last executing test programs: 4.935600357s ago: executing program 2 (id=3227): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x14, 0x1000, 0x2e04, 0x6}}) 4.731606836s ago: executing program 2 (id=3229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x3}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) 4.520278567s ago: executing program 2 (id=3231): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 3.529303644s ago: executing program 2 (id=3240): r0 = openat$comedi(0xffffff9c, &(0x7f0000000480)='/dev/comedi4\x00', 0xa2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x4}) 3.320712734s ago: executing program 2 (id=3242): io_setup(0x8, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc539, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000300)={0x11, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 1.611436832s ago: executing program 2 (id=3259): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 1.441086579s ago: executing program 1 (id=3261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}}, 0x0) 1.250533587s ago: executing program 1 (id=3264): r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000180)={{}, 0x55}) 1.082017624s ago: executing program 3 (id=3265): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) 1.077096284s ago: executing program 0 (id=3266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000c884) 1.034211589s ago: executing program 1 (id=3267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0xfffffffffffffd8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) 935.256528ms ago: executing program 0 (id=3268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x7, 0x0, 0xff, 0x0, 0x79, 0x1, 0x1]}}) 860.791456ms ago: executing program 1 (id=3269): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000140)) 824.379099ms ago: executing program 0 (id=3270): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x48b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_simple={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3d45, 0x0, 0x20000000, 0x7fff, 0xe}}, @TCA_DEF_DATA={0x12, 0x3, '[)-%(@-\'\\-#\xca*\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x74}}, 0x0) 782.191473ms ago: executing program 3 (id=3271): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, 0x0, 0x0) 681.465703ms ago: executing program 1 (id=3272): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2d, 0x2, 0x0, "d52b88d40000fa44966262431e8ac11e00000000bf0b00000000000001100085", 0x32314d59}) 669.770714ms ago: executing program 3 (id=3273): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x225, 0x12) 664.690954ms ago: executing program 0 (id=3274): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {}, {0x0, 0x9}], 0x20}) 505.47581ms ago: executing program 1 (id=3275): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xcb, 0xa3, 0x70, 0x10, 0x525, 0xa4a0, 0x5cf5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0xd0, 0x5, [{{0x9, 0x4, 0xe7, 0xe6, 0x1, 0xfd, 0xae, 0x43, 0xaf, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x5, 0xf4}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) 489.706382ms ago: executing program 3 (id=3276): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xffffffffffffff1f, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 468.549134ms ago: executing program 0 (id=3277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 307.654819ms ago: executing program 3 (id=3278): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x4, 0x2, 0x587a}, 0x4, 0x80c, 0x7f}) 275.001353ms ago: executing program 0 (id=3279): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0) 0s ago: executing program 3 (id=3280): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x218, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x8, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0x6c}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) kernel console output (not intermixed with test programs): block 623: comm syz.2.1691: Attempting to read directory block (623) that is past i_size (638464) [ 228.952778][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.006159][ T7361] hub 1-1:4.128: 2 ports detected [ 229.017224][ T7361] hub 1-1:4.128: Using single TT (err -22) [ 229.089038][ T9540] loop3: detected capacity change from 0 to 4096 [ 229.178375][ T9540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.205244][ T7361] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 229.214412][ T7361] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 229.270192][ T7361] usb 1-1: USB disconnect, device number 11 [ 229.369063][ T9551] loop1: detected capacity change from 0 to 1024 [ 229.418841][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.494766][ T9553] loop2: detected capacity change from 0 to 64 [ 229.576854][ T9553] syz.2.1701: attempt to access beyond end of device [ 229.576854][ T9553] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 229.595534][ T12] hfsplus: b-tree write err: -5, ino 4 [ 229.602998][ T9553] Buffer I/O error on dev loop2, logical block 1295, async page read [ 229.633794][ T9553] syz.2.1701: attempt to access beyond end of device [ 229.633794][ T9553] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 229.684480][ T9553] Buffer I/O error on dev loop2, logical block 1295, async page read [ 229.712742][ T9557] netlink: 'syz.1.1702': attribute type 7 has an invalid length. [ 229.732166][ T28] audit: type=1800 audit(1760056334.053:56): pid=9553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1701" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 229.923793][ T9562] netlink: 'syz.1.1705': attribute type 22 has an invalid length. [ 230.703518][ T9592] netlink: 'syz.0.1720': attribute type 1 has an invalid length. [ 230.742922][ T9592] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1720'. [ 230.784638][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 230.971474][ T9602] netlink: 'syz.2.1725': attribute type 3 has an invalid length. [ 231.044631][ T9600] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 231.159042][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 231.778594][ T9632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1739'. [ 232.992665][ T9640] loop3: detected capacity change from 0 to 40427 [ 233.034607][ T9640] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 233.080154][ T9640] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 233.129258][ T9640] F2FS-fs (loop3): invalid crc value [ 233.196031][ T9640] F2FS-fs (loop3): Found nat_bits in checkpoint [ 233.337806][ T9654] loop1: detected capacity change from 0 to 32768 [ 233.363107][ T9654] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.1750 (9654) [ 233.401540][ T9678] dlm: non-version read from control device 0 [ 233.435287][ T9640] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 233.445634][ T9654] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 233.464747][ T9640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.485294][ T9654] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.513427][ T9654] BTRFS info (device loop1): using free space tree [ 233.755447][ T9654] BTRFS info (device loop1): enabling ssd optimizations [ 233.762568][ T9654] BTRFS info (device loop1): auto enabling async discard [ 234.187153][ T5789] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 234.828050][ T9718] net_ratelimit: 679 callbacks suppressed [ 234.828072][ T9718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.841701][ T9704] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 235.283405][ T9732] loop2: detected capacity change from 0 to 64 [ 235.345611][ T9732] Trying to free block not in datazone [ 236.514260][ T9770] geneve2: entered promiscuous mode [ 236.524126][ T9770] geneve2: entered allmulticast mode [ 236.789634][ T9777] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 236.812852][ T9777] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 237.059510][ T9788] loop1: detected capacity change from 0 to 256 [ 237.177272][ T9788] FAT-fs (loop1): Directory bread(block 64) failed [ 237.184287][ T9788] FAT-fs (loop1): Directory bread(block 65) failed [ 237.268295][ T9788] FAT-fs (loop1): Directory bread(block 66) failed [ 237.303993][ T9788] FAT-fs (loop1): Directory bread(block 67) failed [ 237.324647][ T9788] FAT-fs (loop1): Directory bread(block 68) failed [ 237.331504][ T9788] FAT-fs (loop1): Directory bread(block 69) failed [ 237.346680][ T9788] FAT-fs (loop1): Directory bread(block 70) failed [ 237.353483][ T9788] FAT-fs (loop1): Directory bread(block 71) failed [ 237.362130][ T9788] FAT-fs (loop1): Directory bread(block 72) failed [ 237.384236][ T9788] FAT-fs (loop1): Directory bread(block 73) failed [ 237.423202][ T9795] loop3: detected capacity change from 0 to 2048 [ 237.490963][ T9795] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 237.586612][ T9800] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.716014][ T9795] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 237.748436][ T9795] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 237.814703][ T9795] Remounting filesystem read-only [ 237.827194][ T9795] NILFS (loop3): error -5 truncating bmap (ino=16) [ 238.006116][ T5796] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 238.044540][ T5796] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 238.078484][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.118618][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.142409][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.169630][ T5796] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 238.808138][ T9838] netlink: 1372 bytes leftover after parsing attributes in process `syz.0.1830'. [ 238.891251][ T9840] loop2: detected capacity change from 0 to 8 [ 238.987217][ T9840] SQUASHFS error: lzo decompression failed, data probably corrupt [ 239.019542][ T9840] SQUASHFS error: Failed to read block 0x1dd: -5 [ 239.041901][ T9840] SQUASHFS error: Unable to read metadata cache entry [1db] [ 239.057353][ T9846] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 239.072707][ T9840] SQUASHFS error: Unable to read inode 0xa7 [ 239.091088][ T9846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.384101][ T9854] loop3: detected capacity change from 0 to 256 [ 239.916865][ T9864] loop1: detected capacity change from 0 to 32768 [ 239.962595][ T9864] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 240.000339][ T9864] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 240.022082][ T9864] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 240.033411][ T9864] OCFS2: Returning error to the calling process. [ 240.040218][ T9864] (syz.1.1843,9864,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 240.049717][ T9864] (syz.1.1843,9864,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 240.059884][ T9864] (syz.1.1843,9864,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 240.069180][ T9864] (syz.1.1843,9864,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 240.078602][ T9864] (syz.1.1843,9864,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 240.087330][ T9864] (syz.1.1843,9864,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 240.095901][ T9864] (syz.1.1843,9864,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 240.105121][ T9864] (syz.1.1843,9864,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 240.114198][ T9864] (syz.1.1843,9864,1):ocfs2_mknod:298 ERROR: status = -5 [ 240.122053][ T9864] (syz.1.1843,9864,1):ocfs2_mknod:502 ERROR: status = -5 [ 240.129960][ T9864] (syz.1.1843,9864,1):ocfs2_mkdir:659 ERROR: status = -5 [ 240.181280][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 240.433437][ T9876] IPv6: Can't replace route, no match found [ 240.637176][ T9882] loop0: detected capacity change from 0 to 2048 [ 240.678152][ T9882] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.778238][ T9887] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.884738][ T9882] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 240.924522][ T9882] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 240.951743][ T9882] Remounting filesystem read-only [ 240.969534][ T9882] NILFS (loop0): error -5 truncating bmap (ino=16) [ 240.977439][ T9892] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 241.007643][ T9892] netlink: 'syz.2.1854': attribute type 2 has an invalid length. [ 241.076779][ T5786] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 241.085100][ T5786] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 241.092545][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 241.128594][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 241.150575][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 241.165125][ T5786] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 241.219612][ T9899] sctp: [Deprecated]: syz.3.1860 (pid 9899) Use of int in max_burst socket option deprecated. [ 241.219612][ T9899] Use struct sctp_assoc_value instead [ 241.947343][ T9919] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 242.192596][ T9903] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 242.755906][ T9944] loop1: detected capacity change from 0 to 256 [ 242.870827][ T9944] FAT-fs (loop1): Directory bread(block 64) failed [ 242.894647][ T9944] FAT-fs (loop1): Directory bread(block 65) failed [ 242.901539][ T9944] FAT-fs (loop1): Directory bread(block 66) failed [ 242.923437][ T9947] loop2: detected capacity change from 0 to 1764 [ 242.957893][ T9949] loop3: detected capacity change from 0 to 64 [ 242.969586][ T9944] FAT-fs (loop1): Directory bread(block 67) failed [ 242.987510][ T9944] FAT-fs (loop1): Directory bread(block 68) failed [ 243.002587][ T9944] FAT-fs (loop1): Directory bread(block 69) failed [ 243.013051][ T9944] FAT-fs (loop1): Directory bread(block 70) failed [ 243.045757][ T9944] FAT-fs (loop1): Directory bread(block 71) failed [ 243.052678][ T9944] FAT-fs (loop1): Directory bread(block 72) failed [ 243.070387][ T9944] FAT-fs (loop1): Directory bread(block 73) failed [ 243.640788][ T9966] loop0: detected capacity change from 0 to 8 [ 243.693164][ T9969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1895'. [ 243.749823][ T9966] SQUASHFS error: lzo decompression failed, data probably corrupt [ 243.800191][ T9966] SQUASHFS error: Failed to read block 0x1dd: -5 [ 243.826037][ T9966] SQUASHFS error: Unable to read metadata cache entry [1db] [ 243.847622][ T9973] xt_limit: Overflow, try lower: 65536/2147483648 [ 243.864617][ T9966] SQUASHFS error: Unable to read inode 0xa7 [ 243.922080][ T9975] loop1: detected capacity change from 0 to 128 [ 243.945505][ T9975] EXT4-fs: Ignoring removed nobh option [ 244.025944][ T9975] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.117057][ T9975] ext4 filesystem being mounted at /469/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.226971][ T9975] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.1898: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 244.341661][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.507385][ T9997] CIFS mount error: No usable UNC path provided in device string! [ 244.507385][ T9997] [ 244.514966][ T5859] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 244.543154][ T9997] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 244.685779][T10003] loop3: detected capacity change from 0 to 8 [ 244.742735][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.763155][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 244.778945][T10002] loop1: detected capacity change from 0 to 2048 [ 244.792977][T10003] SQUASHFS error: lzo decompression failed, data probably corrupt [ 244.804441][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 244.811965][T10003] SQUASHFS error: Failed to read block 0x1dd: -5 [ 244.835080][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 244.842954][T10003] SQUASHFS error: Unable to read metadata cache entry [1db] [ 244.862152][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 244.882890][T10003] SQUASHFS error: Unable to read inode 0xa7 [ 244.884859][T10006] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.927270][ T5859] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.948577][ T5859] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.968156][ T5859] usb 1-1: Manufacturer: syz [ 244.984188][ T5859] usb 1-1: config 0 descriptor?? [ 245.023188][ T28] audit: type=1800 audit(1760056349.343:57): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1910" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 245.043502][T10008] loop2: detected capacity change from 0 to 2048 [ 245.057918][T10002] syz.1.1910: attempt to access beyond end of device [ 245.057918][T10002] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 245.071378][T10008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.084712][T10002] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 245.101027][T10002] NILFS (loop1): error -5 truncating bmap (ino=16) [ 245.226102][ T23] usb 1-1: USB disconnect, device number 12 [ 245.549861][T10018] loop1: detected capacity change from 0 to 764 [ 245.640296][T10018] Symlink component flag not implemented [ 245.655636][T10018] Symlink component flag not implemented [ 245.664262][T10018] Symlink component flag not implemented (128) [ 245.672091][T10018] Symlink component flag not implemented (122) [ 246.523455][T10048] loop0: detected capacity change from 0 to 64 [ 246.711984][T10022] loop3: detected capacity change from 0 to 32768 [ 246.813820][T10022] ea_get: invalid extended attribute [ 247.004970][T10059] --map-set only usable from mangle table [ 247.280971][T10068] loop3: detected capacity change from 0 to 512 [ 247.354251][T10068] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1942: iget: bad extended attribute block 1 [ 247.385674][T10068] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1942: couldn't read orphan inode 15 (err -117) [ 247.447594][T10068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.538376][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.835991][T10056] loop0: detected capacity change from 0 to 32768 [ 247.906107][T10056] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 248.180760][T10056] XFS (loop0): Ending clean mount [ 248.222221][T10056] XFS (loop0): Quotacheck needed: Please wait. [ 248.409974][T10056] XFS (loop0): Quotacheck: Done. [ 248.675403][T10088] loop3: detected capacity change from 0 to 32768 [ 248.722020][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 248.793755][T10111] loop1: detected capacity change from 0 to 64 [ 248.815571][T10088] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 249.017021][T10088] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 249.111832][T10088] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 249.164872][T10088] OCFS2: Returning error to the calling process. [ 249.194623][T10088] (syz.3.1948,10088,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 249.247823][T10088] (syz.3.1948,10088,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 249.275185][T10088] (syz.3.1948,10088,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 249.283249][T10088] (syz.3.1948,10088,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 249.314548][T10088] (syz.3.1948,10088,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 249.341203][T10088] (syz.3.1948,10088,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 249.351320][T10088] (syz.3.1948,10088,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 249.374787][T10088] (syz.3.1948,10088,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 249.384032][T10088] (syz.3.1948,10088,1):ocfs2_mknod:298 ERROR: status = -5 [ 249.434276][T10122] loop1: detected capacity change from 0 to 256 [ 249.440890][T10088] (syz.3.1948,10088,1):ocfs2_mknod:502 ERROR: status = -5 [ 249.457085][T10088] (syz.3.1948,10088,1):ocfs2_mkdir:659 ERROR: status = -5 [ 249.493647][T10122] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.539117][T10122] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 249.575483][ T5796] ocfs2: Unmounting device (7,3) on (node local) [ 250.173426][T10143] loop3: detected capacity change from 0 to 2048 [ 250.227382][T10143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.468644][T10153] loop1: detected capacity change from 0 to 256 [ 250.487066][T10151] xt_limit: Overflow, try lower: 0/0 [ 250.632369][T10153] FAT-fs (loop1): Directory bread(block 64) failed [ 250.671249][T10153] FAT-fs (loop1): Directory bread(block 65) failed [ 250.688416][T10153] FAT-fs (loop1): Directory bread(block 66) failed [ 250.716338][T10153] FAT-fs (loop1): Directory bread(block 67) failed [ 250.730694][T10153] FAT-fs (loop1): Directory bread(block 68) failed [ 250.738513][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 250.758687][T10153] FAT-fs (loop1): Directory bread(block 69) failed [ 250.764728][T10158] openvswitch: netlink: Missing key (keys=40, expected=80) [ 250.775686][T10153] FAT-fs (loop1): Directory bread(block 70) failed [ 250.782570][T10153] FAT-fs (loop1): Directory bread(block 71) failed [ 250.814546][T10153] FAT-fs (loop1): Directory bread(block 72) failed [ 250.821445][T10153] FAT-fs (loop1): Directory bread(block 73) failed [ 251.362689][T10149] loop0: detected capacity change from 0 to 32768 [ 251.472736][T10149] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 251.656680][T10186] loop1: detected capacity change from 0 to 512 [ 251.717398][T10186] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1991: iget: bad extended attribute block 1 [ 251.796618][T10186] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1991: couldn't read orphan inode 15 (err -117) [ 251.847255][T10186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.905528][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 252.062538][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.248189][T10200] loop2: detected capacity change from 0 to 764 [ 252.320694][T10200] Symlink component flag not implemented [ 252.344512][T10200] Symlink component flag not implemented [ 252.350532][T10200] Symlink component flag not implemented (128) [ 252.396399][T10200] Symlink component flag not implemented (122) [ 252.498297][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 252.541956][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 253.073063][T10226] loop3: detected capacity change from 0 to 512 [ 253.092377][T10226] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.158404][T10226] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 253.205186][T10226] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2010: bg 0: block 248: padding at end of block bitmap is not set [ 253.246189][T10233] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2012'. [ 253.275390][T10226] Quota error (device loop3): write_blk: dquota write failed [ 253.283281][T10226] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 253.314593][T10226] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.2010: Failed to acquire dquot type 1 [ 253.375731][T10226] EXT4-fs (loop3): 1 truncate cleaned up [ 253.383066][T10226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 253.519117][T10238] bridge1: entered allmulticast mode [ 253.621301][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 253.689964][ T1135] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 253.715982][ T1135] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:7: Failed to release dquot type 1 [ 253.885598][T10249] overlay: Bad value for 'verity' [ 254.116809][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2025'. [ 254.209425][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 254.244155][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 254.785936][T10282] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 254.812212][T10284] netlink: 'syz.3.2036': attribute type 1 has an invalid length. [ 254.821269][T10282] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2037'. [ 254.843405][T10282] nbd: must specify at least one socket [ 254.847254][T10288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2038'. [ 254.864298][T10288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2038'. [ 255.485319][ T28] audit: type=1326 audit(1760056359.813:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a578eec9 code=0x7ffc0000 [ 255.563836][ T28] audit: type=1326 audit(1760056359.833:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a578eec9 code=0x7ffc0000 [ 255.635448][ T28] audit: type=1326 audit(1760056359.843:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f12a578eec9 code=0x7ffc0000 [ 255.716354][ T28] audit: type=1326 audit(1760056359.843:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a578eec9 code=0x7ffc0000 [ 255.781232][ T28] audit: type=1326 audit(1760056359.843:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a578eec9 code=0x7ffc0000 [ 255.859629][T10321] netlink: 'syz.3.2055': attribute type 10 has an invalid length. [ 255.898100][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2055'. [ 255.934138][T10321] veth0_vlan: entered allmulticast mode [ 255.948965][T10321] bridge0: port 3(veth0_vlan) entered blocking state [ 255.961644][T10321] bridge0: port 3(veth0_vlan) entered disabled state [ 256.006319][T10321] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 256.047384][T10327] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2058'. [ 256.165048][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.171806][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.298455][T10336] loop2: detected capacity change from 0 to 512 [ 256.376112][T10336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.404799][T10336] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.650196][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.845342][T10357] binder: 10356:10357 ioctl c00c6211 0 returned -14 [ 257.019913][T10359] loop0: detected capacity change from 0 to 2048 [ 257.050341][T10359] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4294963200, location=4294963200 [ 257.091048][T10359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.650793][T10382] loop2: detected capacity change from 0 to 1024 [ 257.732509][T10382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.917031][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.107018][T10398] loop1: detected capacity change from 0 to 64 [ 258.481430][T10410] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 258.512886][T10410] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2097'. [ 258.582681][T10412] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 258.620793][T10412] bridge2: entered promiscuous mode [ 258.636783][T10412] bridge2: entered allmulticast mode [ 258.651159][T10416] loop2: detected capacity change from 0 to 256 [ 258.673274][T10408] loop1: detected capacity change from 0 to 4096 [ 258.880891][T10408] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 258.936993][T10408] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 259.065179][ T6300] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.883968][T10455] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2119'. [ 260.064189][T10458] loop2: detected capacity change from 0 to 2048 [ 260.135914][T10458] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=4294963200, location=4294963200 [ 260.172425][T10458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.329489][T10467] loop0: detected capacity change from 0 to 1764 [ 260.603519][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2128'. [ 260.688660][T10481] mmap: syz.3.2131 (10481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.225049][T10497] loop3: detected capacity change from 0 to 2048 [ 261.272902][T10497] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4294963200, location=4294963200 [ 261.315527][T10497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.469539][T10501] loop2: detected capacity change from 0 to 4096 [ 261.518295][T10501] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 261.680267][T10501] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 261.710428][T10501] ntfs3: loop2: mft corrupted [ 261.724609][T10501] ntfs3: loop2: Failed to load $Extend (-22). [ 261.744625][T10501] ntfs3: loop2: Failed to initialize $Extend. [ 262.098920][T10526] comedi comedi1: dac02: I/O port conflict (0x4,8) [ 262.312410][T10534] netlink: 'syz.1.2156': attribute type 8 has an invalid length. [ 262.447273][T10540] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2159'. [ 262.465850][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 262.481701][T10540] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2159'. [ 262.491552][T10540] netlink: 'syz.2.2159': attribute type 2 has an invalid length. [ 262.500092][T10540] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2159'. [ 262.636964][ T28] audit: type=1326 audit(1760056366.963:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 262.723734][ T28] audit: type=1326 audit(1760056366.963:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 262.792945][ T28] audit: type=1326 audit(1760056366.983:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 262.858380][ T28] audit: type=1326 audit(1760056366.983:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 262.929320][ T28] audit: type=1326 audit(1760056367.003:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 262.987579][ T28] audit: type=1326 audit(1760056367.003:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 263.019634][ T28] audit: type=1326 audit(1760056367.003:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 263.080234][ T28] audit: type=1326 audit(1760056367.003:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 263.130267][ T28] audit: type=1326 audit(1760056367.003:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 263.171456][T10560] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2168'. [ 263.196018][T10564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2171'. [ 263.214575][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 263.232889][T10564] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2171'. [ 263.272654][T10564] netlink: 'syz.1.2171': attribute type 2 has an invalid length. [ 263.291169][T10564] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2171'. [ 263.384691][T10563] loop0: detected capacity change from 0 to 4096 [ 263.624927][T10563] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 263.659671][T10573] loop1: detected capacity change from 0 to 128 [ 263.671683][T10563] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 263.872810][T10578] netlink: 'syz.3.2179': attribute type 10 has an invalid length. [ 263.890471][T10578] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2179'. [ 263.916873][T10578] openvswitch: netlink: Flow key attr not present in new flow. [ 264.121136][T10586] netlink: 'syz.2.2182': attribute type 3 has an invalid length. [ 264.129779][T10586] netlink: 'syz.2.2182': attribute type 2 has an invalid length. [ 264.495663][T10600] loop0: detected capacity change from 0 to 1024 [ 264.566524][T10600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.785584][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.581443][T10644] loop3: detected capacity change from 0 to 512 [ 265.608574][T10644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.656998][T10644] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.693028][T10644] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 265.701694][T10644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 265.714811][T10644] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 265.747528][T10644] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 265.846525][T10644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 265.940293][T10644] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 265.964599][ T787] IPVS: starting estimator thread 0... [ 266.074668][T10658] IPVS: using max 19 ests per chain, 45600 per kthread [ 266.146404][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.609466][ T28] audit: type=1400 audit(1760056370.933:72): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10679 comm="syz.1.2224" [ 267.384591][ T5839] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 267.605340][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 267.637098][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.693432][ T5839] usb 4-1: config 0 has no interfaces? [ 267.733078][ T5839] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.778069][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.799199][ T5839] usb 4-1: Product: syz [ 267.803624][ T5839] usb 4-1: Manufacturer: syz [ 267.829266][ T5839] usb 4-1: SerialNumber: syz [ 267.842926][ T5839] r8152-cfgselector 4-1: config 0 descriptor?? [ 267.959677][ T5791] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 268.125553][ T5839] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 268.171386][T10736] __nla_validate_parse: 10 callbacks suppressed [ 268.171406][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2252'. [ 268.364722][ T5859] usb 4-1: USB disconnect, device number 9 [ 268.914132][T10760] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 268.955135][T10760] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 269.140631][T10752] loop2: detected capacity change from 0 to 32768 [ 269.192571][T10752] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 269.243853][T10752] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 269.331790][T10752] (syz.2.2260,10752,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 269.414737][T10752] (syz.2.2260,10752,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 269.424152][T10752] (syz.2.2260,10752,1):ocfs2_mknod:298 ERROR: status = -2 [ 269.472720][T10752] (syz.2.2260,10752,1):ocfs2_mknod:502 ERROR: status = -2 [ 269.490623][T10752] (syz.2.2260,10752,1):ocfs2_mkdir:659 ERROR: status = -2 [ 269.600263][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 269.912944][T10786] loop0: detected capacity change from 0 to 512 [ 269.958534][T10786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.985534][ T28] audit: type=1400 audit(1760056374.313:73): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10790 comm="syz.3.2277" [ 270.035140][T10786] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 270.138939][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.318085][T10802] loop0: detected capacity change from 0 to 64 [ 270.404500][ T5839] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 270.610211][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.631556][ T5839] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 270.662072][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 270.687728][ T5839] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 270.719185][ T5839] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 270.744976][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.766805][ T5839] usb 2-1: config 0 descriptor?? [ 270.983765][ T5839] hdpvr 2-1:0.0: firmware version 0x8 dated [ 271.014700][ T28] audit: type=1400 audit(1760056375.333:74): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10822 comm="syz.2.2291" [ 271.104260][T10827] loop0: detected capacity change from 0 to 512 [ 271.212591][ T5839] hdpvr 2-1:0.0: device init failed [ 271.220774][ T5839] hdpvr: probe of 2-1:0.0 failed with error -12 [ 271.221006][T10827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.231164][ T5839] usb 2-1: USB disconnect, device number 12 [ 271.261624][T10827] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.315999][T10827] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2293: corrupted xattr block 33: invalid ea_ino [ 271.346112][T10827] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 271.454683][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.069060][T10836] loop2: detected capacity change from 0 to 32768 [ 272.102752][T10836] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2296 (10836) [ 272.115852][ T5839] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 272.150130][T10836] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.169431][T10836] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 272.188286][T10836] BTRFS info (device loop2): using free space tree [ 272.304846][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 272.313402][ T5839] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 272.354596][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.370809][T10836] BTRFS info (device loop2): enabling ssd optimizations [ 272.390287][ T5839] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 272.398744][T10836] BTRFS info (device loop2): auto enabling async discard [ 272.410819][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.420857][ T5839] usb 1-1: Product: syz [ 272.431210][ T5839] usb 1-1: Manufacturer: syz [ 272.448002][ T5839] usb 1-1: SerialNumber: syz [ 272.469458][ T5839] usb 1-1: config 0 descriptor?? [ 272.491972][ T5839] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 272.539504][ T5793] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.612193][ T6118] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (6118) [ 272.731604][ T5839] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 272.750351][ T5839] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 272.772633][ T5839] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 272.958531][ T7361] usb 1-1: USB disconnect, device number 13 [ 273.596868][T10871] tmpfs: Bad value for 'mpol' [ 273.617241][ T28] audit: type=1400 audit(1760056377.943:75): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10868 comm="syz.0.2302" [ 273.827613][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 274.418188][T10867] loop3: detected capacity change from 0 to 32768 [ 274.450271][T10867] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2305 (10867) [ 274.478625][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2316'. [ 274.502365][T10867] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 274.554634][T10867] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 274.563953][T10867] BTRFS info (device loop3): force zlib compression, level 3 [ 274.594402][T10867] BTRFS info (device loop3): force clearing of disk cache [ 274.601786][T10867] BTRFS info (device loop3): turning off barriers [ 274.616791][T10867] BTRFS info (device loop3): doing ref verification [ 274.623913][T10867] BTRFS info (device loop3): enabling disk space caching [ 274.664434][T10867] BTRFS info (device loop3): disk space caching is enabled [ 274.855300][T10867] BTRFS info (device loop3): enabling ssd optimizations [ 274.862777][T10867] BTRFS info (device loop3): auto enabling async discard [ 274.944134][T10867] BTRFS info (device loop3): rebuilding free space tree [ 275.144491][T10867] BTRFS info (device loop3): disabling free space tree [ 275.151730][T10867] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 275.167658][T10883] loop0: detected capacity change from 0 to 32768 [ 275.215121][T10867] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 275.306792][T10883] ERROR: (device loop0): dtSearch: stack overrun! [ 275.306792][T10883] [ 275.356961][T10883] ERROR: (device loop0): remounting filesystem as read-only [ 275.384648][T10883] btstack dump: [ 275.391992][T10883] bn = 0, index = 4 [ 275.408177][T10883] bn = 0, index = 4 [ 275.424417][T10883] bn = 0, index = 4 [ 275.432659][T10883] bn = 0, index = 4 [ 275.450325][T10883] bn = 0, index = 4 [ 275.460442][T10883] bn = 0, index = 4 [ 275.493320][T10883] bn = 0, index = 4 [ 275.522640][T10883] bn = 0, index = 0 [ 275.542985][T10883] jfs_lookup: dtSearch returned -5 [ 275.622631][ T5796] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 275.623065][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2326'. [ 276.022891][T10941] loop3: detected capacity change from 0 to 512 [ 276.143831][T10941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.204611][T10941] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.374625][T10941] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2328: corrupted xattr block 33: invalid ea_ino [ 276.469272][T10941] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 276.678483][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.174901][ T7361] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 277.374954][ T7361] usb 3-1: Using ep0 maxpacket: 16 [ 277.393175][ T7361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.419402][ T7361] usb 3-1: config 0 has no interfaces? [ 277.438866][ T7361] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 277.454841][ T7361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.481445][ T7361] usb 3-1: Product: syz [ 277.494472][ T7361] usb 3-1: Manufacturer: syz [ 277.506322][ T7361] usb 3-1: SerialNumber: syz [ 277.522355][ T7361] r8152-cfgselector 3-1: config 0 descriptor?? [ 277.602790][T10986] loop0: detected capacity change from 0 to 4096 [ 277.635103][T10986] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 277.673466][T10986] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 277.705632][T10986] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 277.745423][T10986] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 277.769168][ T7361] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 277.800655][T10986] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 277.845999][T10986] ntfs: volume version 3.1. [ 277.853496][T10986] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 277.873124][T10986] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 277.922024][T10986] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 277.939156][T10986] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 277.951545][T10986] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 278.021995][ T7361] usb 3-1: USB disconnect, device number 13 [ 278.864742][T11000] loop3: detected capacity change from 0 to 32768 [ 278.926586][T11000] find_entry called with index >= next_index [ 278.961173][T11000] find_entry called with index >= next_index [ 279.000520][T11000] find_entry called with index >= next_index [ 279.055495][T11020] xt_CT: No such helper "snmp_trap" [ 279.286454][T11027] x_tables: duplicate underflow at hook 4 [ 279.549237][T11035] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 279.576481][T11035] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 279.594623][T11035] overlayfs: missing 'lowerdir' [ 279.624485][ T5839] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 279.743258][T11019] loop1: detected capacity change from 0 to 32768 [ 279.755871][T11019] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2368 (11019) [ 279.782171][T11019] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 279.813821][T11019] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 279.824491][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 279.832211][T11019] BTRFS info (device loop1): force zlib compression, level 3 [ 279.841353][T11019] BTRFS info (device loop1): force clearing of disk cache [ 279.849618][T11019] BTRFS info (device loop1): turning off barriers [ 279.863442][T11019] BTRFS info (device loop1): doing ref verification [ 279.864034][ T5839] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 279.895735][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.905847][ T5839] usb 4-1: Product: syz [ 279.921986][T11019] BTRFS info (device loop1): enabling disk space caching [ 279.928003][ T5839] usb 4-1: Manufacturer: syz [ 279.937881][T11019] BTRFS info (device loop1): disk space caching is enabled [ 279.954465][ T5839] usb 4-1: SerialNumber: syz [ 279.975743][ T5839] usb 4-1: config 0 descriptor?? [ 280.094083][T11019] BTRFS info (device loop1): enabling ssd optimizations [ 280.130862][T11019] BTRFS info (device loop1): auto enabling async discard [ 280.172736][T11019] BTRFS info (device loop1): rebuilding free space tree [ 280.194737][ T5839] snd-usb-audio: probe of 4-1:0.0 failed with error -71 [ 280.195595][ T5791] Bluetooth: hci0: unexpected event for opcode 0x203d [ 280.213132][ T5839] usb 4-1: USB disconnect, device number 10 [ 280.269216][T11063] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 280.302351][T11019] BTRFS info (device loop1): disabling free space tree [ 280.330933][T11019] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 280.361468][T11019] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 280.572884][ T5789] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 281.989085][T11110] loop0: detected capacity change from 0 to 512 [ 282.018572][T11110] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.118768][T11110] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2404: invalid indirect mapped block 4294967295 (level 1) [ 282.235335][T11110] EXT4-fs (loop0): Remounting filesystem read-only [ 282.242337][T11110] EXT4-fs (loop0): 2 truncates cleaned up [ 282.252045][T11110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.397294][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.485597][T11124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.601827][T11123] loop3: detected capacity change from 0 to 4096 [ 282.651766][T11123] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 282.731685][T11132] loop0: detected capacity change from 0 to 128 [ 282.775284][T11132] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 282.827497][T11123] ntfs3: loop3: failed to convert "c46c" to iso8859-15 [ 282.899334][T11132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.198398][T11143] netlink: 'syz.1.2420': attribute type 63 has an invalid length. [ 283.220567][T11143] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2420'. [ 283.367730][T11149] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 283.447994][T11152] loop0: detected capacity change from 0 to 256 [ 283.509298][T11152] FAT-fs (loop0): Directory bread(block 64) failed [ 283.528573][T11152] FAT-fs (loop0): Directory bread(block 65) failed [ 283.559589][T11152] FAT-fs (loop0): Directory bread(block 66) failed [ 283.605375][T11152] FAT-fs (loop0): Directory bread(block 67) failed [ 283.612655][T11152] FAT-fs (loop0): Directory bread(block 68) failed [ 283.652923][T11152] FAT-fs (loop0): Directory bread(block 69) failed [ 283.683151][T11152] FAT-fs (loop0): Directory bread(block 70) failed [ 283.724672][T11152] FAT-fs (loop0): Directory bread(block 71) failed [ 283.731560][T11152] FAT-fs (loop0): Directory bread(block 72) failed [ 283.769021][T11152] FAT-fs (loop0): Directory bread(block 73) failed [ 284.166644][T11175] loop2: detected capacity change from 0 to 2048 [ 284.225176][T11175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.563355][T11189] loop3: detected capacity change from 0 to 512 [ 284.646697][T11189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.700313][T11189] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.746632][T11189] __quota_error: 11 callbacks suppressed [ 284.746652][T11189] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 284.792758][T11189] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 284.833781][T11189] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.2441: Failed to acquire dquot type 0 [ 284.913825][T11189] EXT4-fs (loop3): Remounting filesystem read-only [ 285.092670][T11206] loop2: detected capacity change from 0 to 16 [ 285.102761][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.122819][T11206] erofs: (device loop2): mounted with root inode @ nid 36. [ 285.614982][T11214] loop0: detected capacity change from 0 to 8192 [ 285.646018][T11214] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 285.667376][T11214] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 285.676997][T11214] REISERFS (device loop0): using ordered data mode [ 285.686940][T11214] reiserfs: using flush barriers [ 285.721048][T11214] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.835491][T11214] REISERFS (device loop0): checking transaction log (loop0) [ 285.927104][T11229] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2458'. [ 285.944521][T11228] loop1: detected capacity change from 0 to 1024 [ 286.074694][T11214] REISERFS (device loop0): Using tea hash to sort names [ 286.107113][T11214] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 286.176461][ T2925] hfsplus: b-tree write err: -5, ino 4 [ 286.328673][T11233] ip6gre1: entered promiscuous mode [ 286.522356][T11223] loop2: detected capacity change from 0 to 32768 [ 286.566128][T11223] (syz.2.2457,11223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.605293][T11223] (syz.2.2457,11223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.707626][T11223] JBD2: Ignoring recovery information on journal [ 286.833756][T11223] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 287.158614][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 287.387362][T11260] Timeout policy `syz1' can only be used by L3 protocol number 2561 [ 287.600125][T11267] xt_ecn: cannot match TCP bits for non-tcp packets [ 287.770594][T11271] bridge2: entered promiscuous mode [ 287.919894][ T28] audit: type=1326 audit(1760056392.243:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.3.2483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x0 [ 288.244070][T11293] xt_limit: Overflow, try lower: 2147483649/3300 [ 288.320372][T11296] loop3: detected capacity change from 0 to 64 [ 288.653891][T11307] 9pnet_fd: p9_fd_create_unix (11307): problem connecting socket: ./file0: -111 [ 289.864652][T11353] syz.3.2520[11353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.864802][T11353] syz.3.2520[11353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.985062][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 290.018892][T11359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2522'. [ 290.043393][T11359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2522'. [ 290.194737][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 290.245627][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 290.274380][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.282649][ T23] usb 3-1: Product: syz [ 290.299447][ T23] usb 3-1: Manufacturer: syz [ 290.313302][ T23] usb 3-1: SerialNumber: syz [ 290.385467][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 290.398297][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.418850][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.447792][ T9] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 290.464652][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.472888][ T9] usb 1-1: Product: syz [ 290.483029][ T9] usb 1-1: Manufacturer: syz [ 290.488123][ T9] usb 1-1: SerialNumber: syz [ 290.499439][ T9] usb 1-1: config 0 descriptor?? [ 290.513638][ T9] qmi_wwan 1-1:0.0: bogus CDC Union: master=101, slave=0 [ 290.532627][ T9] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 290.627091][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 290.752016][ T9] usb 1-1: USB disconnect, device number 14 [ 290.759617][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 290.795306][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 290.814806][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 290.827434][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 290.839308][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 290.853992][ T23] lan78xx: probe of 3-1:1.0 failed with error -71 [ 290.875702][ T23] usb 3-1: USB disconnect, device number 14 [ 290.894569][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 290.998187][T11385] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 291.009653][T11385] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2536'. [ 291.084481][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 291.096930][ T787] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 291.106775][ T787] usb 4-1: config 0 has no interface number 0 [ 291.112985][ T787] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.134377][ T787] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.154439][ T787] usb 4-1: config 0 interface 85 has no altsetting 0 [ 291.169369][ T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 291.179571][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.188216][ T787] usb 4-1: Product: syz [ 291.192820][ T787] usb 4-1: Manufacturer: syz [ 291.198213][ T787] usb 4-1: SerialNumber: syz [ 291.206145][ T787] usb 4-1: config 0 descriptor?? [ 291.260357][T11391] loop1: detected capacity change from 0 to 64 [ 291.630897][ T787] appletouch 4-1:0.85: Failed to request geyser raw mode [ 291.651353][ T787] appletouch: probe of 4-1:0.85 failed with error -5 [ 291.681905][ T787] usb 4-1: USB disconnect, device number 11 [ 291.807430][T11405] bridge2: entered promiscuous mode [ 292.064209][T11413] No source specified [ 292.417613][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 292.472791][T11424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2555'. [ 292.514812][T11407] loop0: detected capacity change from 0 to 32768 [ 292.542143][T11407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2546 (11407) [ 292.590012][T11407] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.604596][T11407] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 292.660565][T11407] BTRFS info (device loop0): enabling disk space caching [ 292.690099][T11407] BTRFS info (device loop0): disabling tree log [ 292.724487][T11407] BTRFS info (device loop0): turning off barriers [ 292.745749][T11407] BTRFS info (device loop0): setting nodatacow, compression disabled [ 292.753934][T11407] BTRFS info (device loop0): doing ref verification [ 292.794634][T11407] BTRFS info (device loop0): force clearing of disk cache [ 292.802266][T11407] BTRFS warning (device loop0): excessive commit interval 2147483647 [ 292.841460][T11407] BTRFS info (device loop0): turning on sync discard [ 292.863280][T11407] BTRFS info (device loop0): max_inline at 0 [ 292.893751][T11407] BTRFS info (device loop0): disk space caching is enabled [ 293.097757][T11407] BTRFS info (device loop0): rebuilding free space tree [ 293.206191][T11407] BTRFS info (device loop0): disabling free space tree [ 293.213366][T11407] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 293.238734][T11407] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 293.422958][T11461] netlink: 'syz.1.2566': attribute type 7 has an invalid length. [ 293.456802][T11461] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2566'. [ 293.495421][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.834784][T11472] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2572'. [ 294.048406][T11480] misc userio: Invalid payload size [ 294.497318][T11496] SET target dimension over the limit! [ 294.884512][T11500] loop2: detected capacity change from 0 to 8192 [ 294.915952][T11500] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 294.978755][T11500] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 295.027783][T11500] REISERFS (device loop2): using ordered data mode [ 295.031410][T11484] loop1: detected capacity change from 0 to 32768 [ 295.039798][T11500] reiserfs: using flush barriers [ 295.056017][T11500] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 295.073616][T11500] REISERFS (device loop2): checking transaction log (loop2) [ 295.125071][ T5839] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 295.136827][T11513] netlink: 'syz.3.2589': attribute type 9 has an invalid length. [ 295.155265][T11513] netlink: 'syz.3.2589': attribute type 7 has an invalid length. [ 295.157967][T11484] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.163828][T11513] netlink: 'syz.3.2589': attribute type 8 has an invalid length. [ 295.224786][T11500] REISERFS (device loop2): Using tea hash to sort names [ 295.246869][T11500] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 295.316528][ T5839] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 295.325983][ T5839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.341029][T11484] XFS (loop1): Ending clean mount [ 295.349899][ T5839] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 295.360176][ T5839] usb 1-1: config 1 has no interface number 1 [ 295.367091][ T5839] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.368526][T11484] XFS (loop1): Quotacheck needed: Please wait. [ 295.380914][ T5839] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.411600][ T5839] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.432130][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.452423][ T5839] usb 1-1: Product: syz [ 295.458784][ T5839] usb 1-1: Manufacturer: syz [ 295.463709][ T5839] usb 1-1: SerialNumber: syz [ 295.527114][T11484] XFS (loop1): Quotacheck: Done. [ 295.547931][T11484] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.598387][T11523] loop3: detected capacity change from 0 to 8 [ 295.605879][T11523] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 295.664291][ T6300] udevd[6300]: incorrect cramfs checksum on /dev/loop3 [ 295.683255][T11523] cramfs: bad data blocksize 4293972856 [ 295.689725][T11523] cramfs: bad data blocksize 4293972856 [ 295.712552][ T5839] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 295.737234][ T6300] udevd[6300]: incorrect cramfs checksum on /dev/loop3 [ 295.759518][ T5839] usb 1-1: MIDIStreaming interface descriptor not found [ 295.922755][ T5839] usb 1-1: USB disconnect, device number 15 [ 296.714975][ T5839] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 296.738238][T11546] netlink: 'syz.1.2602': attribute type 10 has an invalid length. [ 296.774578][T11546] veth1_vlan: entered allmulticast mode [ 296.790809][T11544] loop3: detected capacity change from 0 to 8192 [ 296.822644][T11544] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 296.823314][T11546] team0: Device veth1_vlan failed to register rx_handler [ 296.851208][T11544] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 296.861932][T11544] REISERFS (device loop3): using ordered data mode [ 296.869009][T11544] reiserfs: using flush barriers [ 296.880245][T11544] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.908977][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 296.925429][T11544] REISERFS (device loop3): checking transaction log (loop3) [ 296.933048][ T5839] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 296.945793][T11530] loop2: detected capacity change from 0 to 32768 [ 296.977488][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.035019][ T5839] usb 1-1: Product: syz [ 297.046187][ T5839] usb 1-1: Manufacturer: syz [ 297.051729][ T5839] usb 1-1: SerialNumber: syz [ 297.070061][ T5839] usb 1-1: config 0 descriptor?? [ 297.087060][T11530] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 297.276848][T11544] REISERFS (device loop3): Using tea hash to sort names [ 297.303125][T11544] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 297.317339][ T5839] snd-usb-audio: probe of 1-1:0.0 failed with error -71 [ 297.334866][T11530] XFS (loop2): Ending clean mount [ 297.350607][ T5839] usb 1-1: USB disconnect, device number 16 [ 297.375823][T11528] udevd[11528]: setting mode of /dev/bus/usb/001/016 to 020664 failed: No such file or directory [ 297.444715][T11528] udevd[11528]: setting owner of /dev/bus/usb/001/016 to uid=0, gid=0 failed: No such file or directory [ 297.572240][ T5793] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.550985][T11590] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.2617'. [ 299.391745][T11588] loop0: detected capacity change from 0 to 32768 [ 299.441894][T11588] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page [ 299.441894][T11588] [ 299.508667][T11588] ERROR: (device loop0): remounting filesystem as read-only [ 299.518602][T11623] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2629'. [ 299.560918][T11622] loop2: detected capacity change from 0 to 4096 [ 299.634651][ T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 299.642969][T11622] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 299.678438][T11622] ntfs3: loop2: Failed to load $Extend (-22). [ 299.693198][T11622] ntfs3: loop2: Failed to initialize $Extend. [ 299.770734][T11625] team0: entered promiscuous mode [ 299.784714][T11625] team_slave_0: entered promiscuous mode [ 299.809345][T11625] team_slave_1: entered promiscuous mode [ 299.876159][ T787] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 299.895100][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.903260][ T787] usb 4-1: Product: syz [ 299.930105][ T787] usb 4-1: Manufacturer: syz [ 299.958227][ T787] usb 4-1: SerialNumber: syz [ 299.979889][ T787] usb 4-1: config 0 descriptor?? [ 300.269715][ T787] hso 4-1:0.0: Failed to find BULK IN ep [ 300.296022][ T787] usb-storage 4-1:0.0: USB Mass Storage device detected [ 300.330467][ T28] audit: type=1326 audit(1760056404.653:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7418eec9 code=0x7ffc0000 [ 300.384585][ T28] audit: type=1326 audit(1760056404.683:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f2b7418eec9 code=0x7ffc0000 [ 300.407778][ T28] audit: type=1326 audit(1760056404.683:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7418eec9 code=0x7ffc0000 [ 300.431096][ T28] audit: type=1326 audit(1760056404.683:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7418eec9 code=0x7ffc0000 [ 300.532173][ T787] usb 4-1: USB disconnect, device number 12 [ 300.734574][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'. [ 301.228455][T11646] loop1: detected capacity change from 0 to 32768 [ 301.250434][T11646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2639 (11646) [ 301.311436][T11646] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.343152][T11646] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 301.361095][T11646] BTRFS info (device loop1): enabling disk space caching [ 301.369911][T11646] BTRFS info (device loop1): disabling tree log [ 301.400315][T11646] BTRFS info (device loop1): turning off barriers [ 301.418180][T11646] BTRFS info (device loop1): setting nodatacow, compression disabled [ 301.438098][T11646] BTRFS info (device loop1): doing ref verification [ 301.454564][T11646] BTRFS info (device loop1): force clearing of disk cache [ 301.461883][T11646] BTRFS warning (device loop1): excessive commit interval 2147483647 [ 301.490646][T11646] BTRFS info (device loop1): turning on sync discard [ 301.517313][T11646] BTRFS info (device loop1): max_inline at 0 [ 301.523578][T11646] BTRFS info (device loop1): disk space caching is enabled [ 301.706506][T11690] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2654'. [ 301.741777][T11646] BTRFS info (device loop1): rebuilding free space tree [ 301.862787][T11646] BTRFS info (device loop1): disabling free space tree [ 301.884443][T11694] xt_l2tp: wrong L2TP version: 0 [ 301.894226][T11646] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.899520][T11696] netlink: 'syz.3.2655': attribute type 10 has an invalid length. [ 301.934684][T11646] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.935027][T11696] macvlan1: entered allmulticast mode [ 301.975110][T11696] veth1_vlan: entered allmulticast mode [ 301.984723][T11696] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 302.065625][T11698] netlink: 'syz.2.2657': attribute type 6 has an invalid length. [ 302.224260][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 302.839406][ T5839] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 302.913440][T11724] bad cache= option: no%e [ 302.913440][T11724] [ 302.936028][T11724] CIFS: VFS: bad cache= option: no%e [ 303.037101][ T5839] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 303.060229][ T5839] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 303.078954][ T5839] usb 1-1: config 220 has no interface number 2 [ 303.089710][ T5839] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 303.104573][ T5839] usb 1-1: config 220 interface 0 has no altsetting 0 [ 303.111426][ T5839] usb 1-1: config 220 interface 76 has no altsetting 0 [ 303.120141][ T5839] usb 1-1: config 220 interface 1 has no altsetting 0 [ 303.132104][ T5839] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.138210][T11730] netlink: 'syz.1.2672': attribute type 7 has an invalid length. [ 303.144605][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.172055][ T5839] usb 1-1: Product: syz [ 303.174377][T11730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2672'. [ 303.188451][ T5839] usb 1-1: Manufacturer: syz [ 303.193206][ T5839] usb 1-1: SerialNumber: syz [ 303.201666][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2672'. [ 303.455747][ T5839] usb 1-1: selecting invalid altsetting 0 [ 303.494503][ T5839] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 303.504441][ T5839] usb 1-1: No valid video chain found. [ 303.542780][ T5839] usb 1-1: selecting invalid altsetting 0 [ 303.548836][ T5839] usbtest: probe of 1-1:220.1 failed with error -22 [ 303.584924][ T5839] usb 1-1: USB disconnect, device number 17 [ 303.693016][ T786] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 303.750486][T11726] loop2: detected capacity change from 0 to 32768 [ 303.775787][T11726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2671 (11726) [ 303.825897][T11726] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.839001][T11726] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 303.858239][T11726] BTRFS info (device loop2): enabling disk space caching [ 303.874378][T11726] BTRFS info (device loop2): disabling tree log [ 303.884457][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 303.892911][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 303.914484][T11726] BTRFS info (device loop2): turning off barriers [ 303.921202][T11726] BTRFS info (device loop2): setting nodatacow, compression disabled [ 303.929934][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 303.950388][T11726] BTRFS info (device loop2): doing ref verification [ 303.960556][T11726] BTRFS info (device loop2): force clearing of disk cache [ 303.968743][ T786] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 303.978915][T11726] BTRFS warning (device loop2): excessive commit interval 2147483647 [ 303.987483][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.996662][T11726] BTRFS info (device loop2): turning on sync discard [ 304.005035][ T786] usb 4-1: Product: syz [ 304.009378][ T786] usb 4-1: Manufacturer: syz [ 304.014022][ T786] usb 4-1: SerialNumber: syz [ 304.018972][T11726] BTRFS info (device loop2): max_inline at 0 [ 304.025839][T11726] BTRFS info (device loop2): disk space caching is enabled [ 304.047643][ T786] usb 4-1: config 0 descriptor?? [ 304.178524][T11726] BTRFS info (device loop2): rebuilding free space tree [ 304.233004][T11726] BTRFS info (device loop2): disabling free space tree [ 304.254569][T11726] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 304.275435][T11726] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 304.289030][T11767] loop1: detected capacity change from 0 to 64 [ 304.296968][T11765] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 304.340339][ T786] usb 4-1: USB disconnect, device number 13 [ 304.554125][ T5793] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.109147][T11785] team0: entered promiscuous mode [ 305.134574][T11785] team_slave_0: entered promiscuous mode [ 305.140651][T11785] team_slave_1: entered promiscuous mode [ 305.463936][T11796] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2700'. [ 305.479136][T11796] 0ªX¹¦À: renamed from caif0 [ 305.498440][T11796] 0ªX¹¦À: entered allmulticast mode [ 305.504505][T11796] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 305.706364][T11802] loop2: detected capacity change from 0 to 1024 [ 305.753872][T11802] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 306.205463][T11800] loop1: detected capacity change from 0 to 32768 [ 306.236955][T11799] loop3: detected capacity change from 0 to 32768 [ 306.264107][T11800] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 306.266841][T11799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2691 (11799) [ 306.320950][T11799] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.333806][T11799] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 306.342941][T11799] BTRFS info (device loop3): enabling disk space caching [ 306.350192][T11799] BTRFS info (device loop3): disabling tree log [ 306.352221][T11800] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 306.356614][T11799] BTRFS info (device loop3): turning off barriers [ 306.356640][T11799] BTRFS info (device loop3): setting nodatacow, compression disabled [ 306.356668][T11799] BTRFS info (device loop3): doing ref verification [ 306.356690][T11799] BTRFS info (device loop3): force clearing of disk cache [ 306.356710][T11799] BTRFS warning (device loop3): excessive commit interval 2147483647 [ 306.356732][T11799] BTRFS info (device loop3): turning on sync discard [ 306.421043][T11799] BTRFS info (device loop3): max_inline at 0 [ 306.437051][T11799] BTRFS info (device loop3): disk space caching is enabled [ 306.503338][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'. [ 306.644183][T11799] BTRFS info (device loop3): rebuilding free space tree [ 306.698633][T11799] BTRFS info (device loop3): disabling free space tree [ 306.739601][T11799] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 306.759343][T11799] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 306.771275][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 307.054622][T11843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2707'. [ 307.099336][ T5796] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.035417][T11871] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4) [ 308.434853][T11888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2727'. [ 308.464709][T11888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2727'. [ 308.733532][T11891] loop1: detected capacity change from 0 to 4096 [ 308.767901][T11891] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 308.807120][T11891] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 308.819213][T11891] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 308.836068][T11891] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 308.895267][T11891] ntfs: volume version 3.1. [ 308.928791][T11891] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 308.940795][T11901] loop0: detected capacity change from 0 to 4096 [ 308.972216][T11891] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 309.007178][T11891] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 309.019095][T11901] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 309.146386][T11891] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 309.177391][T11901] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 309.211389][T11891] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 309.256437][T11901] ntfs3: loop0: ino=0, attr_set_size [ 309.667225][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2745'. [ 309.824687][ T5839] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 310.020611][ T5839] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 310.037002][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.066846][ T5839] usb 1-1: Product: syz [ 310.076979][ T5839] usb 1-1: Manufacturer: syz [ 310.087108][ T5839] usb 1-1: SerialNumber: syz [ 310.106699][ T5839] usb 1-1: config 0 descriptor?? [ 310.241155][T11939] loop3: detected capacity change from 0 to 256 [ 310.242978][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'. [ 310.300678][T11939] FAT-fs (loop3): Directory bread(block 64) failed [ 310.336388][T11939] FAT-fs (loop3): Directory bread(block 65) failed [ 310.346616][T11939] FAT-fs (loop3): Directory bread(block 66) failed [ 310.353382][T11939] FAT-fs (loop3): Directory bread(block 67) failed [ 310.361275][ T5839] hso 1-1:0.0: Failed to find BULK IN ep [ 310.380290][T11939] FAT-fs (loop3): Directory bread(block 68) failed [ 310.390143][ T5839] usb-storage 1-1:0.0: USB Mass Storage device detected [ 310.404209][T11939] FAT-fs (loop3): Directory bread(block 69) failed [ 310.437451][T11939] FAT-fs (loop3): Directory bread(block 70) failed [ 310.446493][T11939] FAT-fs (loop3): Directory bread(block 71) failed [ 310.453752][T11939] FAT-fs (loop3): Directory bread(block 72) failed [ 310.461394][T11939] FAT-fs (loop3): Directory bread(block 73) failed [ 310.564743][ T5839] usb 1-1: USB disconnect, device number 18 [ 310.787677][T11950] SET target dimension over the limit! [ 310.963624][T11954] loop2: detected capacity change from 0 to 256 [ 311.132365][T11954] FAT-fs (loop2): Directory bread(block 64) failed [ 311.152487][T11954] FAT-fs (loop2): Directory bread(block 65) failed [ 311.163187][T11954] FAT-fs (loop2): Directory bread(block 66) failed [ 311.174286][T11954] FAT-fs (loop2): Directory bread(block 67) failed [ 311.182812][T11954] FAT-fs (loop2): Directory bread(block 68) failed [ 311.200424][T11954] FAT-fs (loop2): Directory bread(block 69) failed [ 311.209632][T11954] FAT-fs (loop2): Directory bread(block 70) failed [ 311.231327][ T28] audit: type=1326 audit(1760056415.533:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.1.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a578eec9 code=0x7ffc0000 [ 311.294528][T11954] FAT-fs (loop2): Directory bread(block 71) failed [ 311.301541][T11954] FAT-fs (loop2): Directory bread(block 72) failed [ 311.326327][T11954] FAT-fs (loop2): Directory bread(block 73) failed [ 311.378821][T11968] loop1: detected capacity change from 0 to 64 [ 311.740934][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'. [ 312.124916][T11990] trusted_key: encrypted_key: hex blob is missing [ 312.802309][T12019] loop3: detected capacity change from 0 to 512 [ 312.856730][T12019] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 312.922772][T12019] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 312.998894][T12019] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 313.031995][T12019] EXT4-fs (loop3): 1 truncate cleaned up [ 313.073674][T12019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.201411][T12019] cifs: Unknown parameter 'dioread_lock' [ 313.320045][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.732205][T12013] loop1: detected capacity change from 0 to 32768 [ 313.779249][T12013] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 313.833068][T12013] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 313.854565][ T787] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 313.940826][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 314.054567][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 314.073220][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.083854][ T7361] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 314.106454][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.130125][ T787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.165584][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.188119][ T787] usb 4-1: Product: syz [ 314.192420][ T787] usb 4-1: Manufacturer: syz [ 314.203136][ T787] usb 4-1: SerialNumber: syz [ 314.304681][ T7361] usb 1-1: Using ep0 maxpacket: 32 [ 314.331105][ T7361] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 314.360671][ T7361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.371381][ T7361] usb 1-1: Product: syz [ 314.383786][ T7361] usb 1-1: Manufacturer: syz [ 314.388973][ T7361] usb 1-1: SerialNumber: syz [ 314.414675][ T7361] usb 1-1: config 0 descriptor?? [ 314.451982][ T787] usb 4-1: 0:2 : does not exist [ 314.481139][ T787] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 314.570523][ T787] usb 4-1: USB disconnect, device number 14 [ 314.633313][T11527] udevd[11527]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.711002][ T7361] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 314.744582][ T7361] eb 9a 47 80 9b f8 7a f0 [ 314.749220][ T7361] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 314.948162][ T5839] usb 1-1: USB disconnect, device number 19 [ 315.205314][ T5174] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 315.309565][T12091] netlink: 'syz.1.2823': attribute type 10 has an invalid length. [ 315.318899][T12091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2823'. [ 315.330078][T12091] ipvlan1: entered promiscuous mode [ 315.335699][T12091] ipvlan1: entered allmulticast mode [ 315.341326][T12091] veth0_vlan: entered allmulticast mode [ 315.350545][T12091] bridge0: port 3(ipvlan1) entered blocking state [ 315.358396][T12091] bridge0: port 3(ipvlan1) entered disabled state [ 315.370257][T12091] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 315.426845][ T5174] usb 3-1: Using ep0 maxpacket: 16 [ 315.435430][ T5174] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 315.444102][ T5174] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 315.454746][ T5174] usb 3-1: config 0 has no interface number 0 [ 315.468904][ T5174] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 315.488722][ T5174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.503291][ T5174] usb 3-1: Product: syz [ 315.507921][ T5174] usb 3-1: Manufacturer: syz [ 315.531656][ T5174] usb 3-1: SerialNumber: syz [ 315.543817][ T5174] usb 3-1: config 0 descriptor?? [ 315.567083][ T5174] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 315.584050][ T5174] usb 3-1: No valid video chain found. [ 315.705981][T12097] netlink: 'syz.1.2826': attribute type 21 has an invalid length. [ 315.718524][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 315.833852][ T5174] usb 3-1: USB disconnect, device number 15 [ 315.903841][T12089] loop3: detected capacity change from 0 to 32768 [ 316.014398][T12089] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 316.014398][T12089] [ 316.029374][T12089] ERROR: (device loop3): remounting filesystem as read-only [ 316.059107][T12089] ialloc: diAlloc returned -5! [ 316.243293][T12105] loop0: detected capacity change from 0 to 4096 [ 316.630023][T12111] loop2: detected capacity change from 0 to 16 [ 316.747065][T12111] erofs: (device loop2): mounted with root inode @ nid 36. [ 316.850063][T12113] loop0: detected capacity change from 0 to 256 [ 316.868634][T12101] loop1: detected capacity change from 0 to 32768 [ 316.908005][T12111] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 316.957793][T12113] FAT-fs (loop0): Directory bread(block 64) failed [ 317.001002][T12113] FAT-fs (loop0): Directory bread(block 65) failed [ 317.044649][T12113] FAT-fs (loop0): Directory bread(block 66) failed [ 317.076696][T12113] FAT-fs (loop0): Directory bread(block 67) failed [ 317.104003][T12113] FAT-fs (loop0): Directory bread(block 68) failed [ 317.121881][T12113] FAT-fs (loop0): Directory bread(block 69) failed [ 317.136947][T12113] FAT-fs (loop0): Directory bread(block 70) failed [ 317.154533][T12113] FAT-fs (loop0): Directory bread(block 71) failed [ 317.184678][T12113] FAT-fs (loop0): Directory bread(block 72) failed [ 317.191782][T12113] FAT-fs (loop0): Directory bread(block 73) failed [ 317.356927][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 317.356944][ T28] audit: type=1326 audit(1760056421.683:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.3.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 317.387774][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.445562][T12125] mac80211_hwsim hwsim3 : renamed from wlan0 [ 317.474274][ T28] audit: type=1326 audit(1760056421.683:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.3.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 317.524277][ T28] audit: type=1326 audit(1760056421.733:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.3.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 317.583527][ T28] audit: type=1326 audit(1760056421.733:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.3.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 317.606699][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.617853][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.628888][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.713926][ T28] audit: type=1326 audit(1760056421.733:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.3.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 317.737185][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.772727][T12131] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2843'. [ 317.934670][T12136] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 318.387679][T12152] loop0: detected capacity change from 0 to 1024 [ 318.519315][T12152] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 318.557720][T12152] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 318.626969][T12152] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.2851: Failed to acquire dquot type 0 [ 318.684770][T12152] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 318.725097][T12152] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.2851: corrupted inode contents [ 318.751131][T12152] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #13: comm syz.0.2851: mark_inode_dirty error [ 318.782843][T12152] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.2851: corrupted inode contents [ 318.814517][T12152] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.2851: mark_inode_dirty error [ 318.862006][T12152] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.2851: corrupted inode contents [ 318.894528][T12152] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 318.910627][T12152] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.2851: corrupted inode contents [ 318.947792][T12152] EXT4-fs error (device loop0): ext4_truncate:4288: inode #13: comm syz.0.2851: mark_inode_dirty error [ 318.977303][T12152] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 319.020409][T12152] EXT4-fs (loop0): 1 truncate cleaned up [ 319.040421][T12152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.131380][T12152] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 319.224190][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.344891][ T5174] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 319.357333][T12164] loop2: detected capacity change from 0 to 32768 [ 319.384053][T12164] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 319.427453][T12164] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 319.526683][ T5174] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 319.535539][T12162] loop1: detected capacity change from 0 to 40427 [ 319.535882][ T5174] usb 4-1: config 0 has no interface number 0 [ 319.551499][ T5174] usb 4-1: New USB device found, idVendor=0403, idProduct=a951, bcdDevice=c0.f8 [ 319.562776][ T5174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.580331][ T5174] usb 4-1: config 0 descriptor?? [ 319.593229][T12162] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 319.614935][ T5174] hub 4-1:0.40: bad descriptor, ignoring hub [ 319.633214][ T5174] hub: probe of 4-1:0.40 failed with error -5 [ 319.654002][ T5174] ftdi_sio 4-1:0.40: FTDI USB Serial Device converter detected [ 319.665141][T12162] F2FS-fs (loop1): invalid crc value [ 319.676610][T12162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 319.687110][ T5174] ftdi_sio ttyUSB0: unknown device type: 0xc0f8 [ 319.760244][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 319.847682][T12179] netlink: 'syz.0.2863': attribute type 2 has an invalid length. [ 319.904688][T12162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 319.934824][ T5174] usb 4-1: USB disconnect, device number 15 [ 319.947783][ T5174] ftdi_sio 4-1:0.40: device disconnected [ 320.042771][T12162] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 320.120048][T12187] loop0: detected capacity change from 0 to 16 [ 320.256064][T12187] erofs: (device loop0): mounted with root inode @ nid 36. [ 320.483999][T12191] loop3: detected capacity change from 0 to 1024 [ 320.485030][T12187] erofs: (device loop0): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 320.671069][T12195] loop2: detected capacity change from 0 to 256 [ 320.679490][T12195] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 320.701512][ T69] hfsplus: b-tree write err: -5, ino 4 [ 320.903764][T12195] loop2: detected capacity change from 0 to 4096 [ 320.910747][ T28] audit: type=1326 audit(1760056425.233:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.1.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a578eec9 code=0x7ffc0000 [ 320.925585][T12195] ntfs: (device loop2): parse_options(): Unrecognized mount option r. [ 320.964523][T12195] ntfs: (device loop2): parse_options(): Unrecognized mount option shortname. [ 321.564716][T12211] loop0: detected capacity change from 0 to 8192 [ 321.597028][T12211] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 321.610484][T12211] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 321.619966][T12211] REISERFS (device loop0): using ordered data mode [ 321.627125][T12211] reiserfs: using flush barriers [ 321.635142][T12211] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 321.693785][T12211] REISERFS (device loop0): checking transaction log (loop0) [ 321.722257][T12211] REISERFS (device loop0): Using rupasov hash to sort names [ 321.743644][T12211] REISERFS (device loop0): using 3.5.x disk format [ 321.771408][T12211] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 321.835039][T12211] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 321.869807][T12211] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 321.915402][T12211] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 321.952689][T12211] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 322.061531][T12211] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 322.104780][T12211] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 322.105082][T12211] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 322.338548][T12241] loop3: detected capacity change from 0 to 256 [ 322.360167][T12241] exfat: Deprecated parameter 'namecase' [ 322.421917][T12241] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 322.517687][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2893'. [ 322.782707][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2898'. [ 322.811446][T12255] netlink: 'syz.2.2899': attribute type 3 has an invalid length. [ 322.811471][T12255] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2899'. [ 323.248617][T12267] netlink: 'syz.2.2905': attribute type 1 has an invalid length. [ 323.411817][T12273] netlink: 'syz.2.2908': attribute type 3 has an invalid length. [ 323.499361][T12276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2909'. [ 323.733648][T12284] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 323.776764][T12258] loop3: detected capacity change from 0 to 32768 [ 323.819651][T12258] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 323.855731][T12258] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 324.049793][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 324.064069][T12290] loop2: detected capacity change from 0 to 1024 [ 324.256881][ T1078] hfsplus: b-tree write err: -5, ino 4 [ 324.272730][ T5796] ocfs2: Unmounting device (7,3) on (node local) [ 324.304785][T12294] xt_connbytes: Forcing CT accounting to be enabled [ 324.379672][T12277] loop0: detected capacity change from 0 to 32768 [ 324.476557][T12277] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 324.544790][T12277] ocfs2: Unmounting device (7,0) on (node local) [ 324.724879][T12304] loop2: detected capacity change from 0 to 128 [ 324.746581][T12304] FAT-fs (loop2): Invalid FSINFO signature: 0x41075252, 0x80417272 (sector = 1) [ 324.830778][T12304] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00070003) [ 324.903108][T12304] FAT-fs (loop2): Filesystem has been set read-only [ 325.203545][T12318] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 325.655446][T12332] loop2: detected capacity change from 0 to 1024 [ 325.698572][T12334] SET target dimension over the limit! [ 325.715031][T12332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.012985][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.410030][T12341] loop0: detected capacity change from 0 to 32768 [ 326.990986][T12371] IPv6: Can't replace route, no match found [ 327.037921][T12375] loop1: detected capacity change from 0 to 128 [ 327.046694][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2954'. [ 327.053429][T12375] FAT-fs (loop1): Invalid FSINFO signature: 0x41075252, 0x80417272 (sector = 1) [ 327.083881][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2954'. [ 327.108988][T12375] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00070003) [ 327.144603][T12375] FAT-fs (loop1): Filesystem has been set read-only [ 327.484515][ T787] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 327.630889][T12387] libceph: resolve '0.' (ret=-3): failed [ 327.684640][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 327.691406][T12389] netlink: 'syz.3.2961': attribute type 1 has an invalid length. [ 327.719735][ T787] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 327.737278][ T787] usb 3-1: config 0 has no interface number 0 [ 327.744210][T12389] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2961'. [ 327.757612][ T787] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 327.768179][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.785640][ T787] usb 3-1: Product: syz [ 327.789884][ T787] usb 3-1: Manufacturer: syz [ 327.801777][ T787] usb 3-1: SerialNumber: syz [ 327.828491][ T787] usb 3-1: config 0 descriptor?? [ 328.070914][ T787] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 328.086201][T12381] loop1: detected capacity change from 0 to 32768 [ 328.094841][ T787] usb 3-1: No valid video chain found. [ 328.118388][T12381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2958 (12381) [ 328.154154][ T787] usb 3-1: USB disconnect, device number 16 [ 328.166868][T12381] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.210941][T12381] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 328.248428][T12398] batadv1: entered promiscuous mode [ 328.258918][T12381] BTRFS info (device loop1): using free space tree [ 328.353584][T12381] BTRFS info (device loop1): enabling ssd optimizations [ 328.369146][T12381] BTRFS info (device loop1): auto enabling async discard [ 328.539286][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2968'. [ 328.568991][ T5789] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.921538][T12429] loop2: detected capacity change from 0 to 136 [ 329.029292][T12429] syz.2.2973: attempt to access beyond end of device [ 329.029292][T12429] loop2: rw=524288, sector=164, nr_sectors = 64 limit=136 [ 329.135560][T12429] syz.2.2973: attempt to access beyond end of device [ 329.135560][T12429] loop2: rw=524288, sector=228, nr_sectors = 128 limit=136 [ 329.233209][T12429] syz.2.2973: attempt to access beyond end of device [ 329.233209][T12429] loop2: rw=0, sector=164, nr_sectors = 8 limit=136 [ 329.339870][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 329.339888][ T28] audit: type=1800 audit(1760056433.663:110): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2973" name="file0" dev="loop2" ino=1542 res=0 errno=0 [ 329.641879][T12447] capability: warning: `syz.1.2982' uses 32-bit capabilities (legacy support in use) [ 329.993049][T12461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.145250][T12466] Invalid ELF header magic: != ELF [ 330.833867][T12492] loop0: detected capacity change from 0 to 512 [ 330.866336][T12492] EXT4-fs: Ignoring removed orlov option [ 330.884827][T12492] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 330.973844][T12492] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.3003: corrupted in-inode xattr: e_value size too large [ 331.055328][T12492] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3003: couldn't read orphan inode 15 (err -117) [ 331.075989][T12492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.302805][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.803299][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3019'. [ 332.103105][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 333.097280][T12579] loop0: detected capacity change from 0 to 256 [ 333.125634][T12579] exfat: Deprecated parameter 'utf8' [ 333.169852][T12579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 333.629793][T12593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3051'. [ 333.681013][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3051'. [ 333.834392][ T787] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 334.014492][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 334.045151][ T787] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 334.063756][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.084408][ T787] usb 4-1: Product: syz [ 334.088663][ T787] usb 4-1: Manufacturer: syz [ 334.123766][ T787] usb 4-1: SerialNumber: syz [ 334.135874][ T787] usb 4-1: config 0 descriptor?? [ 334.162841][ T787] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 334.557596][T12617] loop1: detected capacity change from 0 to 2048 [ 334.599220][ T787] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 334.617778][ T787] visor: probe of 4-1:0.0 failed with error -71 [ 334.630531][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3065'. [ 334.635293][ T787] usb 4-1: USB disconnect, device number 16 [ 335.274594][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 335.294268][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3075'. [ 335.494574][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 335.515046][ T23] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 335.523672][ T23] usb 1-1: config 0 has no interface number 0 [ 335.551401][ T23] usb 1-1: config 0 interface 228 has no altsetting 0 [ 335.576628][ T23] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02 [ 335.604435][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.650067][ T23] usb 1-1: Product: syz [ 335.654636][ T23] usb 1-1: Manufacturer: syz [ 335.659296][ T23] usb 1-1: SerialNumber: syz [ 335.670815][ T23] usb 1-1: config 0 descriptor?? [ 335.769337][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'. [ 335.782785][T12657] netlink: ct family unspecified [ 335.788871][T12657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.823316][T12659] loop3: detected capacity change from 0 to 256 [ 335.892283][T12659] FAT-fs (loop3): Directory bread(block 64) failed [ 335.925179][T12659] FAT-fs (loop3): Directory bread(block 65) failed [ 335.932008][T12659] FAT-fs (loop3): Directory bread(block 66) failed [ 335.964133][T12659] FAT-fs (loop3): Directory bread(block 67) failed [ 335.972711][T12659] FAT-fs (loop3): Directory bread(block 68) failed [ 335.988614][T12659] FAT-fs (loop3): Directory bread(block 69) failed [ 335.998600][T12659] FAT-fs (loop3): Directory bread(block 70) failed [ 336.009241][T12659] FAT-fs (loop3): Directory bread(block 71) failed [ 336.018139][T12659] FAT-fs (loop3): Directory bread(block 72) failed [ 336.024690][ T23] net1080 1-1:0.228 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 0a:79:3d:47:7f:08 [ 336.029262][T12659] FAT-fs (loop3): Directory bread(block 73) failed [ 336.260533][ T23] usb 1-1: USB disconnect, device number 20 [ 336.280078][ T23] net1080 1-1:0.228 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 336.997373][ T5791] Bluetooth: hci1: Malformed HCI Event [ 337.267910][T12701] program syz.0.3099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.692438][T12706] loop3: detected capacity change from 0 to 4096 [ 337.727508][T12706] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 338.211185][T12731] loop2: detected capacity change from 0 to 8 [ 338.336477][T12731] SQUASHFS error: Failed to read block 0x1ec: -5 [ 338.379024][T12731] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 339.127792][T12759] loop1: detected capacity change from 0 to 764 [ 339.182905][T12759] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 339.275206][T12759] Symlink component flag not implemented [ 339.281444][T12759] Symlink component flag not implemented (7) [ 339.619548][T12779] loop1: detected capacity change from 0 to 256 [ 339.848769][T12782] loop3: detected capacity change from 0 to 512 [ 339.879264][T12782] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 340.344417][ T787] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 340.406210][T12797] loop3: detected capacity change from 0 to 2364 [ 340.556820][ T787] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 340.579831][ T787] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 340.614472][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 340.633729][ T787] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 340.646875][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.674389][ T787] usb 3-1: Product: syz [ 340.678688][ T787] usb 3-1: Manufacturer: syz [ 340.700153][ T787] usb 3-1: SerialNumber: syz [ 340.758163][ T787] usb 3-1: config 0 descriptor?? [ 340.790858][ T787] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 340.998033][ T787] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 341.030982][ T787] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 341.140362][T12820] loop0: detected capacity change from 0 to 4096 [ 341.167711][T12820] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 341.197265][ T787] usb 3-1: USB disconnect, device number 17 [ 341.721860][ T28] audit: type=1326 audit(1760056446.043:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 341.766799][ T28] audit: type=1326 audit(1760056446.043:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 341.809605][ T28] audit: type=1326 audit(1760056446.083:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 341.845745][ T28] audit: type=1326 audit(1760056446.083:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 341.904975][ T28] audit: type=1326 audit(1760056446.083:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de98eec9 code=0x7ffc0000 [ 341.984941][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 342.160822][T12853] loop2: detected capacity change from 0 to 1024 [ 342.179638][ T787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.204353][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.212652][ T787] usb 2-1: Product: syz [ 342.240163][ T787] usb 2-1: Manufacturer: syz [ 342.270400][ T787] usb 2-1: SerialNumber: syz [ 342.289939][ T787] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.385988][ T7361] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.475631][T12860] loop3: detected capacity change from 0 to 256 [ 342.896446][T12866] loop2: detected capacity change from 0 to 4096 [ 342.915702][ T5839] usb 2-1: USB disconnect, device number 13 [ 343.212402][T12876] binfmt_misc: register: failed to install interpreter file ./bus [ 343.444426][ T7361] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 343.474512][ T7361] ath9k_htc: Failed to initialize the device [ 343.493744][ T5839] usb 2-1: ath9k_htc: USB layer deinitialized [ 343.745159][T12890] xt_NFQUEUE: number of total queues is 0 [ 343.872309][T12892] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3186'. [ 343.970792][T12882] loop2: detected capacity change from 0 to 32768 [ 344.004555][T12882] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3181 (12882) [ 344.055261][T12882] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.094078][T12894] loop3: detected capacity change from 0 to 4096 [ 344.103028][T12882] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 344.128345][T12882] BTRFS info (device loop2): using free space tree [ 344.147868][T12894] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 344.319507][T12882] BTRFS info (device loop2): enabling ssd optimizations [ 344.337191][T12920] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3192'. [ 344.346777][T12920] bond_slave_0: entered promiscuous mode [ 344.353232][T12920] bond_slave_1: entered promiscuous mode [ 344.369720][T12882] BTRFS info (device loop2): auto enabling async discard [ 344.461744][T12894] ntfs3: loop3: failed to convert "c46c" to cp857 [ 344.617367][T12925] loop0: detected capacity change from 0 to 1024 [ 344.633785][T12923] loop1: detected capacity change from 0 to 4096 [ 344.644217][T12925] EXT4-fs: Ignoring removed bh option [ 344.664834][ T5793] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.684508][T12925] EXT4-fs: inline encryption not supported [ 344.695226][T12923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.738283][T12925] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.770249][T12923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.816837][T12925] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.3193: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.917336][T12932] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 344.930604][T12923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.950423][T12925] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 344.959715][T12923] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 344.960380][T12925] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.3193: lblock 0 mapped to illegal pblock 48 (length 1) [ 344.991407][T12925] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 345.003417][T12925] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.3193: Failed to acquire dquot type 0 [ 345.047179][T12925] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 345.124415][T12925] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.3193: mark_inode_dirty error [ 345.194528][T12925] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 345.234673][T12925] EXT4-fs (loop0): 1 orphan inode deleted [ 345.242215][T12925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.262664][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.265681][ T43] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.374422][ T43] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 345.383282][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 0 [ 345.454234][T12925] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.515052][T12925] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.3193: Invalid inode table block 1 in block_group 0 [ 345.574393][T12925] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 345.618793][T12925] EXT4-fs error (device loop0): ext4_quota_off:7224: inode #3: comm syz.0.3193: mark_inode_dirty error [ 346.473476][T12962] loop1: detected capacity change from 0 to 512 [ 346.509844][T12962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 346.567709][T12962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.600744][T12962] ext4 filesystem being mounted at /840/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.637960][T12938] loop2: detected capacity change from 0 to 40427 [ 346.692443][T12938] F2FS-fs (loop2): invalid crc value [ 346.783682][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.973052][T12938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 347.504230][T12960] loop0: detected capacity change from 0 to 32768 [ 347.612587][T12960] read_mapping_page failed! [ 347.634631][T12960] ERROR: (device loop0): txCommit: [ 347.634631][T12960] [ 347.692630][T12988] loop1: detected capacity change from 0 to 764 [ 348.204804][T12996] macvtap0: entered allmulticast mode [ 348.210342][T12996] veth0_macvtap: entered allmulticast mode [ 348.543703][T12986] loop3: detected capacity change from 0 to 32768 [ 349.099014][T13018] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3236'. [ 349.413858][T13011] loop2: detected capacity change from 0 to 32768 [ 349.493869][T13011] read_mapping_page failed! [ 349.515193][T13011] ERROR: (device loop2): txCommit: [ 349.515193][T13011] [ 349.909010][T13028] loop3: detected capacity change from 0 to 4096 [ 349.962245][T13016] loop1: detected capacity change from 0 to 32768 [ 350.109517][T13016] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 350.145044][ T786] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 350.176749][T13016] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 350.207341][T13028] ntfs3: loop3: ino=5, "/" directory corrupted [ 350.234663][T13028] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 350.347039][T13016] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 350.399001][ T786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 350.445709][ T786] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.483663][ T786] usb 3-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 350.509997][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.545228][ T786] usb 3-1: Product: syz [ 350.549480][ T786] usb 3-1: Manufacturer: syz [ 350.565078][T13016] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 350.566837][ T786] usb 3-1: SerialNumber: syz [ 350.598280][ T786] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 350.878123][ T787] usb 3-1: USB disconnect, device number 18 [ 351.190612][T13057] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3249'. [ 351.548243][T13067] loop0: detected capacity change from 0 to 2048 [ 351.597069][T13071] loop2: detected capacity change from 0 to 8 [ 351.614859][T13067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.707357][T13071] SQUASHFS error: xz decompression failed, data probably corrupt [ 351.744407][T13071] SQUASHFS error: Failed to read block 0x108: -5 [ 351.772567][T13071] SQUASHFS error: Unable to read metadata cache entry [106] [ 351.806908][T13071] SQUASHFS error: Unable to read inode 0x11f [ 352.160904][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3267'. [ 352.175007][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3267'. [ 352.284523][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 352.532191][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 352.544346][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 352.584492][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 352.634480][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 352.671946][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 352.698783][ T23] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 352.728936][ T23] usb 3-1: Manufacturer: syz [ 352.747794][ T23] usb 3-1: config 0 descriptor?? [ 352.757274][T13071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 352.785407][ T23] smsusb:smsusb_probe: board id=9, interface number 0 [ 352.797665][ T23] smsusb:siano_media_device_register: media controller created [ 352.822171][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.829627][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.837207][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.845249][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.854912][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.863187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.870540][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.878221][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.885993][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.894801][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.902960][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.911353][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.918981][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.945341][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.953425][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.960930][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.968445][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 352.993069][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.001508][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.009820][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.017264][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.025609][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.033354][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.041442][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.048903][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.056579][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.065521][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.073271][ T23] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 353.082154][ T23] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 353.089712][ T23] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 353.101852][ T23] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 353.112162][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.121497][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.130159][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.139159][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.147628][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.155350][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.162868][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.173450][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.181307][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.189179][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.198162][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.206455][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.214771][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.229177][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.236691][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.244777][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.253335][ T23] ------------[ cut here ]------------ [ 353.253430][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.267166][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.275959][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 353.284146][ T23] WARNING: CPU: 1 PID: 23 at kernel/workqueue.c:668 __cancel_work_timer+0x4e2/0x520 [ 353.295382][ T23] Modules linked in: [ 353.299638][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 353.307892][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.318539][ T23] Workqueue: usb_hub_wq hub_event [ 353.323928][ T23] RIP: 0010:__cancel_work_timer+0x4e2/0x520 [ 353.330840][ T23] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c9 d6 2e 00 0f 0b e9 ed fd ff ff e8 bd d6 2e 00 e8 88 a5 17 09 e9 8e fe ff ff e8 ae d6 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 67 a4 17 [ 353.356398][ T23] RSP: 0018:ffffc900001d6b40 EFLAGS: 00010283 [ 353.363691][ T23] RAX: ffffffff8156b422 RBX: ffff8880597028c8 RCX: 0000000000100000 [ 353.371925][T13115] No such timeout policy "syz0" [ 353.373520][ T23] RDX: ffffc9001817b000 RSI: 0000000000055b75 RDI: 0000000000055b76 [ 353.388872][ T23] RBP: ffffc900001d6c58 R08: ffff8880597028cf R09: 1ffff1100b2e0519 [ 353.398701][ T23] R10: dffffc0000000000 R11: ffffed100b2e051a R12: 0000000000000000 [ 353.407158][ T23] R13: dffffc0000000000 R14: 1ffff1100b2e0519 R15: 0000000000000000 [ 353.415866][ T23] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 353.425459][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.432382][ T23] CR2: 0000001b2ea12ff8 CR3: 0000000024f51000 CR4: 00000000003506e0 [ 353.452886][ T23] Call Trace: [ 353.457796][ T23] [ 353.461003][ T23] ? cancel_work_sync+0x20/0x20 [ 353.466242][ T23] ? usb_unlink_urb+0xa0/0xa0 [ 353.471156][ T23] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 353.477195][ T23] ? _raw_spin_unlock+0x40/0x40 [ 353.482114][ T23] ? smscore_putbuffer+0x81/0x120 [ 353.487642][ T23] smsusb_term_device+0xcb/0x220 [ 353.493119][ T23] smsusb_probe+0x1708/0x1da0 [ 353.498370][ T23] ? s2255_print_cfg+0x1b0/0x1b0 [ 353.503846][ T23] ? smsusb1_detectmode+0x260/0x260 [ 353.509488][ T23] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 353.515677][ T23] ? pm_runtime_enable+0x192/0x2a0 [ 353.521574][ T23] ? __pm_runtime_set_status+0x8ab/0xb80 [ 353.527404][ T23] usb_probe_interface+0x5a4/0xb00 [ 353.533237][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 353.538880][ T23] really_probe+0x25b/0xb40 [ 353.543729][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 353.549227][ T23] __driver_probe_device+0x18c/0x330 [ 353.554749][ T23] driver_probe_device+0x4f/0x420 [ 353.560300][ T23] __device_attach_driver+0x2ca/0x520 [ 353.566366][ T23] bus_for_each_drv+0x24b/0x2d0 [ 353.571394][ T23] ? coredump_store+0x90/0x90 [ 353.576378][ T23] ? bus_find_device+0x320/0x320 [ 353.581535][ T23] __device_attach+0x2b5/0x400 [ 353.586835][ T23] ? device_attach+0x20/0x20 [ 353.591802][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 353.598051][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 353.603636][ T23] bus_probe_device+0x180/0x260 [ 353.608835][ T23] device_add+0x85b/0xc20 [ 353.613777][ T23] usb_set_configuration+0x1a79/0x20c0 [ 353.619638][ T23] usb_generic_driver_probe+0x8d/0x150 [ 353.625548][ T23] usb_probe_device+0x13d/0x280 [ 353.630656][ T23] ? usb_register_device_driver+0x230/0x230 [ 353.636699][ T23] really_probe+0x25b/0xb40 [ 353.641358][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 353.647027][ T23] __driver_probe_device+0x18c/0x330 [ 353.652488][ T23] driver_probe_device+0x4f/0x420 [ 353.657661][ T23] __device_attach_driver+0x2ca/0x520 [ 353.663106][ T23] bus_for_each_drv+0x24b/0x2d0 [ 353.668166][ T23] ? coredump_store+0x90/0x90 [ 353.672998][ T23] ? bus_find_device+0x320/0x320 [ 353.678232][ T23] __device_attach+0x2b5/0x400 [ 353.683210][ T23] ? device_attach+0x20/0x20 [ 353.688006][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 353.693128][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 353.698477][ T23] bus_probe_device+0x180/0x260 [ 353.703583][ T23] device_add+0x85b/0xc20 [ 353.708298][ T23] usb_new_device+0xa31/0x1630 [ 353.713341][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 353.718455][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.724085][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 353.729534][ T23] hub_event+0x2962/0x49c0 [ 353.734271][ T23] ? hub_post_resume+0x120/0x120 [ 353.739607][ T23] ? read_lock_is_recursive+0x20/0x20 [ 353.745136][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.750697][ T23] ? process_scheduled_works+0x957/0x15b0 [ 353.756610][ T23] ? process_scheduled_works+0x957/0x15b0 [ 353.762943][ T23] process_scheduled_works+0xa45/0x15b0 [ 353.768996][ T23] ? assign_work+0x400/0x400 [ 353.773741][ T23] ? assign_work+0x39e/0x400 [ 353.778911][ T23] worker_thread+0xa55/0xfc0 [ 353.784122][ T23] kthread+0x2fa/0x390 [ 353.788590][ T23] ? pr_cont_work+0x560/0x560 [ 353.793443][ T23] ? kthread_blkcg+0xd0/0xd0 [ 353.798461][ T23] ret_from_fork+0x48/0x80 [ 353.803160][ T23] ? kthread_blkcg+0xd0/0xd0 [ 353.808376][ T23] ret_from_fork_asm+0x11/0x20 [ 353.813554][ T23] [ 353.816870][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 353.824503][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 353.831920][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.842350][ T23] Workqueue: usb_hub_wq hub_event [ 353.847411][ T23] Call Trace: [ 353.850823][ T23] [ 353.853802][ T23] dump_stack_lvl+0x16c/0x230 [ 353.858644][ T23] ? show_regs_print_info+0x20/0x20 [ 353.863888][ T23] ? load_image+0x3b0/0x3b0 [ 353.868497][ T23] panic+0x2c0/0x710 [ 353.872441][ T23] ? bpf_jit_dump+0xd0/0xd0 [ 353.877008][ T23] ? ret_from_fork_asm+0x11/0x20 [ 353.882028][ T23] __warn+0x2e0/0x470 [ 353.886262][ T23] ? __cancel_work_timer+0x4e2/0x520 [ 353.891693][ T23] ? __cancel_work_timer+0x4e2/0x520 [ 353.897212][ T23] report_bug+0x2be/0x4f0 [ 353.901786][ T23] ? __cancel_work_timer+0x4e2/0x520 [ 353.907384][ T23] ? __cancel_work_timer+0x4e2/0x520 [ 353.912893][ T23] ? __cancel_work_timer+0x4e4/0x520 [ 353.918587][ T23] handle_bug+0xcf/0x120 [ 353.923304][ T23] exc_invalid_op+0x1a/0x50 [ 353.927873][ T23] asm_exc_invalid_op+0x1a/0x20 [ 353.932776][ T23] RIP: 0010:__cancel_work_timer+0x4e2/0x520 [ 353.938708][ T23] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c9 d6 2e 00 0f 0b e9 ed fd ff ff e8 bd d6 2e 00 e8 88 a5 17 09 e9 8e fe ff ff e8 ae d6 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 67 a4 17 [ 353.958810][ T23] RSP: 0018:ffffc900001d6b40 EFLAGS: 00010283 [ 353.965089][ T23] RAX: ffffffff8156b422 RBX: ffff8880597028c8 RCX: 0000000000100000 [ 353.973111][ T23] RDX: ffffc9001817b000 RSI: 0000000000055b75 RDI: 0000000000055b76 [ 353.981389][ T23] RBP: ffffc900001d6c58 R08: ffff8880597028cf R09: 1ffff1100b2e0519 [ 353.990160][ T23] R10: dffffc0000000000 R11: ffffed100b2e051a R12: 0000000000000000 [ 353.999048][ T23] R13: dffffc0000000000 R14: 1ffff1100b2e0519 R15: 0000000000000000 [ 354.007890][ T23] ? __cancel_work_timer+0x4e2/0x520 [ 354.013497][ T23] ? cancel_work_sync+0x20/0x20 [ 354.018774][ T23] ? usb_unlink_urb+0xa0/0xa0 [ 354.023679][ T23] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 354.029785][ T23] ? _raw_spin_unlock+0x40/0x40 [ 354.034849][ T23] ? smscore_putbuffer+0x81/0x120 [ 354.039899][ T23] smsusb_term_device+0xcb/0x220 [ 354.045343][ T23] smsusb_probe+0x1708/0x1da0 [ 354.050235][ T23] ? s2255_print_cfg+0x1b0/0x1b0 [ 354.055355][ T23] ? smsusb1_detectmode+0x260/0x260 [ 354.060836][ T23] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 354.066933][ T23] ? pm_runtime_enable+0x192/0x2a0 [ 354.072176][ T23] ? __pm_runtime_set_status+0x8ab/0xb80 [ 354.078150][ T23] usb_probe_interface+0x5a4/0xb00 [ 354.083370][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 354.088799][ T23] really_probe+0x25b/0xb40 [ 354.093432][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 354.098681][ T23] __driver_probe_device+0x18c/0x330 [ 354.107310][ T23] driver_probe_device+0x4f/0x420 [ 354.112474][ T23] __device_attach_driver+0x2ca/0x520 [ 354.118450][ T23] bus_for_each_drv+0x24b/0x2d0 [ 354.123627][ T23] ? coredump_store+0x90/0x90 [ 354.128532][ T23] ? bus_find_device+0x320/0x320 [ 354.133710][ T23] __device_attach+0x2b5/0x400 [ 354.138607][ T23] ? device_attach+0x20/0x20 [ 354.143630][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 354.148824][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 354.154280][ T23] bus_probe_device+0x180/0x260 [ 354.159359][ T23] device_add+0x85b/0xc20 [ 354.163759][ T23] usb_set_configuration+0x1a79/0x20c0 [ 354.169471][ T23] usb_generic_driver_probe+0x8d/0x150 [ 354.175156][ T23] usb_probe_device+0x13d/0x280 [ 354.180060][ T23] ? usb_register_device_driver+0x230/0x230 [ 354.186301][ T23] really_probe+0x25b/0xb40 [ 354.191100][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 354.196423][ T23] __driver_probe_device+0x18c/0x330 [ 354.201854][ T23] driver_probe_device+0x4f/0x420 [ 354.207270][ T23] __device_attach_driver+0x2ca/0x520 [ 354.212671][ T23] bus_for_each_drv+0x24b/0x2d0 [ 354.217548][ T23] ? coredump_store+0x90/0x90 [ 354.222286][ T23] ? bus_find_device+0x320/0x320 [ 354.227435][ T23] __device_attach+0x2b5/0x400 [ 354.232319][ T23] ? device_attach+0x20/0x20 [ 354.237018][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 354.242160][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 354.247491][ T23] bus_probe_device+0x180/0x260 [ 354.252460][ T23] device_add+0x85b/0xc20 [ 354.256846][ T23] usb_new_device+0xa31/0x1630 [ 354.261673][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 354.266648][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.271959][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 354.277193][ T23] hub_event+0x2962/0x49c0 [ 354.281677][ T23] ? hub_post_resume+0x120/0x120 [ 354.286661][ T23] ? read_lock_is_recursive+0x20/0x20 [ 354.292221][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.297596][ T23] ? process_scheduled_works+0x957/0x15b0 [ 354.303691][ T23] ? process_scheduled_works+0x957/0x15b0 [ 354.309713][ T23] process_scheduled_works+0xa45/0x15b0 [ 354.315348][ T23] ? assign_work+0x400/0x400 [ 354.320451][ T23] ? assign_work+0x39e/0x400 [ 354.326205][ T23] worker_thread+0xa55/0xfc0 [ 354.331048][ T23] kthread+0x2fa/0x390 [ 354.335315][ T23] ? pr_cont_work+0x560/0x560 [ 354.340014][ T23] ? kthread_blkcg+0xd0/0xd0 [ 354.344626][ T23] ret_from_fork+0x48/0x80 [ 354.349587][ T23] ? kthread_blkcg+0xd0/0xd0 [ 354.354411][ T23] ret_from_fork_asm+0x11/0x20 [ 354.359345][ T23] [ 354.362958][ T23] Kernel Offset: disabled [ 354.367500][ T23] Rebooting in 86400 seconds..