last executing test programs: 3.902435817s ago: executing program 3 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x25dfdbfb, {0x2, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x89O'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.722238061s ago: executing program 3 (id=1595): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") rmdir(&(0x7f0000000280)='./file2\x00') 3.367054816s ago: executing program 3 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 3.135025346s ago: executing program 3 (id=1604): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf1, &(0x7f0000000240), &(0x7f00000003c0)=0x4) 2.990440015s ago: executing program 2 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800600180004080000040012000500160002"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.972598477s ago: executing program 3 (id=1608): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7d, 0x2f, 0x0, @empty, @private}}}}) 2.860283452s ago: executing program 2 (id=1609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0xb) 2.830272895s ago: executing program 1 (id=1611): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x1, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x55595659}) 2.772649063s ago: executing program 3 (id=1612): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 2.722735619s ago: executing program 2 (id=1613): r0 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0xa00000, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) 2.63966091s ago: executing program 1 (id=1615): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) 2.549170301s ago: executing program 2 (id=1617): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 2.496960598s ago: executing program 1 (id=1618): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045009, &(0x7f0000000040)) 2.343566118s ago: executing program 2 (id=1620): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6205, &(0x7f0000000080)="$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") creat(&(0x7f0000000580)='./file1\x00', 0x0) 2.272623547s ago: executing program 1 (id=1622): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x5, 0x679, 0x100000000004b, 0x40ff, 0xfffffffffffffffd, 0x400152de645, 0x5, 0xfffffffe}) 2.087670701s ago: executing program 1 (id=1624): syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x81, 0x1144, &(0x7f0000000180)="$eJzs2L1rFE8YB/Dv7F1+yeUnrMR+sUwhIRBsfSkUrrVVLAyp7JJKCZh/xM7Gzj9EUtmHVBZqkV5Yye69cMEX0OMQ/HyafWbmmWdnymcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl4bJ55LcqJKt6VyVpCRNczo+T9IkeX07yfX3g2yUPDoYHz043Ht4NEmtUh4n5TJMeXunr7G3tddOrL14+TwbyWG38Oz/kiZnF8nTpV1ifRYN1n+cVXW3TTLqx+NqaQcAAACAv1r7x+qUWbXRQu3BLPqYvLu2kNDWy/o/AAAA8CureGMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Jm2nsfbB5OgSlKSpjkdnydpktRX9q31n82VHRQAAAD4bSVVnlxt7vv2v3sG6F1Gt/KhLuvTUdu7W2U3b+qMurRhFnZM9Gv52rbfWQQAAIB/UNs12LmZcjJvk8t/5WTaj29nOJ/vMofZ2enHO5MG/Mv9fNpMNnYXa4/upX2VHO+fXRzvl3YwWNmtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjGDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqgAAAP//zsHphg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2.053291385s ago: executing program 0 (id=1625): ioperm(0x0, 0x13, 0xf9f0) migrate_pages(0xffffffffffffffff, 0x9, 0x0, 0x0) 1.93636342s ago: executing program 0 (id=1626): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='comm\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 1.819955536s ago: executing program 0 (id=1627): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) 1.644679448s ago: executing program 0 (id=1628): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, 0x0) 1.233864401s ago: executing program 2 (id=1629): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000340)=""/14) 633.883338ms ago: executing program 0 (id=1630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) 199.552324ms ago: executing program 1 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), 0x10) 0s ago: executing program 0 (id=1632): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@local, 0x10, 0x0, 0x10}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 51295][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 87.288090][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.309499][ T5733] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 87.323543][ T5733] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 87.351140][ T5733] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 87.376396][ T5733] usb 4-1: config 128 has no interface number 0 [ 87.397519][ T5733] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 87.444758][ T5733] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.470862][ T5733] usb 4-1: config 128 interface 127 has no altsetting 0 [ 87.481803][ T5733] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 87.497543][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.506312][ T6318] tmpfs: Bad value for 'mpol' [ 87.521021][ T5733] usb 4-1: Product: syz [ 87.526904][ T5733] usb 4-1: Manufacturer: syz [ 87.545652][ T5733] usb 4-1: SerialNumber: syz [ 87.823571][ T6328] loop2: detected capacity change from 0 to 64 [ 88.007882][ T5733] usb 4-1: USB disconnect, device number 3 [ 88.101175][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.400616][ T6342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.219'. [ 88.669520][ T6331] loop0: detected capacity change from 0 to 32768 [ 88.770621][ T28] audit: type=1326 audit(1768668984.203:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 88.872354][ T28] audit: type=1326 audit(1768668984.243:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 88.946188][ T6355] loop3: detected capacity change from 0 to 4096 [ 88.977729][ T28] audit: type=1326 audit(1768668984.253:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 89.010994][ T6355] ntfs3: loop3: ino=3, Correct links count -> 2. [ 89.045822][ T28] audit: type=1326 audit(1768668984.253:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 89.527553][ T6373] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.560069][ T6373] No such timeout policy "syz0" [ 90.021477][ T6363] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.325629][ T6401] loop0: detected capacity change from 0 to 128 [ 90.390494][ T5759] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.943815][ T6425] trusted_key: encrypted_key: master key parameter is missing [ 91.307370][ T5770] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.381736][ T6445] netlink: 'syz.0.271': attribute type 2 has an invalid length. [ 91.389596][ T6445] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.271'. [ 91.537885][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 91.556375][ T6451] netlink: 148 bytes leftover after parsing attributes in process `syz.1.273'. [ 91.591135][ T6451] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 91.863004][ T6433] loop2: detected capacity change from 0 to 32768 [ 91.911634][ T6433] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.264 (6433) [ 91.955849][ T6433] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.997446][ T6433] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.009928][ T6433] BTRFS info (device loop2): enabling auto defrag [ 92.018339][ T6433] BTRFS info (device loop2): turning on sync discard [ 92.031294][ T6433] BTRFS info (device loop2): force clearing of disk cache [ 92.050152][ T6433] BTRFS info (device loop2): using default commit interval 30s [ 92.058403][ T6433] BTRFS info (device loop2): max_inline at 0 [ 92.065859][ T6433] BTRFS info (device loop2): disabling free space tree [ 92.081327][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 92.151032][ T6475] loop0: detected capacity change from 0 to 1764 [ 92.223331][ T6484] netlink: 224 bytes leftover after parsing attributes in process `syz.3.283'. [ 92.245401][ T6433] BTRFS info (device loop2): enabling ssd optimizations [ 92.283521][ T6433] BTRFS info (device loop2): rebuilding free space tree [ 92.361324][ T6433] BTRFS info (device loop2): disabling free space tree [ 92.393733][ T6433] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.445534][ T6433] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.487434][ T6495] netlink: 5 bytes leftover after parsing attributes in process `syz.1.287'. [ 92.529682][ T6495] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 92.618131][ T6495] 0ªî{X¹¦: entered allmulticast mode [ 92.652280][ T6495] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 92.835322][ T5765] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.040889][ T5851] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.290609][ T5851] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 93.312806][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.338041][ T5851] usb 1-1: config 0 descriptor?? [ 93.378666][ T6522] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 93.420968][ T6522] [U] J"—e:ÀÆ" [ 93.574845][ T5851] snd-usb-hiface: probe of 1-1:0.0 failed with error -22 [ 93.798943][ T5851] usb 1-1: USB disconnect, device number 2 [ 93.800570][ T6538] : renamed from bond_slave_0 (while UP) [ 93.882926][ T6542] loop2: detected capacity change from 0 to 256 [ 93.998590][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 94.008440][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 94.068737][ T6542] FAT-fs (loop2): Directory bread(block 64) failed [ 94.080355][ T6542] FAT-fs (loop2): Directory bread(block 65) failed [ 94.088774][ T6542] FAT-fs (loop2): Directory bread(block 66) failed [ 94.103349][ T6542] FAT-fs (loop2): Directory bread(block 67) failed [ 94.113367][ T6542] FAT-fs (loop2): Directory bread(block 68) failed [ 94.120048][ T6542] FAT-fs (loop2): Directory bread(block 69) failed [ 94.129802][ T6542] FAT-fs (loop2): Directory bread(block 70) failed [ 94.139947][ T6542] FAT-fs (loop2): Directory bread(block 71) failed [ 94.152785][ T6542] FAT-fs (loop2): Directory bread(block 72) failed [ 94.159905][ T6542] FAT-fs (loop2): Directory bread(block 73) failed [ 94.570919][ T789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.575017][ T6564] xt_cgroup: invalid path, errno=-2 [ 94.705270][ T6569] loop1: detected capacity change from 0 to 1024 [ 94.751533][ T6569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 94.794467][ T789] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 94.824330][ T789] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 94.882583][ T789] usb 4-1: Product: syz [ 94.887046][ T789] usb 4-1: Manufacturer: syz [ 94.901195][ T789] usb 4-1: SerialNumber: syz [ 94.913821][ T789] usb 4-1: config 0 descriptor?? [ 94.929049][ T6577] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 94.947394][ T789] ch341 4-1:0.0: ch341-uart converter detected [ 94.949938][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 95.346207][ T6593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.363471][ T789] usb 4-1: failed to send control message: -71 [ 95.370163][ T789] ch341-uart: probe of ttyUSB0 failed with error -71 [ 95.411255][ T789] usb 4-1: USB disconnect, device number 4 [ 95.423701][ T789] ch341 4-1:0.0: device disconnected [ 95.675253][ T6603] loop0: detected capacity change from 0 to 512 [ 95.705160][ T6603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.758826][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.813634][ T6603] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.861982][ T6603] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:335: inode #15: comm syz.0.337: verity file corrupted; can't find descriptor [ 95.907383][ T6603] EXT4-fs (loop0): Remounting filesystem read-only [ 95.920506][ T6603] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 96.031595][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.046659][ T6617] loop1: detected capacity change from 0 to 1024 [ 96.374116][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 96.430179][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.348'. [ 96.748402][ T6641] mmap: syz.0.354 (6641): VmData 47947776 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 97.020641][ T6625] loop3: detected capacity change from 0 to 32768 [ 97.133720][ T6625] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 97.215031][ T6625] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.379774][ T6663] tmpfs: Bad value for 'nr_inodes' [ 97.412211][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 97.545707][ T6664] loop1: detected capacity change from 0 to 4096 [ 97.580765][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.590176][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.605082][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.615993][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.622833][ T6664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.627438][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.648116][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.658863][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.669731][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.678782][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.687906][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.929583][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.214654][ T6688] loop0: detected capacity change from 0 to 256 [ 98.307835][ T6688] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 99.346321][ T6724] netlink: 'syz.0.395': attribute type 24 has an invalid length. [ 99.603046][ T6704] loop2: detected capacity change from 0 to 40427 [ 99.722776][ T6728] loop3: detected capacity change from 0 to 2048 [ 99.824730][ T6722] syz.1.394 (6722): drop_caches: 2 [ 99.833395][ T6704] F2FS-fs (loop2): Image doesn't support compression [ 99.840554][ T6704] F2FS-fs (loop2): heap/no_heap options were deprecated [ 99.858385][ T6704] F2FS-fs (loop2): invalid crc value [ 99.884777][ T6728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.897257][ T6704] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.060903][ T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.060930][ T6704] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.135686][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.255313][ T789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.274504][ T789] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 100.293999][ T789] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 100.305556][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.318908][ T789] usb 1-1: config 0 descriptor?? [ 100.486331][ T6741] loop1: detected capacity change from 0 to 32768 [ 100.538868][ T6741] JBD2: Ignoring recovery information on journal [ 100.735173][ T6741] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.757599][ T789] Bluetooth: Can't get version to change to load ram patch err [ 100.787726][ T789] Bluetooth: Loading patch file failed [ 100.806439][ T789] ath3k: probe of 1-1:0.0 failed with error -71 [ 100.837402][ T789] usb 1-1: USB disconnect, device number 3 [ 101.044992][ T6756] unsupported nla_type 40 [ 101.063324][ T6741] syz.1.401 (6741) used greatest stack depth: 18736 bytes left [ 101.071059][ T6758] @0Ù: renamed from bond_slave_1 (while UP) [ 101.119473][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 101.426868][ T6766] loop3: detected capacity change from 0 to 512 [ 101.468943][ T6766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.410: missing EA_INODE flag [ 101.474498][ T6763] loop1: detected capacity change from 0 to 4096 [ 101.525455][ T6763] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 101.539079][ T6766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.410: error while reading EA inode 11 err=-117 [ 101.616866][ T6766] EXT4-fs (loop3): 1 orphan inode deleted [ 101.638928][ T6766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.653087][ T6763] ntfs3: loop1: Inode r=19 is not in use! [ 101.659055][ T6763] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 101.789122][ T6778] loop0: detected capacity change from 0 to 512 [ 101.845604][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.884270][ T6778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.886960][ T28] audit: type=1326 audit(1768668997.333:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 101.942338][ T6778] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.958069][ T28] audit: type=1326 audit(1768668997.353:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 102.048754][ T28] audit: type=1326 audit(1768668997.353:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 102.150899][ T28] audit: type=1326 audit(1768668997.353:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163939acb9 code=0x7ffc0000 [ 102.208993][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.716607][ T6808] __nla_validate_parse: 47 callbacks suppressed [ 102.716625][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 102.757590][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 103.216649][ T6803] loop3: detected capacity change from 0 to 32768 [ 103.242700][ T6803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.427 (6803) [ 103.285249][ T6803] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.307083][ T6818] loop0: detected capacity change from 0 to 4096 [ 103.317346][ T6803] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 103.329150][ T6818] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 103.339645][ T6803] BTRFS info (device loop3): using free space tree [ 103.412811][ T6812] loop2: detected capacity change from 0 to 32768 [ 103.455455][ T6812] (syz.2.432,6812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.494289][ T6812] (syz.2.432,6812,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.510097][ T6803] BTRFS info (device loop3): enabling ssd optimizations [ 103.544165][ T6803] BTRFS info (device loop3): auto enabling async discard [ 103.623005][ T6812] (syz.2.432,6812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 103.680023][ T6812] JBD2: Ignoring recovery information on journal [ 103.831968][ T6814] loop1: detected capacity change from 0 to 32768 [ 103.888419][ T6812] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.890271][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.009841][ T6814] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.328560][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 104.455466][ T6814] XFS (loop1): Ending clean mount [ 104.530711][ T6814] XFS (loop1): Quotacheck needed: Please wait. [ 104.741015][ T6814] XFS (loop1): Quotacheck: Done. [ 104.855923][ T6866] capability: warning: `syz.0.445' uses deprecated v2 capabilities in a way that may be insecure [ 104.984393][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.575865][ T6862] loop3: detected capacity change from 0 to 32768 [ 105.659258][ T6862] JBD2: Ignoring recovery information on journal [ 105.690775][ T6891] loop1: detected capacity change from 0 to 256 [ 105.740364][ T6862] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 106.118747][ T6904] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.461'. [ 106.219481][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 106.746957][ T6902] loop1: detected capacity change from 0 to 32768 [ 106.775876][ T6902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.460 (6902) [ 106.816351][ T6902] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.840965][ T6902] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 106.841349][ T6918] loop3: detected capacity change from 0 to 4096 [ 106.858719][ T6902] BTRFS info (device loop1): using free space tree [ 106.943070][ T6918] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 107.003775][ T6902] BTRFS info (device loop1): enabling ssd optimizations [ 107.011835][ T6902] BTRFS info (device loop1): auto enabling async discard [ 107.146303][ T6918] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 107.275741][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.375623][ T6982] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 6982 comm: syz.1.487) [ 108.397975][ T28] audit: type=1800 audit(1768669003.843:24): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.487" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=11431 res=0 errno=0 [ 108.427626][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 108.525683][ T6988] vlan0: entered promiscuous mode [ 108.780669][ T6996] netlink: 'syz.1.494': attribute type 9 has an invalid length. [ 108.813649][ T6996] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.494'. [ 109.210959][ T7004] loop3: detected capacity change from 0 to 4096 [ 109.230597][ T7004] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 109.278482][ T7004] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 109.307606][ T7004] ntfs: (device loop3): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 109.319437][ T7007] loop1: detected capacity change from 0 to 4096 [ 109.347974][ T7004] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 109.358280][ T7007] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.365324][ T7004] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 109.365395][ T7004] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 109.402767][ T6990] loop2: detected capacity change from 0 to 32768 [ 109.434994][ T7004] ntfs: volume version 3.1. [ 109.480738][ T7004] ntfs: (device loop3): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB. [ 109.512168][ T7004] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 109.588886][ T6990] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.603799][ T7004] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 109.962687][ T6990] XFS (loop2): Ending clean mount [ 109.984285][ T7026] loop0: detected capacity change from 0 to 512 [ 110.098293][ T7026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.181096][ T7026] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.218175][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.339770][ T7026] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.505: invalid size [ 110.543846][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.571258][ T7044] loop1: detected capacity change from 0 to 16 [ 110.620419][ T7044] erofs: (device loop1): mounted with root inode @ nid 36. [ 110.693176][ T7046] loop2: detected capacity change from 0 to 512 [ 110.724025][ T7044] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 110.769841][ T7044] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 110.833843][ T7046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.511: bg 0: block 393: padding at end of block bitmap is not set [ 110.854126][ T7044] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 110.864650][ T7044] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 110.875134][ T7044] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 110.884417][ T7046] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 110.912886][ T7046] EXT4-fs (loop2): 2 truncates cleaned up [ 110.932908][ T7046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.946514][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 111.080368][ T7059] netlink: 'syz.1.518': attribute type 21 has an invalid length. [ 111.128032][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.738426][ T7076] loop0: detected capacity change from 0 to 4096 [ 111.782511][ T7076] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 111.812077][ T7087] loop2: detected capacity change from 0 to 1024 [ 111.859028][ T7076] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 111.928088][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 111.932015][ T7087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.937142][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 112.159021][ T7087] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #11: comm syz.2.533: directory missing '.' [ 112.319455][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.334083][ T7103] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 112.405325][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 112.566980][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 113.082662][ T7131] loop0: detected capacity change from 0 to 4096 [ 113.117715][ T7131] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 113.167992][ T7131] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 113.193433][ T7135] loop3: detected capacity change from 0 to 4096 [ 113.329575][ T7135] ntfs: volume version 3.1. [ 113.488089][ T7147] exfat: Deprecated parameter 'utf8' [ 113.587923][ T7147] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 113.733313][ T7147] overlay: filesystem on ./file0 not supported [ 114.182702][ T62] hfsplus: b-tree write err: -5, ino 4 [ 114.351489][ T5814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.405306][ T7176] geneve2: entered allmulticast mode [ 114.503644][ T7178] set_capacity_and_notify: 2 callbacks suppressed [ 114.503661][ T7178] loop3: detected capacity change from 0 to 4096 [ 114.526975][ T7178] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 114.551982][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 114.569662][ T5814] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.590855][ T5814] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.634247][ T5814] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.657423][ T7178] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 114.673323][ T7178] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 114.685192][ T5814] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 114.691624][ T7183] netlink: 2 bytes leftover after parsing attributes in process `syz.2.578'. [ 114.703194][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 114.703219][ T5814] usb 1-1: Product: syz [ 114.703234][ T5814] usb 1-1: Manufacturer: syz [ 114.703267][ T5814] usb 1-1: SerialNumber: syz [ 114.729915][ T5814] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 114.964314][ T42] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 114.991665][ T5766] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 115.013077][ T5766] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 115.033275][ T5766] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 115.046429][ T42] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 115.068121][ T5733] usb 1-1: USB disconnect, device number 4 [ 115.161636][ T5733] appletouch 1-1:1.0: input: appletouch disconnected [ 115.218450][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 115.456219][ T7203] loop3: detected capacity change from 0 to 128 [ 115.520335][ T7203] affs: No valid root block on device loop3 [ 115.791567][ T7217] netlink: 256 bytes leftover after parsing attributes in process `syz.1.594'. [ 116.164561][ T7233] loop3: detected capacity change from 0 to 512 [ 116.237795][ T7233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.266897][ T7233] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.438015][ T7227] loop1: detected capacity change from 0 to 32768 [ 116.547887][ T7227] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 116.606285][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.778595][ T5764] (syz-executor,5764,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 116.895562][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 118.375752][ T7297] loop1: detected capacity change from 0 to 64 [ 118.415468][ T7281] loop2: detected capacity change from 0 to 32768 [ 118.451275][ T7281] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.622 (7281) [ 118.514069][ T7281] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 118.548065][ T7281] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 118.564710][ T7281] BTRFS info (device loop2): force zlib compression, level 3 [ 118.574724][ T7281] BTRFS info (device loop2): turning on flush-on-commit [ 118.614229][ T7281] BTRFS info (device loop2): max_inline at 0 [ 118.620298][ T7281] BTRFS info (device loop2): using free space tree [ 118.647310][ T7289] loop3: detected capacity change from 0 to 32768 [ 118.738707][ T7289] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.767425][ T7281] BTRFS info (device loop2): enabling ssd optimizations [ 118.781425][ T7281] BTRFS info (device loop2): auto enabling async discard [ 118.893285][ T7289] XFS (loop3): Ending clean mount [ 118.966075][ T7333] syz.1.638 uses old SIOCAX25GETINFO [ 119.033631][ T7289] XFS (loop3): Quotacheck needed: Please wait. [ 119.139164][ T5765] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 119.201482][ T7289] XFS (loop3): Quotacheck: Done. [ 119.215532][ T7289] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.487764][ T5757] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (5757) [ 119.609559][ T7347] loop0: detected capacity change from 0 to 1024 [ 120.096186][ T7360] "syz.2.652" (7360) uses obsolete ecb(arc4) skcipher [ 120.527546][ T7378] netlink: 112 bytes leftover after parsing attributes in process `syz.1.661'. [ 120.565151][ T7378] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 120.621269][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.715010][ T7386] xt_hashlimit: Unknown mode mask E2, kernel too old? [ 120.810937][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 120.818090][ T5814] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 120.828002][ T7390] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 120.828002][ T7390] SÃȘØÈžZ§6ŸÂ' [ 120.841055][ T5814] usb 3-1: config 0 has no interface number 0 [ 120.855939][ T5814] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 120.870870][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.879054][ T5814] usb 3-1: Product: syz [ 120.883896][ T5814] usb 3-1: Manufacturer: syz [ 120.888516][ T5814] usb 3-1: SerialNumber: syz [ 120.918519][ T5814] usb 3-1: config 0 descriptor?? [ 120.931269][ T789] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.088470][ T7394] netlink: 'syz.1.669': attribute type 9 has an invalid length. [ 121.097606][ T7394] netlink: 911 bytes leftover after parsing attributes in process `syz.1.669'. [ 121.166365][ T789] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.168234][ T7388] loop3: detected capacity change from 0 to 32768 [ 121.188928][ T7388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.666 (7388) [ 121.196797][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.214631][ T5814] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v134 fw v24.0.0 (2 channels) [ 121.245277][ T789] usb 1-1: Product: syz [ 121.254173][ T789] usb 1-1: Manufacturer: syz [ 121.263121][ T789] usb 1-1: SerialNumber: syz [ 121.266118][ T7388] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.284150][ T789] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.298680][ T7388] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 121.313989][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 121.337316][ T23] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 121.340967][ T7388] BTRFS info (device loop3): using free space tree [ 121.413145][ T5814] peak_usb 3-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 121.450990][ T5814] peak_usb 3-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 121.495501][ T7388] BTRFS info (device loop3): enabling ssd optimizations [ 121.507963][ T7388] BTRFS info (device loop3): auto enabling async discard [ 121.524259][ T5814] peak_usb: probe of 3-1:0.56 failed with error -71 [ 121.551911][ T5814] usb 3-1: USB disconnect, device number 2 [ 121.782303][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.945347][ T5834] usb 1-1: USB disconnect, device number 5 [ 122.007759][ T5759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5759) [ 122.302053][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 122.434266][ T23] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 122.462130][ T23] ath9k_htc: Failed to initialize the device [ 122.471361][ T5834] usb 1-1: ath9k_htc: USB layer deinitialized [ 122.575051][ T7436] warning: `syz.2.680' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.833661][ T7450] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 122.869429][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.687'. [ 122.893022][ T7450] veth0_vlan: entered allmulticast mode [ 122.899402][ T7450] bridge0: port 3(veth0_vlan) entered blocking state [ 122.916074][ T7450] bridge0: port 3(veth0_vlan) entered disabled state [ 122.934014][ T7450] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 123.242506][ T7456] loop0: detected capacity change from 0 to 8192 [ 123.248970][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 123.248982][ T28] audit: type=1326 audit(1768669018.693:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.327851][ T7456] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.342018][ T7456] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 123.351621][ T7456] REISERFS (device loop0): using ordered data mode [ 123.358320][ T7456] reiserfs: using flush barriers [ 123.362242][ T28] audit: type=1326 audit(1768669018.693:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.367529][ T7456] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.404513][ T7456] REISERFS (device loop0): checking transaction log (loop0) [ 123.458569][ T28] audit: type=1326 audit(1768669018.693:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.541867][ T28] audit: type=1326 audit(1768669018.693:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.630518][ T7456] REISERFS (device loop0): Using tea hash to sort names [ 123.653605][ T28] audit: type=1326 audit(1768669018.693:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.663929][ T7456] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 123.702764][ T7478] loop1: detected capacity change from 0 to 64 [ 123.709245][ T28] audit: type=1326 audit(1768669018.693:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.847271][ T28] audit: type=1326 audit(1768669018.693:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.904964][ T28] audit: type=1326 audit(1768669018.693:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 123.938963][ T28] audit: type=1326 audit(1768669018.693:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 124.306030][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 124.385342][ T7493] loop0: detected capacity change from 0 to 512 [ 124.397802][ T7493] EXT4-fs: Ignoring removed orlov option [ 124.451198][ T7493] EXT4-fs: Ignoring removed nobh option [ 124.472409][ T7493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.501946][ T7493] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.531644][ T7497] loop1: detected capacity change from 0 to 764 [ 124.548394][ T7493] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.704: bg 0: block 248: padding at end of block bitmap is not set [ 124.617256][ T7497] Symlink component flag not implemented [ 124.627330][ T7493] Quota error (device loop0): write_blk: dquota write failed [ 124.635311][ T7497] Symlink component flag not implemented [ 124.640557][ T7480] loop2: detected capacity change from 0 to 32768 [ 124.662745][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.701 (7480) [ 124.673961][ T7493] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.704: Failed to acquire dquot type 1 [ 124.702441][ T7480] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.711146][ T7497] Symlink component flag not implemented (128) [ 124.719264][ T7497] Symlink component flag not implemented (122) [ 124.731122][ T7480] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.751300][ T7480] BTRFS info (device loop2): using free space tree [ 124.771358][ T7493] EXT4-fs (loop0): 1 truncate cleaned up [ 124.845787][ T7493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.970615][ T7480] BTRFS info (device loop2): enabling ssd optimizations [ 125.011933][ T7480] BTRFS info (device loop2): auto enabling async discard [ 125.078605][ T7493] EXT4-fs: Ignoring removed orlov option [ 125.130951][ T7493] EXT4-fs: Ignoring removed nobh option [ 125.136662][ T7493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.170102][ T7493] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 125.191682][ T7493] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.704: Abort forced by user [ 125.200934][ T7502] loop3: detected capacity change from 0 to 40427 [ 125.206148][ T7493] EXT4-fs (loop0): Remounting filesystem read-only [ 125.233645][ T7493] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 125.244275][ T7502] F2FS-fs (loop3): Image doesn't support compression [ 125.257015][ T7493] ext4 filesystem being remounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.268044][ T5765] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.279469][ T7502] F2FS-fs (loop3): heap/no_heap options were deprecated [ 125.299739][ T7502] F2FS-fs (loop3): invalid crc value [ 125.317228][ T7502] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.430635][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.440424][ T7502] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.050519][ T7544] dlm: non-version read from control device 3 [ 126.531121][ T7560] netlink: 'syz.3.729': attribute type 13 has an invalid length. [ 126.907617][ T7573] Cannot find add_set index 2 as target [ 126.962792][ T7550] loop0: detected capacity change from 0 to 32768 [ 127.016213][ T7550] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.179886][ T7550] XFS (loop0): Ending clean mount [ 127.314791][ T7591] loop1: detected capacity change from 0 to 64 [ 127.315550][ T5814] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 127.428781][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.560342][ T7582] loop2: detected capacity change from 0 to 32768 [ 127.683973][ T7582] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 127.764230][ T7582] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.805575][ T7600] loop3: detected capacity change from 0 to 8192 [ 127.829897][ T7600] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.890859][ T7600] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 127.957598][ T7600] REISERFS (device loop3): using ordered data mode [ 128.004207][ T7600] reiserfs: using flush barriers [ 128.042893][ T7600] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.076758][ T7600] REISERFS (device loop3): checking transaction log (loop3) [ 128.137260][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 128.359495][ T7612] binder: 7611:7612 ioctl c018620c 200000001180 returned -22 [ 128.408456][ T7600] REISERFS (device loop3): Using tea hash to sort names [ 128.432205][ T7600] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 128.961161][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.141219][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 129.154503][ T23] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 129.190967][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.199014][ T23] usb 2-1: Product: syz [ 129.230926][ T23] usb 2-1: Manufacturer: syz [ 129.235674][ T23] usb 2-1: SerialNumber: syz [ 129.255825][ T23] usb 2-1: config 0 descriptor?? [ 129.494953][ T23] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 129.520968][ T23] airspy 2-1:0.0: Could not detect board [ 129.526779][ T23] airspy: probe of 2-1:0.0 failed with error -71 [ 129.574110][ T23] usb 2-1: USB disconnect, device number 3 [ 129.610693][ T7642] tmpfs: User quota inode hardlimit too large. [ 129.725300][ T7626] loop3: detected capacity change from 0 to 32768 [ 129.747082][ T7626] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.757 (7626) [ 129.790630][ T7626] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.831608][ T7626] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.861981][ T7626] BTRFS info (device loop3): force zlib compression, level 3 [ 129.869439][ T7626] BTRFS info (device loop3): turning on flush-on-commit [ 129.881824][ T7626] BTRFS info (device loop3): max_inline at 0 [ 129.887876][ T7626] BTRFS info (device loop3): using free space tree [ 130.069378][ T7626] BTRFS info (device loop3): enabling ssd optimizations [ 130.096910][ T7626] BTRFS info (device loop3): auto enabling async discard [ 130.223866][ T7668] loop2: detected capacity change from 0 to 24 [ 130.252314][ T7668] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 130.290981][ T7668] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 130.356149][ T7668] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 130.383414][ T5766] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.841113][ T5834] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.032298][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 131.040284][ T5834] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.059702][ T5834] usb 3-1: config 179 has no interface number 0 [ 131.074730][ T5834] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 131.116134][ T5834] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 131.159080][ T5834] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.211746][ T5834] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.261678][ T5834] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.311055][ T5834] usb 3-1: config 179 interface 65 has no altsetting 0 [ 131.345641][ T5834] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 131.363042][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.394216][ T7698] loop1: detected capacity change from 0 to 1024 [ 131.431105][ T5834] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 131.512983][ T7698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.633845][ T7698] EXT4-fs warning (device loop1): ext4_rmdir:3243: inode #11: comm syz.1.784: empty directory 'file1' has too many links (111) [ 131.770041][ T9] usb 3-1: USB disconnect, device number 3 [ 131.786216][ T9] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 131.870201][ T7713] loop3: detected capacity change from 0 to 64 [ 131.898274][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.041862][ T7717] loop3: detected capacity change from 0 to 256 [ 132.670356][ T7715] loop0: detected capacity change from 0 to 32768 [ 132.749177][ T7715] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.754270][ T7719] loop1: detected capacity change from 0 to 32768 [ 132.786733][ T7729] loop2: detected capacity change from 0 to 4096 [ 132.796797][ T7729] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 132.869604][ T7719] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.871304][ T7715] XFS (loop0): Ending clean mount [ 132.909013][ T7715] XFS (loop0): Quotacheck needed: Please wait. [ 133.018732][ T7715] XFS (loop0): Quotacheck: Done. [ 133.041496][ T7715] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.159303][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165763][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.227785][ T7719] XFS (loop1): Ending clean mount [ 133.310312][ T7719] XFS (loop1): Quotacheck needed: Please wait. [ 133.335811][ T7747] xt_hashlimit: overflow, try lower: 3/0 [ 133.413581][ T49] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2e5/0x11d0, inode 0x2446 dinode [ 133.447028][ T49] XFS (loop1): Unmount and run xfs_repair [ 133.459110][ T7727] loop3: detected capacity change from 0 to 32768 [ 133.462612][ T49] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 133.485091][ T49] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 133.510092][ T49] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.522448][ T49] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 133.534294][ T7727] (syz.3.797,7727,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.553302][ T49] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a 4.Xh...=........ [ 133.572902][ T49] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 133.583840][ T7727] (syz.3.797,7727,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.594005][ T49] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 56 b3 a5 bd ..e.........V... [ 133.662267][ T49] 00000060: ff ff ff ff 35 98 98 34 00 00 00 00 00 00 00 08 ....5..4........ [ 133.674408][ T49] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 133.683181][ T7727] (syz.3.797,7727,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 133.694057][ T7719] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 133.738448][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.790302][ T7750] loop2: detected capacity change from 0 to 256 [ 133.800563][ T7727] JBD2: Ignoring recovery information on journal [ 133.807990][ T7750] exfat: Deprecated parameter 'utf8' [ 133.824137][ T7750] exfat: Deprecated parameter 'utf8' [ 133.881153][ T7750] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 134.017228][ T7727] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 134.248173][ T7727] (syz.3.797,7727,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 134.269857][ T7757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.804'. [ 134.277188][ T7727] (syz.3.797,7727,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 134.307060][ T7727] (syz.3.797,7727,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 134.319657][ T7727] (syz.3.797,7727,0):ocfs2_quota_read:201 ERROR: status = -5 [ 134.351079][ T7727] __quota_error: 6 callbacks suppressed [ 134.351094][ T7727] Quota error (device loop3): find_next_id: Can't read quota tree block 5 [ 134.402425][ T7727] (syz.3.797,7727,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 134.477246][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 134.581267][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 134.848832][ T7752] loop1: detected capacity change from 0 to 32768 [ 134.893891][ T7752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.801 (7752) [ 134.897998][ T7773] netlink: 256 bytes leftover after parsing attributes in process `syz.0.812'. [ 134.971908][ T7752] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.020065][ T7752] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.059265][ T7752] BTRFS info (device loop1): force zlib compression, level 3 [ 135.079727][ T7752] BTRFS info (device loop1): force clearing of disk cache [ 135.100873][ T7752] BTRFS info (device loop1): setting nodatasum [ 135.107099][ T7752] BTRFS info (device loop1): allowing degraded mounts [ 135.140986][ T7752] BTRFS info (device loop1): enabling disk space caching [ 135.179164][ T7777] loop2: detected capacity change from 0 to 256 [ 135.193074][ T7752] BTRFS info (device loop1): disk space caching is enabled [ 135.432515][ T7752] BTRFS info (device loop1): auto enabling async discard [ 135.442437][ T7752] BTRFS info (device loop1): rebuilding free space tree [ 135.521953][ T7752] BTRFS info (device loop1): disabling free space tree [ 135.528971][ T7752] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.633232][ T7752] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.891735][ T7752] BTRFS info (device loop1): balance: start -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=30064705537,usage=4294901761..6,drange=36028797018963968..70368744177664 [ 135.937279][ T7752] BTRFS info (device loop1): balance: ended with status: 0 [ 136.124408][ T5764] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.862039][ T7840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.054849][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 137.612596][ T7880] tmpfs: Bad value for 'mpol' [ 137.633942][ T7879] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 137.764075][ T7882] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 137.804901][ T7882] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 137.847130][ T7888] ipt_ECN: cannot use operation on non-tcp rule [ 138.386596][ T7909] loop2: detected capacity change from 0 to 512 [ 138.428123][ T7909] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.481137][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.559183][ T7913] loop3: detected capacity change from 0 to 4096 [ 138.584121][ T7909] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 138.589118][ T7913] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 138.714974][ T5834] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 138.742428][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.777478][ T5834] usb 1-1: Product: syz [ 138.793309][ T5834] usb 1-1: Manufacturer: syz [ 138.797982][ T5834] usb 1-1: SerialNumber: syz [ 138.832040][ T7913] ntfs3: loop3: failed to convert "c46c" to cp869 [ 138.846379][ T5834] usb 1-1: config 0 descriptor?? [ 138.865023][ T5834] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 139.021205][ T7922] loop2: detected capacity change from 0 to 256 [ 139.074459][ T7922] exfat: Deprecated parameter 'utf8' [ 139.105036][ T7922] exfat: Deprecated parameter 'utf8' [ 139.151778][ T7926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.222625][ T7922] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 139.323979][ T5814] usb 1-1: USB disconnect, device number 6 [ 140.074715][ T7963] loop1: detected capacity change from 0 to 1024 [ 140.159328][ T7963] hfsplus: cannot replace xattr [ 140.245670][ T7969] loop0: detected capacity change from 0 to 128 [ 140.547877][ T7978] trusted_key: encrypted_key: master key parameter '' is invalid [ 140.566107][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 140.907109][ T7990] overlayfs: conflicting options: nfs_export=on,index=off [ 141.081024][ T7997] program syz.1.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.510169][ T28] audit: type=1326 audit(1768669036.953:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 141.577438][ T28] audit: type=1326 audit(1768669036.983:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 141.609948][ T8017] loop3: detected capacity change from 0 to 2048 [ 141.618083][ T28] audit: type=1326 audit(1768669036.993:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f700479acb9 code=0x7ffc0000 [ 141.657270][ T28] audit: type=1326 audit(1768669036.993:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f700479aa22 code=0x7ffc0000 [ 141.697849][ T28] audit: type=1326 audit(1768669036.993:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f700475b58e code=0x7ffc0000 [ 141.704857][ T8017] Alternate GPT is invalid, using primary GPT. [ 141.770101][ T8017] loop3: p2 p3 p7 [ 141.793069][ T28] audit: type=1326 audit(1768669037.013:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f700479aae7 code=0x7ffc0000 [ 141.810315][ T8026] loop1: detected capacity change from 0 to 1764 [ 141.848766][ T28] audit: type=1326 audit(1768669037.053:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f700475b58e code=0x7ffc0000 [ 141.920529][ T28] audit: type=1326 audit(1768669037.053:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700479a94b code=0x7ffc0000 [ 142.010888][ T28] audit: type=1326 audit(1768669037.073:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f700475b58e code=0x7ffc0000 [ 142.138320][ T28] audit: type=1326 audit(1768669037.073:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700479a94b code=0x7ffc0000 [ 142.312315][ T8038] xt_TCPMSS: Only works on TCP SYN packets [ 142.690606][ T8054] netlink: 'syz.3.937': attribute type 2 has an invalid length. [ 142.702812][ T8053] loop0: detected capacity change from 0 to 1024 [ 142.712910][ T8054] netlink: 723 bytes leftover after parsing attributes in process `syz.3.937'. [ 142.743814][ T8053] hfsplus: cannot replace xattr [ 143.215392][ T8070] loop3: detected capacity change from 0 to 4096 [ 143.242716][ T8070] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 143.400013][ T8070] ntfs3: loop3: failed to convert "c46c" to macgaelic [ 143.425840][ T8082] loop2: detected capacity change from 0 to 1024 [ 143.899211][ T8097] loop3: detected capacity change from 0 to 512 [ 143.950060][ T8097] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.010924][ T8097] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 144.037288][ T8097] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 144.123088][ T8097] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.959: attempt to clear invalid blocks 2 len 1 [ 144.181698][ T8097] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.959: invalid indirect mapped block 1819239214 (level 0) [ 144.239735][ T8097] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.959: invalid indirect mapped block 1819239214 (level 1) [ 144.266046][ T8097] EXT4-fs (loop3): 1 truncate cleaned up [ 144.297278][ T8113] netlink: 'syz.0.967': attribute type 49 has an invalid length. [ 144.330681][ T8097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.501449][ T8097] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.959: Abort forced by user [ 144.521084][ T8097] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 144.609656][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.857328][ T8136] netlink: 'syz.0.978': attribute type 21 has an invalid length. [ 144.891149][ T8136] netlink: 156 bytes leftover after parsing attributes in process `syz.0.978'. [ 144.942963][ T8138] overlayfs: missing 'lowerdir' [ 145.334353][ T8158] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 145.634442][ T8170] netlink: 100 bytes leftover after parsing attributes in process `syz.1.995'. [ 146.138040][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'. [ 146.571181][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 146.571195][ T28] audit: type=1326 audit(1768669042.013:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b619acb9 code=0x7ffc0000 [ 146.607544][ T8214] loop2: detected capacity change from 0 to 1024 [ 146.660992][ T28] audit: type=1326 audit(1768669042.013:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b619acb9 code=0x7ffc0000 [ 146.695642][ T8213] loop1: detected capacity change from 0 to 2048 [ 146.711370][ T28] audit: type=1326 audit(1768669042.073:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb3b619acb9 code=0x7ffc0000 [ 146.756079][ T28] audit: type=1326 audit(1768669042.073:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3b619aa22 code=0x7ffc0000 [ 146.824321][ T8213] Alternate GPT is invalid, using primary GPT. [ 146.830762][ T8213] loop1: p2 p3 p7 [ 146.859931][ T28] audit: type=1326 audit(1768669042.093:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb3b615b58e code=0x7ffc0000 [ 146.875330][ T8222] loop2: detected capacity change from 0 to 256 [ 146.938190][ T8222] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 146.945351][ T28] audit: type=1326 audit(1768669042.143:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb3b619aae7 code=0x7ffc0000 [ 147.014041][ T28] audit: type=1326 audit(1768669042.143:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3b615b58e code=0x7ffc0000 [ 147.070169][ T5141] Alternate GPT is invalid, using primary GPT. [ 147.091136][ T5141] loop1: p2 p3 p7 [ 147.122731][ T28] audit: type=1326 audit(1768669042.143:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3b619a94b code=0x7ffc0000 [ 147.198806][ T28] audit: type=1326 audit(1768669042.183:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb3b615b58e code=0x7ffc0000 [ 147.252481][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 147.255707][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 147.266019][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 147.287057][ T28] audit: type=1326 audit(1768669042.183:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3b619a94b code=0x7ffc0000 [ 147.553736][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 147.574731][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 147.630487][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 147.919628][ T8259] loop3: detected capacity change from 0 to 16 [ 147.966420][ T8259] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.204762][ T8271] loop3: detected capacity change from 0 to 64 [ 148.925708][ T8295] xt_CT: No such helper "syz1" [ 149.526447][ T8302] loop1: detected capacity change from 0 to 32768 [ 149.545767][ T8321] loop2: detected capacity change from 0 to 4096 [ 149.569461][ T8321] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 149.625186][ T8302] JBD2: Ignoring recovery information on journal [ 149.710977][ T8321] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 149.762364][ T8321] ntfs3: loop2: Failed to load $BadClus (-22). [ 149.786406][ T8317] loop3: detected capacity change from 0 to 32768 [ 149.819998][ T8317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1067 (8317) [ 149.845447][ T8302] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 149.886819][ T8317] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.916551][ T8317] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 149.965066][ T8317] BTRFS info (device loop3): allowing degraded mounts [ 149.985018][ T8317] BTRFS info (device loop3): metadata ratio 4 [ 150.021592][ T8317] BTRFS info (device loop3): turning on sync discard [ 150.043855][ T8317] BTRFS info (device loop3): turning off discard [ 150.063955][ T8317] BTRFS info (device loop3): turning on sync discard [ 150.070710][ T8317] BTRFS info (device loop3): disabling tree log [ 150.120889][ T8317] BTRFS info (device loop3): using free space tree [ 150.201829][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 150.359146][ T8317] BTRFS info (device loop3): enabling ssd optimizations [ 150.567928][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.654262][ T8363] loop0: detected capacity change from 0 to 64 [ 150.740674][ T8365] loop2: detected capacity change from 0 to 512 [ 150.840927][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.898550][ T8365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.950968][ T8365] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.995277][ T8365] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.1080: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 151.053859][ T8365] EXT4-fs (loop2): Remounting filesystem read-only [ 151.090999][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 151.105041][ T8] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 151.112826][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 151.120952][ T8] usb 2-1: config 0 has no interface number 0 [ 151.140567][ T8] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 151.158929][ T8374] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 151.160484][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.205746][ T8] usb 2-1: Product: syz [ 151.209953][ T8] usb 2-1: Manufacturer: syz [ 151.239084][ T8] usb 2-1: SerialNumber: syz [ 151.249154][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.259166][ T8] usb 2-1: config 0 descriptor?? [ 151.474727][ T8379] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 151.474766][ T8379] UDF-fs: Scanning with blocksize 512 failed [ 151.479453][ T8379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.658158][ T8382] set_capacity_and_notify: 1 callbacks suppressed [ 151.658172][ T8382] loop0: detected capacity change from 0 to 512 [ 151.692240][ T8] peak_usb 2-1:0.83 can0: unable to request usb[type=0 value=0] err=-71 [ 151.707129][ T8] peak_usb 2-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71) [ 151.730631][ T8382] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 151.807172][ T8382] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1086: bg 0: block 104: invalid block bitmap [ 151.861514][ T8] peak_usb: probe of 2-1:0.83 failed with error -71 [ 151.873447][ T8382] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 151.877436][ T8] usb 2-1: USB disconnect, device number 4 [ 151.934092][ T8382] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1086: invalid indirect mapped block 1 (level 1) [ 151.969795][ T8382] EXT4-fs (loop0): 1 truncate cleaned up [ 152.003259][ T8382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.017930][ T8392] loop2: detected capacity change from 0 to 256 [ 152.036880][ T8392] exfat: Deprecated parameter 'utf8' [ 152.051182][ T8392] exfat: Deprecated parameter 'utf8' [ 152.071163][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.094069][ T8392] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 152.106885][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 152.106898][ T28] audit: type=1800 audit(1768669047.543:99): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1086" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 152.158258][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.178516][ T8392] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 152.286391][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.307149][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 152.349000][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 152.370287][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.390066][ T9] usb 4-1: config 0 descriptor?? [ 152.526787][ T8403] loop1: detected capacity change from 0 to 4096 [ 152.553307][ T8403] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 152.609861][ T9] ath6kl: Failed to submit usb control message: -71 [ 152.624240][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 152.645737][ T9] ath6kl: Unable to send get target info: -71 [ 152.664883][ T9] ath6kl: Failed to init ath6kl core: -71 [ 152.676774][ T8403] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 152.677924][ T9] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 152.710369][ T8403] ntfs3: loop1: Failed to load $BadClus (-22). [ 152.742873][ T9] usb 4-1: USB disconnect, device number 5 [ 152.846933][ T8403] syz.1.1095: attempt to access beyond end of device [ 152.846933][ T8403] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 154.186549][ T8473] loop3: detected capacity change from 0 to 1024 [ 154.320299][ T3473] hfsplus: b-tree write err: -5, ino 4 [ 154.414814][ T8484] loop1: detected capacity change from 0 to 8 [ 154.471356][ T5733] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.671581][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 154.679772][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 154.694230][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 154.711394][ T5733] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 154.740128][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.749915][ T5733] usb 1-1: Product: syz [ 154.760865][ T5733] usb 1-1: Manufacturer: syz [ 154.765510][ T5733] usb 1-1: SerialNumber: syz [ 154.842333][ T5733] usb 1-1: config 0 descriptor?? [ 154.868003][ T5733] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 155.083100][ T5733] usb 1-1: USB disconnect, device number 7 [ 155.229903][ T8506] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1142'. [ 155.463578][ T8516] usb usb7: usbfs: process 8516 (syz.2.1146) did not claim interface 0 before use [ 155.586660][ T8520] loop3: detected capacity change from 0 to 65 [ 155.621047][ T8520] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 156.079586][ T8536] sock: sock_timestamping_bind_phc: sock not bind to device [ 156.229341][ T8517] loop1: detected capacity change from 0 to 40427 [ 156.275454][ T8541] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 156.311346][ T8517] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 156.319130][ T8517] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.404927][ T8517] F2FS-fs (loop1): invalid crc value [ 156.453387][ T8517] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.502917][ T8553] loop3: detected capacity change from 0 to 512 [ 156.550968][ T8553] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.685236][ T8553] EXT4-fs error (device loop3): ext4_quota_enable:7136: comm syz.3.1164: Bad quota inum: 2, type: 1 [ 156.685531][ T8517] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 156.699563][ T8561] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1167'. [ 156.714053][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'. [ 156.716984][ T8517] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.723479][ T8553] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 156.746836][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 156.941970][ T5766] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 157.357978][ T8579] loop2: detected capacity change from 0 to 1024 [ 157.375521][ T8579] EXT4-fs: Ignoring removed orlov option [ 157.443846][ T8579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.771301][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.804276][ T8592] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1172'. [ 157.991089][ T5851] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.014034][ T8598] loop3: detected capacity change from 0 to 128 [ 158.063088][ T8602] loop1: detected capacity change from 0 to 1024 [ 158.081855][ T8602] EXT4-fs: Ignoring removed bh option [ 158.105609][ T8598] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 158.147698][ T8602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.190949][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 158.219312][ T5851] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 158.261027][ T5851] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 158.269269][ T5851] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.309359][ T5851] usb 1-1: config 0 has no interface number 0 [ 158.319155][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.330222][ T5851] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 158.349490][ T8609] loop2: detected capacity change from 0 to 128 [ 158.369407][ T5851] usb 1-1: config 0 interface 104 has no altsetting 1 [ 158.393711][ T5851] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 158.406182][ T8609] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.419586][ T8613] batadv0: entered promiscuous mode [ 158.443327][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.463445][ T8609] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.483847][ T8609] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 158.510931][ T5851] usb 1-1: Product: syz [ 158.542824][ T5851] usb 1-1: Manufacturer: syz [ 158.543357][ T5765] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.562903][ T5851] usb 1-1: SerialNumber: syz [ 158.596914][ T5851] usb 1-1: config 0 descriptor?? [ 158.601231][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 158.614537][ T5851] asix: probe of 1-1:0.104 failed with error -22 [ 158.870347][ T9] usb 1-1: USB disconnect, device number 8 [ 159.311929][ T8645] loop2: detected capacity change from 0 to 256 [ 159.391491][ T8645] FAT-fs (loop2): Directory bread(block 64) failed [ 159.420962][ T8645] FAT-fs (loop2): Directory bread(block 65) failed [ 159.441313][ T8645] FAT-fs (loop2): Directory bread(block 66) failed [ 159.458670][ T8645] FAT-fs (loop2): Directory bread(block 67) failed [ 159.514575][ T8645] FAT-fs (loop2): Directory bread(block 68) failed [ 159.522204][ T8645] FAT-fs (loop2): Directory bread(block 69) failed [ 159.528849][ T8645] FAT-fs (loop2): Directory bread(block 70) failed [ 159.541017][ T8645] FAT-fs (loop2): Directory bread(block 71) failed [ 159.547697][ T8645] FAT-fs (loop2): Directory bread(block 72) failed [ 159.564450][ T8645] FAT-fs (loop2): Directory bread(block 73) failed [ 159.787274][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 159.806950][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 159.819144][ T8664] loop0: detected capacity change from 0 to 64 [ 159.830943][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 159.838758][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 159.874241][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 159.912700][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 159.955639][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 160.000950][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 160.008812][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 160.059995][ T8660] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 160.311576][ T5733] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 160.325657][ T8682] comedi comedi1: dt2801: a I/O base address must be specified [ 160.528577][ T5733] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.538029][ T5733] usb 1-1: not running at top speed; connect to a high speed hub [ 160.567930][ T5733] usb 1-1: config 5 has an invalid interface number: 64 but max is 0 [ 160.580916][ T5733] usb 1-1: config 5 has no interface number 0 [ 160.587120][ T5733] usb 1-1: config 5 interface 64 has no altsetting 0 [ 160.600618][ T5733] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39 [ 160.620989][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.629031][ T5733] usb 1-1: Product: syz [ 160.661421][ T5733] usb 1-1: Manufacturer: syz [ 160.666078][ T5733] usb 1-1: SerialNumber: syz [ 160.875819][ T8695] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1229'. [ 160.918148][ T5733] snd-usb-audio: probe of 1-1:5.64 failed with error -71 [ 160.949110][ T5733] usb 1-1: USB disconnect, device number 9 [ 161.102229][ T8701] loop2: detected capacity change from 0 to 65 [ 161.144808][ T8701] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 161.293054][ T8678] loop3: detected capacity change from 0 to 65536 [ 161.368585][ T8678] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 161.457822][ T8678] XFS (loop3): Ending clean mount [ 161.494412][ T8678] XFS (loop3): Quotacheck needed: Please wait. [ 161.567257][ T8678] XFS (loop3): Quotacheck: Done. [ 161.736026][ T8723] loop0: detected capacity change from 0 to 256 [ 161.762123][ T5766] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 161.852202][ T8725] loop1: detected capacity change from 0 to 256 [ 161.875253][ T8723] FAT-fs (loop0): Directory bread(block 64) failed [ 161.882053][ T8723] FAT-fs (loop0): Directory bread(block 65) failed [ 161.888774][ T8723] FAT-fs (loop0): Directory bread(block 66) failed [ 161.903507][ T8723] FAT-fs (loop0): Directory bread(block 67) failed [ 161.912199][ T8723] FAT-fs (loop0): Directory bread(block 68) failed [ 161.912750][ T8725] exfat: Deprecated parameter 'utf8' [ 161.918913][ T8723] FAT-fs (loop0): Directory bread(block 69) failed [ 161.952456][ T8723] FAT-fs (loop0): Directory bread(block 70) failed [ 161.959038][ T8723] FAT-fs (loop0): Directory bread(block 71) failed [ 162.022477][ T8725] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 162.039076][ T8723] FAT-fs (loop0): Directory bread(block 72) failed [ 162.060227][ T8723] FAT-fs (loop0): Directory bread(block 73) failed [ 162.138070][ T8725] overlay: filesystem on ./file0 not supported [ 162.186753][ T8715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1235 (8715) [ 162.229357][ T8715] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.261656][ T8715] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 162.295962][ T8715] BTRFS info (device loop2): using free space tree [ 162.395500][ T8740] set_capacity_and_notify: 1 callbacks suppressed [ 162.395514][ T8740] loop1: detected capacity change from 0 to 8 [ 162.472390][ T8715] BTRFS info (device loop2): enabling ssd optimizations [ 162.479446][ T8715] BTRFS info (device loop2): auto enabling async discard [ 162.522480][ T8740] SQUASHFS error: Failed to read block 0x636: -5 [ 162.529257][ T8740] SQUASHFS error: Unable to read metadata cache entry [634] [ 162.597372][ T8740] SQUASHFS error: Unable to read metadata cache entry [634] [ 162.639360][ T8740] SQUASHFS error: Unable to read directory block [629:0] [ 162.771455][ T5765] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.959181][ T5759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5759) [ 164.279080][ T8806] loop2: detected capacity change from 0 to 4096 [ 164.320961][ T8806] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 164.373638][ T8806] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 164.418188][ T8817] loop0: detected capacity change from 0 to 256 [ 164.427961][ T8806] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 164.464412][ T8806] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.500449][ T8817] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 164.520455][ T8806] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.561177][ T8806] ntfs: volume version 3.1. [ 164.616053][ T8806] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 164.649843][ T8806] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 164.709964][ T8806] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.732781][ T8824] dlm: no local IP address has been set [ 164.759141][ T8806] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 164.778531][ T8824] dlm: cannot start dlm midcomms -107 [ 164.786643][ T8806] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 165.205534][ T8839] loop2: detected capacity change from 0 to 8 [ 165.256074][ T8839] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 165.453001][ T8847] loop3: detected capacity change from 0 to 8 [ 165.509671][ T8847] SQUASHFS error: Corrupted symlink [ 165.676893][ T8855] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1293'. [ 166.001197][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.211205][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 166.220729][ T8] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 166.247509][ T8] usb 1-1: config 0 has no interface number 0 [ 166.280589][ T8] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 166.324075][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.340740][ T8] usb 1-1: Product: syz [ 166.351400][ T8] usb 1-1: Manufacturer: syz [ 166.356050][ T8] usb 1-1: SerialNumber: syz [ 166.368226][ T8885] validate_nla: 43 callbacks suppressed [ 166.368241][ T8885] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 166.372551][ T8] usb 1-1: config 0 descriptor?? [ 166.854331][ T8906] vivid-007: disconnect [ 166.866092][ T8904] vivid-007: reconnect [ 166.877901][ T8] peak_usb 1-1:0.83 can0: unable to request usb[type=0 value=0] err=-71 [ 166.910867][ T8] peak_usb 1-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71) [ 166.970975][ T789] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.004684][ T8] peak_usb: probe of 1-1:0.83 failed with error -71 [ 167.033957][ T8] usb 1-1: USB disconnect, device number 10 [ 167.088094][ T8913] cgroup: name respecified [ 167.174226][ T789] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 167.201484][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.214441][ T789] usb 4-1: Product: syz [ 167.218658][ T789] usb 4-1: Manufacturer: syz [ 167.225889][ T789] usb 4-1: SerialNumber: syz [ 167.241613][ T789] usb 4-1: config 0 descriptor?? [ 167.425900][ T8925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.474155][ T789] hso 4-1:0.0: Can't find BULK IN endpoint [ 167.504183][ T789] usb-storage 4-1:0.0: USB Mass Storage device detected [ 167.601956][ T8933] netlink: 'syz.1.1331': attribute type 21 has an invalid length. [ 167.610718][ T8933] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1331'. [ 167.665638][ T8937] loop2: detected capacity change from 0 to 256 [ 167.699664][ T8937] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 167.787262][ T789] usb 4-1: USB disconnect, device number 6 [ 167.828825][ T8939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 168.274619][ T8953] loop2: detected capacity change from 0 to 4096 [ 168.303788][ T8953] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 168.344025][ T8962] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 168.541395][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1346'. [ 168.550430][ T8967] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1346'. [ 168.582647][ T8953] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 168.751447][ T8972] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1350'. [ 169.034841][ T8986] loop0: detected capacity change from 0 to 1024 [ 169.125351][ T8990] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 169.134080][ T8990] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1359'. [ 169.222334][ T49] hfsplus: b-tree write err: -5, ino 4 [ 169.767938][ T9018] loop0: detected capacity change from 0 to 8 [ 169.771438][ T9017] ptrace attach of "./syz-executor exec"[5766] was attempted by ""[9017] [ 169.794266][ T5759] udevd[5759]: incorrect cramfs checksum on /dev/loop0 [ 169.810171][ T9018] cramfs: Error -3 while decompressing! [ 169.830037][ T9018] cramfs: ffffffff973dd368(26)->ffff888058917000(4096) [ 169.839320][ T9018] cramfs: Error -3 while decompressing! [ 169.856343][ T9018] cramfs: ffffffff973dd382(26)->ffff8880586c9000(4096) [ 169.875230][ T9018] cramfs: Error -3 while decompressing! [ 169.882905][ T9018] cramfs: ffffffff973dd39c(16)->ffff88805898b000(4096) [ 169.890123][ T9018] cramfs: Error -3 while decompressing! [ 169.896465][ T9018] cramfs: ffffffff973dd368(26)->ffff888058917000(4096) [ 170.000910][ T5814] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 170.156776][ T9026] loop3: detected capacity change from 0 to 4096 [ 170.176196][ T9026] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 170.214867][ T5814] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 170.250035][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.279385][ T5814] usb 3-1: Product: syz [ 170.289737][ T5814] usb 3-1: Manufacturer: syz [ 170.320009][ T5814] usb 3-1: SerialNumber: syz [ 170.338940][ T5814] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 170.357755][ T9026] ntfs3: loop3: failed to convert "c46c" to maciceland [ 170.367030][ T789] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 170.387088][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 170.387104][ T28] audit: type=1400 audit(1768669065.833:110): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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loop0: detected capacity change from 0 to 164 [ 170.866274][ T9044] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.907550][ T9044] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.922590][ T9044] Symlink component flag not implemented [ 170.928485][ T9044] Symlink component flag not implemented [ 170.938717][ T9044] Symlink component flag not implemented (7) [ 170.944900][ T9044] Symlink component flag not implemented (116) [ 171.203716][ T5814] usb 3-1: USB disconnect, device number 4 [ 171.464564][ T789] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 171.489563][ T789] ath9k_htc: Failed to initialize the device [ 171.521818][ T5814] usb 3-1: ath9k_htc: USB layer deinitialized [ 172.376529][ T9098] loop2: detected capacity change from 0 to 2048 [ 172.449771][ T9098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.700592][ T9079] loop3: detected capacity change from 0 to 32768 [ 172.715310][ T9111] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 172.732651][ T9079] XFS (loop3): invalid log iosize: 0 [not 12-30] [ 172.750979][ T9111] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1416'. [ 172.939301][ T9113] loop0: detected capacity change from 0 to 4096 [ 172.981213][ T9113] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 173.378645][ T9121] loop3: detected capacity change from 0 to 4096 [ 173.452807][ T9121] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 173.484243][ T9121] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 173.514612][ T9121] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 173.556243][ T9121] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 173.605155][ T9136] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 173.620448][ T9136] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1426'. [ 173.672519][ T9121] ntfs: volume version 3.1. [ 173.724882][ T9121] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 173.766861][ T9121] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 173.793526][ T9121] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 174.284918][ T9151] loop3: detected capacity change from 0 to 4096 [ 174.851649][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 174.928397][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 174.938469][ T9183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1452'. [ 174.944728][ T9181] loop3: detected capacity change from 0 to 4096 [ 174.961010][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 174.982294][ T9183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1452'. [ 174.992341][ T9183] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1452'. [ 174.994746][ T9181] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 175.027705][ T9185] gtp0: entered promiscuous mode [ 175.041936][ T9185] gtp0: entered allmulticast mode [ 175.053264][ T8] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 175.066373][ T8] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 175.087169][ T8] usb 3-1: config 8 has no interface number 0 [ 175.100967][ T8] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 175.122272][ T8] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.148050][ T9187] loop1: detected capacity change from 0 to 164 [ 175.161999][ T8] usb 3-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 175.185687][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.206243][ T9187] Unsupported NM flag settings (240) [ 175.212973][ T8] usb 3-1: Product: syz [ 175.218499][ T9181] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 175.221745][ T8] usb 3-1: Manufacturer: syz [ 175.240730][ T8] usb 3-1: SerialNumber: syz [ 175.495039][ T9194] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1457'. [ 175.509350][ T8] usb 3-1: USB disconnect, device number 5 [ 176.090196][ T9196] loop1: detected capacity change from 0 to 32768 [ 176.091154][ T789] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.169139][ T9196] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 176.324537][ T789] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 176.338937][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.357850][ T789] usb 1-1: Product: syz [ 176.362570][ T789] usb 1-1: Manufacturer: syz [ 176.367631][ T789] usb 1-1: SerialNumber: syz [ 176.377406][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 176.398551][ T789] usb 1-1: config 0 descriptor?? [ 176.668430][ T789] hso 1-1:0.0: Failed to find BULK IN ep [ 176.693755][ T789] usb-storage 1-1:0.0: USB Mass Storage device detected [ 176.928721][ T789] usb 1-1: USB disconnect, device number 11 [ 177.125161][ T9223] loop3: detected capacity change from 0 to 32768 [ 177.163506][ T9223] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 177.290318][ T9226] loop1: detected capacity change from 0 to 32768 [ 177.308445][ T5759] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 177.339460][ T9226] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 177.510163][ T8387] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 177.702972][ T9245] loop3: detected capacity change from 0 to 16 [ 177.748846][ T9245] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.774297][ T9238] loop2: detected capacity change from 0 to 4096 [ 177.826636][ T9245] syz.3.1480: attempt to access beyond end of device [ 177.826636][ T9245] loop3: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 177.889371][ T9245] syz.3.1480: attempt to access beyond end of device [ 177.889371][ T9245] loop3: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 177.991662][ T789] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 178.058323][ T9238] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 178.228925][ T789] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 178.238509][ T9252] loop1: detected capacity change from 0 to 2048 [ 178.255834][ T789] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 178.276132][ T789] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.303100][ T789] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.325680][ T789] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.347903][ T9252] Alternate GPT is invalid, using primary GPT. [ 178.376707][ T789] usb 1-1: Product: syz [ 178.386542][ T9252] loop1: p1 p2 p3 [ 178.390395][ T789] usb 1-1: Manufacturer: syz [ 178.401043][ T9252] loop1: partition table partially beyond EOD, truncated [ 178.411047][ T789] usb 1-1: SerialNumber: syz [ 178.425092][ T789] usb 1-1: config 0 descriptor?? [ 178.454992][ T789] hub 1-1:0.0: bad descriptor, ignoring hub [ 178.480464][ T789] hub: probe of 1-1:0.0 failed with error -5 [ 178.512870][ T789] usb 1-1: selecting invalid altsetting 0 [ 178.597488][ T9259] loop2: detected capacity change from 0 to 512 [ 178.720409][ T9263] loop3: detected capacity change from 0 to 256 [ 178.747691][ T9259] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.760420][ T9262] loop1: detected capacity change from 0 to 2048 [ 178.768681][ T9263] exfat: Deprecated parameter 'namecase' [ 178.809136][ T9263] exfat: Deprecated parameter 'namecase' [ 178.820255][ T9262] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.831008][ T9259] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 178.876054][ T9263] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 178.915838][ T9259] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 178.945503][ T9266] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.003083][ T9263] fuse: Bad value for 'fd' [ 179.007699][ T9259] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 179.036711][ T9264] udevd[9264]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 179.043914][ T8387] udevd[8387]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 179.069256][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 179.087185][ T9259] System zones: 0-2, 18-18, 34-35 [ 179.103617][ T789] usb 1-1: USB disconnect, device number 12 [ 179.203090][ T9259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.388091][ T9271] loop1: detected capacity change from 0 to 1024 [ 179.480198][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.824560][ T9285] Invalid ELF header magic: != ELF [ 180.041022][ T789] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.149742][ T9292] loop3: detected capacity change from 0 to 1024 [ 180.172922][ T9293] loop0: detected capacity change from 0 to 2048 [ 180.231191][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 180.248180][ T9293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.278963][ T789] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.313273][ T789] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 180.341815][ T789] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 180.378399][ T789] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 180.410952][ T789] usb 3-1: config 7 has no interface number 0 [ 180.431074][ T789] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 180.466463][ T789] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 180.492012][ T789] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 180.547243][ T789] usb 3-1: config 7 interface 128 has no altsetting 0 [ 180.583137][ T789] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 180.617355][ T9282] loop1: detected capacity change from 0 to 32768 [ 180.624116][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.624143][ T789] usb 3-1: Product: syz [ 180.624155][ T789] usb 3-1: Manufacturer: syz [ 180.624167][ T789] usb 3-1: SerialNumber: syz [ 180.633039][ T9280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.736473][ T9282] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 180.736473][ T9282] [ 180.784733][ T9282] ERROR: (device loop1): remounting filesystem as read-only [ 180.905135][ T9302] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 180.983283][ T789] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 181.011359][ T789] usb 3-1: MIDIStreaming interface descriptor not found [ 181.129551][ T789] usb 3-1: USB disconnect, device number 6 [ 181.210189][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.866017][ T3446] hfsplus: b-tree write err: -5, ino 4 [ 182.746235][ T9359] FAT-fs (loop3): Directory bread(block 64) failed [ 182.784893][ T9359] FAT-fs (loop3): Directory bread(block 65) failed [ 182.794093][ T9363] xt_cgroup: xt_cgroup: no path or classid specified [ 182.824247][ T9359] FAT-fs (loop3): Directory bread(block 66) failed [ 182.832575][ T9359] FAT-fs (loop3): Directory bread(block 67) failed [ 182.839667][ T9359] FAT-fs (loop3): Directory bread(block 68) failed [ 182.848352][ T9359] FAT-fs (loop3): Directory bread(block 69) failed [ 182.858792][ T9359] FAT-fs (loop3): Directory bread(block 70) failed [ 182.868009][ T9359] FAT-fs (loop3): Directory bread(block 71) failed [ 182.875690][ T9359] FAT-fs (loop3): Directory bread(block 72) failed [ 182.882603][ T9359] FAT-fs (loop3): Directory bread(block 73) failed [ 182.890473][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 182.920960][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 182.930050][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1534'. [ 183.471033][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 183.851504][ T9400] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.233275][ T9417] set_capacity_and_notify: 3 callbacks suppressed [ 184.233290][ T9417] loop1: detected capacity change from 0 to 512 [ 184.331938][ T9417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.432024][ T9417] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.585689][ T9417] EXT4-fs error (device loop1): ext4_xattr_block_find:1878: inode #12: comm syz.1.1557: corrupted xattr block 6: invalid header [ 184.726625][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.107997][ T9452] devtmpfs: Cannot enable quota on remount [ 185.284260][ T9460] loop1: detected capacity change from 0 to 256 [ 185.315080][ T9460] exfat: Deprecated parameter 'namecase' [ 185.345653][ T9460] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 185.871991][ T9474] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 185.900626][ T9454] loop2: detected capacity change from 0 to 32768 [ 185.974431][ T9454] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 186.153516][ T9454] (syz.2.1574,9454,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 186.170398][ T9454] (syz.2.1574,9454,0):ocfs2_search_one_group:1684 ERROR: status = -12 [ 186.196274][ T9454] (syz.2.1574,9454,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -12 [ 186.210228][ T9454] (syz.2.1574,9454,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12 [ 186.222755][ T9454] (syz.2.1574,9454,0):ocfs2_claim_new_inode:2226 ERROR: status = -12 [ 186.245113][ T9454] (syz.2.1574,9454,0):ocfs2_claim_new_inode:2241 ERROR: status = -12 [ 186.267831][ T9454] (syz.2.1574,9454,0):ocfs2_mknod_locked:639 ERROR: status = -12 [ 186.276995][ T9454] (syz.2.1574,9454,0):ocfs2_symlink:1944 ERROR: status = -12 [ 186.285710][ T9454] (syz.2.1574,9454,0):ocfs2_symlink:2068 ERROR: status = -12 [ 186.367139][ T9493] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 186.396377][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 186.538640][ T9497] loop3: detected capacity change from 0 to 256 [ 186.618498][ T9497] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 187.502536][ T9534] loop3: detected capacity change from 0 to 8 [ 187.587711][ T9534] SQUASHFS error: xz decompression failed, data probably corrupt [ 187.630420][ T9534] SQUASHFS error: Failed to read block 0x108: -5 [ 187.650845][ T9534] SQUASHFS error: Unable to read metadata cache entry [106] [ 187.700569][ T9534] SQUASHFS error: Unable to read inode 0x11f [ 187.763048][ T9548] virtio-fs: tag not found [ 187.955290][ T9554] loop1: detected capacity change from 0 to 512 [ 188.007723][ T9554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.039517][ T9554] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.102262][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.152300][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 188.344489][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 188.370924][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 188.399376][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 188.406363][ T9563] loop1: detected capacity change from 0 to 8192 [ 188.433189][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 188.452473][ T9563] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.453286][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 188.485220][ T9563] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 188.520211][ T9563] REISERFS (device loop1): using ordered data mode [ 188.550448][ T9] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 188.553161][ T9551] loop2: detected capacity change from 0 to 32768 [ 188.563851][ T9563] reiserfs: using flush barriers [ 188.588055][ T9563] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.603944][ T9570] loop0: detected capacity change from 0 to 1024 [ 188.612627][ T9] usb 4-1: Manufacturer: syz [ 188.621485][ T9570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.628454][ T9570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.672466][ T9563] REISERFS (device loop1): checking transaction log (loop1) [ 188.676753][ T9] usb 4-1: config 0 descriptor?? [ 188.688200][ T9551] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 188.688200][ T9551] [ 188.708485][ T9534] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.716224][ T9551] ERROR: (device loop2): remounting filesystem as read-only [ 188.728213][ T9563] REISERFS (device loop1): Using rupasov hash to sort names [ 188.730994][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 188.739909][ T9570] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.757118][ T9] smsusb:siano_media_device_register: media controller created [ 188.770500][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.777906][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.785239][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.790907][ T9563] REISERFS (device loop1): using 3.5.x disk format [ 188.793855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.799245][ T9563] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.808695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.826207][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.833685][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.842670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.847230][ T9570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.850142][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.866291][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.881535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.888884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.896133][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.903783][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.911108][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.918415][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.928103][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.935423][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.942734][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.951316][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.958627][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.965889][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.973571][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.980919][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 188.984931][ T9563] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.988266][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.004220][ T9570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.006563][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.026156][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.033481][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.041755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.049080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.056370][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.064019][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.064148][ T9563] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 189.071469][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.071518][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.097445][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.104741][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.112042][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.120192][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.127505][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.134812][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.142331][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.149623][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.156892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.164129][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.171630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.179024][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.186588][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.193940][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.201356][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.208691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.216122][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.223450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.230796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.239007][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 189.247903][ T9563] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 189.247943][ T9563] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 189.248517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.248615][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.248701][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.294342][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.301642][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.309017][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.316260][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.323496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.330723][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.337941][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.345911][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.353307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.360591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.368351][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.375680][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.376709][ T9563] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 189.382949][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.383015][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.383060][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.383104][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.424039][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.431361][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.439805][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.447224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.454531][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.461843][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.469157][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.476468][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.483870][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.491181][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.495189][ T9563] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 189.498457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.530898][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.538361][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.545843][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.553406][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.553652][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.561044][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.561098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.561142][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.592404][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.599751][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.607734][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.615083][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.622402][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.630916][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.638311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.645562][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.652796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.660042][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.667274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.674495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.681725][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.688938][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.696798][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.704100][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.711401][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.718687][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.725971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.733252][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.740554][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.747939][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.755234][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.765168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.772594][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.779917][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.787228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.794542][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.801840][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.809225][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.816524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.823824][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.834435][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.841755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.849053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.856370][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.863680][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.871013][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.878326][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.885720][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.893166][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.900887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.908303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.915613][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.923296][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.930612][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.937901][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.945163][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.952503][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.963419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.974548][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.981972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.989293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 189.996596][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.003899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.011381][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.019187][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.026674][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.042007][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.049352][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.056664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.064580][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.071887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.079196][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.086791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.094282][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.101749][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.109409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.116842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.124251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.131568][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.138898][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.146257][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.153580][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.161640][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.161958][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 190.161977][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 190.161989][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 190.163640][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.163742][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.163828][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 190.163917][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.164003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.164094][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.164177][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.164260][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.164341][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.165039][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 190.165141][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 190.167533][ T9] ------------[ cut here ]------------ [ 190.167544][ T9] ODEBUG: free active (active state 0) object: ffff888029e529e8 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 190.167968][ T9] WARNING: CPU: 0 PID: 9 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 190.168005][ T9] Modules linked in: [ 190.168027][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 190.168046][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.168065][ T9] Workqueue: usb_hub_wq hub_event [ 190.168095][ T9] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 190.168120][ T9] Code: 4c 8b 4d 00 48 c7 c7 60 7e 1c 8b 48 c7 c6 c0 7a 1c 8b 48 c7 c2 e0 7f 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b3 32 5a [ 190.168136][ T9] RSP: 0018:ffffc900000e6b38 EFLAGS: 00010282 [ 190.168155][ T9] RAX: 3a09f0991d940a00 RBX: ffffffff975401d0 RCX: 0000000000100000 [ 190.168170][ T9] RDX: ffffc90017d39000 RSI: 00000000000fffff RDI: 0000000000100000 [ 190.168184][ T9] RBP: ffffffff8ac9ea40 R08: ffffffff911a4577 R09: 1ffffffff22348ae [ 190.168198][ T9] R10: dffffc0000000000 R11: fffffbfff22348af R12: ffff888029e53000 [ 190.168213][ T9] R13: ffffffff871d7cc0 R14: ffff888029e52000 R15: ffff888029e529e8 [ 190.168228][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 190.168246][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.168260][ T9] CR2: 00007f18afff5598 CR3: 00000000620f7000 CR4: 00000000003506f0 [ 190.168277][ T9] Call Trace: [ 190.168290][ T9] [ 190.168314][ T9] slab_free_freelist_hook+0xd2/0x1a0 [ 190.168338][ T9] ? smsusb_term_device+0x1ac/0x220 [ 190.168365][ T9] __kmem_cache_free+0xba/0x1e0 [ 190.168397][ T9] smsusb_term_device+0x1ac/0x220 [ 190.168429][ T9] smsusb_probe+0x17a0/0x1e50 [ 190.168469][ T9] ? s2255_print_cfg+0x1b0/0x1b0 [ 190.168497][ T9] ? smsusb1_detectmode+0x260/0x260 [ 190.168530][ T9] ? pm_runtime_enable+0xa7/0x2c0 [ 190.168556][ T9] ? __pm_runtime_set_status+0x8ab/0xb80 [ 190.168590][ T9] usb_probe_interface+0x5c9/0xb20 [ 190.168631][ T9] ? usb_register_driver+0x3d0/0x3d0 [ 190.168655][ T9] really_probe+0x25b/0xb20 [ 190.168682][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 190.168706][ T9] __driver_probe_device+0x18c/0x330 [ 190.168733][ T9] driver_probe_device+0x4f/0x420 [ 190.168759][ T9] __device_attach_driver+0x2ca/0x510 [ 190.168786][ T9] bus_for_each_drv+0x252/0x2e0 [ 190.168807][ T9] ? coredump_store+0x90/0x90 [ 190.168828][ T9] ? bus_find_device+0x300/0x300 [ 190.168859][ T9] __device_attach+0x2c2/0x420 [ 190.168884][ T9] ? device_attach+0x20/0x20 [ 190.168903][ T9] ? __kmem_cache_free+0xba/0x1e0 [ 190.168933][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 190.168962][ T9] bus_probe_device+0x180/0x260 [ 190.168986][ T9] device_add+0x85b/0xc20 [ 190.169017][ T9] usb_set_configuration+0x1a79/0x20c0 [ 190.169080][ T9] usb_generic_driver_probe+0x8d/0x150 [ 190.169109][ T9] usb_probe_device+0x13d/0x270 [ 190.169139][ T9] ? usb_register_device_driver+0x230/0x230 [ 190.169163][ T9] really_probe+0x25b/0xb20 [ 190.169189][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 190.169213][ T9] __driver_probe_device+0x18c/0x330 [ 190.169239][ T9] driver_probe_device+0x4f/0x420 [ 190.169264][ T9] __device_attach_driver+0x2ca/0x510 [ 190.169291][ T9] bus_for_each_drv+0x252/0x2e0 [ 190.169312][ T9] ? coredump_store+0x90/0x90 [ 190.169333][ T9] ? bus_find_device+0x300/0x300 [ 190.169365][ T9] __device_attach+0x2c2/0x420 [ 190.169390][ T9] ? device_attach+0x20/0x20 [ 190.169410][ T9] ? __kmem_cache_free+0xba/0x1e0 [ 190.169439][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 190.169467][ T9] bus_probe_device+0x180/0x260 [ 190.169492][ T9] device_add+0x85b/0xc20 [ 190.169523][ T9] usb_new_device+0xa3c/0x1660 [ 190.169556][ T9] ? usb_disconnect+0x8a0/0x8a0 [ 190.169580][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.169600][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 190.169621][ T9] hub_event+0x29bf/0x49f0 [ 190.169683][ T9] ? hub_post_resume+0x120/0x120 [ 190.169701][ T9] ? read_lock_is_recursive+0x20/0x20 [ 190.169725][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.169742][ T9] ? process_scheduled_works+0x96f/0x15d0 [ 190.169764][ T9] ? process_scheduled_works+0x96f/0x15d0 [ 190.169784][ T9] process_scheduled_works+0xa5d/0x15d0 [ 190.169831][ T9] ? assign_work+0x430/0x430 [ 190.169868][ T9] ? assign_work+0x3d0/0x430 [ 190.169899][ T9] worker_thread+0xa55/0xfc0 [ 190.169922][ T9] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 190.169971][ T9] kthread+0x2fa/0x390 [ 190.169989][ T9] ? pr_cont_work+0x560/0x560 [ 190.170012][ T9] ? kthread_blkcg+0xd0/0xd0 [ 190.170031][ T9] ret_from_fork+0x48/0x80 [ 190.170052][ T9] ? kthread_blkcg+0xd0/0xd0 [ 190.170078][ T9] ret_from_fork_asm+0x11/0x20 [ 190.170119][ T9] [ 190.170129][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.170146][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 190.170163][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.170173][ T9] Workqueue: usb_hub_wq hub_event [ 190.170192][ T9] Call Trace: [ 190.170198][ T9] [ 190.170205][ T9] dump_stack_lvl+0x18c/0x250 [ 190.170227][ T9] ? show_regs_print_info+0x20/0x20 [ 190.170246][ T9] ? load_image+0x400/0x400 [ 190.170283][ T9] panic+0x2dc/0x730 [ 190.170311][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 190.170341][ T9] ? ret_from_fork_asm+0x11/0x20 [ 190.170369][ T9] __warn+0x2e0/0x470 [ 190.170388][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 190.170413][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 190.170435][ T9] report_bug+0x2be/0x4f0 [ 190.170453][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 190.170477][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 190.170500][ T9] ? debug_check_no_obj_freed+0x448/0x540 [ 190.170522][ T9] handle_bug+0xcf/0x120 [ 190.170541][ T9] exc_invalid_op+0x1a/0x50 [ 190.170559][ T9] asm_exc_invalid_op+0x1a/0x20 [ 190.170580][ T9] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 190.170603][ T9] Code: 4c 8b 4d 00 48 c7 c7 60 7e 1c 8b 48 c7 c6 c0 7a 1c 8b 48 c7 c2 e0 7f 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b3 32 5a [ 190.170617][ T9] RSP: 0018:ffffc900000e6b38 EFLAGS: 00010282 [ 190.170632][ T9] RAX: 3a09f0991d940a00 RBX: ffffffff975401d0 RCX: 0000000000100000 [ 190.170645][ T9] RDX: ffffc90017d39000 RSI: 00000000000fffff RDI: 0000000000100000 [ 190.170657][ T9] RBP: ffffffff8ac9ea40 R08: ffffffff911a4577 R09: 1ffffffff22348ae [ 190.170670][ T9] R10: dffffc0000000000 R11: fffffbfff22348af R12: ffff888029e53000 [ 190.170682][ T9] R13: ffffffff871d7cc0 R14: ffff888029e52000 R15: ffff888029e529e8 [ 190.170696][ T9] ? smsusb_onresponse+0x890/0x890 [ 190.170733][ T9] ? smsusb_onresponse+0x890/0x890 [ 190.170768][ T9] slab_free_freelist_hook+0xd2/0x1a0 [ 190.170793][ T9] ? smsusb_term_device+0x1ac/0x220 [ 190.170813][ T9] __kmem_cache_free+0xba/0x1e0 [ 190.170838][ T9] smsusb_term_device+0x1ac/0x220 [ 190.170867][ T9] smsusb_probe+0x17a0/0x1e50 [ 190.170904][ T9] ? s2255_print_cfg+0x1b0/0x1b0 [ 190.170930][ T9] ? smsusb1_detectmode+0x260/0x260 [ 190.170961][ T9] ? pm_runtime_enable+0xa7/0x2c0 [ 190.170985][ T9] ? __pm_runtime_set_status+0x8ab/0xb80 [ 190.171017][ T9] usb_probe_interface+0x5c9/0xb20 [ 190.171055][ T9] ? usb_register_driver+0x3d0/0x3d0 [ 190.171083][ T9] really_probe+0x25b/0xb20 [ 190.171107][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 190.171129][ T9] __driver_probe_device+0x18c/0x330 [ 190.171154][ T9] driver_probe_device+0x4f/0x420 [ 190.171176][ T9] __device_attach_driver+0x2ca/0x510 [ 190.171202][ T9] bus_for_each_drv+0x252/0x2e0 [ 190.171221][ T9] ? coredump_store+0x90/0x90 [ 190.171240][ T9] ? bus_find_device+0x300/0x300 [ 190.171270][ T9] __device_attach+0x2c2/0x420 [ 190.171293][ T9] ? device_attach+0x20/0x20 [ 190.171311][ T9] ? __kmem_cache_free+0xba/0x1e0 [ 190.171338][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 190.171364][ T9] bus_probe_device+0x180/0x260 [ 190.171387][ T9] device_add+0x85b/0xc20 [ 190.171415][ T9] usb_set_configuration+0x1a79/0x20c0 [ 190.171473][ T9] usb_generic_driver_probe+0x8d/0x150 [ 190.171505][ T9] usb_probe_device+0x13d/0x270 [ 190.171533][ T9] ? usb_register_device_driver+0x230/0x230 [ 190.171560][ T9] really_probe+0x25b/0xb20 [ 190.171582][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 190.171604][ T9] __driver_probe_device+0x18c/0x330 [ 190.171628][ T9] driver_probe_device+0x4f/0x420 [ 190.171652][ T9] __device_attach_driver+0x2ca/0x510 [ 190.171682][ T9] bus_for_each_drv+0x252/0x2e0 [ 190.171701][ T9] ? coredump_store+0x90/0x90 [ 190.171720][ T9] ? bus_find_device+0x300/0x300 [ 190.171750][ T9] __device_attach+0x2c2/0x420 [ 190.171777][ T9] ? device_attach+0x20/0x20 [ 190.171795][ T9] ? __kmem_cache_free+0xba/0x1e0 [ 190.171821][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 190.171848][ T9] bus_probe_device+0x180/0x260 [ 190.171871][ T9] device_add+0x85b/0xc20 [ 190.171898][ T9] usb_new_device+0xa3c/0x1660 [ 190.171926][ T9] ? usb_disconnect+0x8a0/0x8a0 [ 190.171946][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.171967][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 190.171991][ T9] hub_event+0x29bf/0x49f0 [ 190.172051][ T9] ? hub_post_resume+0x120/0x120 [ 190.172075][ T9] ? read_lock_is_recursive+0x20/0x20 [ 190.172098][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.172115][ T9] ? process_scheduled_works+0x96f/0x15d0 [ 190.172133][ T9] ? process_scheduled_works+0x96f/0x15d0 [ 190.172146][ T9] process_scheduled_works+0xa5d/0x15d0 [ 190.172189][ T9] ? assign_work+0x430/0x430 [ 190.172214][ T9] ? assign_work+0x3d0/0x430 [ 190.172240][ T9] worker_thread+0xa55/0xfc0 [ 190.172261][ T9] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 190.172302][ T9] kthread+0x2fa/0x390 [ 190.172316][ T9] ? pr_cont_work+0x560/0x560 [ 190.172337][ T9] ? kthread_blkcg+0xd0/0xd0 [ 190.172353][ T9] ret_from_fork+0x48/0x80 [ 190.172371][ T9] ? kthread_blkcg+0xd0/0xd0 [ 190.172387][ T9] ret_from_fork_asm+0x11/0x20 [ 190.172423][ T9] [ 190.179738][ T9] Kernel Offset: disabled