last executing test programs: 3.649862624s ago: executing program 0 (id=9426): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 3.429826266s ago: executing program 0 (id=9430): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) 3.249874615s ago: executing program 0 (id=9433): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0xa, 0x1, 0x6, {0x4000046, 0xffffffea, 0xfffb, 0x3}}) 3.071734622s ago: executing program 3 (id=9437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 3.061316033s ago: executing program 0 (id=9438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 2.909602289s ago: executing program 3 (id=9441): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt(r0, 0x29, 0x3, 0x0, 0x0) 2.851486394s ago: executing program 0 (id=9442): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 2.757867224s ago: executing program 3 (id=9445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c"], 0x90}}, 0x0) 2.4994236s ago: executing program 3 (id=9447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.49463631s ago: executing program 1 (id=9448): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000be6000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.237473506s ago: executing program 3 (id=9449): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xc08, &(0x7f0000000040)={[{@nobh}, {@user_xattr}]}, 0xff, 0x25a, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 2.19361457s ago: executing program 2 (id=9450): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) 2.192729081s ago: executing program 1 (id=9451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@delneigh={0x28, 0x1a, 0x1, 0x70bd25, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x84}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}}, 0x0) 1.953576434s ago: executing program 2 (id=9452): setresuid(0xee01, 0x0, 0x0) keyctl$session_to_parent(0x12) 1.910160629s ago: executing program 3 (id=9453): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000000140)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@journal_async_commit}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4719, &(0x7f0000008f40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 1.909575659s ago: executing program 1 (id=9454): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) 1.861680114s ago: executing program 2 (id=9455): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000080)={0x218, 0x9, 0x1}) 1.617926098s ago: executing program 1 (id=9456): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[], 0x9, 0x204, &(0x7f00000004c0)="$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") truncate(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2086) 1.511402078s ago: executing program 2 (id=9457): r0 = fsopen(&(0x7f0000000540)='vfat\x00', 0x1) readv(r0, &(0x7f0000003340)=[{&(0x7f0000002e80)=""/242, 0xf2}], 0x1) 1.133491596s ago: executing program 1 (id=9458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x10000001) 1.008914509s ago: executing program 2 (id=9459): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000003c0)={0x6, {{0x2, 0x4e29, @broadcast}}, {{0x14, 0x4e20, @loopback}}}, 0x108) 389.639551ms ago: executing program 2 (id=9460): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xffffffd1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000060, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000300), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) 237.376316ms ago: executing program 0 (id=9461): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x8800000) 0s ago: executing program 1 (id=9462): r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000900)={0x5, 0x3, 0x2, 0x0, 0xfb}) kernel console output (not intermixed with test programs): 15.638039][ T5827] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1115.649211][ T5827] usb 3-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.670302][ T5827] usb 3-1: config 7 interface 187 has no altsetting 0 [ 1115.684378][ T5827] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1115.700382][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.701978][T15395] usb 2-1: USB disconnect, device number 27 [ 1115.708473][ T5827] usb 3-1: Product: syz [ 1115.708492][ T5827] usb 3-1: Manufacturer: syz [ 1115.708525][ T5827] usb 3-1: SerialNumber: syz [ 1115.950681][ T5827] usb 3-1: Limiting number of CPorts to U8_MAX [ 1115.963606][ T5827] usb 3-1: Unknown endpoint type found, address 0x07 [ 1115.970515][ T5827] usb 3-1: Not enough endpoints found in device, aborting! [ 1116.041234][T23877] comedi comedi1: ni_at_a2150: I/O port conflict (0x3,28) [ 1116.168246][T23881] netlink: 'syz.3.7861': attribute type 28 has an invalid length. [ 1116.180913][T23881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7861'. [ 1116.192616][ T5827] usb 3-1: USB disconnect, device number 33 [ 1117.336768][T23918] loop2: detected capacity change from 0 to 512 [ 1117.454400][T23918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.538241][T23918] ext4 filesystem being mounted at /1946/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.564434][T23918] EXT4-fs error (device loop2): ext4_xattr_block_get:600: inode #15: comm syz.2.7879: corrupted xattr block 33: invalid ea_ino [ 1117.587340][T23918] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 1117.824976][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.365678][ T788] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1118.590317][ T788] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 1118.612311][ T788] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1118.632308][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.645351][ T788] usb 3-1: config 0 descriptor?? [ 1118.656223][ T788] pwc: Creative Labs Webcam Pro Ex detected. [ 1118.673492][ T788] pwc: Warning: more than 1 configuration available. [ 1118.904590][ T788] pwc: Failed to set LED on/off time (-71) [ 1118.932029][ T788] pwc: send_video_command error -71 [ 1118.940654][ T788] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1118.956999][T23952] loop3: detected capacity change from 0 to 32768 [ 1118.963851][ T788] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1118.979702][T23952] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.7893 (23952) [ 1119.005749][ T788] usb 3-1: USB disconnect, device number 34 [ 1119.057454][T23952] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1119.071298][T23952] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1119.118745][T23952] BTRFS info (device loop3): force zlib compression, level 3 [ 1119.146048][T23952] BTRFS info (device loop3): force clearing of disk cache [ 1119.173729][T23952] BTRFS info (device loop3): setting nodatasum [ 1119.188638][T23952] BTRFS info (device loop3): allowing degraded mounts [ 1119.206486][T23952] BTRFS info (device loop3): enabling disk space caching [ 1119.217287][T23952] BTRFS info (device loop3): disk space caching is enabled [ 1119.272375][T23964] loop1: detected capacity change from 0 to 32768 [ 1119.403727][T23964] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1119.448736][T23952] BTRFS info (device loop3): auto enabling async discard [ 1119.462129][T23964] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 1119.480758][T23964] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1119.482835][T23952] BTRFS info (device loop3): rebuilding free space tree [ 1119.490724][T23964] OCFS2: Returning error to the calling process. [ 1119.490791][T23964] (syz.1.7900,23964,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 1119.513056][T23964] (syz.1.7900,23964,1):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 1119.521534][T23964] (syz.1.7900,23964,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 1119.563035][T23964] (syz.1.7900,23964,1):ocfs2_mknod:306 ERROR: status = -5 [ 1119.578678][T23964] (syz.1.7900,23964,1):ocfs2_mknod:502 ERROR: status = -5 [ 1119.597336][T23952] BTRFS info (device loop3): disabling free space tree [ 1119.604478][T23952] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1119.626459][T23964] (syz.1.7900,23964,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1119.669386][T23952] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1119.743875][T23995] netlink: 'syz.2.7906': attribute type 64 has an invalid length. [ 1119.781704][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 1119.910281][T23952] BTRFS info (device loop3): balance: start -sconvert=raid0,soft,usage=1,stripes=4294967279..64 [ 1119.958992][T23952] BTRFS info (device loop3): balance: ended with status: 0 [ 1120.176679][ T5792] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1120.337740][ T8] IPVS: starting estimator thread 0... [ 1120.492871][T24004] IPVS: using max 20 ests per chain, 48000 per kthread [ 1120.778479][T24010] loop2: detected capacity change from 0 to 4096 [ 1120.799723][T24014] netlink: 'syz.3.7911': attribute type 21 has an invalid length. [ 1120.822388][T24010] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1120.833003][T24014] netlink: 'syz.3.7911': attribute type 6 has an invalid length. [ 1120.871801][T24010] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1120.898791][T24014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7911'. [ 1120.909664][T24010] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1120.951526][T24010] ntfs: volume version 3.1. [ 1121.205098][ T5794] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1121.220927][T23997] loop0: detected capacity change from 0 to 32768 [ 1121.243056][T23997] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1121.272779][T23997] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1121.288849][T24020] comedi comedi3: Minor 47 could not be opened [ 1121.447782][T23997] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 14ms [ 1121.494707][T24027] loop3: detected capacity change from 0 to 2048 [ 1121.501796][ T788] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1121.517645][ T788] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1121.537749][T24027] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1121.617979][T24032] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1121.631251][T24027] syz.3.7920: attempt to access beyond end of device [ 1121.631251][T24027] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1121.679249][ T23] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1121.702380][ T788] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 172ms [ 1121.733297][ T788] gfs2: fsid=syz:syz.0: jid=0: Done [ 1121.754020][T23997] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1121.805116][T24027] syz.3.7920: attempt to access beyond end of device [ 1121.805116][T24027] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 1121.838208][T24027] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 1121.919687][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1121.933501][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1121.952086][ T23] usb 2-1: config 8 has an invalid interface number: 97 but max is 0 [ 1121.973773][ T23] usb 2-1: config 8 has no interface number 0 [ 1122.025804][ T23] usb 2-1: too many endpoints for config 8 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1122.037408][ T23] usb 2-1: config 8 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1122.051140][ T23] usb 2-1: config 8 interface 97 has no altsetting 0 [ 1122.061178][ T23] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 1122.082552][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.095935][ T23] usb 2-1: Product: syz [ 1122.100174][ T23] usb 2-1: Manufacturer: syz [ 1122.115736][ T23] usb 2-1: SerialNumber: syz [ 1122.187576][T24041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7928'. [ 1122.197067][T24041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7928'. [ 1122.386041][ T23] usb 2-1: USB disconnect, device number 28 [ 1122.518776][T24049] netlink: 'syz.0.7927': attribute type 30 has an invalid length. [ 1122.864392][T24059] loop2: detected capacity change from 0 to 8 [ 1123.352406][T24073] loop1: detected capacity change from 0 to 16 [ 1123.412949][T24073] erofs: (device loop1): mounted with root inode @ nid 36. [ 1123.442668][T24073] syz.1.7943: attempt to access beyond end of device [ 1123.442668][T24073] loop1: rw=0, sector=32, nr_sectors = 8 limit=16 [ 1123.489692][T24053] loop3: detected capacity change from 0 to 32768 [ 1123.808909][T24080] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1124.187638][T24092] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1124.306149][T24096] netlink: 'syz.1.7955': attribute type 28 has an invalid length. [ 1124.319692][T24096] netlink: 'syz.1.7955': attribute type 29 has an invalid length. [ 1124.327586][T24096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1124.459429][T24100] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1124.651274][T15395] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1124.723167][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7959'. [ 1124.865155][T15395] usb 3-1: Using ep0 maxpacket: 32 [ 1124.872876][T15395] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.905701][T15395] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 1124.928779][T15395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.946427][T15395] usb 3-1: Product: syz [ 1124.961278][T15395] usb 3-1: Manufacturer: syz [ 1124.966200][T24116] netlink: 'syz.1.7964': attribute type 10 has an invalid length. [ 1124.974909][T15395] usb 3-1: SerialNumber: syz [ 1124.996192][T15395] usb 3-1: config 0 descriptor?? [ 1125.015981][T24116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7964'. [ 1125.099455][T24116] team0: Port device geneve0 added [ 1125.256197][T15395] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1125.334550][T24126] netlink: 'syz.3.7970': attribute type 30 has an invalid length. [ 1125.502439][ T5834] usb 3-1: USB disconnect, device number 35 [ 1125.735052][ T5827] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1125.856300][T24146] loop0: detected capacity change from 0 to 256 [ 1125.919457][T24147] loop3: detected capacity change from 0 to 4096 [ 1125.920615][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1125.933623][T24147] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1125.944778][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 1125.957739][ T5827] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1125.971349][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.974994][T24146] FAT-fs (loop0): Filesystem has been set read-only [ 1125.980975][ T5827] usb 2-1: Product: syz [ 1125.997539][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.007442][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.017275][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.025317][ T5827] usb 2-1: Manufacturer: syz [ 1126.026383][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.039661][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.049967][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.050068][ T5827] usb 2-1: SerialNumber: syz [ 1126.059123][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.095527][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.107592][ T5827] usb 2-1: config 0 descriptor?? [ 1126.120708][T24146] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1126.137778][ T5827] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1126.150773][ T27] audit: type=1800 audit(2000000525.119:48): pid=24146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7978" name="file1" dev="loop0" ino=1048638 res=0 errno=0 [ 1126.197822][T24146] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1126.301854][T24149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7980'. [ 1126.345395][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7980'. [ 1126.605548][ T5827] gspca_sq930x: ucbus_write failed -71 [ 1126.885415][ T5827] gspca_sq930x: Sensor ov9630 not yet treated [ 1126.891662][ T5827] sq930x: probe of 2-1:0.0 failed with error -22 [ 1126.920602][ T5827] usb 2-1: USB disconnect, device number 29 [ 1127.209018][T24163] loop0: detected capacity change from 0 to 32768 [ 1127.230252][T24163] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.7987 (24163) [ 1127.265717][T15395] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1127.303159][T24163] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1127.315408][T24163] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1127.325603][T24163] BTRFS info (device loop0): using free space tree [ 1127.343258][T24162] loop2: detected capacity change from 0 to 32768 [ 1127.358229][T24162] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.7986 (24162) [ 1127.397809][T24162] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1127.431290][T24163] BTRFS info (device loop0): enabling ssd optimizations [ 1127.438362][T24163] BTRFS info (device loop0): auto enabling async discard [ 1127.452062][T24162] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1127.461362][T24162] BTRFS info (device loop2): force zlib compression, level 3 [ 1127.494862][T15395] usb 4-1: Using ep0 maxpacket: 16 [ 1127.517004][T24162] BTRFS info (device loop2): force clearing of disk cache [ 1127.526679][T15395] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.537055][T15395] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.547458][T24162] BTRFS info (device loop2): setting nodatasum [ 1127.565235][T24162] BTRFS info (device loop2): allowing degraded mounts [ 1127.582580][T15395] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1127.583135][T24162] BTRFS info (device loop2): enabling disk space caching [ 1127.597174][T15395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.622998][T15395] usb 4-1: Product: syz [ 1127.634036][T24162] BTRFS info (device loop2): disk space caching is enabled [ 1127.634174][ T788] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1127.651201][T15395] usb 4-1: Manufacturer: syz [ 1127.663648][T15395] usb 4-1: SerialNumber: syz [ 1127.671717][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1127.805301][T24162] BTRFS info (device loop2): auto enabling async discard [ 1127.828042][T24162] BTRFS info (device loop2): rebuilding free space tree [ 1127.860867][ T788] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1127.872421][T24162] BTRFS info (device loop2): disabling free space tree [ 1127.879425][T24162] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1127.899139][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.945699][T24162] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1127.964231][ T788] pwc: Logitech/Cisco VT Camera webcam detected. [ 1128.173440][T15395] usb 4-1: cannot find UAC_HEADER [ 1128.192943][T24162] BTRFS info (device loop2): balance: start -sconvert=raid0,soft,usage=1,stripes=4294967279..64 [ 1128.271150][T24162] BTRFS info (device loop2): balance: ended with status: 0 [ 1128.300723][T15395] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1128.339347][T15395] usb 4-1: USB disconnect, device number 3 [ 1128.340858][T24205] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1128.406496][ T788] pwc: send_video_command error -71 [ 1128.424822][ T788] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1128.453104][T22541] udevd[22541]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.461866][ T788] Philips webcam: probe of 2-1:127.0 failed with error -71 [ 1128.481338][ T5794] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1128.507224][ T788] usb 2-1: USB disconnect, device number 30 [ 1129.098527][T24218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7998'. [ 1129.543135][T24234] netlink: 'syz.3.8006': attribute type 10 has an invalid length. [ 1129.562241][T24234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1129.642525][T24234] team0: Port device geneve0 added [ 1129.957004][T24249] loop3: detected capacity change from 0 to 8 [ 1129.969260][T24248] loop0: detected capacity change from 0 to 256 [ 1129.979350][T24249] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1129.988085][T24248] exfat: Deprecated parameter 'namecase' [ 1129.996939][T24248] exfat: Deprecated parameter 'namecase' [ 1130.011578][T24249] cramfs: Error -3 while decompressing! [ 1130.018751][T22541] udevd[22541]: incorrect cramfs checksum on /dev/loop3 [ 1130.024213][T24249] cramfs: ffffffff96fdd368(26)->ffff8880505b1000(4096) [ 1130.034056][T24249] cramfs: bad data blocksize 3489655184 [ 1130.055670][T24248] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1130.060546][T24249] cramfs: Error -3 while decompressing! [ 1130.090572][T22541] udevd[22541]: incorrect cramfs checksum on /dev/loop3 [ 1130.110899][T24249] cramfs: ffffffff96fdd368(26)->ffff8880505b1000(4096) [ 1130.140256][ T27] audit: type=1800 audit(2000000528.832:49): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8013" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 1130.153236][T24248] exFAT-fs (loop0): invalid start cluster (4278190088) [ 1130.159939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.233091][ T27] audit: type=1326 audit(2000000528.935:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24253 comm="syz.2.8016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6058f6c9 code=0x7ffc0000 [ 1130.305346][ T27] audit: type=1326 audit(2000000528.954:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24253 comm="syz.2.8016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6058f6c9 code=0x7ffc0000 [ 1130.371607][ T27] audit: type=1326 audit(2000000528.963:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24253 comm="syz.2.8016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f0b6058f6c9 code=0x7ffc0000 [ 1130.393898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.464240][ T27] audit: type=1326 audit(2000000528.963:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24253 comm="syz.2.8016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6058f6c9 code=0x7ffc0000 [ 1130.496375][T24260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1130.910708][T24274] bond0: Error: Cannot enslave bond to itself. [ 1130.989266][T24278] sock: sock_timestamping_bind_phc: sock not bind to device [ 1132.039864][T24318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8049'. [ 1132.059809][T24318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8049'. [ 1132.322665][T24330] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1132.603265][T24341] loop0: detected capacity change from 0 to 1024 [ 1132.624216][T24341] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1132.677307][T24341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a801e11d, mo2=0002] [ 1132.691357][T24341] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 1132.703019][T24341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1132.756453][T24341] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.807415][T24349] Cannot find add_set index 2 as target [ 1133.576640][T24342] loop2: detected capacity change from 0 to 32768 [ 1133.609462][T24342] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.8060 (24342) [ 1133.654341][T24342] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1133.680398][T24342] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1133.706044][T24342] BTRFS info (device loop2): using free space tree [ 1133.874674][T24342] BTRFS info (device loop2): enabling ssd optimizations [ 1133.909687][T24342] BTRFS info (device loop2): auto enabling async discard [ 1134.014197][T24357] loop3: detected capacity change from 0 to 32768 [ 1134.065213][T24357] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1134.091522][ T5794] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1134.113835][T24357] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1134.327271][T24357] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1134.364103][T15395] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1134.381947][T15395] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1134.491271][T24367] loop1: detected capacity change from 0 to 32768 [ 1134.531569][T24367] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.8072 (24367) [ 1134.587106][T24367] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1134.613146][T24367] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1134.624076][T15395] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 226ms [ 1134.642911][T15395] gfs2: fsid=syz:syz.0: jid=0: Done [ 1134.648757][T24367] BTRFS info (device loop1): force zlib compression, level 3 [ 1134.672975][T24357] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1134.687391][T24367] BTRFS info (device loop1): force clearing of disk cache [ 1134.698662][T24382] loop0: detected capacity change from 0 to 32768 [ 1134.718494][T24367] BTRFS info (device loop1): setting nodatasum [ 1134.738755][T24382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8073 (24382) [ 1134.782503][T24367] BTRFS info (device loop1): allowing degraded mounts [ 1134.819629][T24382] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1134.835245][T24367] BTRFS info (device loop1): enabling disk space caching [ 1134.849901][T24367] BTRFS info (device loop1): disk space caching is enabled [ 1134.882169][T24382] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1134.894064][T24382] BTRFS info (device loop0): force clearing of disk cache [ 1134.914667][T24382] BTRFS info (device loop0): force zlib compression, level 3 [ 1134.960168][T24382] BTRFS info (device loop0): enabling disk space caching [ 1135.007239][T24382] BTRFS info (device loop0): max_inline at 0 [ 1135.059347][T24382] BTRFS info (device loop0): enabling auto defrag [ 1135.098694][T24382] BTRFS info (device loop0): disk space caching is enabled [ 1135.129100][T24367] BTRFS info (device loop1): auto enabling async discard [ 1135.184696][T24367] BTRFS info (device loop1): rebuilding free space tree [ 1135.241471][T24367] BTRFS info (device loop1): disabling free space tree [ 1135.249667][T24367] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1135.264155][T24367] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1135.329226][T24382] BTRFS info (device loop0): enabling ssd optimizations [ 1135.341605][T24382] BTRFS info (device loop0): auto enabling async discard [ 1135.436765][T24367] BTRFS info (device loop1): balance: start -sconvert=raid0,soft,usage=1,stripes=4294967279..64 [ 1135.489083][T24367] BTRFS info (device loop1): balance: ended with status: 0 [ 1135.634836][ T5785] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1135.684801][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1135.871827][T24432] loop2: detected capacity change from 0 to 4096 [ 1135.953178][T24432] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1136.072940][T24437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8083'. [ 1136.192238][T24439] xt_connbytes: Forcing CT accounting to be enabled [ 1136.229103][T24439] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1137.903222][ T27] audit: type=1326 audit(2000000536.110:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.1.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1137.965688][ T27] audit: type=1326 audit(2000000536.128:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.1.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1138.021328][ T27] audit: type=1326 audit(2000000536.147:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.1.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1138.091107][ T27] audit: type=1326 audit(2000000536.147:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.1.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1138.097794][T24471] loop2: detected capacity change from 0 to 32768 [ 1138.456370][T24506] loop3: detected capacity change from 0 to 164 [ 1138.491457][T24506] Unable to read rock-ridge attributes [ 1138.577776][T22625] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1138.778933][T24516] loop3: detected capacity change from 0 to 128 [ 1138.840253][T24516] syz.3.8120: attempt to access beyond end of device [ 1138.840253][T24516] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1138.911883][T24516] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 1138.913182][T24519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1139.043583][ T5792] sysv_free_block: flc_count > flc_size [ 1139.049211][ T5792] sysv_free_block: flc_count > flc_size [ 1139.058540][T24523] loop2: detected capacity change from 0 to 2048 [ 1139.066088][ T5792] sysv_free_block: flc_count > flc_size [ 1139.073034][ T5792] sysv_free_block: flc_count > flc_size [ 1139.079329][ T5792] sysv_free_block: flc_count > flc_size [ 1139.094739][ T5792] sysv_free_block: flc_count > flc_size [ 1139.100454][T24523] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1139.110227][ T5792] sysv_free_block: flc_count > flc_size [ 1139.126465][ T5792] sysv_free_block: flc_count > flc_size [ 1139.132174][ T5792] sysv_free_block: flc_count > flc_size [ 1139.164839][ T5792] sysv_free_block: flc_count > flc_size [ 1139.177679][ T5792] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1139.190760][T24528] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1139.329951][T24531] openvswitch: netlink: Message has 4 unknown bytes. [ 1139.684583][T24542] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8132'. [ 1139.735803][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8132'. [ 1140.587420][ T27] audit: type=1326 audit(2000000538.617:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24578 comm="syz.3.8150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883d8f6c9 code=0x7ffc0000 [ 1140.650874][T24583] loop1: detected capacity change from 0 to 64 [ 1140.656164][ T27] audit: type=1326 audit(2000000538.617:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24578 comm="syz.3.8150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883d8f6c9 code=0x7ffc0000 [ 1140.719032][ T27] audit: type=1326 audit(2000000538.626:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24578 comm="syz.3.8150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f1883d8f6c9 code=0x7ffc0000 [ 1140.760088][T24583] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 1140.799580][ T27] audit: type=1326 audit(2000000538.626:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24578 comm="syz.3.8150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883d8f6c9 code=0x7ffc0000 [ 1140.896543][ T27] audit: type=1326 audit(2000000538.626:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24578 comm="syz.3.8150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883d8f6c9 code=0x7ffc0000 [ 1141.533332][T24613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8166'. [ 1141.591741][T24616] loop2: detected capacity change from 0 to 256 [ 1141.632603][T24616] exfat: Deprecated parameter 'utf8' [ 1141.637994][T24616] exfat: Deprecated parameter 'utf8' [ 1141.696216][T24616] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1141.724246][ T788] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1141.807324][T24616] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1141.940059][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1141.955758][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1141.956915][T24626] netlink: 'syz.1.8173': attribute type 1 has an invalid length. [ 1141.991460][T24626] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8173'. [ 1141.992569][ T788] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1142.000591][T24626] nbd: must specify at least one socket [ 1142.062696][ T788] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1142.081121][ T788] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1142.091118][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.108897][ T788] usb 1-1: Product: syz [ 1142.124038][ T788] usb 1-1: Manufacturer: syz [ 1142.128713][ T788] usb 1-1: SerialNumber: syz [ 1142.156315][ T788] smsusb:smsusb_probe: board id=8, interface number 0 [ 1142.379941][ T788] smsusb:smsusb_probe: Device initialized with return code -19 [ 1142.666109][ T788] usb 1-1: USB disconnect, device number 113 [ 1143.005825][T24640] loop2: detected capacity change from 0 to 32768 [ 1143.030127][T24640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8179 (24640) [ 1143.086424][T24640] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1143.109654][T24640] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1143.138037][T24640] BTRFS info (device loop2): using free space tree [ 1143.281551][T24640] BTRFS info (device loop2): enabling ssd optimizations [ 1143.303433][T24640] BTRFS info (device loop2): auto enabling async discard [ 1143.586664][ T5794] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1143.840136][T22541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (22541) [ 1143.995931][T24655] loop1: detected capacity change from 0 to 32768 [ 1144.009895][T24688] No such timeout policy "syz0" [ 1144.200223][T24655] ERROR: (device loop1): duplicateIXtree: [ 1144.200223][T24655] [ 1144.213089][T24655] ERROR: (device loop1): remounting filesystem as read-only [ 1144.323811][T24692] loop3: detected capacity change from 0 to 256 [ 1144.342268][T24692] exfat: Deprecated parameter 'utf8' [ 1144.401545][T24692] exfat: Deprecated parameter 'utf8' [ 1144.456874][T24692] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1144.541533][T24692] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1144.663571][T24696] Cannot find del_set index 6 as target [ 1144.728809][T24681] loop0: detected capacity change from 0 to 32768 [ 1144.904621][ T5827] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1145.123699][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 1145.131343][ T5827] usb 3-1: config 0 has no interfaces? [ 1145.140333][ T5827] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1145.164973][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.187689][ T5827] usb 3-1: Product: syz [ 1145.202881][ T5827] usb 3-1: Manufacturer: syz [ 1145.218719][ T5827] usb 3-1: SerialNumber: syz [ 1145.242023][ T5827] r8152-cfgselector 3-1: config 0 descriptor?? [ 1145.455065][T24710] loop3: detected capacity change from 0 to 1024 [ 1145.509251][ T5827] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1145.621401][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1145.760444][ T788] usb 3-1: USB disconnect, device number 36 [ 1145.994299][T24728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8214'. [ 1146.091880][T24734] netlink: 'syz.0.8217': attribute type 9 has an invalid length. [ 1146.736487][ T27] audit: type=1326 audit(2000000002.824:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24757 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1146.810616][ T27] audit: type=1326 audit(2000000002.824:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24757 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1146.898164][ T27] audit: type=1326 audit(2000000002.824:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24757 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1146.979541][ T27] audit: type=1326 audit(2000000002.824:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24757 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1147.072159][ T27] audit: type=1326 audit(2000000002.824:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24757 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824178f6c9 code=0x7ffc0000 [ 1147.579660][T24787] loop3: detected capacity change from 0 to 1024 [ 1147.605039][T24787] EXT4-fs: Ignoring removed mblk_io_submit option [ 1147.618493][T24787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1147.716333][T24787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.889411][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.057984][T24807] loop0: detected capacity change from 0 to 8 [ 1148.096325][T24807] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1148.120473][T24809] "syz.1.8253" (24809) uses obsolete ecb(arc4) skcipher [ 1148.130871][T24807] SQUASHFS error: Failed to read block 0x28d: -5 [ 1148.137339][T24807] SQUASHFS error: Unable to read metadata cache entry [28b] [ 1148.201473][T24807] SQUASHFS error: Unable to read inode 0x11f [ 1148.617601][T24827] loop1: detected capacity change from 0 to 512 [ 1148.632477][T24827] EXT4-fs: Ignoring removed mblk_io_submit option [ 1148.679014][T24827] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1148.704230][T24827] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.8261: attempt to clear invalid blocks 2 len 1 [ 1148.724568][T24827] EXT4-fs (loop1): Remounting filesystem read-only [ 1148.742765][T24827] EXT4-fs (loop1): 1 truncate cleaned up [ 1148.750215][T24827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.790464][ T5827] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1148.839022][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.943854][T24836] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8264'. [ 1148.963940][T24836] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8264'. [ 1148.978985][T24836] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8264'. [ 1148.996241][ T5827] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 1149.005070][ T5827] usb 3-1: config 0 has no interface number 0 [ 1149.011217][ T5827] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1149.035856][ T5827] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1149.057117][ T5827] usb 3-1: config 0 interface 216 has no altsetting 0 [ 1149.078572][ T5827] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1149.126903][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.153980][ T5827] usb 3-1: config 0 descriptor?? [ 1149.172143][T24823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1149.201151][ T5827] usb 3-1: NFC: intf ffff888057136000 id ffffffff8d63b620 [ 1149.435952][T24850] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1149.459544][ T23] usb 3-1: USB disconnect, device number 37 [ 1149.471015][T24850] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1149.761909][T24842] loop0: detected capacity change from 0 to 32768 [ 1149.772773][T24858] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8276'. [ 1149.852048][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8277'. [ 1149.866482][T24842] ERROR: (device loop0): diAllocBit: iag inconsistent [ 1149.866482][T24842] [ 1149.923269][T24842] ialloc: diAlloc returned -5! [ 1150.433724][T24872] loop2: detected capacity change from 0 to 1024 [ 1150.448498][T24872] EXT4-fs: Ignoring removed mblk_io_submit option [ 1150.471322][T24872] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1150.531362][T24872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.568498][T24880] loop1: detected capacity change from 0 to 2048 [ 1150.657671][T24880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1150.779794][ T5834] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1150.789842][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.892290][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8289'. [ 1150.992919][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 1151.026215][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1151.035830][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.066291][ T5834] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1151.104527][ T5834] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.131719][ T5834] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.142300][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.150411][ T5834] usb 4-1: Product: syz [ 1151.163726][ T5834] usb 4-1: Manufacturer: syz [ 1151.174399][ T5834] usb 4-1: SerialNumber: syz [ 1151.441477][T24883] loop0: detected capacity change from 0 to 40427 [ 1151.455260][ T5834] cdc_ncm 4-1:1.0: skipping garbage [ 1151.460558][ T5834] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 1151.471241][T24883] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 1151.480858][ T5834] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1151.495340][ T5834] cdc_ncm 4-1:1.0: bind() failure [ 1151.498004][T24897] loop2: detected capacity change from 0 to 64 [ 1151.526468][T24883] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 1151.535229][ T5834] usb 4-1: USB disconnect, device number 4 [ 1151.548804][T24883] F2FS-fs (loop0): Image doesn't support compression [ 1151.579922][T24897] syz.2.8296: attempt to access beyond end of device [ 1151.579922][T24897] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1151.606824][T24883] F2FS-fs (loop0): invalid crc value [ 1151.630845][T24897] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 1151.647119][T24883] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1151.829646][T24883] F2FS-fs (loop0): Start checkpoint disabled! [ 1151.864790][T24883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1151.930933][T24883] syz.0.8288: attempt to access beyond end of device [ 1151.930933][T24883] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1152.223998][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1152.234723][ T1328] kworker/u4:9: attempt to access beyond end of device [ 1152.234723][ T1328] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1152.261263][ T1328] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1152.271559][ T1328] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1152.405822][T24903] loop1: detected capacity change from 0 to 32768 [ 1152.467473][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1152.491399][T24903] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1152.502442][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.534132][ T8] usb 3-1: config 0 descriptor?? [ 1152.549210][ T8] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1152.731841][T24903] XFS (loop1): Ending clean mount [ 1152.849098][T24923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1152.888270][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1153.021297][ T8] gspca_spca508: reg_read err -71 [ 1153.037450][ T8] gspca_spca508: reg_read err -71 [ 1153.069466][ T8] gspca_spca508: reg_read err -71 [ 1153.094280][ T8] gspca_spca508: reg_read err -71 [ 1153.105074][ T8] gspca_spca508: reg write: error -71 [ 1153.118749][ T8] spca508: probe of 3-1:0.0 failed with error -71 [ 1153.131000][T24929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8306'. [ 1153.146096][ T8] usb 3-1: USB disconnect, device number 38 [ 1153.517524][T24937] delete_channel: no stack [ 1153.675153][T24944] netlink: 'syz.1.8313': attribute type 1 has an invalid length. [ 1153.683882][T24944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1154.136030][T24962] ieee802154 phy0 wpan0: encryption failed: -22 [ 1154.404189][T24971] loop2: detected capacity change from 0 to 2048 [ 1154.447755][T24971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1155.083898][T25001] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1155.107044][T25001] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1155.192978][T24999] loop2: detected capacity change from 0 to 4096 [ 1155.218278][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8342'. [ 1155.240550][T24999] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1155.381379][T24999] ntfs3: loop2: failed to convert "c46c" to iso8859-9 [ 1156.172808][T25039] loop1: detected capacity change from 0 to 1024 [ 1156.175833][T25038] loop0: detected capacity change from 0 to 1024 [ 1156.292351][T25038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.408284][T25038] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz.0.8359: directory missing '.' [ 1156.590586][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.834867][T25058] loop3: detected capacity change from 0 to 4096 [ 1156.900716][T25058] ntfs: volume version 3.1. [ 1156.912336][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8371'. [ 1156.929790][T25058] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1156.961048][T25058] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota. [ 1157.000911][T25058] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 1157.024507][T25058] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1157.065009][T25058] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 1157.108977][T25058] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1158.471791][T25087] loop0: detected capacity change from 0 to 32768 [ 1158.558812][T25087] JBD2: Invalid start block of journal: 67108866 [ 1158.572579][T25087] (syz.0.8381,25087,1):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 1158.581646][T25087] (syz.0.8381,25087,1):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 1158.668875][T25087] (syz.0.8381,25087,1):ocfs2_check_volume:2488 ERROR: status = -22 [ 1158.676874][T25087] (syz.0.8381,25087,1):ocfs2_mount_volume:1820 ERROR: status = -22 [ 1158.707060][T25102] loop3: detected capacity change from 0 to 32768 [ 1158.743861][T25087] (syz.0.8381,25087,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1158.784404][T25117] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8398'. [ 1158.829693][T25102] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1159.201876][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 1159.361091][T25136] loop2: detected capacity change from 0 to 512 [ 1159.396697][T25136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1159.471505][T25136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.573216][T25136] ext4 filesystem being mounted at /2066/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.631447][T25136] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:335: inode #15: comm syz.2.8405: verity file corrupted; can't find descriptor [ 1159.695032][T25136] EXT4-fs (loop2): Remounting filesystem read-only [ 1159.702082][T25136] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 1159.714337][T25142] i2c i2c-0: Invalid block write size 252 [ 1159.803442][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.051870][T25152] netlink: 'syz.1.8411': attribute type 1 has an invalid length. [ 1160.070853][T25152] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8411'. [ 1160.503759][T25137] loop3: detected capacity change from 0 to 32768 [ 1160.577220][T25137] ERROR: (device loop3): diNewExt: no free extents [ 1160.577220][T25137] [ 1160.621650][T25137] ERROR: (device loop3): remounting filesystem as read-only [ 1160.642789][T25137] ialloc: diAlloc returned -5! [ 1160.648642][T25167] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1160.662998][T25167] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1160.797564][T25172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8421'. [ 1161.003768][T25179] vlan1: entered promiscuous mode [ 1161.009371][T25179] vlan1: entered allmulticast mode [ 1161.015103][T25179] veth0_vlan: entered allmulticast mode [ 1161.049129][T25176] loop1: detected capacity change from 0 to 4096 [ 1161.094232][T25176] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 1161.148995][T25176] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1161.263186][T25176] ntfs: volume version 3.1. [ 1161.267953][T25176] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 1161.297312][T25176] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 1161.403521][T25188] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8429'. [ 1161.701080][T25196] loop0: detected capacity change from 0 to 16 [ 1161.749939][T25196] erofs: (device loop0): mounted with root inode @ nid 36. [ 1162.394851][T25220] netlink: 'syz.3.8445': attribute type 4 has an invalid length. [ 1162.631761][T25230] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1162.674794][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1162.684799][T25230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1162.974224][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1162.995685][T25246] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1163.020063][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.027891][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.080691][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.093548][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.125359][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.144945][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.169661][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.177510][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.220833][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.248383][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.259152][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.306073][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.328492][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.353892][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.371544][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.390007][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.398141][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.415554][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.423380][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.443343][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.454793][T25258] loop2: detected capacity change from 0 to 16 [ 1163.461212][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.480610][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.488516][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.496792][T25258] erofs: (device loop2): mounted with root inode @ nid 36. [ 1163.537796][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.586412][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.594245][ T5827] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1163.632067][ T5827] hid-generic 0001:2043D8E7:05F6.0001: hidraw0: HID ved.d9 Device [syz0] on syz0 [ 1163.901036][T25261] fido_id[25261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1164.018062][T25269] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1164.184009][T25250] loop1: detected capacity change from 0 to 32768 [ 1164.259935][T25250] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1164.297010][T25250] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1164.306956][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8474'. [ 1164.336756][T25284] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1164.525063][T25250] XFS (loop1): Ending clean mount [ 1164.532129][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8476'. [ 1164.766291][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1165.007417][T25305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8485'. [ 1165.193135][T25311] loop3: detected capacity change from 0 to 256 [ 1165.666004][T25321] loop0: detected capacity change from 0 to 4096 [ 1165.700077][T25321] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1166.160596][T25339] loop2: detected capacity change from 0 to 2048 [ 1166.219849][T25339] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1166.299913][T25344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1166.301956][T25339] syz.2.8501: attempt to access beyond end of device [ 1166.301956][T25339] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1166.375448][T25346] netlink: 'syz.3.8503': attribute type 28 has an invalid length. [ 1166.420015][T25346] netlink: 'syz.3.8503': attribute type 3 has an invalid length. [ 1166.427828][T25346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8503'. [ 1166.477861][T25339] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1166.548110][T25339] Remounting filesystem read-only [ 1166.554642][T25339] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1166.599994][T25339] NILFS (loop2): error -5 truncating bmap (ino=16) [ 1166.742551][ T5794] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1166.754007][ T5794] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1166.772090][ T5794] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1166.781048][ T5794] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1166.801037][ T5794] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1166.843103][ T5794] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1167.017519][T25365] loop1: detected capacity change from 0 to 256 [ 1167.040070][T25365] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 1167.327746][T25378] loop1: detected capacity change from 0 to 22 [ 1167.350586][T25378] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1167.382425][T25378] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1167.563815][T25384] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8521'. [ 1168.374266][T25416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8536'. [ 1168.426946][T25416] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1168.656768][T25429] loop2: detected capacity change from 0 to 256 [ 1169.423672][T25458] netlink: 'syz.0.8554': attribute type 32 has an invalid length. [ 1169.533105][T25465] loop2: detected capacity change from 0 to 64 [ 1169.583285][T25465] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1169.904658][T15395] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1170.120685][T15395] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 1170.135428][T15395] usb 3-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 1170.171715][T15395] usb 3-1: config 0 has no interface number 0 [ 1170.185137][T15395] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1170.209099][T15395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.225191][T15395] usb 3-1: Product: syz [ 1170.229435][T15395] usb 3-1: Manufacturer: syz [ 1170.234532][T15395] usb 3-1: SerialNumber: syz [ 1170.258025][T25461] loop3: detected capacity change from 0 to 32768 [ 1170.269578][T15395] usb 3-1: config 0 descriptor?? [ 1170.313194][T25461] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1170.391338][T25461] XFS (loop3): Ending clean mount [ 1170.407835][T25461] XFS (loop3): Quotacheck needed: Please wait. [ 1170.493707][T15395] qmi_wwan: probe of 3-1:0.207 failed with error -22 [ 1170.522841][T15395] usb 3-1: USB disconnect, device number 39 [ 1170.560927][T25461] XFS (loop3): Quotacheck: Done. [ 1170.654174][ T5792] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1170.847374][T25503] genirq: Flags mismatch irq 9. 00000000 (dt2814) vs. 00000080 (acpi) [ 1171.510097][T25509] loop1: detected capacity change from 0 to 32768 [ 1171.612621][T25525] netlink: 'syz.0.8583': attribute type 49 has an invalid length. [ 1171.818822][T25529] xt_CONNSECMARK: invalid mode: 0 [ 1172.117628][T25537] loop2: detected capacity change from 0 to 64 [ 1172.504055][T25548] No such timeout policy "syz0" [ 1172.648718][T25549] loop2: detected capacity change from 0 to 4096 [ 1172.656483][T25549] __ntfs_warning: 4 callbacks suppressed [ 1172.656500][T25549] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1172.726864][ T788] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1172.801830][T25549] ntfs: volume version 3.1. [ 1172.930600][T25559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8599'. [ 1172.951567][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1172.960782][ T788] usb 2-1: not running at top speed; connect to a high speed hub [ 1172.982726][T25559] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8599'. [ 1172.994317][T25559] netlink: 'syz.0.8599': attribute type 5 has an invalid length. [ 1172.999812][ T788] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1173.023028][ T788] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1173.034753][T25559] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8599'. [ 1173.047171][ T788] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1173.085662][ T788] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 1173.121971][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1173.144522][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.152603][ T788] usb 2-1: Product: syz [ 1173.177066][ T788] usb 2-1: Manufacturer: syz [ 1173.190148][ T788] usb 2-1: SerialNumber: syz [ 1173.313143][T25565] usb usb8: check_ctrlrecip: process 25565 (syz.0.8602) requesting ep 01 but needs 81 [ 1173.325552][T25565] usb usb8: usbfs: process 25565 (syz.0.8602) did not claim interface 0 before use [ 1173.454876][ T788] usb 2-1: 0:2 : does not exist [ 1173.561929][ T788] usb 2-1: USB disconnect, device number 31 [ 1173.613567][T22625] udevd[22625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.165679][T25596] loop1: detected capacity change from 0 to 8 [ 1174.254637][T25599] x_tables: duplicate underflow at hook 4 [ 1174.265656][T25596] overlayfs: failed to resolve 'fscontext=system_u': -2 [ 1174.628626][T25611] loop3: detected capacity change from 0 to 1024 [ 1174.760659][ T1328] hfsplus: b-tree write err: -5, ino 4 [ 1175.000439][ T5827] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1175.175153][ T787] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1175.219602][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.240186][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1175.263383][ T5827] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1175.278124][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1175.297316][ T5827] usb 2-1: SerialNumber: syz [ 1175.370994][ T787] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1175.388929][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.402834][ T787] usb 4-1: config 0 descriptor?? [ 1175.422518][ T787] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1175.551465][ T5827] usb 2-1: 0:2 : does not exist [ 1175.609595][ T5827] usb 2-1: USB disconnect, device number 32 [ 1175.628151][T25624] loop0: detected capacity change from 0 to 40427 [ 1175.652295][T22541] udevd[22541]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1175.689968][T25624] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 1175.710463][T25624] F2FS-fs (loop0): Image doesn't support compression [ 1175.717297][T25624] F2FS-fs (loop0): Image doesn't support compression [ 1175.762113][T25624] F2FS-fs (loop0): invalid crc value [ 1175.797978][T25624] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1175.862532][ T787] gp8psk: usb in 137 operation failed. [ 1175.880693][ T787] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1175.901517][ T787] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1175.914152][ T787] usb 4-1: USB disconnect, device number 5 [ 1175.958788][T25624] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1176.510954][T25655] mmap: syz.0.8646 (25655): VmData 37457920 exceed data ulimit 131072. Update limits or use boot option ignore_rlimit_data. [ 1176.770986][T25664] loop2: detected capacity change from 0 to 128 [ 1176.910896][T25664] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1176.938920][T25664] ext4 filesystem being mounted at /2134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.957093][T25666] loop0: detected capacity change from 0 to 4096 [ 1176.977902][T25666] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1177.059660][ T5794] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1177.223086][T25666] ntfs3: loop0: failed to convert "c46c" to cp936 [ 1177.351127][T25683] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8658'. [ 1177.359442][T25685] loop3: detected capacity change from 0 to 8 [ 1177.558505][T25683] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8658'. [ 1177.761062][T25695] loop0: detected capacity change from 0 to 1024 [ 1177.856330][T25695] hfsplus: keylen 65060 too large [ 1177.925855][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.932268][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.012467][T25703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8669'. [ 1178.517203][T25722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8678'. [ 1178.810030][T25734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8684'. [ 1178.819093][T25734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8684'. [ 1179.119376][T25746] loop2: detected capacity change from 0 to 2048 [ 1179.197181][T25750] netlink: 'syz.0.8692': attribute type 3 has an invalid length. [ 1179.204997][T25750] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8692'. [ 1179.241352][T25746] loop2: p1 < > p3 [ 1179.274403][T25746] loop2: p3 size 134217728 extends beyond EOD, truncated [ 1179.317906][T25753] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 1179.337585][T25753] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 1179.347709][T25753] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 1179.355645][T25753] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 1179.363953][T25753] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 1179.380761][T25753] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 1179.419234][T25753] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 1179.427929][T25753] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 1179.469249][T25753] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 1179.505057][T25758] loop0: detected capacity change from 0 to 128 [ 1179.521712][T25753] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 1179.548212][T25758] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1179.568977][T25753] ALSA: mixer_oss: invalid OSS volume 'î[' [ 1179.592682][T25753] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 1179.600066][T25758] ext4 filesystem being mounted at /2279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.611008][T25753] ALSA: mixer_oss: invalid OSS volume '·$ffff88804e9e6000(4096) [ 1212.942307][T26810] cramfs: Error -3 while decompressing! [ 1212.966299][T26810] cramfs: ffffffff96fdd2f8(16)->ffff88804e9e6000(4096) [ 1212.978311][T22625] udevd[22625]: incorrect cramfs checksum on /dev/loop1 [ 1212.990543][ T27] audit: type=1800 audit(2000000064.804:81): pid=26810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9185" name="file0" dev="loop1" ino=244 res=0 errno=0 [ 1213.693925][T26834] netlink: 'syz.0.9197': attribute type 1 has an invalid length. [ 1214.036612][T26845] loop2: detected capacity change from 0 to 764 [ 1214.093897][T26845] rock: directory entry would overflow storage [ 1214.115804][T26845] rock: sig=0x4654, size=5, remaining=4 [ 1214.232669][T26851] loop0: detected capacity change from 0 to 64 [ 1214.615201][T26863] overlayfs: failed to resolve './file1': -2 [ 1214.713916][T26868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9212'. [ 1215.030696][T26881] capability: warning: `syz.1.9220' uses 32-bit capabilities (legacy support in use) [ 1215.429262][T26900] netlink: 'syz.3.9228': attribute type 3 has an invalid length. [ 1215.451470][T26901] loop0: detected capacity change from 0 to 256 [ 1215.479703][T26901] exfat: Deprecated parameter 'utf8' [ 1215.485148][T26901] exfat: Deprecated parameter 'namecase' [ 1215.510915][T26901] exfat: Deprecated parameter 'namecase' [ 1215.516665][T26901] exfat: Deprecated parameter 'utf8' [ 1215.577368][T26901] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 1216.125266][T26923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9240'. [ 1216.138963][T26923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9240'. [ 1216.397042][T26929] loop0: detected capacity change from 0 to 16 [ 1216.432938][T26929] erofs: (device loop0): mounted with root inode @ nid 36. [ 1217.078349][T26951] loop0: detected capacity change from 0 to 1024 [ 1217.143665][T26956] xt_recent: hitcount (4294967293) is larger than allowed maximum (255) [ 1217.357123][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9260'. [ 1217.381548][T26962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1217.389677][T26962] IPv6: NLM_F_CREATE should be set when creating new route [ 1217.397150][T26962] IPv6: NLM_F_CREATE should be set when creating new route [ 1218.078538][T26959] loop2: detected capacity change from 0 to 32768 [ 1218.095251][T26959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.9257 (26959) [ 1218.154995][T26959] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1218.172654][T26959] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1218.195284][T26959] BTRFS info (device loop2): force clearing of disk cache [ 1218.210002][T26959] BTRFS info (device loop2): disabling free space tree [ 1218.231683][T26959] BTRFS info (device loop2): enabling auto defrag [ 1218.250417][T26959] BTRFS info (device loop2): max_inline at 0 [ 1218.264953][T26991] netlink: 'syz.3.9273': attribute type 1 has an invalid length. [ 1218.279968][T26959] BTRFS info (device loop2): enabling disk space caching [ 1218.299807][T26959] BTRFS info (device loop2): disk space caching is enabled [ 1218.429604][T26959] BTRFS info (device loop2): enabling ssd optimizations [ 1218.436893][T26959] BTRFS info (device loop2): auto enabling async discard [ 1218.440512][T27007] xt_nfacct: accounting object `syz1' does not exist [ 1218.468957][T26959] BTRFS info (device loop2): rebuilding free space tree [ 1218.499961][T26959] BTRFS info (device loop2): disabling free space tree [ 1218.519791][T26959] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1218.552939][T26959] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1218.624187][T26959] BTRFS info (device loop2: state M): disabling disk space caching [ 1218.648464][T26959] BTRFS info (device loop2: state M): cleaning free space cache v1 [ 1218.737991][ T5794] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1218.854278][T27018] loop3: detected capacity change from 0 to 128 [ 1219.140432][T27026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1219.813675][T27045] loop1: detected capacity change from 0 to 256 [ 1220.223609][T27061] CIFS mount error: No usable UNC path provided in device string! [ 1220.223609][T27061] [ 1220.248409][T27061] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1220.471610][T27071] ieee802154 phy0 wpan0: encryption failed: -90 [ 1220.479995][T27073] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1220.508128][T27075] x_tables: duplicate underflow at hook 3 [ 1220.908348][T27087] Illegal XDP return value 4294967274 on prog (id 569) dev N/A, expect packet loss! [ 1221.421004][T27109] loop2: detected capacity change from 0 to 64 [ 1221.484078][T27109] Trying to free block not in datazone [ 1221.493392][T27109] Trying to free block not in datazone [ 1221.511891][T27109] Trying to free block not in datazone [ 1221.533066][T27109] Trying to free block not in datazone [ 1221.551470][T27109] Trying to free block not in datazone [ 1221.566004][T27109] minix_free_block (loop2:6): bit already cleared [ 1221.594312][T27109] Trying to free block not in datazone [ 1221.862127][T27122] loop3: detected capacity change from 0 to 64 [ 1221.904040][T27122] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1222.069737][T27122] minix_free_inode: bit 3 already cleared [ 1222.213113][T27111] loop0: detected capacity change from 0 to 32768 [ 1222.256898][T27111] [ 1222.256898][T27111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1222.256898][T27111] [ 1222.344432][ T27] audit: type=1800 audit(2000000073.559:82): pid=27111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9324" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1222.476125][ T5788] [ 1222.476125][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1222.476125][ T5788] [ 1222.507055][ T5788] [ 1222.507055][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1222.507055][ T5788] [ 1223.193513][T27163] loop3: detected capacity change from 0 to 64 [ 1223.199782][T27157] loop1: detected capacity change from 0 to 2048 [ 1223.218056][T27157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1223.242570][T27163] hfs: unable to locate alternate MDB [ 1223.248048][T27163] hfs: continuing without an alternate MDB [ 1223.590247][T27169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9353'. [ 1223.610846][T27169] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1223.882638][T27183] QAT: failed to copy from user cfg_data. [ 1224.314782][T27198] loop2: detected capacity change from 0 to 2048 [ 1224.329784][T27198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1224.459282][T27203] netlink: 'syz.1.9370': attribute type 10 has an invalid length. [ 1224.552554][T27203] team0: Port device wlan1 added [ 1224.578379][T27206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.819378][T27217] loop0: detected capacity change from 0 to 8 [ 1224.887799][T27217] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1224.953864][T27217] cramfs: bad data blocksize 4293972856 [ 1224.959087][T22625] udevd[22625]: incorrect cramfs checksum on /dev/loop0 [ 1224.960003][T27217] cramfs: bad data blocksize 4293972856 [ 1225.000028][T27219] loop2: detected capacity change from 0 to 2048 [ 1225.016991][T27221] loop1: detected capacity change from 0 to 164 [ 1225.053575][T22541] udevd[22541]: incorrect cramfs checksum on /dev/loop0 [ 1225.068991][T27219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1225.545418][T27234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1225.732742][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9389'. [ 1225.939334][T27248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9392'. [ 1226.462747][T27239] loop2: detected capacity change from 0 to 32768 [ 1226.527001][T27239] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1226.744177][T27239] XFS (loop2): Ending clean mount [ 1226.791969][T27239] XFS (loop2): Quotacheck needed: Please wait. [ 1226.856771][T27285] netlink: 'syz.0.9403': attribute type 10 has an invalid length. [ 1226.957170][T27239] XFS (loop2): Quotacheck: Done. [ 1226.994308][T27285] team0: Port device wlan1 added [ 1227.036170][T27289] netlink: 'syz.3.9407': attribute type 3 has an invalid length. [ 1227.065177][T27289] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1227.108131][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1227.869312][T27314] ipt_REJECT: ECHOREPLY no longer supported. [ 1227.983094][T27320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9420'. [ 1228.018591][T27320] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1228.113522][T27326] overlay: Unknown parameter '\' [ 1228.305563][T27330] qrtr: Invalid version 0 [ 1229.133258][T27363] loop0: detected capacity change from 0 to 8 [ 1229.194553][T27369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9445'. [ 1229.204480][T27363] SQUASHFS error: xz decompression failed, data probably corrupt [ 1229.225364][T27363] SQUASHFS error: Failed to read block 0x108: -5 [ 1229.250644][T27363] SQUASHFS error: Unable to read metadata cache entry [106] [ 1229.280611][T27363] SQUASHFS error: Unable to read inode 0x11f [ 1229.374682][T27368] loop2: detected capacity change from 0 to 4096 [ 1229.536369][T27375] bridge1: entered promiscuous mode [ 1229.696800][T27377] loop3: detected capacity change from 0 to 128 [ 1229.705536][T27377] EXT4-fs: Ignoring removed nobh option [ 1229.729047][ T787] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1229.760435][T27377] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1229.773966][T27377] ext4 filesystem being mounted at /2326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.799720][T27377] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.9449: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 1229.806756][T27382] netlink: 'syz.1.9451': attribute type 1 has an invalid length. [ 1229.889066][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1229.957071][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1229.978515][ T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1229.989845][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 1230.014500][ T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1230.030864][ T787] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1230.040723][ T787] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1230.048948][ T787] usb 1-1: Manufacturer: syz [ 1230.073148][ T787] usb 1-1: config 0 descriptor?? [ 1230.079244][T27363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1230.097526][ T787] smsusb:smsusb_probe: board id=9, interface number 0 [ 1230.128143][ T787] smsusb:siano_media_device_register: media controller created [ 1230.151513][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.158938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.166294][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.173755][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.181110][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.192357][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.200046][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.207373][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.214706][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.222022][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.239547][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.246930][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.254491][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.261793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.269098][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.277548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.284892][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.292481][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.299820][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.307218][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.314639][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.321972][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.329703][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.337042][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.344385][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.351862][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.359186][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.370598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.372213][T27393] loop1: detected capacity change from 0 to 64 [ 1230.377926][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.391538][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.398852][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.406115][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.417608][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.424953][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.432266][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.439581][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.446904][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.456142][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.463470][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.470777][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.478082][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.485397][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.493232][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.500565][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.507887][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.515199][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.522509][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.530239][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.537573][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.544858][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.552137][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.559411][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.567337][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.574669][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.581978][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.589292][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.596616][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.604232][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.611954][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.619277][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.626590][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.633907][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.641216][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.648855][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.656215][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.663545][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.670895][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.678395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.686886][ T787] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 1230.695679][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.695786][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.695881][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.695971][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.696060][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.696151][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.696244][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.696333][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.696425][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.696516][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.769851][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.777187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.784499][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.791796][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.799144][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.806504][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.813864][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.821184][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.829098][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.836435][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.844105][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.851442][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.858757][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.866082][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.873403][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.880707][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.887975][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.895882][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.903198][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.910493][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.917748][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.925167][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.932421][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.939668][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.946938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.954187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.961429][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.969342][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.976748][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.984115][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.991438][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1230.998773][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.006108][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.013424][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.020737][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.043934][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.051302][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.058636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.065973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.073301][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.080922][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.088253][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.095568][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.102898][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.110226][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.117563][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.125288][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.132609][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.139924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.147244][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.154564][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.161891][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.169629][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.176992][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.184304][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.191614][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.198938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.206254][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.213548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.220845][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.228524][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.236095][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.243428][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.250748][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.258043][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.265361][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.272682][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.280519][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.287862][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.295189][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.302513][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.309848][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.317247][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.324568][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.332268][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.339598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.346937][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.354583][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.361916][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.369225][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.376554][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.383884][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.391197][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.398521][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.406213][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.413520][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.420796][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.428051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.435308][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.442598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.449856][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.457121][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.464739][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.480191][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.487542][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.494890][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.494963][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495030][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495092][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495470][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495535][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495595][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495671][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495731][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.495967][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496030][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496089][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496148][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496205][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496259][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496484][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496544][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496611][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496670][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496725][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.496779][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.649311][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.649367][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.650270][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.672104][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.679429][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.686923][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.694222][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.701524][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.708837][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.716129][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.723779][ T787] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 1231.731012][ T787] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 1231.738719][ T787] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 1231.749715][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.751190][T27391] loop3: detected capacity change from 0 to 32768 [ 1231.757028][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.757437][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 1231.778449][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.786431][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1231.797317][ T787] ------------[ cut here ]------------ [ 1231.802858][ T787] ODEBUG: free active (active state 0) object: ffff88807bbdcb08 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 1231.816084][ T787] WARNING: CPU: 1 PID: 787 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1231.826103][ T787] Modules linked in: [ 1231.830058][ T787] CPU: 1 PID: 787 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1231.837548][ T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1231.847737][ T787] Workqueue: usb_hub_wq hub_event [ 1231.852839][ T787] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1231.854927][T27405] loop0: detected capacity change from 0 to 64 [ 1231.859371][ T787] Code: 4c 8b 4d 00 48 c7 c7 c0 74 fc 8a 48 c7 c6 20 71 fc 8a 48 c7 c2 40 76 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 6e dd 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 92 24 [ 1231.885733][ T787] RSP: 0018:ffffc90003b36b38 EFLAGS: 00010282 [ 1231.891927][ T787] RAX: 2859adebf026b000 RBX: ffffffff97152650 RCX: 0000000000100000 [ 1231.900050][ T787] RDX: ffffc90018154000 RSI: 000000000007616e RDI: 000000000007616f [ 1231.908078][ T787] RBP: ffffffff8aa9ea40 R08: ffffc90003b36727 R09: 1ffff92000766ce4 [ 1231.910030][T27391] (syz.3.9453,27391,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1231.916143][ T787] R10: dffffc0000000000 R11: fffff52000766ce5 R12: ffff88807bbdd000 [ 1231.937661][ T787] R13: ffffffff870c0aa0 R14: ffff88807bbdc000 R15: ffff88807bbdcb08 [ 1231.945767][ T787] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1231.954834][ T787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1231.961461][ T787] CR2: 000055555631a808 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 1231.969752][ T787] Call Trace: [ 1231.973076][ T787] [ 1231.976342][ T787] slab_free_freelist_hook+0xd2/0x1b0 [ 1231.981795][ T787] ? smsusb_term_device+0x1ac/0x220 [ 1231.987111][ T787] __kmem_cache_free+0xba/0x1f0 [ 1231.992035][ T787] smsusb_term_device+0x1ac/0x220 [ 1231.997214][ T787] smsusb_probe+0x1708/0x1da0 [ 1232.001990][ T787] ? s2255_print_cfg+0x1b0/0x1b0 [ 1232.007094][ T787] ? smsusb1_detectmode+0x260/0x260 [ 1232.012363][ T787] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1232.018411][ T787] ? pm_runtime_enable+0x192/0x2a0 [ 1232.023594][ T787] ? __pm_runtime_set_status+0x8ab/0xb80 [ 1232.024359][T27391] (syz.3.9453,27391,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1232.029330][ T787] usb_probe_interface+0x5a4/0xb00 [ 1232.029386][ T787] ? usb_register_driver+0x3d0/0x3d0 [ 1232.029418][ T787] really_probe+0x25b/0xb40 [ 1232.029450][ T787] ? pm_runtime_barrier+0x14b/0x1c0 [ 1232.063309][ T787] __driver_probe_device+0x18c/0x330 [ 1232.068667][ T787] driver_probe_device+0x4f/0x420 [ 1232.073823][ T787] __device_attach_driver+0x2ca/0x520 [ 1232.079266][ T787] bus_for_each_drv+0x24b/0x2d0 [ 1232.084489][ T787] ? coredump_store+0x90/0x90 [ 1232.089250][ T787] ? bus_find_device+0x320/0x320 [ 1232.094346][ T787] __device_attach+0x2b5/0x400 [ 1232.099182][ T787] ? device_attach+0x20/0x20 [ 1232.103884][ T787] ? __kmem_cache_free+0xba/0x1f0 [ 1232.108978][ T787] ? do_raw_spin_unlock+0x121/0x230 [ 1232.114311][ T787] bus_probe_device+0x180/0x260 [ 1232.119224][ T787] device_add+0x85b/0xc20 [ 1232.123721][ T787] usb_set_configuration+0x1a79/0x20c0 [ 1232.129291][ T787] usb_generic_driver_probe+0x8d/0x150 [ 1232.134919][ T787] usb_probe_device+0x13d/0x280 [ 1232.139844][ T787] ? usb_register_device_driver+0x230/0x230 [ 1232.145844][ T787] really_probe+0x25b/0xb40 [ 1232.150416][ T787] ? pm_runtime_barrier+0x14b/0x1c0 [ 1232.155738][ T787] __driver_probe_device+0x18c/0x330 [ 1232.161107][ T787] driver_probe_device+0x4f/0x420 [ 1232.166210][ T787] __device_attach_driver+0x2ca/0x520 [ 1232.171724][ T787] bus_for_each_drv+0x24b/0x2d0 [ 1232.176642][ T787] ? coredump_store+0x90/0x90 [ 1232.181448][ T787] ? bus_find_device+0x320/0x320 [ 1232.186467][ T787] __device_attach+0x2b5/0x400 [ 1232.191364][ T787] ? device_attach+0x20/0x20 [ 1232.196224][ T787] ? __kmem_cache_free+0xba/0x1f0 [ 1232.201409][ T787] ? do_raw_spin_unlock+0x121/0x230 [ 1232.206779][ T787] bus_probe_device+0x180/0x260 [ 1232.211759][ T787] device_add+0x85b/0xc20 [ 1232.216163][ T787] usb_new_device+0xa31/0x1630 [ 1232.221079][ T787] ? usb_disconnect+0x8a0/0x8a0 [ 1232.225988][ T787] ? _raw_spin_unlock_irq+0x23/0x50 [ 1232.231312][ T787] ? lockdep_hardirqs_on+0x98/0x150 [ 1232.236572][ T787] hub_event+0x2962/0x49c0 [ 1232.241122][ T787] ? hub_post_resume+0x120/0x120 [ 1232.246189][ T787] ? read_lock_is_recursive+0x20/0x20 [ 1232.251641][ T787] ? _raw_spin_unlock_irq+0x23/0x50 [ 1232.257011][ T787] ? process_scheduled_works+0x957/0x15b0 [ 1232.262868][ T787] ? process_scheduled_works+0x957/0x15b0 [ 1232.268653][ T787] process_scheduled_works+0xa45/0x15b0 [ 1232.274343][ T787] ? assign_work+0x400/0x400 [ 1232.279007][ T787] ? assign_work+0x39e/0x400 [ 1232.283683][ T787] worker_thread+0xa55/0xfc0 [ 1232.288435][ T787] kthread+0x2fa/0x390 [ 1232.292563][ T787] ? pr_cont_work+0x560/0x560 [ 1232.297338][ T787] ? kthread_blkcg+0xd0/0xd0 [ 1232.301987][ T787] ret_from_fork+0x48/0x80 [ 1232.306743][ T787] ? kthread_blkcg+0xd0/0xd0 [ 1232.311396][ T787] ret_from_fork_asm+0x11/0x20 [ 1232.316302][ T787] [ 1232.319366][ T787] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1232.326679][ T787] CPU: 1 PID: 787 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1232.334109][ T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1232.344209][ T787] Workqueue: usb_hub_wq hub_event [ 1232.349294][ T787] Call Trace: [ 1232.352606][ T787] [ 1232.355568][ T787] dump_stack_lvl+0x16c/0x230 [ 1232.360326][ T787] ? show_regs_print_info+0x20/0x20 [ 1232.365571][ T787] ? load_image+0x3b0/0x3b0 [ 1232.370131][ T787] panic+0x2c0/0x710 [ 1232.374069][ T787] ? bpf_jit_dump+0xd0/0xd0 [ 1232.378625][ T787] ? ret_from_fork_asm+0x11/0x20 [ 1232.383621][ T787] __warn+0x2e0/0x470 [ 1232.387649][ T787] ? debug_check_no_obj_freed+0x446/0x540 [ 1232.393423][ T787] ? debug_check_no_obj_freed+0x446/0x540 [ 1232.399201][ T787] report_bug+0x2be/0x4f0 [ 1232.403587][ T787] ? debug_check_no_obj_freed+0x446/0x540 [ 1232.409353][ T787] ? debug_check_no_obj_freed+0x446/0x540 [ 1232.415201][ T787] ? debug_check_no_obj_freed+0x448/0x540 [ 1232.420974][ T787] handle_bug+0xcf/0x120 [ 1232.425283][ T787] exc_invalid_op+0x1a/0x50 [ 1232.429848][ T787] asm_exc_invalid_op+0x1a/0x20 [ 1232.434839][ T787] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1232.441227][ T787] Code: 4c 8b 4d 00 48 c7 c7 c0 74 fc 8a 48 c7 c6 20 71 fc 8a 48 c7 c2 40 76 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 6e dd 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 92 24 [ 1232.460885][ T787] RSP: 0018:ffffc90003b36b38 EFLAGS: 00010282 [ 1232.467008][ T787] RAX: 2859adebf026b000 RBX: ffffffff97152650 RCX: 0000000000100000 [ 1232.475038][ T787] RDX: ffffc90018154000 RSI: 000000000007616e RDI: 000000000007616f [ 1232.483055][ T787] RBP: ffffffff8aa9ea40 R08: ffffc90003b36727 R09: 1ffff92000766ce4 [ 1232.491074][ T787] R10: dffffc0000000000 R11: fffff52000766ce5 R12: ffff88807bbdd000 [ 1232.499096][ T787] R13: ffffffff870c0aa0 R14: ffff88807bbdc000 R15: ffff88807bbdcb08 [ 1232.507127][ T787] ? smsusb_onresponse+0x890/0x890 [ 1232.512321][ T787] ? smsusb_onresponse+0x890/0x890 [ 1232.517498][ T787] slab_free_freelist_hook+0xd2/0x1b0 [ 1232.522969][ T787] ? smsusb_term_device+0x1ac/0x220 [ 1232.528232][ T787] __kmem_cache_free+0xba/0x1f0 [ 1232.533151][ T787] smsusb_term_device+0x1ac/0x220 [ 1232.538245][ T787] smsusb_probe+0x1708/0x1da0 [ 1232.543006][ T787] ? s2255_print_cfg+0x1b0/0x1b0 [ 1232.547978][ T787] ? smsusb1_detectmode+0x260/0x260 [ 1232.553196][ T787] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1232.559112][ T787] ? pm_runtime_enable+0x192/0x2a0 [ 1232.564272][ T787] ? __pm_runtime_set_status+0x8ab/0xb80 [ 1232.569934][ T787] usb_probe_interface+0x5a4/0xb00 [ 1232.575082][ T787] ? usb_register_driver+0x3d0/0x3d0 [ 1232.580394][ T787] really_probe+0x25b/0xb40 [ 1232.584920][ T787] ? pm_runtime_barrier+0x14b/0x1c0 [ 1232.590138][ T787] __driver_probe_device+0x18c/0x330 [ 1232.595442][ T787] driver_probe_device+0x4f/0x420 [ 1232.600498][ T787] __device_attach_driver+0x2ca/0x520 [ 1232.605892][ T787] bus_for_each_drv+0x24b/0x2d0 [ 1232.610758][ T787] ? coredump_store+0x90/0x90 [ 1232.615452][ T787] ? bus_find_device+0x320/0x320 [ 1232.620410][ T787] __device_attach+0x2b5/0x400 [ 1232.625191][ T787] ? device_attach+0x20/0x20 [ 1232.629806][ T787] ? __kmem_cache_free+0xba/0x1f0 [ 1232.634859][ T787] ? do_raw_spin_unlock+0x121/0x230 [ 1232.640089][ T787] bus_probe_device+0x180/0x260 [ 1232.645014][ T787] device_add+0x85b/0xc20 [ 1232.649374][ T787] usb_set_configuration+0x1a79/0x20c0 [ 1232.654883][ T787] usb_generic_driver_probe+0x8d/0x150 [ 1232.660369][ T787] usb_probe_device+0x13d/0x280 [ 1232.665264][ T787] ? usb_register_device_driver+0x230/0x230 [ 1232.671181][ T787] really_probe+0x25b/0xb40 [ 1232.675707][ T787] ? pm_runtime_barrier+0x14b/0x1c0 [ 1232.680931][ T787] __driver_probe_device+0x18c/0x330 [ 1232.686236][ T787] driver_probe_device+0x4f/0x420 [ 1232.691287][ T787] __device_attach_driver+0x2ca/0x520 [ 1232.696692][ T787] bus_for_each_drv+0x24b/0x2d0 [ 1232.701570][ T787] ? coredump_store+0x90/0x90 [ 1232.706266][ T787] ? bus_find_device+0x320/0x320 [ 1232.711236][ T787] __device_attach+0x2b5/0x400 [ 1232.716018][ T787] ? device_attach+0x20/0x20 [ 1232.720632][ T787] ? __kmem_cache_free+0xba/0x1f0 [ 1232.725701][ T787] ? do_raw_spin_unlock+0x121/0x230 [ 1232.730929][ T787] bus_probe_device+0x180/0x260 [ 1232.735804][ T787] device_add+0x85b/0xc20 [ 1232.740162][ T787] usb_new_device+0xa31/0x1630 [ 1232.744964][ T787] ? usb_disconnect+0x8a0/0x8a0 [ 1232.749843][ T787] ? _raw_spin_unlock_irq+0x23/0x50 [ 1232.755057][ T787] ? lockdep_hardirqs_on+0x98/0x150 [ 1232.760268][ T787] hub_event+0x2962/0x49c0 [ 1232.764738][ T787] ? hub_post_resume+0x120/0x120 [ 1232.769692][ T787] ? read_lock_is_recursive+0x20/0x20 [ 1232.775124][ T787] ? _raw_spin_unlock_irq+0x23/0x50 [ 1232.780338][ T787] ? process_scheduled_works+0x957/0x15b0 [ 1232.786077][ T787] ? process_scheduled_works+0x957/0x15b0 [ 1232.791837][ T787] process_scheduled_works+0xa45/0x15b0 [ 1232.797432][ T787] ? assign_work+0x400/0x400 [ 1232.802052][ T787] ? assign_work+0x39e/0x400 [ 1232.806682][ T787] worker_thread+0xa55/0xfc0 [ 1232.811316][ T787] kthread+0x2fa/0x390 [ 1232.815396][ T787] ? pr_cont_work+0x560/0x560 [ 1232.820094][ T787] ? kthread_blkcg+0xd0/0xd0 [ 1232.824695][ T787] ret_from_fork+0x48/0x80 [ 1232.829141][ T787] ? kthread_blkcg+0xd0/0xd0 [ 1232.833748][ T787] ret_from_fork_asm+0x11/0x20 [ 1232.838548][ T787] [ 1232.841960][ T787] Kernel Offset: disabled [ 1232.846366][ T787] Rebooting in 86400 seconds..