510] exfat: Deprecated parameter 'utf8' [ 241.012765][T11510] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 241.332169][T11524] loop4: detected capacity change from 0 to 1764 [ 241.420606][T11524] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 241.469588][T11524] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 241.563369][T11531] loop6: detected capacity change from 0 to 32768 [ 241.653368][T11531] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.2568 (11531) [ 241.687909][T11542] loop2: detected capacity change from 0 to 256 [ 241.724689][T11531] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 241.734962][T11531] BTRFS info (device loop6): use zlib compression, level 3 [ 241.742311][T11531] BTRFS info (device loop6): using free space tree [ 241.748836][T11531] BTRFS info (device loop6): has skinny extents [ 241.818511][T11542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 242.256328][T11531] BTRFS info (device loop6): enabling ssd optimizations [ 242.362280][T11590] loop2: detected capacity change from 0 to 512 [ 242.422413][T11590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 242.580323][T11590] EXT4-fs (loop2): 1 truncate cleaned up [ 242.617353][T11590] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 242.623500][T11599] loop8: detected capacity change from 0 to 16 [ 242.643748][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.727548][T11599] erofs: (device loop8): mounted with root inode @ nid 36. [ 242.834221][T11599] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.925023][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'. [ 242.966854][T11599] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 243.059153][T11599] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 243.358721][ T4242] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 243.424502][T11639] loop2: detected capacity change from 0 to 512 [ 243.514638][T11639] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 243.522840][T11639] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 243.552770][T11639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 243.565281][T11639] System zones: 1-12 [ 243.581302][T11639] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.2601: corrupted in-inode xattr [ 243.599966][T11639] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2601: couldn't read orphan inode 15 (err -117) [ 243.618702][ T4242] usb 7-1: Using ep0 maxpacket: 8 [ 243.653296][T11639] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 243.675050][ T4248] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 243.722827][T11639] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 863271013 > max in inode 18 [ 243.738533][ T4242] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.753019][ T4242] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 243.762354][ T4242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.778067][ T4242] usb 7-1: config 0 descriptor?? [ 243.948470][ T4248] usb 9-1: Using ep0 maxpacket: 32 [ 243.985403][T11651] loop2: detected capacity change from 0 to 8 [ 244.098656][ T4248] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.110870][ T4248] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.122022][ T4248] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 244.132330][ T4248] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.143289][ T4248] usb 9-1: config 0 descriptor?? [ 244.199373][ T4248] hub 9-1:0.0: USB hub found [ 244.260910][ T4242] kye 0003:0458:4018.0026: unbalanced delimiter at end of report description [ 244.282126][ T4242] kye 0003:0458:4018.0026: parse failed [ 244.294428][ T4242] kye: probe of 0003:0458:4018.0026 failed with error -22 [ 244.464228][ T4242] usb 7-1: USB disconnect, device number 17 [ 244.484304][ T4248] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 244.794527][ T4248] usbhid 9-1:0.0: can't add hid device: -71 [ 244.794616][ T4248] usbhid: probe of 9-1:0.0 failed with error -71 [ 244.838174][ T4248] usb 9-1: USB disconnect, device number 2 [ 244.872486][T11657] loop2: detected capacity change from 0 to 32768 [ 244.922844][T11657] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 244.965361][T11657] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 245.006319][T11657] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 245.117233][T11657] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 245.746191][T11725] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 245.746215][T11725] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 245.746227][T11725] CPU: 0 PID: 11725 Comm: syz.0.2632 Not tainted 5.15.189-syzkaller #0 [ 245.746243][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.746251][T11725] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 245.746273][T11725] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6d 7d 4a fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c 7d 4a fa 4d 8b 24 24 48 83 c3 [ 245.746288][T11725] RSP: 0018:ffffc90003f17a78 EFLAGS: 00010206 [ 245.746305][T11725] RAX: 0000000000000005 RBX: ffff888074824500 RCX: 0000000000080000 [ 245.746317][T11725] RDX: ffffc900056f9000 RSI: 000000000000043e RDI: 000000000000043f [ 245.746328][T11725] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1029891a26 [ 245.746340][T11725] R10: ffffed1029891a26 R11: 1ffff11029891a25 R12: 0000000000000028 [ 245.746353][T11725] R13: dffffc0000000000 R14: ffff88814c48d000 R15: dffffc0000000000 [ 245.746366][T11725] FS: 00007f8d0adb56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 245.746389][T11725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.746401][T11725] CR2: 000000110c273c0d CR3: 000000005aa9d000 CR4: 00000000003506f0 [ 245.746417][T11725] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.746427][T11725] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.746438][T11725] Call Trace: [ 245.746444][T11725] [ 245.746453][T11725] pcl818_detach+0x62/0xd0 [ 245.746469][T11725] comedi_device_detach+0x12d/0x6e0 [ 245.746490][T11725] comedi_unlocked_ioctl+0xbd0/0xe90 [ 245.746511][T11725] ? comedi_poll+0x8b0/0x8b0 [ 245.746549][T11725] ? bpf_lsm_file_ioctl+0x5/0x10 [ 245.746566][T11725] ? security_file_ioctl+0x7c/0xa0 [ 245.746586][T11725] ? comedi_poll+0x8b0/0x8b0 [ 245.746601][T11725] __se_sys_ioctl+0xfa/0x170 [ 245.746623][T11725] do_syscall_64+0x4c/0xa0 [ 245.746641][T11725] ? clear_bhb_loop+0x30/0x80 [ 245.746656][T11725] ? clear_bhb_loop+0x30/0x80 [ 245.746672][T11725] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.746692][T11725] RIP: 0033:0x7f8d0cb4dbe9 [ 245.746718][T11725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.746732][T11725] RSP: 002b:00007f8d0adb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.746751][T11725] RAX: ffffffffffffffda RBX: 00007f8d0cd74fa0 RCX: 00007f8d0cb4dbe9 [ 245.746772][T11725] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 245.746782][T11725] RBP: 00007f8d0cbd0e19 R08: 0000000000000000 R09: 0000000000000000 [ 245.746792][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.746801][T11725] R13: 00007f8d0cd75038 R14: 00007f8d0cd74fa0 R15: 00007fff2a08abf8 [ 245.746820][T11725] [ 245.746831][T11725] Modules linked in: [ 245.746851][T11725] ---[ end trace 0a00987ae524c174 ]--- [ 245.746860][T11725] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 245.746876][T11725] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6d 7d 4a fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c 7d 4a fa 4d 8b 24 24 48 83 c3 [ 245.746889][T11725] RSP: 0018:ffffc90003f17a78 EFLAGS: 00010206 [ 245.746904][T11725] RAX: 0000000000000005 RBX: ffff888074824500 RCX: 0000000000080000 [ 245.746915][T11725] RDX: ffffc900056f9000 RSI: 000000000000043e RDI: 000000000000043f [ 245.746926][T11725] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1029891a26 [ 245.746938][T11725] R10: ffffed1029891a26 R11: 1ffff11029891a25 R12: 0000000000000028 [ 245.746950][T11725] R13: dffffc0000000000 R14: ffff88814c48d000 R15: dffffc0000000000 [ 245.746963][T11725] FS: 00007f8d0adb56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 245.746978][T11725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.746990][T11725] CR2: 000000110c273c0d CR3: 000000005aa9d000 CR4: 00000000003506f0 [ 245.747004][T11725] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.747013][T11725] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.747029][T11725] Kernel panic - not syncing: Fatal exception [ 245.747310][T11725] Kernel Offset: disabled [ 246.165371][T11725] Rebooting in 86400 seconds..