last executing test programs: 4.223350486s ago: executing program 1 (id=2216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) 4.223125196s ago: executing program 0 (id=2217): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 3.825883995s ago: executing program 0 (id=2222): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0xc010, &(0x7f0000000040)=',pd_3\xd4\xa9\x93\xae\x1c>\xe4\xcf\x05l%\xb0\xa2\xfaW*0^\x16\xad?0\xbe\xc7q/.\x93\x1d\xe3)\x88j{\xf6u\x89\xdc\xeb\xd9\xe9\x80\x8c\xfb\'\xd6\xde/#\xb1\xaa\xdc}\x88\xecc\x97\xbb\xa4\x91!0\x89\x92\xf6[Q\xde\xb1\x88\x87\xce\xb3\xeb+\x9a\xe7\xca\xea\xf8\f\xf9\xab\xccrH\xb9\x8eo\xadr\x89\a\xb6N6\x80J\x9e\x9b\xbe\xad\x96\x93\x9e\xed\x8bo\xe7\xfd\xaf\xe7U\xe5\xe0\xb1\xaf\x1c\xd5\x8cL\xaf`\xea\v\xc3\xd6\xeeJbv4\xd8\xc4\rw.0\xbd\xe9D`\xc9ZoBx\xa5\xf6e\xf9d\x95\xa0\x0f\x9e\x81\x15\xce\xd7\xb3\xd8\xf9\x03\xf2\xe4\x91\xbb\xb4\x99=') 3.67083892s ago: executing program 1 (id=2223): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64], 0x41, 0x5e97, &(0x7f0000005e00)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000040)=ANY=[], 0xe01, 0x0) 3.585900968s ago: executing program 0 (id=2225): r0 = syz_open_dev$video(&(0x7f0000000e00), 0x800000000, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x0, "81defc5789176beb8c6301cd2d8161670cce6570a5760ef394fd7513c0a80f93", 0x38415262}) 3.349933302s ago: executing program 0 (id=2228): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') pread64(r0, &(0x7f00000000c0)=""/23, 0x17, 0x7f) 3.154108171s ago: executing program 0 (id=2229): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 2.540755731s ago: executing program 3 (id=2237): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x1, 0x81c, &(0x7f0000001540)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 2.458551259s ago: executing program 1 (id=2238): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 2.296746245s ago: executing program 3 (id=2240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) 2.296077745s ago: executing program 2 (id=2241): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000003040)=""/4096, &(0x7f0000000600), &(0x7f0000000a40), 0x1, r0}, 0x38) 2.096468044s ago: executing program 2 (id=2242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x80000000]}}) 2.076611306s ago: executing program 3 (id=2243): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 1.967158777s ago: executing program 2 (id=2244): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 1.770129586s ago: executing program 2 (id=2245): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x891e, 0x0) 1.488744284s ago: executing program 3 (id=2246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x800, 0x0, 0x4}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa, 0x1}, [@coaddr={0x14, 0xe, @in6=@mcast1}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x14}}}]}, 0x168}}, 0x0) 1.268766985s ago: executing program 2 (id=2247): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@phonet={0x23, 0x8, 0x0, 0xf}, 0x80, 0x0}, 0x8000) 1.039953928s ago: executing program 0 (id=2248): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001640)={0x0, 0x102}) 1.039332718s ago: executing program 1 (id=2249): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000900)=0x63) 970.272854ms ago: executing program 3 (id=2250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 599.850851ms ago: executing program 2 (id=2251): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0xc4d, &(0x7f0000001bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 559.551715ms ago: executing program 1 (id=2252): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 465.088254ms ago: executing program 3 (id=2253): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) 0s ago: executing program 1 (id=2254): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) kernel console output (not intermixed with test programs): 13838][ T7640] syz.2.792: attempt to access beyond end of device [ 154.813838][ T7640] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 154.874827][ T7627] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 154.912415][ T7640] Buffer I/O error on dev loop2, logical block 1295, async page read [ 154.927078][ T7640] syz.2.792: attempt to access beyond end of device [ 154.927078][ T7640] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 154.942770][ T7640] Buffer I/O error on dev loop2, logical block 1295, async page read [ 154.951572][ T7627] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 154.977467][ T27] audit: type=1800 audit(1760056335.577:12): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.792" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 155.014274][ T7627] BTRFS info (device loop1): using free space tree [ 155.101547][ T7642] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.790: Attempting to read directory block (623) that is past i_size (638464) [ 155.210908][ T7627] BTRFS info (device loop1): enabling ssd optimizations [ 155.263998][ T7627] BTRFS info (device loop1): auto enabling async discard [ 155.419853][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.673927][ T5790] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 155.768506][ T7676] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 155.776447][ T7676] netlink: 224 bytes leftover after parsing attributes in process `syz.0.801'. [ 155.791636][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 156.057583][ T7684] dlm: non-version read from control device 0 [ 156.525555][ T7698] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 157.161259][ T7713] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 157.338599][ T7724] netlink: 'syz.0.822': attribute type 3 has an invalid length. [ 158.055766][ T7746] loop0: detected capacity change from 0 to 2048 [ 158.184401][ T7746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.231236][ T7746] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.266178][ T7752] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 158.313609][ T7756] loop1: detected capacity change from 0 to 4096 [ 158.341296][ T7756] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 158.379584][ T7746] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.834: bg 0: block 345: padding at end of block bitmap is not set [ 158.536368][ T7756] ntfs: volume version 3.1. [ 158.555517][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.967725][ T7767] tmpfs: User quota inode hardlimit too large. [ 159.374121][ T7751] loop2: detected capacity change from 0 to 40427 [ 159.407666][ T7779] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 159.418932][ T7751] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 159.438295][ T7751] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 159.446763][ T7779] net_ratelimit: 337 callbacks suppressed [ 159.446794][ T7779] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 159.509424][ T7751] F2FS-fs (loop2): invalid crc value [ 159.518214][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.569442][ T7751] F2FS-fs (loop2): Found nat_bits in checkpoint [ 159.708126][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 159.725540][ T5834] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 159.747317][ T5834] usb 4-1: config 4 has no interface number 0 [ 159.770828][ T5834] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.794771][ T7751] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 159.805430][ T7751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 159.808020][ T5834] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.881038][ T5834] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.905592][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.922186][ T5834] hub 4-1:4.128: USB hub found [ 160.131831][ T5834] hub 4-1:4.128: 2 ports detected [ 160.151872][ T5834] hub 4-1:4.128: Using single TT (err -22) [ 160.344012][ T5834] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 160.387946][ T5834] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 160.459087][ T5834] usb 4-1: USB disconnect, device number 6 [ 161.097515][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.327533][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 161.328201][ T7821] loop3: detected capacity change from 0 to 64 [ 161.345537][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 161.358876][ T8] usb 1-1: config 0 has no interface number 0 [ 161.365608][ T8] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.385844][ T8] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.426904][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.452746][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.476497][ T7821] Trying to free block not in datazone [ 161.488807][ T8] usb 1-1: Product: syz [ 161.493522][ T8] usb 1-1: Manufacturer: syz [ 161.502827][ T8] usb 1-1: SerialNumber: syz [ 161.513840][ T8] usb 1-1: config 0 descriptor?? [ 161.537614][ T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 161.756416][ T8] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 161.780160][ T8] quatech2: probe of 1-1:0.51 failed with error -90 [ 161.805785][ T7833] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.873'. [ 161.906486][ T7835] geneve2: entered promiscuous mode [ 161.913753][ T7835] geneve2: entered allmulticast mode [ 162.022224][ T5834] usb 1-1: USB disconnect, device number 3 [ 162.474705][ T7849] loop1: detected capacity change from 0 to 64 [ 162.528508][ T7849] Trying to free block not in datazone [ 162.584388][ T7830] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 163.556707][ T7885] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 163.583643][ T7885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.647593][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.788308][ T7892] loop1: detected capacity change from 0 to 256 [ 163.847495][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 163.863523][ T28] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 163.875711][ T28] usb 3-1: config 0 has no interface number 0 [ 163.906065][ T7892] FAT-fs (loop1): Directory bread(block 64) failed [ 163.915040][ T7892] FAT-fs (loop1): Directory bread(block 65) failed [ 163.929106][ T28] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.951048][ T7892] FAT-fs (loop1): Directory bread(block 66) failed [ 163.966612][ T28] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.986422][ T7892] FAT-fs (loop1): Directory bread(block 67) failed [ 163.994769][ T7892] FAT-fs (loop1): Directory bread(block 68) failed [ 164.019385][ T28] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 164.035596][ T7892] FAT-fs (loop1): Directory bread(block 69) failed [ 164.046873][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.063219][ T7897] loop3: detected capacity change from 0 to 256 [ 164.063746][ T7892] FAT-fs (loop1): Directory bread(block 70) failed [ 164.080359][ T28] usb 3-1: Product: syz [ 164.085368][ T28] usb 3-1: Manufacturer: syz [ 164.112269][ T28] usb 3-1: SerialNumber: syz [ 164.120564][ T7892] FAT-fs (loop1): Directory bread(block 71) failed [ 164.140796][ T28] usb 3-1: config 0 descriptor?? [ 164.151925][ T7892] FAT-fs (loop1): Directory bread(block 72) failed [ 164.163735][ T7892] FAT-fs (loop1): Directory bread(block 73) failed [ 164.179629][ T28] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 164.400088][ T28] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 164.423973][ T28] quatech2: probe of 3-1:0.51 failed with error -90 [ 164.678152][ T28] usb 3-1: USB disconnect, device number 5 [ 164.744080][ T7909] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 165.164636][ T7924] netlink: 'syz.1.920': attribute type 7 has an invalid length. [ 165.573276][ T7937] IPv6: Can't replace route, no match found [ 165.698821][ T5834] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 165.939515][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.961273][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 165.983696][ T7925] loop3: detected capacity change from 0 to 32768 [ 165.991268][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 166.036276][ T7945] loop2: detected capacity change from 0 to 8 [ 166.045816][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 166.063740][ T7925] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 166.108352][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 166.132118][ T7925] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 166.185540][ T7925] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 166.187072][ T5834] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.216330][ T7945] SQUASHFS error: lzo decompression failed, data probably corrupt [ 166.234124][ T7925] OCFS2: Returning error to the calling process. [ 166.241743][ T7945] SQUASHFS error: Failed to read block 0x1dd: -5 [ 166.256801][ T7925] (syz.3.918,7925,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 166.266609][ T5834] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.266636][ T5834] usb 2-1: Manufacturer: syz [ 166.276593][ T5834] usb 2-1: config 0 descriptor?? [ 166.282552][ T7945] SQUASHFS error: Unable to read metadata cache entry [1db] [ 166.333236][ T7945] SQUASHFS error: Unable to read inode 0xa7 [ 166.363569][ T7925] (syz.3.918,7925,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 166.381270][ T7925] (syz.3.918,7925,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 166.417551][ T7925] (syz.3.918,7925,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 166.444228][ T7925] (syz.3.918,7925,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 166.474332][ T7925] (syz.3.918,7925,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 166.523051][ T7925] (syz.3.918,7925,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 166.548555][ T7925] (syz.3.918,7925,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 166.589092][ T7925] (syz.3.918,7925,1):ocfs2_mknod:298 ERROR: status = -5 [ 166.619917][ T7925] (syz.3.918,7925,1):ocfs2_mknod:502 ERROR: status = -5 [ 166.647438][ T28] usb 2-1: USB disconnect, device number 4 [ 166.676290][ T7925] (syz.3.918,7925,1):ocfs2_mkdir:659 ERROR: status = -5 [ 166.774556][ T5795] ocfs2: Unmounting device (7,3) on (node local) [ 166.949235][ T7940] loop0: detected capacity change from 0 to 40427 [ 166.993405][ T7940] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 167.021467][ T7940] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 167.065515][ T7940] F2FS-fs (loop0): invalid crc value [ 167.126951][ T7940] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.287457][ T7940] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.295381][ T7940] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.388525][ T7963] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 167.405446][ T7963] netlink: 'syz.1.935': attribute type 2 has an invalid length. [ 167.890341][ T7975] loop3: detected capacity change from 0 to 256 [ 167.960233][ T7975] FAT-fs (loop3): Directory bread(block 64) failed [ 167.984852][ T7975] FAT-fs (loop3): Directory bread(block 65) failed [ 168.016896][ T7975] FAT-fs (loop3): Directory bread(block 66) failed [ 168.077653][ T7975] FAT-fs (loop3): Directory bread(block 67) failed [ 168.087374][ T7975] FAT-fs (loop3): Directory bread(block 68) failed [ 168.127350][ T7975] FAT-fs (loop3): Directory bread(block 69) failed [ 168.135049][ T7975] FAT-fs (loop3): Directory bread(block 70) failed [ 168.174332][ T7975] FAT-fs (loop3): Directory bread(block 71) failed [ 168.197554][ T7975] FAT-fs (loop3): Directory bread(block 72) failed [ 168.204720][ T7975] FAT-fs (loop3): Directory bread(block 73) failed [ 168.821618][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.949'. [ 169.261815][ T8004] loop2: detected capacity change from 0 to 64 [ 169.483154][ T8009] sctp: [Deprecated]: syz.0.958 (pid 8009) Use of int in max_burst socket option deprecated. [ 169.483154][ T8009] Use struct sctp_assoc_value instead [ 169.506006][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.806515][ T8018] loop0: detected capacity change from 0 to 2048 [ 169.905389][ T8022] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.062269][ T8018] syz.0.961: attempt to access beyond end of device [ 170.062269][ T8018] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 170.071125][ T27] audit: type=1800 audit(1760056350.677:13): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.961" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 170.139986][ T8018] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 170.183927][ T8018] NILFS (loop0): error -5 truncating bmap (ino=16) [ 170.605153][ T8038] CIFS mount error: No usable UNC path provided in device string! [ 170.605153][ T8038] [ 170.646786][ T8042] loop2: detected capacity change from 0 to 128 [ 170.661059][ T8038] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.676669][ T8042] EXT4-fs: Ignoring removed nobh option [ 170.735237][ T8042] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.818712][ T8042] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.945248][ T8042] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.974: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 170.956737][ T8050] loop0: detected capacity change from 0 to 2048 [ 171.043175][ T8050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.109518][ T8052] loop3: detected capacity change from 0 to 1764 [ 171.215642][ T5796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.467752][ T8063] xt_limit: Overflow, try lower: 65536/2147483648 [ 172.292667][ T8087] --map-set only usable from mangle table [ 172.787211][ T8070] loop3: detected capacity change from 0 to 32768 [ 172.864704][ T8070] ea_get: invalid extended attribute [ 173.068244][ T8108] loop0: detected capacity change from 0 to 512 [ 173.234486][ T8108] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1006: iget: bad extended attribute block 1 [ 173.272644][ T8108] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1006: couldn't read orphan inode 15 (err -117) [ 173.335218][ T8108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.546386][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.796305][ T8127] loop0: detected capacity change from 0 to 764 [ 173.926372][ T8127] Symlink component flag not implemented [ 173.982788][ T8127] Symlink component flag not implemented [ 174.028441][ T8127] Symlink component flag not implemented (128) [ 174.123355][ T8127] Symlink component flag not implemented (122) [ 174.356365][ T8141] loop1: detected capacity change from 0 to 256 [ 174.394287][ T8141] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.515232][ T8141] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 174.840791][ T8153] loop2: detected capacity change from 0 to 64 [ 175.426361][ T8165] loop2: detected capacity change from 0 to 512 [ 175.458133][ T8165] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.508678][ T8165] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 175.512784][ T8145] loop0: detected capacity change from 0 to 32768 [ 175.545764][ T8165] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1033: bg 0: block 248: padding at end of block bitmap is not set [ 175.595694][ T8145] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.650544][ T8165] Quota error (device loop2): write_blk: dquota write failed [ 175.674889][ T8165] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 175.714737][ T8165] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.1033: Failed to acquire dquot type 1 [ 175.750759][ T8145] XFS (loop0): Ending clean mount [ 175.766912][ T8165] EXT4-fs (loop2): 1 truncate cleaned up [ 175.806706][ T8165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 175.814372][ T8145] XFS (loop0): Quotacheck needed: Please wait. [ 175.972688][ T8145] XFS (loop0): Quotacheck: Done. [ 176.088807][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 176.113690][ T2871] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 176.162566][ T2871] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:6: Failed to release dquot type 1 [ 176.220291][ T8187] xt_limit: Overflow, try lower: 0/0 [ 176.343027][ T5793] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.111898][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 177.132548][ T8213] openvswitch: netlink: Missing key (keys=40, expected=80) [ 177.983718][ T8243] bridge2: entered allmulticast mode [ 178.580156][ T8258] overlay: Bad value for 'verity' [ 178.779108][ T8241] loop1: detected capacity change from 0 to 32768 [ 178.866378][ T8241] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.959501][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 179.086267][ T8272] loop2: detected capacity change from 0 to 256 [ 179.141058][ T8275] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1081'. [ 179.241511][ T8272] FAT-fs (loop2): Directory bread(block 64) failed [ 179.267394][ T8272] FAT-fs (loop2): Directory bread(block 65) failed [ 179.303595][ T8272] FAT-fs (loop2): Directory bread(block 66) failed [ 179.326237][ T8272] FAT-fs (loop2): Directory bread(block 67) failed [ 179.352935][ T8272] FAT-fs (loop2): Directory bread(block 68) failed [ 179.387887][ T8272] FAT-fs (loop2): Directory bread(block 69) failed [ 179.407776][ T8272] FAT-fs (loop2): Directory bread(block 70) failed [ 179.428451][ T8283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1085'. [ 179.447709][ T8272] FAT-fs (loop2): Directory bread(block 71) failed [ 179.454700][ T8272] FAT-fs (loop2): Directory bread(block 72) failed [ 179.461555][ T8283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1085'. [ 179.497441][ T8272] FAT-fs (loop2): Directory bread(block 73) failed [ 179.572322][ T8285] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 179.583044][ T8285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1086'. [ 179.597930][ T8285] nbd: must specify at least one socket [ 179.742507][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 179.768118][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 179.993068][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 180.017786][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 180.207513][ T8305] netlink: 'syz.0.1096': attribute type 1 has an invalid length. [ 180.336164][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 180.554657][ T8316] loop2: detected capacity change from 0 to 1024 [ 180.663845][ T8316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.855595][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.949875][ T27] audit: type=1326 audit(1760056361.557:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eec9 code=0x7ffc0000 [ 181.020317][ T27] audit: type=1326 audit(1760056361.557:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eec9 code=0x7ffc0000 [ 181.088173][ T27] audit: type=1326 audit(1760056361.617:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fc5fb38eec9 code=0x7ffc0000 [ 181.197445][ T27] audit: type=1326 audit(1760056361.617:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eec9 code=0x7ffc0000 [ 181.381973][ T8345] binder: 8342:8345 ioctl c00c6211 0 returned -14 [ 181.395492][ T8343] loop3: detected capacity change from 0 to 512 [ 181.464208][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.485466][ T8343] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.705076][ T8357] netlink: 'syz.1.1117': attribute type 10 has an invalid length. [ 181.715082][ T8357] veth0_vlan: entered allmulticast mode [ 181.726408][ T8357] bridge0: port 3(veth0_vlan) entered blocking state [ 181.750816][ T8357] bridge0: port 3(veth0_vlan) entered disabled state [ 181.768505][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.795775][ T8357] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 182.632676][ T8383] __nla_validate_parse: 1 callbacks suppressed [ 182.632695][ T8383] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1130'. [ 182.739763][ T8389] loop3: detected capacity change from 0 to 2048 [ 182.770224][ T8389] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4294963200, location=4294963200 [ 182.845136][ T8389] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.240603][ T8401] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 183.261869][ T8401] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1139'. [ 183.791761][ T8422] loop0: detected capacity change from 0 to 256 [ 184.581879][ T8449] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 184.602080][ T8449] bridge1: entered promiscuous mode [ 184.637983][ T8449] bridge1: entered allmulticast mode [ 184.646185][ T8451] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1164'. [ 184.694598][ T8447] loop3: detected capacity change from 0 to 4096 [ 184.819179][ T8447] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 184.869647][ T8447] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 185.162408][ T8463] loop0: detected capacity change from 0 to 64 [ 185.470884][ T8471] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1173'. [ 185.507391][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 185.538540][ T8471] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1173'. [ 185.553095][ T8471] netlink: 'syz.0.1173': attribute type 2 has an invalid length. [ 185.580794][ T8471] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1173'. [ 185.805836][ T8481] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1177'. [ 186.008661][ T8489] mmap: syz.2.1182 (8489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.359607][ T8495] loop0: detected capacity change from 0 to 4096 [ 186.399045][ T8495] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 186.515560][ T8503] loop3: detected capacity change from 0 to 1764 [ 186.556302][ T8495] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 186.593424][ T8495] ntfs3: loop0: mft corrupted [ 186.606248][ T8495] ntfs3: loop0: Failed to load $Extend (-22). [ 186.615597][ T8495] ntfs3: loop0: Failed to initialize $Extend. [ 186.902337][ T8512] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1193'. [ 186.918470][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1192'. [ 186.937686][ T8512] netlink: 'syz.2.1193': attribute type 3 has an invalid length. [ 186.967419][ T8512] netlink: 'syz.2.1193': attribute type 2 has an invalid length. [ 188.257385][ T8563] netlink: 'syz.1.1216': attribute type 8 has an invalid length. [ 188.352429][ T8567] netlink: 'syz.2.1219': attribute type 10 has an invalid length. [ 188.376868][ T8569] comedi comedi1: dac02: I/O port conflict (0x4,8) [ 188.400350][ T8567] __nla_validate_parse: 5 callbacks suppressed [ 188.400368][ T8567] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1219'. [ 188.446427][ T8567] openvswitch: netlink: Flow key attr not present in new flow. [ 188.713858][ T27] audit: type=1326 audit(1760056369.327:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 188.816529][ T27] audit: type=1326 audit(1760056369.357:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 188.897476][ T27] audit: type=1326 audit(1760056369.377:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 188.994444][ T8591] loop0: detected capacity change from 0 to 128 [ 189.009618][ T27] audit: type=1326 audit(1760056369.377:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 189.108976][ T27] audit: type=1326 audit(1760056369.377:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 189.199112][ T27] audit: type=1326 audit(1760056369.377:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 189.288397][ T27] audit: type=1326 audit(1760056369.377:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 189.396440][ T27] audit: type=1326 audit(1760056369.377:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 189.436675][ T8603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1232'. [ 189.467452][ T8603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1232'. [ 189.488372][ T27] audit: type=1326 audit(1760056369.377:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 189.786775][ T8617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1240'. [ 190.160147][ T8631] loop3: detected capacity change from 0 to 1024 [ 190.280154][ T8631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.404301][ T28] IPVS: starting estimator thread 0... [ 190.507600][ T8645] IPVS: using max 21 ests per chain, 50400 per kthread [ 190.576379][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.475130][ T8686] loop3: detected capacity change from 0 to 512 [ 191.488649][ T8686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.532118][ T8686] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.617175][ T8686] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 191.684377][ T8686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 191.750859][ T8686] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 191.761633][ T8686] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 191.772447][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 191.822589][ T8686] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 191.944620][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.221406][ T8708] loop1: detected capacity change from 0 to 1024 [ 192.284138][ T8708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.599125][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.830179][ T27] audit: type=1400 audit(1760056373.447:27): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8725 comm="syz.2.1290" [ 193.199817][ T8714] loop3: detected capacity change from 0 to 32768 [ 193.270291][ T8714] ERROR: (device loop3): dtSearch: stack overrun! [ 193.270291][ T8714] [ 193.319921][ T8714] ERROR: (device loop3): remounting filesystem as read-only [ 193.380532][ T8714] btstack dump: [ 193.386642][ T8714] bn = 0, index = 4 [ 193.402201][ T8714] bn = 0, index = 4 [ 193.419857][ T8714] bn = 0, index = 4 [ 193.443571][ T8714] bn = 0, index = 4 [ 193.473553][ T8714] bn = 0, index = 4 [ 193.480750][ T8714] bn = 0, index = 4 [ 193.485870][ T8714] bn = 0, index = 4 [ 193.491453][ T8714] bn = 0, index = 0 [ 193.495925][ T8714] jfs_lookup: dtSearch returned -5 [ 193.663798][ T8722] loop0: detected capacity change from 0 to 32768 [ 193.697852][ T8722] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1288 (8722) [ 193.765510][ T8722] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.817928][ T8722] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 193.839234][ T8722] BTRFS info (device loop0): using free space tree [ 194.045467][ T8722] BTRFS info (device loop0): enabling ssd optimizations [ 194.116664][ T8722] BTRFS info (device loop0): auto enabling async discard [ 194.349348][ T5793] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.804150][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.808365][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1311'. [ 194.815039][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.735080][ T8819] loop1: detected capacity change from 0 to 64 [ 195.828608][ T5834] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.915799][ T8823] loop3: detected capacity change from 0 to 512 [ 195.996714][ T8825] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 195.996849][ T8823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.019874][ T8825] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 196.030408][ T8823] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.044080][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 196.068333][ T5834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.087345][ T5834] usb 3-1: config 0 has no interfaces? [ 196.102883][ T5834] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 196.123819][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.134382][ T5834] usb 3-1: Product: syz [ 196.142869][ T5834] usb 3-1: Manufacturer: syz [ 196.157582][ T5834] usb 3-1: SerialNumber: syz [ 196.164222][ T8823] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1327: corrupted xattr block 33: invalid ea_ino [ 196.187585][ T5834] r8152-cfgselector 3-1: config 0 descriptor?? [ 196.220595][ T8823] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 196.305079][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.449922][ T5834] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 196.486300][ T3442] usb 3-1: config 0 descriptor?? [ 196.500637][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'. [ 196.659085][ T3442] usb 3-1: can't set config #0, error -71 [ 196.671001][ T5834] usb 3-1: USB disconnect, device number 6 [ 196.707502][ T786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.929527][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 196.942925][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 196.957355][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 196.979966][ T8850] loop1: detected capacity change from 0 to 512 [ 196.987209][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 197.003637][ T786] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 197.015595][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.020756][ T8850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 197.032940][ T786] usb 4-1: config 0 descriptor?? [ 197.080969][ T8850] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 197.122708][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.296654][ T786] hdpvr 4-1:0.0: firmware version 0x8 dated [ 197.490735][ T786] hdpvr 4-1:0.0: device init failed [ 197.515047][ T786] hdpvr: probe of 4-1:0.0 failed with error -12 [ 197.535771][ T786] usb 4-1: USB disconnect, device number 7 [ 197.668637][ T8863] loop0: detected capacity change from 0 to 4096 [ 197.720551][ T8863] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 197.764745][ T8863] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 197.802512][ T8863] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 197.852885][ T8863] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 197.893379][ T8863] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 197.939312][ T8863] ntfs: volume version 3.1. [ 197.953366][ T8863] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 197.974793][ T8863] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 198.002710][ T8863] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 198.024695][ T8863] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 198.037853][ T8856] loop1: detected capacity change from 0 to 32768 [ 198.051677][ T8856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1340 (8856) [ 198.085901][ T8863] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 198.133285][ T8856] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.187475][ T8856] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 198.206533][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.228297][ T8856] BTRFS info (device loop1): using free space tree [ 198.422222][ T8856] BTRFS info (device loop1): enabling ssd optimizations [ 198.429613][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 198.456436][ T8856] BTRFS info (device loop1): auto enabling async discard [ 198.474747][ T23] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 198.511885][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.556002][ T23] usb 3-1: Product: syz [ 198.582437][ T23] usb 3-1: Manufacturer: syz [ 198.601668][ T23] usb 3-1: SerialNumber: syz [ 198.624413][ T23] usb 3-1: config 0 descriptor?? [ 198.806461][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.889886][ T23] snd-usb-audio: probe of 3-1:0.0 failed with error -71 [ 198.936805][ T23] usb 3-1: USB disconnect, device number 7 [ 199.500860][ T8907] tmpfs: Bad value for 'mpol' [ 200.031943][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 200.150704][ T8903] loop3: detected capacity change from 0 to 32768 [ 200.195475][ T8903] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 200.291045][ T8903] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 200.420867][ T8903] (syz.3.1356,8903,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 200.452083][ T8903] (syz.3.1356,8903,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 200.475847][ T8903] (syz.3.1356,8903,1):ocfs2_mknod:298 ERROR: status = -2 [ 200.520809][ T8903] (syz.3.1356,8903,1):ocfs2_mknod:502 ERROR: status = -2 [ 200.559339][ T8903] (syz.3.1356,8903,1):ocfs2_mkdir:659 ERROR: status = -2 [ 200.697351][ T5795] ocfs2: Unmounting device (7,3) on (node local) [ 200.720581][ T8925] loop0: detected capacity change from 0 to 32768 [ 200.768744][ T8925] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1367 (8925) [ 200.848180][ T8925] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 200.909307][ T8925] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 200.956645][ T8925] BTRFS info (device loop0): force zlib compression, level 3 [ 200.993599][ T8925] BTRFS info (device loop0): force clearing of disk cache [ 201.007490][ T8925] BTRFS info (device loop0): turning off barriers [ 201.035353][ T8925] BTRFS info (device loop0): doing ref verification [ 201.077416][ T8925] BTRFS info (device loop0): enabling disk space caching [ 201.085162][ T8925] BTRFS info (device loop0): disk space caching is enabled [ 201.317575][ T8925] BTRFS info (device loop0): enabling ssd optimizations [ 201.325130][ T8925] BTRFS info (device loop0): auto enabling async discard [ 201.354214][ T8925] BTRFS info (device loop0): rebuilding free space tree [ 201.391697][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.480049][ T8925] BTRFS info (device loop0): disabling free space tree [ 201.500140][ T8925] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.523900][ T8925] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.607645][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 201.619443][ T5847] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 201.643071][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.662639][ T5847] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 201.686577][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.695515][ T8966] xt_CT: No such helper "snmp_trap" [ 201.717327][ T5847] usb 4-1: Product: syz [ 201.735848][ T5847] usb 4-1: Manufacturer: syz [ 201.756139][ T5847] usb 4-1: SerialNumber: syz [ 201.788455][ T5847] usb 4-1: config 0 descriptor?? [ 201.825153][ T5847] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 201.838459][ T5793] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 202.030931][ T5847] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 202.064266][ T5847] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 202.114668][ T5847] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 202.308961][ T23] usb 4-1: USB disconnect, device number 8 [ 203.828121][ T9029] loop0: detected capacity change from 0 to 256 [ 203.905955][ T9033] x_tables: duplicate underflow at hook 4 [ 204.002987][ T9029] FAT-fs (loop0): Directory bread(block 64) failed [ 204.032414][ T9029] FAT-fs (loop0): Directory bread(block 65) failed [ 204.056419][ T9029] FAT-fs (loop0): Directory bread(block 66) failed [ 204.086225][ T9029] FAT-fs (loop0): Directory bread(block 67) failed [ 204.104142][ T9029] FAT-fs (loop0): Directory bread(block 68) failed [ 204.116590][ T9029] FAT-fs (loop0): Directory bread(block 69) failed [ 204.134874][ T9029] FAT-fs (loop0): Directory bread(block 70) failed [ 204.147466][ T9029] FAT-fs (loop0): Directory bread(block 71) failed [ 204.164460][ T9029] FAT-fs (loop0): Directory bread(block 72) failed [ 204.203359][ T9029] FAT-fs (loop0): Directory bread(block 73) failed [ 204.494157][ T9021] loop1: detected capacity change from 0 to 32768 [ 204.586862][ T9021] find_entry called with index >= next_index [ 204.607777][ T9021] find_entry called with index >= next_index [ 204.618154][ T9021] find_entry called with index >= next_index [ 204.943332][ T9047] loop2: detected capacity change from 0 to 4096 [ 204.974572][ T9047] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 205.220034][ T9047] ntfs3: loop2: failed to convert "c46c" to iso8859-15 [ 205.418054][ T9063] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.457361][ T9063] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 205.497779][ T9063] overlayfs: missing 'lowerdir' [ 206.110273][ T9085] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 206.855015][ T9113] loop2: detected capacity change from 0 to 512 [ 206.882077][ T9115] loop1: detected capacity change from 0 to 16 [ 206.904069][ T9113] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.925656][ T9115] erofs: (device loop1): mounted with root inode @ nid 36. [ 206.965090][ T9118] ip6gre1: entered promiscuous mode [ 207.001188][ T9120] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 207.053404][ T9113] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1449: invalid block [ 207.137494][ T9123] loop3: detected capacity change from 0 to 8192 [ 207.157948][ T9113] EXT4-fs (loop2): Remounting filesystem read-only [ 207.165875][ T9113] EXT4-fs (loop2): 2 truncates cleaned up [ 207.204248][ T9113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.273081][ T9123] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 207.303823][ T9126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.347480][ T9123] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 207.367708][ T9123] REISERFS (device loop3): using ordered data mode [ 207.399060][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.408627][ T9123] reiserfs: using flush barriers [ 207.439806][ T9123] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.518797][ T9123] REISERFS (device loop3): checking transaction log (loop3) [ 207.891009][ T9123] REISERFS (device loop3): Using tea hash to sort names [ 207.920895][ T9123] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 208.159939][ T9142] loop2: detected capacity change from 0 to 128 [ 208.210907][ T9142] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 208.212425][ T5106] Bluetooth: hci0: unexpected event for opcode 0x203d [ 208.231631][ T9142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.857263][ T9161] loop1: detected capacity change from 0 to 2048 [ 208.894232][ T9161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.937430][ T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 209.143005][ T786] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 209.158658][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.171959][ T786] usb 1-1: Product: syz [ 209.176862][ T786] usb 1-1: Manufacturer: syz [ 209.183207][ T786] usb 1-1: SerialNumber: syz [ 209.647480][ T9182] loop2: detected capacity change from 0 to 512 [ 209.677700][ T786] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 209.729656][ T786] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 209.762852][ T786] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 209.768926][ T9182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.776468][ T786] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 209.799551][ T786] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 209.813161][ T9182] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.836335][ T786] lan78xx: probe of 1-1:1.0 failed with error -71 [ 209.853769][ T786] usb 1-1: USB disconnect, device number 4 [ 209.866362][ T9182] __quota_error: 11 callbacks suppressed [ 209.866380][ T9182] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 209.892568][ T9182] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 209.903306][ T9182] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.1482: Failed to acquire dquot type 0 [ 209.918148][ T9188] netlink: 'syz.1.1484': attribute type 63 has an invalid length. [ 209.940756][ T9188] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1484'. [ 209.999625][ T9182] EXT4-fs (loop2): Remounting filesystem read-only [ 210.131738][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.139531][ T9192] No such timeout policy "syz1" [ 210.586554][ T9205] xt_ecn: cannot match TCP bits for non-tcp packets [ 210.809610][ T9210] netlink: 'syz.1.1495': attribute type 15 has an invalid length. [ 211.215249][ T9224] binder: 9223:9224 ioctl c018620c 200000000100 returned -22 [ 211.617425][ T5847] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.837668][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 211.849429][ T5847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.884483][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.936819][ T5847] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 211.956408][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.983035][ T5847] usb 3-1: Product: syz [ 212.004078][ T5847] usb 3-1: Manufacturer: syz [ 212.015486][ T5847] usb 3-1: SerialNumber: syz [ 212.036291][ T5847] usb 3-1: config 0 descriptor?? [ 212.069750][ T5847] qmi_wwan 3-1:0.0: bogus CDC Union: master=101, slave=0 [ 212.093542][ T5847] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 212.241739][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 212.249599][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 212.377195][ T23] usb 3-1: USB disconnect, device number 8 [ 212.486727][ T27] audit: type=1326 audit(1760056393.097:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.1.1521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eec9 code=0x0 [ 212.879551][ T9278] loop3: detected capacity change from 0 to 1024 [ 213.048623][ T2871] hfsplus: b-tree write err: -5, ino 4 [ 213.147786][ T9285] bridge2: entered promiscuous mode [ 213.434548][ T9296] xt_limit: Overflow, try lower: 2147483649/3300 [ 213.639124][ T9301] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1540'. [ 215.017602][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 215.365268][ T9361] syz.1.1570[9361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.365420][ T9361] syz.1.1570[9361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.442365][ T9337] loop0: detected capacity change from 0 to 32768 [ 215.524296][ T9337] (syz.0.1557,9337,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.574846][ T9337] (syz.0.1557,9337,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.631487][ T9337] JBD2: Ignoring recovery information on journal [ 215.842445][ T9376] loop3: detected capacity change from 0 to 64 [ 215.859407][ T9337] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 216.041303][ T9380] netlink: 'syz.2.1577': attribute type 7 has an invalid length. [ 216.080811][ T9380] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1577'. [ 216.173052][ T5793] ocfs2: Unmounting device (7,0) on (node local) [ 216.653109][ T9397] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1583'. [ 216.688180][ T9399] netlink: 'syz.1.1584': attribute type 10 has an invalid length. [ 216.717146][ T9399] veth1_vlan: entered allmulticast mode [ 216.768820][ T9399] team0: Device veth1_vlan failed to register rx_handler [ 216.901190][ T9407] loop0: detected capacity change from 0 to 8 [ 216.921909][ T9407] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 216.971956][ T9407] cramfs: bad data blocksize 4293972856 [ 216.988475][ T6157] udevd[6157]: incorrect cramfs checksum on /dev/loop0 [ 217.002347][ T9407] cramfs: bad data blocksize 4293972856 [ 217.012441][ T27] audit: type=1326 audit(1760056397.627:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.087381][ T27] audit: type=1326 audit(1760056397.627:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.146460][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 217.168013][ T27] audit: type=1326 audit(1760056397.667:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.202072][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1590'. [ 217.215084][ T27] audit: type=1326 audit(1760056397.667:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.308434][ T27] audit: type=1326 audit(1760056397.667:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.683833][ T27] audit: type=1326 audit(1760056398.297:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.745330][ T27] audit: type=1326 audit(1760056398.297:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.781288][ T27] audit: type=1326 audit(1760056398.297:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 217.900264][ T9409] loop3: detected capacity change from 0 to 32768 [ 217.912130][ T9409] (syz.3.1588,9409,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 217.940245][ T9409] (syz.3.1588,9409,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.015231][ T9409] JBD2: Ignoring recovery information on journal [ 218.206391][ T9409] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 218.257776][ T27] audit: type=1326 audit(1760056398.867:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 218.317489][ T27] audit: type=1326 audit(1760056398.867:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff583f8eec9 code=0x7ffc0000 [ 218.543882][ T5795] ocfs2: Unmounting device (7,3) on (node local) [ 218.792464][ T9435] loop0: detected capacity change from 0 to 32768 [ 218.870164][ T9435] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page [ 218.870164][ T9435] [ 218.903032][ T9435] ERROR: (device loop0): remounting filesystem as read-only [ 219.144116][ T9438] loop1: detected capacity change from 0 to 32768 [ 219.216066][ T9438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1601 (9438) [ 219.298614][ T9438] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.358568][ T9438] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 219.388884][ T9438] BTRFS info (device loop1): enabling disk space caching [ 219.396914][ T9438] BTRFS info (device loop1): disabling tree log [ 219.434064][ T9438] BTRFS info (device loop1): turning off barriers [ 219.444173][ T9456] SET target dimension over the limit! [ 219.456004][ T9438] BTRFS info (device loop1): setting nodatacow, compression disabled [ 219.507341][ T9438] BTRFS info (device loop1): doing ref verification [ 219.538407][ T9438] BTRFS info (device loop1): force clearing of disk cache [ 219.565850][ T9438] BTRFS warning (device loop1): excessive commit interval 2147483647 [ 219.614745][ T9438] BTRFS info (device loop1): turning on sync discard [ 219.656173][ T9438] BTRFS info (device loop1): max_inline at 0 [ 219.670525][ T9438] BTRFS info (device loop1): disk space caching is enabled [ 219.904068][ T9438] BTRFS info (device loop1): rebuilding free space tree [ 219.945039][ T9438] BTRFS info (device loop1): disabling free space tree [ 219.957408][ T9438] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 219.972985][ T9438] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.247135][ T5790] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.741321][ T9503] misc userio: Invalid payload size [ 220.767940][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 220.807413][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 221.308124][ T9523] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1635'. [ 221.847859][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.909389][ T9546] netlink: 'syz.1.1646': attribute type 9 has an invalid length. [ 221.939952][ T9546] netlink: 'syz.1.1646': attribute type 7 has an invalid length. [ 221.959696][ T9542] loop0: detected capacity change from 0 to 4096 [ 221.966406][ T9546] netlink: 'syz.1.1646': attribute type 8 has an invalid length. [ 222.052041][ T9542] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 222.068784][ T9542] ntfs3: loop0: Failed to load $Extend (-22). [ 222.085393][ T9542] ntfs3: loop0: Failed to initialize $Extend. [ 222.087370][ T8] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 222.121691][ T8] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 222.140879][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.185346][ T8] usb 3-1: config 220 has no interface number 2 [ 222.195641][ T9552] AppArmor: change_hat: Invalid input 'ˆ' [ 222.212676][ T8] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 222.264550][ T8] usb 3-1: config 220 interface 0 has no altsetting 0 [ 222.284845][ T8] usb 3-1: config 220 interface 76 has no altsetting 0 [ 222.307345][ T8] usb 3-1: config 220 interface 1 has no altsetting 0 [ 222.323007][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 222.347521][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.356422][ T8] usb 3-1: Product: syz [ 222.362461][ T8] usb 3-1: Manufacturer: syz [ 222.367459][ T8] usb 3-1: SerialNumber: syz [ 222.426476][ T9554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1650'. [ 222.449542][ T9556] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1652'. [ 222.582442][ T27] audit: type=1326 audit(1760056403.197:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 222.620272][ T27] audit: type=1326 audit(1760056403.227:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 222.664119][ T8] usb 3-1: selecting invalid altsetting 0 [ 222.684327][ T8] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 222.727642][ T27] audit: type=1326 audit(1760056403.237:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 222.777116][ T8] usb 3-1: No valid video chain found. [ 222.824813][ T8] usb 3-1: selecting invalid altsetting 0 [ 222.864403][ T27] audit: type=1326 audit(1760056403.467:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 222.874619][ T8] usbtest: probe of 3-1:220.1 failed with error -22 [ 222.964118][ T8] usb 3-1: USB disconnect, device number 9 [ 222.965795][ T27] audit: type=1326 audit(1760056403.467:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 223.191750][ T27] audit: type=1326 audit(1760056403.807:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 223.267484][ T27] audit: type=1326 audit(1760056403.807:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 223.319072][ T27] audit: type=1326 audit(1760056403.847:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 223.406654][ T27] audit: type=1326 audit(1760056403.847:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 223.494277][ T27] audit: type=1326 audit(1760056403.847:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 223.531972][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'. [ 224.433822][ T9617] netlink: 'syz.1.1678': attribute type 10 has an invalid length. [ 224.464986][ T9617] macvlan1: entered allmulticast mode [ 224.478855][ T9617] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 224.560911][ T9620] team0: entered promiscuous mode [ 224.587346][ T9620] team_slave_0: entered promiscuous mode [ 224.617743][ T9620] team_slave_1: entered promiscuous mode [ 224.918477][ T9635] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1685'. [ 224.947549][ T9635] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1685'. [ 225.066183][ T9637] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 225.077383][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.267616][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 225.281389][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 225.302967][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 225.329172][ T23] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 225.339092][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.357501][ T23] usb 3-1: Product: syz [ 225.377389][ T23] usb 3-1: Manufacturer: syz [ 225.382267][ T23] usb 3-1: SerialNumber: syz [ 225.403983][ T23] usb 3-1: config 0 descriptor?? [ 225.658235][ T9633] loop3: detected capacity change from 0 to 32768 [ 225.671762][ T23] usb 3-1: USB disconnect, device number 10 [ 225.746182][ T9633] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.883826][ T9633] XFS (loop3): Ending clean mount [ 225.986362][ T5795] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 226.472410][ T9677] loop1: detected capacity change from 0 to 64 [ 227.068779][ T9697] xt_l2tp: wrong L2TP version: 0 [ 227.257675][ T9705] netlink: 'syz.3.1715': attribute type 6 has an invalid length. [ 227.414953][ T9708] bad cache= option: no%e [ 227.414953][ T9708] [ 227.436411][ T9708] CIFS: VFS: bad cache= option: no%e [ 227.994110][ T9729] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1728'. [ 228.015753][ T9729] 0ªX¹¦À: renamed from caif0 [ 228.051285][ T9729] 0ªX¹¦À: entered allmulticast mode [ 228.058272][ T9729] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 228.394652][ T9739] netlink: 'syz.0.1733': attribute type 7 has an invalid length. [ 228.415731][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1733'. [ 228.436920][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 228.627559][ T5847] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 228.821241][ T5847] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 228.838055][ T5847] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.849388][ T5847] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.885790][ T5847] usb 4-1: config 1 has no interface number 1 [ 228.906677][ T5847] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 228.917905][ T9731] loop2: detected capacity change from 0 to 32768 [ 228.945905][ T5847] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.979083][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.989769][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.003895][ T5847] usb 4-1: Product: syz [ 229.010685][ T5847] usb 4-1: Manufacturer: syz [ 229.015454][ T5847] usb 4-1: SerialNumber: syz [ 229.029398][ T9731] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.112821][ T9731] XFS (loop2): Ending clean mount [ 229.144219][ T9731] XFS (loop2): Quotacheck needed: Please wait. [ 229.247823][ T9731] XFS (loop2): Quotacheck: Done. [ 229.283190][ T9731] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.318552][ T5847] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 229.330983][ T5847] usb 4-1: MIDIStreaming interface descriptor not found [ 229.602038][ T5847] usb 4-1: USB disconnect, device number 9 [ 229.745754][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.680415][ T9802] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4) [ 230.888026][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 230.911637][ T9810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1762'. [ 231.101648][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 231.132876][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.147572][ T8] usb 4-1: Product: syz [ 231.152197][ T8] usb 4-1: Manufacturer: syz [ 231.157111][ T8] usb 4-1: SerialNumber: syz [ 231.188698][ T8] usb 4-1: config 0 descriptor?? [ 231.197825][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1766'. [ 231.458185][ T8] hso 4-1:0.0: Failed to find BULK IN ep [ 231.490693][ T8] usb-storage 4-1:0.0: USB Mass Storage device detected [ 231.695894][ T8] usb 4-1: USB disconnect, device number 10 [ 231.743784][ T9815] loop0: detected capacity change from 0 to 32768 [ 231.787787][ T9815] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 231.814457][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 231.872654][ T9815] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 232.085803][ T5793] ocfs2: Unmounting device (7,0) on (node local) [ 232.418495][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 232.883188][ T9832] loop2: detected capacity change from 0 to 32768 [ 232.932343][ T9832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1771 (9832) [ 232.997894][ T9832] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.082346][ T9832] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 233.191906][ T9832] BTRFS info (device loop2): enabling disk space caching [ 233.226200][ T9832] BTRFS info (device loop2): disabling tree log [ 233.250582][ T9832] BTRFS info (device loop2): turning off barriers [ 233.259114][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 233.269478][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1787'. [ 233.281263][ T9832] BTRFS info (device loop2): setting nodatacow, compression disabled [ 233.306655][ T9832] BTRFS info (device loop2): doing ref verification [ 233.315140][ T9832] BTRFS info (device loop2): force clearing of disk cache [ 233.323966][ T9832] BTRFS warning (device loop2): excessive commit interval 2147483647 [ 233.350856][ T9832] BTRFS info (device loop2): turning on sync discard [ 233.367475][ T9832] BTRFS info (device loop2): max_inline at 0 [ 233.384967][ T9832] BTRFS info (device loop2): disk space caching is enabled [ 233.396234][ T9869] loop1: detected capacity change from 0 to 1764 [ 233.586808][ T9832] BTRFS info (device loop2): rebuilding free space tree [ 233.658960][ T9832] BTRFS info (device loop2): disabling free space tree [ 233.699466][ T9832] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.761274][ T9832] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.051333][ T27] audit: type=1326 audit(1760056414.667:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 234.131989][ T5796] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.137791][ T27] audit: type=1326 audit(1760056414.697:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 234.264305][ T9899] loop1: detected capacity change from 0 to 4096 [ 234.302120][ T27] audit: type=1326 audit(1760056414.717:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 234.357399][ T9899] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 234.398010][ T9899] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 234.409692][ T27] audit: type=1326 audit(1760056414.717:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4cd8eec9 code=0x7ffc0000 [ 234.448173][ T9899] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 234.518189][ T9899] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 234.531836][ T9773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop2 scanned by udevd (9773) [ 234.559012][ T9910] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 234.696384][ T9899] ntfs: volume version 3.1. [ 234.743173][ T9899] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 234.807093][ T9899] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 235.524822][ T9927] loop1: detected capacity change from 0 to 4096 [ 235.549110][ T9927] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 235.773891][ T9927] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 235.951316][ T3460] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 235.972414][ T5790] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 235.981762][ T5790] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 235.997942][ T5790] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 236.008988][ T48] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 236.217413][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 236.296494][ T9921] loop2: detected capacity change from 0 to 32768 [ 236.303734][ T9926] loop3: detected capacity change from 0 to 32768 [ 236.335768][ T9921] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 236.372589][ T9921] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 236.414799][ T9926] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 236.414799][ T9926] [ 236.427939][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 236.485027][ T8] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 236.506506][ T9926] ERROR: (device loop3): remounting filesystem as read-only [ 236.539965][ T8] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 236.552047][ T9926] ialloc: diAlloc returned -5! [ 236.581414][ T8] usb 1-1: config 0 has no interface number 0 [ 236.599522][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 236.614450][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.668286][ T8] usb 1-1: Product: syz [ 236.677637][ T8] usb 1-1: Manufacturer: syz [ 236.687491][ T8] usb 1-1: SerialNumber: syz [ 236.706055][ T5796] ocfs2: Unmounting device (7,2) on (node local) [ 236.774705][ T8] usb 1-1: config 0 descriptor?? [ 236.787980][ T9947] loop1: detected capacity change from 0 to 256 [ 236.856986][ T8] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 236.871996][ T9951] loop2: detected capacity change from 0 to 256 [ 236.885442][ T8] usb 1-1: No valid video chain found. [ 236.898803][ T9947] FAT-fs (loop1): Directory bread(block 64) failed [ 236.906469][ T9947] FAT-fs (loop1): Directory bread(block 65) failed [ 236.957512][ T9947] FAT-fs (loop1): Directory bread(block 66) failed [ 236.981010][ T9947] FAT-fs (loop1): Directory bread(block 67) failed [ 237.025867][ T9951] FAT-fs (loop2): Directory bread(block 64) failed [ 237.033181][ T9951] FAT-fs (loop2): Directory bread(block 65) failed [ 237.037555][ T9947] FAT-fs (loop1): Directory bread(block 68) failed [ 237.057835][ T9947] FAT-fs (loop1): Directory bread(block 69) failed [ 237.063741][ T9951] FAT-fs (loop2): Directory bread(block 66) failed [ 237.064685][ T9947] FAT-fs (loop1): Directory bread(block 70) failed [ 237.116335][ T9951] FAT-fs (loop2): Directory bread(block 67) failed [ 237.121212][ T9947] FAT-fs (loop1): Directory bread(block 71) failed [ 237.126910][ T28] usb 1-1: USB disconnect, device number 5 [ 237.149251][ T9951] FAT-fs (loop2): Directory bread(block 68) failed [ 237.156325][ T9951] FAT-fs (loop2): Directory bread(block 69) failed [ 237.167179][ T9947] FAT-fs (loop1): Directory bread(block 72) failed [ 237.202912][ T9947] FAT-fs (loop1): Directory bread(block 73) failed [ 237.207639][ T9951] FAT-fs (loop2): Directory bread(block 70) failed [ 237.237347][ T9951] FAT-fs (loop2): Directory bread(block 71) failed [ 237.266445][ T9951] FAT-fs (loop2): Directory bread(block 72) failed [ 237.307354][ T9951] FAT-fs (loop2): Directory bread(block 73) failed [ 238.738595][ T9991] loop3: detected capacity change from 0 to 16 [ 238.883601][ T9991] erofs: (device loop3): mounted with root inode @ nid 36. [ 238.924746][ T9969] loop1: detected capacity change from 0 to 32768 [ 238.982906][ T9969] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 239.009466][ T9991] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 239.022841][ T9969] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 239.137186][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 239.723869][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 239.723887][ T27] audit: type=1326 audit(1760056420.327:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 239.795479][ T27] audit: type=1326 audit(1760056420.327:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 239.831524][ T27] audit: type=1326 audit(1760056420.337:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 239.902734][ T27] audit: type=1326 audit(1760056420.337:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 239.927507][ T5800] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.962848][ T27] audit: type=1326 audit(1760056420.337:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8258eec9 code=0x7ffc0000 [ 240.023240][T10026] netlink: 'syz.0.1856': attribute type 10 has an invalid length. [ 240.046701][T10026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1856'. [ 240.074503][T10026] ipvlan1: entered promiscuous mode [ 240.082079][T10026] ipvlan1: entered allmulticast mode [ 240.092815][T10026] veth0_vlan: entered allmulticast mode [ 240.103106][T10026] bridge0: port 3(ipvlan1) entered blocking state [ 240.127902][ T5800] usb 4-1: Using ep0 maxpacket: 16 [ 240.145859][T10026] bridge0: port 3(ipvlan1) entered disabled state [ 240.160121][T10026] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 240.179307][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.202228][ T5800] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.229885][ T5800] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.265946][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.276958][ T5800] usb 4-1: Product: syz [ 240.305194][ T5800] usb 4-1: Manufacturer: syz [ 240.329452][ T5800] usb 4-1: SerialNumber: syz [ 240.349217][T10026] syz.0.1856 (10026) used greatest stack depth: 20360 bytes left [ 240.403825][T10036] netlink: 'syz.2.1861': attribute type 21 has an invalid length. [ 240.441728][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 240.456109][T10038] loop1: detected capacity change from 0 to 1024 [ 240.516546][T10038] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 240.527782][T10038] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 240.538179][T10038] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1862: Failed to acquire dquot type 0 [ 240.561962][ T5800] usb 4-1: 0:2 : does not exist [ 240.572105][T10038] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 240.604237][T10038] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1862: corrupted inode contents [ 240.619832][ T5800] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 240.624481][T10038] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #13: comm syz.1.1862: mark_inode_dirty error [ 240.697739][ T5800] usb 4-1: USB disconnect, device number 11 [ 240.703451][T10038] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1862: corrupted inode contents [ 240.725512][T10046] loop2: detected capacity change from 0 to 256 [ 240.735977][T10046] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 240.750381][T10038] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.1862: mark_inode_dirty error [ 240.765711][T10038] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1862: corrupted inode contents [ 240.816732][T10038] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 240.849608][ T9773] udevd[9773]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.899605][T10038] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1862: corrupted inode contents [ 240.929311][T10038] EXT4-fs error (device loop1): ext4_truncate:4288: inode #13: comm syz.1.1862: mark_inode_dirty error [ 240.967140][T10038] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 240.969102][T10046] loop2: detected capacity change from 0 to 4096 [ 240.996710][T10046] ntfs: (device loop2): parse_options(): Unrecognized mount option r. [ 241.006245][T10046] ntfs: (device loop2): parse_options(): Unrecognized mount option shortname. [ 241.016577][T10046] ntfs: (device loop2): parse_options(): Unrecognized mount option uni_xlate. [ 241.029761][T10038] EXT4-fs (loop1): 1 truncate cleaned up [ 241.041926][T10038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.195683][T10038] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 241.287604][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.233065][T10074] loop2: detected capacity change from 0 to 256 [ 242.244216][T10058] loop0: detected capacity change from 0 to 32768 [ 242.286920][T10074] FAT-fs (loop2): Directory bread(block 64) failed [ 242.314749][T10074] FAT-fs (loop2): Directory bread(block 65) failed [ 242.337552][T10074] FAT-fs (loop2): Directory bread(block 66) failed [ 242.344397][T10074] FAT-fs (loop2): Directory bread(block 67) failed [ 242.351800][T10074] FAT-fs (loop2): Directory bread(block 68) failed [ 242.358718][T10074] FAT-fs (loop2): Directory bread(block 69) failed [ 242.365763][T10074] FAT-fs (loop2): Directory bread(block 70) failed [ 242.368111][T10058] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 242.372913][T10074] FAT-fs (loop2): Directory bread(block 71) failed [ 242.389435][T10074] FAT-fs (loop2): Directory bread(block 72) failed [ 242.397082][T10074] FAT-fs (loop2): Directory bread(block 73) failed [ 242.450388][T10058] ocfs2: Unmounting device (7,0) on (node local) [ 242.522453][T10080] mac80211_hwsim hwsim7 : renamed from wlan0 (while UP) [ 242.585749][T10064] loop3: detected capacity change from 0 to 32768 [ 243.407855][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 243.607470][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 243.619677][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 243.639495][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.657324][ T23] usb 1-1: Product: syz [ 243.682313][ T23] usb 1-1: Manufacturer: syz [ 243.712272][ T23] usb 1-1: SerialNumber: syz [ 243.733686][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 243.764224][T10084] loop1: detected capacity change from 0 to 32768 [ 243.812974][T10084] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 243.849957][T10088] loop2: detected capacity change from 0 to 32768 [ 243.884990][T10084] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 243.916783][T10088] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.997076][ T23] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 244.067964][T10110] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1891'. [ 244.094081][T10088] XFS (loop2): Ending clean mount [ 244.134265][T10088] XFS (loop2): Quotacheck needed: Please wait. [ 244.224792][ T8] usb 1-1: USB disconnect, device number 6 [ 244.239425][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 244.336794][T10088] XFS (loop2): Quotacheck: Done. [ 244.555060][ T5796] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 244.955497][T10116] loop0: detected capacity change from 0 to 256 [ 244.969910][T10112] loop3: detected capacity change from 0 to 32768 [ 244.991929][T10116] exfat: Deprecated parameter 'namecase' [ 245.057646][T10116] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 245.193409][T10118] netlink: 'syz.2.1894': attribute type 1 has an invalid length. [ 245.477408][T10114] loop1: detected capacity change from 0 to 32768 [ 245.491200][T10114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1892 (10114) [ 245.581112][T10114] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.616025][T10114] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 245.651057][T10114] BTRFS info (device loop1): using free space tree [ 245.843644][T10114] BTRFS info (device loop1): enabling ssd optimizations [ 245.867760][T10114] BTRFS info (device loop1): auto enabling async discard [ 245.927325][ T23] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 246.139861][ T23] usb 3-1: config 0 has an invalid interface number: 40 but max is 0 [ 246.157716][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.169473][ T23] usb 3-1: config 0 has no interface number 0 [ 246.176173][ T23] usb 3-1: New USB device found, idVendor=0403, idProduct=a951, bcdDevice=c0.f8 [ 246.188435][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.248776][ T23] usb 3-1: config 0 descriptor?? [ 246.263809][ T23] hub 3-1:0.40: bad descriptor, ignoring hub [ 246.298933][ T23] hub: probe of 3-1:0.40 failed with error -5 [ 246.306695][ T23] ftdi_sio 3-1:0.40: FTDI USB Serial Device converter detected [ 246.352645][ T23] ftdi_sio ttyUSB0: unknown device type: 0xc0f8 [ 246.592743][T10158] loop0: detected capacity change from 0 to 1024 [ 246.658110][ T23] usb 3-1: USB disconnect, device number 11 [ 246.674767][ T23] ftdi_sio 3-1:0.40: device disconnected [ 246.921723][ T11] hfsplus: b-tree write err: -5, ino 4 [ 246.965874][T10168] xt_connbytes: Forcing CT accounting to be enabled [ 247.104566][T10173] loop0: detected capacity change from 0 to 128 [ 247.133665][T10173] FAT-fs (loop0): Invalid FSINFO signature: 0x41075252, 0x80417272 (sector = 1) [ 247.192149][T10173] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00070003) [ 247.257801][T10173] FAT-fs (loop0): Filesystem has been set read-only [ 247.798374][T10197] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 248.184844][T10210] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 248.476699][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1939'. [ 248.552360][T10225] netlink: 'syz.3.1940': attribute type 2 has an invalid length. [ 248.593683][T10225] netlink: 5356 bytes leftover after parsing attributes in process `syz.3.1940'. [ 248.598784][T10221] loop2: detected capacity change from 0 to 8192 [ 248.632600][T10221] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.632671][T10221] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 248.632814][T10221] REISERFS (device loop2): using ordered data mode [ 248.632827][T10221] reiserfs: using flush barriers [ 248.656055][T10221] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.656637][T10221] REISERFS (device loop2): checking transaction log (loop2) [ 248.672322][T10221] REISERFS (device loop2): Using rupasov hash to sort names [ 248.672394][T10221] REISERFS (device loop2): using 3.5.x disk format [ 248.673595][T10221] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.673754][T10221] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.674503][T10221] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.674600][T10221] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 248.674642][T10221] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 248.756188][T10232] netlink: 'syz.1.1942': attribute type 3 has an invalid length. [ 248.784041][T10231] netlink: 'syz.3.1943': attribute type 3 has an invalid length. [ 248.803678][T10221] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.871771][T10232] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1942'. [ 248.881464][T10221] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.956503][T10221] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.533950][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 250.284183][T10275] SET target dimension over the limit! [ 250.320519][T10277] loop2: detected capacity change from 0 to 1024 [ 250.419459][T10277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.553423][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.574268][T10282] batadv1: entered promiscuous mode [ 250.675398][T10254] loop1: detected capacity change from 0 to 40427 [ 250.692964][T10254] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 250.747629][T10254] F2FS-fs (loop1): invalid crc value [ 250.768468][T10254] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.924029][T10254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.070983][T10254] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 251.472780][T10308] IPv6: Can't replace route, no match found [ 251.491361][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'. [ 251.521831][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'. [ 251.758340][T10318] capability: warning: `syz.3.1982' uses 32-bit capabilities (legacy support in use) [ 252.045299][T10323] loop1: detected capacity change from 0 to 8192 [ 252.093675][T10323] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.112229][T10323] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 252.126895][T10323] REISERFS (device loop1): using ordered data mode [ 252.135530][T10323] reiserfs: using flush barriers [ 252.142927][T10323] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.160692][T10323] REISERFS (device loop1): checking transaction log (loop1) [ 252.180463][T10323] REISERFS (device loop1): Using rupasov hash to sort names [ 252.210785][T10323] REISERFS (device loop1): using 3.5.x disk format [ 252.231058][T10323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 252.302658][T10323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 252.351021][T10336] netlink: 'syz.0.1988': attribute type 1 has an invalid length. [ 252.366866][T10336] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1988'. [ 252.377110][T10323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 252.421776][T10323] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 252.443104][T10323] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 252.495782][T10323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 252.534671][T10323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 252.553277][T10323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 253.072421][T10357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.463944][T10413] Invalid ELF header magic: != ELF [ 254.635014][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2026'. [ 254.980822][T10432] loop2: detected capacity change from 0 to 136 [ 255.050151][T10432] syz.2.2033: attempt to access beyond end of device [ 255.050151][T10432] loop2: rw=524288, sector=164, nr_sectors = 64 limit=136 [ 255.077472][T10432] syz.2.2033: attempt to access beyond end of device [ 255.077472][T10432] loop2: rw=524288, sector=228, nr_sectors = 128 limit=136 [ 255.110286][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 255.143794][T10432] syz.2.2033: attempt to access beyond end of device [ 255.143794][T10432] loop2: rw=0, sector=164, nr_sectors = 8 limit=136 [ 255.196346][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 255.196363][ T27] audit: type=1800 audit(1760056435.807:73): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2033" name="file0" dev="loop2" ino=1542 res=0 errno=0 [ 255.347326][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 255.363988][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 255.387813][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.408060][ T8] usb 1-1: Product: syz [ 255.412355][ T8] usb 1-1: Manufacturer: syz [ 255.417094][ T8] usb 1-1: SerialNumber: syz [ 255.442438][ T8] usb 1-1: config 0 descriptor?? [ 255.469867][ T8] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 255.708265][ T5847] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 255.885807][ T8] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 255.897469][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 255.909299][ T5847] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 255.921173][ T5847] usb 2-1: config 0 has no interface number 0 [ 255.927510][ T8] visor: probe of 1-1:0.0 failed with error -71 [ 255.931608][ T5847] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 255.977622][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.984186][ T8] usb 1-1: USB disconnect, device number 7 [ 256.000217][ T5847] usb 2-1: Product: syz [ 256.004703][ T5847] usb 2-1: Manufacturer: syz [ 256.020944][ T5847] usb 2-1: SerialNumber: syz [ 256.051279][ T5847] usb 2-1: config 0 descriptor?? [ 256.241884][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.248702][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.305507][ T5847] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v134 fw v24.0.0 (2 channels) [ 256.332005][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2051'. [ 256.508449][ T5847] peak_usb 2-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 256.517103][ T5847] peak_usb 2-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 256.619071][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2055'. [ 256.658445][ T5847] peak_usb: probe of 2-1:0.56 failed with error -71 [ 256.694975][ T5847] usb 2-1: USB disconnect, device number 5 [ 256.812527][T10484] loop0: detected capacity change from 0 to 512 [ 256.839704][T10484] EXT4-fs: Ignoring removed orlov option [ 256.875961][T10484] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 256.891884][T10486] loop3: detected capacity change from 0 to 256 [ 256.959390][T10484] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.2059: corrupted in-inode xattr: e_value size too large [ 256.989222][T10484] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2059: couldn't read orphan inode 15 (err -117) [ 257.054317][T10486] FAT-fs (loop3): Directory bread(block 64) failed [ 257.073814][T10484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.097350][T10486] FAT-fs (loop3): Directory bread(block 65) failed [ 257.183649][T10486] FAT-fs (loop3): Directory bread(block 66) failed [ 257.218481][T10486] FAT-fs (loop3): Directory bread(block 67) failed [ 257.225218][T10486] FAT-fs (loop3): Directory bread(block 68) failed [ 257.265343][T10486] FAT-fs (loop3): Directory bread(block 69) failed [ 257.290011][T10486] FAT-fs (loop3): Directory bread(block 70) failed [ 257.296959][T10486] FAT-fs (loop3): Directory bread(block 71) failed [ 257.330627][T10486] FAT-fs (loop3): Directory bread(block 72) failed [ 257.335636][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.347369][T10486] FAT-fs (loop3): Directory bread(block 73) failed [ 257.491553][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2065'. [ 258.164583][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 258.278151][T10530] loop3: detected capacity change from 0 to 256 [ 258.307964][T10530] exfat: Deprecated parameter 'utf8' [ 258.373776][T10530] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 258.437508][ T5800] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.653140][ T5800] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 258.672466][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.705223][ T5800] usb 2-1: config 0 descriptor?? [ 259.176340][ T5800] ath6kl: Failed to submit usb control message: -71 [ 259.199493][ T5800] ath6kl: unable to send the bmi data to the device: -71 [ 259.218090][ T5800] ath6kl: Unable to send get target info: -71 [ 259.231425][T10556] loop0: detected capacity change from 0 to 2048 [ 259.238808][ T5800] ath6kl: Failed to init ath6kl core: -71 [ 259.265673][ T5800] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 259.318043][ T5800] usb 2-1: USB disconnect, device number 6 [ 259.441113][ T5106] Bluetooth: hci1: Malformed HCI Event [ 260.140964][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 260.168198][T10584] netlink: ct family unspecified [ 260.173551][T10584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.030731][T10617] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 261.262905][T10623] loop1: detected capacity change from 0 to 512 [ 261.289251][T10623] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.852949][T10641] loop2: detected capacity change from 0 to 764 [ 261.873006][T10642] nfs: Unexpected value for 'lock' [ 261.902174][T10641] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 261.942312][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 261.958533][T10641] Symlink component flag not implemented [ 261.975705][T10641] Symlink component flag not implemented (7) [ 262.315371][T10654] loop1: detected capacity change from 0 to 256 [ 262.820919][T10660] loop3: detected capacity change from 0 to 4096 [ 262.843642][T10660] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 263.067416][ T5800] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 263.275578][ T5800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 263.309804][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2151'. [ 263.319510][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.357664][T10676] program syz.0.2153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.360542][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2151'. [ 263.379037][ T5800] usb 3-1: Product: syz [ 263.387560][ T5800] usb 3-1: Manufacturer: syz [ 263.392445][ T5800] usb 3-1: SerialNumber: syz [ 263.432910][ T5800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 263.496570][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.012638][T10690] loop1: detected capacity change from 0 to 4096 [ 264.031770][ T5782] usb 3-1: USB disconnect, device number 12 [ 264.048859][T10690] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 264.158995][T10690] ntfs3: loop1: failed to convert "c46c" to cp857 [ 264.567304][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 264.575432][ T8] ath9k_htc: Failed to initialize the device [ 264.620226][ T5782] usb 3-1: ath9k_htc: USB layer deinitialized [ 264.777967][T10708] loop1: detected capacity change from 0 to 4096 [ 264.800297][T10708] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 264.868609][T10708] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 264.917632][T10708] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 264.961401][T10708] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 264.989997][T10708] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 265.018849][T10716] loop0: detected capacity change from 0 to 2364 [ 265.021417][T10708] ntfs: volume version 3.1. [ 265.046847][T10718] loop2: detected capacity change from 0 to 1024 [ 265.082048][T10708] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 265.125192][T10708] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 265.171216][T10708] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 265.222688][T10708] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 265.270094][T10708] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 265.919716][T10732] loop3: detected capacity change from 0 to 4096 [ 265.938490][T10732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.000771][T10732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.026341][T10738] loop0: detected capacity change from 0 to 512 [ 266.054590][T10732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.074645][T10743] netlink: 460 bytes leftover after parsing attributes in process `syz.1.2185'. [ 266.085229][T10738] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 266.086184][T10732] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 266.133525][T10738] EXT4-fs (loop0): orphan cleanup on readonly fs [ 266.141882][T10738] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.2183: Failed to acquire dquot type 1 [ 266.156580][T10738] EXT4-fs (loop0): Remounting filesystem read-only [ 266.164837][T10738] EXT4-fs (loop0): 1 truncate cleaned up [ 266.170585][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.187729][T10738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 266.388467][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.561107][T10754] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2190'. [ 267.182131][T10776] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2200'. [ 267.196404][T10776] bond_slave_0: entered promiscuous mode [ 267.203145][T10776] bond_slave_1: entered promiscuous mode [ 267.307414][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'. [ 267.555026][T10760] loop1: detected capacity change from 0 to 32768 [ 267.619931][T10760] read_mapping_page failed! [ 267.625523][T10760] ERROR: (device loop1): txCommit: [ 267.625523][T10760] [ 268.030481][T10798] loop0: detected capacity change from 0 to 512 [ 268.044795][T10796] loop1: detected capacity change from 0 to 4096 [ 268.065523][T10798] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 268.175019][T10798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.208729][T10798] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.222821][T10796] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 268.419627][T10806] netlink: 'syz.2.2213': attribute type 21 has an invalid length. [ 268.451907][ T5790] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 268.458051][T10806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2213'. [ 268.494322][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.082268][T10825] loop3: detected capacity change from 0 to 4096 [ 269.703474][T10842] loop0: detected capacity change from 0 to 8 [ 269.721012][T10846] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 269.784941][T10842] SQUASHFS error: xz decompression failed, data probably corrupt [ 269.797595][T10842] SQUASHFS error: Failed to read block 0x108: -5 [ 269.830599][T10842] SQUASHFS error: Unable to read metadata cache entry [106] [ 269.857372][T10842] SQUASHFS error: Unable to read inode 0x11f [ 270.152981][T10831] loop1: detected capacity change from 0 to 32768 [ 270.247978][ T5800] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 270.324034][T10858] loop3: detected capacity change from 0 to 764 [ 270.451789][ T5800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.473954][ T5800] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 270.508885][ T5800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 270.543268][ T5800] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 270.595623][ T5800] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 270.621656][ T5800] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 270.662270][ T5800] usb 1-1: Manufacturer: syz [ 270.692940][ T5800] usb 1-1: config 0 descriptor?? [ 270.702862][T10842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.752550][ T5800] smsusb:smsusb_probe: board id=9, interface number 0 [ 270.786196][ T5800] smsusb:siano_media_device_register: media controller created [ 270.809134][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.817140][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.824759][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.832418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.842245][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.849902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.857260][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.865116][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.873071][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.881162][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.888765][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.896088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.904680][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.912125][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.919723][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.927307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.935176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.942537][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.949959][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.957309][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.969210][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.977314][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.984749][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.992051][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 270.999786][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.007322][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.014664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.022195][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.034359][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.041833][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.049532][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.057437][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.065138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.072649][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.080003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.089013][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.096511][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.104559][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.111975][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.120279][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.128451][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.136138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.143662][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.152700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.160310][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.167859][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.175377][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.183600][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.191390][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.198998][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.206653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.214127][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.222140][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.229960][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.239035][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.246838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.254470][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.261921][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.269907][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.277807][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.286300][ T5800] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 271.297195][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.297303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.297391][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.297484][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.328173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.335792][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.343330][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.350766][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.358115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.365422][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.372902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.380357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.389779][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.397901][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.405624][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.413037][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.420446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.427952][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.435290][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.442628][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.450308][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.459352][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.467081][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.475124][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.483867][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.491357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.499031][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.507097][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.514682][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.522264][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.531760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.539338][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.546834][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.554801][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.562524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.569971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.577484][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.584974][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.592627][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.602737][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.610100][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.617780][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.625119][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.633028][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.640926][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.648528][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.656120][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.663514][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.671533][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.699221][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.706685][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.714427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.722217][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.729755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.737246][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.744574][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.752156][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.760478][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.777497][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.784964][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.792747][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.800286][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.807971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.815286][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.822700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.830129][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.848303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.857482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.864924][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.872687][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.880127][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.887657][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.895251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.902655][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.910652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.918561][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.927559][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.935279][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.942995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.950630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.957981][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.965236][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.972546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.980537][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.988145][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 271.997420][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.005064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.012594][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.020101][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.027628][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.035164][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.042683][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.050753][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.067535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.075075][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.082532][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.090052][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.097837][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.105263][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.113133][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.128095][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.137477][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.144856][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.152298][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.160086][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.168235][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.175668][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.183536][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.191238][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.199721][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.207474][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.215157][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.222782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.231268][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.238994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.246569][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.253943][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.262580][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.269952][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.278347][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.286011][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.294489][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.302964][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.310621][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.324475][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.337686][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.345078][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.352412][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.359842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.367554][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.375342][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.382763][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.390843][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.407525][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.415055][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.423175][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.430782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.438610][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.446196][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.453721][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.461248][ T5800] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 272.468948][ T5800] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 272.475318][T10887] loop2: detected capacity change from 0 to 2048 [ 272.476861][ T5800] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 272.507487][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.515927][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.523686][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.537500][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.547546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.554906][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.562231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.569731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.577658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.586071][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.593401][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.601013][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.617606][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.625285][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.632756][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.640357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.648125][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.655584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.662994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.670289][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.677984][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.685670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.694515][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.701996][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.709598][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.717272][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.727952][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 272.730417][T10887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.738303][ T5834] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 272.758546][ T5834] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 272.767963][ T5834] CPU: 0 PID: 5834 Comm: kworker/0:4 Not tainted syzkaller #0 [ 272.775728][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.786395][ T5834] Workqueue: do_submit_urb (rcu_gp) [ 272.791766][ T5834] RIP: 0010:process_scheduled_works+0x5aa/0x15b0 [ 272.798514][ T5834] Code: 89 ac 24 10 01 00 00 44 89 e8 c1 e8 05 83 e0 0f 89 03 48 8b 44 24 38 48 8d 58 08 48 89 d8 48 c1 e8 03 48 89 84 24 80 00 00 00 <42> 80 3c 20 00 74 08 48 89 df e8 87 20 85 00 48 89 5c 24 48 4c 8b [ 272.818772][ T5834] RSP: 0018:ffffc900046ffbc0 EFLAGS: 00010002 [ 272.825308][ T5834] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000001fffffffc0 [ 272.833305][ T5834] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 272.841660][ T5834] RBP: ffffc900046ffda8 R08: ffffffff970be013 R09: 1ffffffff2e17c02 [ 272.849935][ T5834] R10: dffffc0000000000 R11: fffffbfff2e17c03 R12: dffffc0000000000 [ 272.858108][ T5834] R13: 0000001fffffffc0 R14: ffff8880268ca7b0 R15: ffff888024883d18 [ 272.866473][ T5834] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 272.876302][ T5834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.883596][ T5834] CR2: 0000555574725808 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 272.891793][ T5834] Call Trace: [ 272.895438][ T5834] [ 272.898696][ T5834] ? assign_work+0x400/0x400 [ 272.903418][ T5834] ? assign_work+0x39e/0x400 [ 272.908150][ T5834] worker_thread+0xa55/0xfc0 [ 272.912785][ T5834] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 272.919243][ T5834] ? _raw_spin_unlock+0x40/0x40 [ 272.924112][ T5834] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 272.930260][ T5834] kthread+0x2fa/0x390 [ 272.934382][ T5834] ? pr_cont_work+0x560/0x560 [ 272.939118][ T5834] ? kthread_blkcg+0xd0/0xd0 [ 272.943820][ T5834] ret_from_fork+0x48/0x80 [ 272.948259][ T5834] ? kthread_blkcg+0xd0/0xd0 [ 272.953217][ T5834] ret_from_fork_asm+0x11/0x20 [ 272.958208][ T5834] [ 272.961243][ T5834] Modules linked in: [ 272.965260][ T5834] ---[ end trace 0000000000000000 ]--- [ 272.971204][ T5834] RIP: 0010:process_scheduled_works+0x5aa/0x15b0 [ 272.977571][ T5834] Code: 89 ac 24 10 01 00 00 44 89 e8 c1 e8 05 83 e0 0f 89 03 48 8b 44 24 38 48 8d 58 08 48 89 d8 48 c1 e8 03 48 89 84 24 80 00 00 00 <42> 80 3c 20 00 74 08 48 89 df e8 87 20 85 00 48 89 5c 24 48 4c 8b [ 272.998079][ T5834] RSP: 0018:ffffc900046ffbc0 EFLAGS: 00010002 [ 273.004156][ T5834] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000001fffffffc0 [ 273.012178][ T5834] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 273.020517][ T5834] RBP: ffffc900046ffda8 R08: ffffffff970be013 R09: 1ffffffff2e17c02 [ 273.028778][ T5834] R10: dffffc0000000000 R11: fffffbfff2e17c03 R12: dffffc0000000000 [ 273.036852][ T5834] R13: 0000001fffffffc0 R14: ffff8880268ca7b0 R15: ffff888024883d18 [ 273.044842][ T5834] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 273.053975][ T5834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.060966][ T5834] CR2: 0000555574725808 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 273.068973][ T5834] Kernel panic - not syncing: Fatal exception [ 274.237319][ T5834] Shutting down cpus with NMI [ 274.243023][ T5834] Kernel Offset: disabled [ 274.247371][ T5834] Rebooting in 86400 seconds..