last executing test programs: 3.048031562s ago: executing program 0 (id=1346): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) 2.588807625s ago: executing program 0 (id=1358): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x9}}]}, 0x3c}}, 0x0) 2.425765669s ago: executing program 0 (id=1351): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in=@rand_addr=0x64010100, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x1, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.275657562s ago: executing program 0 (id=1353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2, 0x3, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.124923296s ago: executing program 0 (id=1365): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000080)="4005") 1.97349855s ago: executing program 2 (id=1357): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3\x8b\x87\\\x15Hd~\xf9c\xcblo\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92E/\x9f\x93\xd7\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f/\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\xfb\xc34\x7f\x01\x1fi\xefD?\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\x1b\x19Co\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x05\x00\x00\x00\xfb\xff\xff\xff\xff\xff\xff\xfft\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2067) 1.876738193s ago: executing program 2 (id=1359): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 1.118661792s ago: executing program 3 (id=1364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xa3000000}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 957.532886ms ago: executing program 1 (id=1366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 956.946096ms ago: executing program 2 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 956.860656ms ago: executing program 3 (id=1369): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x10}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 772.161231ms ago: executing program 2 (id=1370): ioperm(0x0, 0x9, 0x5) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) lseek(0xffffffffffffffff, 0x8, 0x4) 755.123981ms ago: executing program 1 (id=1371): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x19f, &(0x7f0000000480)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x0, 0x0, 0x8, 0x3, 0xfffa}, 0x20) 668.485313ms ago: executing program 3 (id=1372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) 641.510894ms ago: executing program 2 (id=1373): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff1, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 477.642648ms ago: executing program 1 (id=1374): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) r0 = fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 477.543388ms ago: executing program 3 (id=1375): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000100)={0x1, 0x2, 0x3ff, 0x2, 0x2}) ftruncate(r0, 0x8979) lseek(r0, 0x8, 0x3) 370.774501ms ago: executing program 1 (id=1376): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 331.051072ms ago: executing program 3 (id=1377): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 330.192292ms ago: executing program 2 (id=1378): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) rt_sigsuspend(&(0x7f0000000480)={[0x9]}, 0x8) 241.210145ms ago: executing program 1 (id=1379): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x811) 233.478874ms ago: executing program 3 (id=1380): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 87.998718ms ago: executing program 1 (id=1381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 0s ago: executing program 0 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='udp 20', 0x6) kernel console output (not intermixed with test programs): e loop2): udf_read_tagged: read failed, block=256, location=256 [ 134.297274][ T7249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.455503][ T7255] loop3: detected capacity change from 0 to 512 [ 134.526481][ T7257] loop0: detected capacity change from 0 to 256 [ 134.640624][ T7259] input: syz0 as /devices/virtual/input/input10 [ 134.870575][ T7267] loop1: detected capacity change from 0 to 512 [ 134.921308][ T7267] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 134.929660][ T172] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.959257][ T7267] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.464: corrupted in-inode xattr: e_value size too large [ 135.005609][ T7267] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.464: couldn't read orphan inode 15 (err -117) [ 135.021269][ T7271] syz.3.465 (7271) used greatest stack depth: 20696 bytes left [ 135.025676][ T7267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.122865][ T172] usb 3-1: Using ep0 maxpacket: 32 [ 135.135522][ T172] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 135.150820][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.160817][ T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.173725][ T172] usb 3-1: config 0 descriptor?? [ 135.385463][ T172] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 135.443298][ T172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.476437][ T172] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 135.497440][ T172] usb 3-1: media controller created [ 135.553764][ T172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.619082][ T172] az6027: usb out operation failed. (-71) [ 135.634317][ T172] az6027: usb out operation failed. (-71) [ 135.650770][ T172] stb0899_attach: Driver disabled by Kconfig [ 135.679662][ T172] az6027: no front-end attached [ 135.679662][ T172] [ 135.701606][ T172] az6027: usb out operation failed. (-71) [ 135.719742][ T172] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 135.744461][ T172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 135.804577][ T172] dvb-usb: schedule remote query interval to 400 msecs. [ 135.823816][ T172] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 135.848881][ T172] usb 3-1: USB disconnect, device number 8 [ 135.982177][ T172] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.189676][ T8] kernel write not supported for file /sequencer (pid: 8 comm: kworker/0:0) [ 138.253083][ T7391] loop3: detected capacity change from 0 to 1024 [ 138.400044][ T7391] hfsplus: xattr searching failed [ 138.415533][ T7391] hfsplus: xattr searching failed [ 138.436339][ T7391] hfsplus: xattr searching failed [ 138.561440][ T6277] hfsplus: bad catalog file entry [ 138.585663][ T6277] hfsplus: b-tree write err: -5, ino 3 [ 138.764706][ T7387] loop0: detected capacity change from 0 to 32768 [ 138.798369][ T7387] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.921117][ T7387] XFS (loop0): Ending clean mount [ 138.987193][ T7387] XFS (loop0): Quotacheck needed: Please wait. [ 139.153591][ T7387] XFS (loop0): Quotacheck: Done. [ 139.377975][ T7422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.527'. [ 139.455876][ T7418] loop3: detected capacity change from 0 to 32768 [ 139.480783][ T7418] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 139.491443][ T7418] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 139.549022][ T7418] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 139.567265][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 139.576543][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 139.619901][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 139.623473][ T5780] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.630534][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 139.645639][ T7418] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 139.783861][ T7425] loop2: detected capacity change from 0 to 4096 [ 139.860385][ T7418] gfs2: fsid=syz:syz.0: found 1 quota changes [ 140.044804][ T5778] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 140.044804][ T5778] inode = 11 2339 [ 140.044804][ T5778] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 140.070345][ T7431] capability: warning: `syz.0.530' uses 32-bit capabilities (legacy support in use) [ 140.118570][ T5778] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 140.129771][ T7431] program syz.0.530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.129937][ T5778] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5778 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 140.156087][ T5778] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 140.164863][ T5778] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 140.186814][ T7425] ntfs3: loop2: failed to convert "0080" to koi8-ru [ 140.188231][ T5778] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 140.209695][ T5778] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 140.227193][ T7425] ntfs3: loop2: failed to convert name for inode 1e. [ 140.230876][ T5778] gfs2: fsid=syz:syz.0: File system withdrawn [ 140.260603][ T7425] ntfs3: loop2: failed to convert "256c" to koi8-ru [ 140.288105][ T5778] CPU: 1 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 140.295793][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.305888][ T5778] Call Trace: [ 140.309191][ T5778] [ 140.312234][ T5778] dump_stack_lvl+0x18c/0x250 [ 140.316948][ T5778] ? show_regs_print_info+0x20/0x20 [ 140.322177][ T5778] ? load_image+0x420/0x420 [ 140.326731][ T5778] ? kobject_uevent_env+0x368/0x890 [ 140.331993][ T5778] gfs2_withdraw+0xe16/0x1400 [ 140.336739][ T5778] ? gfs2_lm+0x240/0x240 [ 140.341037][ T5778] ? preempt_schedule+0xc0/0xd0 [ 140.345972][ T5778] ? gfs2_consist_inode_i+0xf5/0x110 [ 140.351302][ T5778] gfs2_inode_refresh+0xb3c/0x11a0 [ 140.356464][ T5778] ? gfs2_inode_metasync+0xf0/0xf0 [ 140.361672][ T5778] ? gfs2_glock_nq+0xe2e/0x1440 [ 140.366564][ T5778] gfs2_instantiate+0x162/0x220 [ 140.371459][ T5778] gfs2_glock_wait+0x1d4/0x2a0 [ 140.376261][ T5778] do_sync+0x4b8/0xd90 [ 140.380363][ T5778] ? gfs2_quota_sync+0x411/0x5a0 [ 140.385337][ T5778] ? bh_get+0x760/0x760 [ 140.389524][ T5778] ? gfs2_quota_sync+0x318/0x5a0 [ 140.394496][ T5778] ? gfs2_quota_sync+0x411/0x5a0 [ 140.399474][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 140.404716][ T5778] gfs2_quota_sync+0x411/0x5a0 [ 140.409580][ T5778] gfs2_sync_fs+0x4c/0xb0 [ 140.413956][ T5778] sync_filesystem+0xea/0x220 [ 140.418666][ T5778] generic_shutdown_super+0x6f/0x2b0 [ 140.424062][ T5778] kill_block_super+0x44/0x90 [ 140.428766][ T5778] deactivate_locked_super+0x97/0x100 [ 140.434170][ T5778] cleanup_mnt+0x3d7/0x460 [ 140.438641][ T5778] task_work_run+0x1d4/0x260 [ 140.443263][ T5778] ? task_work_cancel+0x220/0x220 [ 140.448334][ T5778] ? exit_to_user_mode_loop+0x3b/0x110 [ 140.453841][ T5778] exit_to_user_mode_loop+0xe6/0x110 [ 140.459256][ T5778] exit_to_user_mode_prepare+0xee/0x180 [ 140.466159][ T5778] syscall_exit_to_user_mode+0x1a/0x50 [ 140.471849][ T5778] do_syscall_64+0x61/0xb0 [ 140.476313][ T5778] ? clear_bhb_loop+0x40/0x90 [ 140.481108][ T5778] ? clear_bhb_loop+0x40/0x90 [ 140.485816][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.491746][ T5778] RIP: 0033:0x7fb36799f257 [ 140.496276][ T5778] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 140.516094][ T5778] RSP: 002b:00007ffc06577188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 140.524630][ T5778] RAX: 0000000000000000 RBX: 00007fb367a3445c RCX: 00007fb36799f257 [ 140.532744][ T5778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc06577240 [ 140.540865][ T5778] RBP: 00007ffc06577240 R08: 00007ffc06578240 R09: 00000000ffffffff [ 140.549308][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc065782d0 [ 140.557661][ T5778] R13: 00007fb367a3445c R14: 0000000000022260 R15: 00007ffc06578310 [ 140.566039][ T5778] [ 140.569224][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.606917][ T7433] loop1: detected capacity change from 0 to 32768 [ 140.759530][ T7437] loop2: detected capacity change from 0 to 128 [ 140.800454][ T7437] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.822199][ T7437] hpfs: filesystem error: improperly stopped [ 140.829921][ T7437] hpfs: You really don't want any checks? You are crazy... [ 140.847102][ T7437] hpfs: hpfs_map_sector(): read error [ 140.867901][ T7437] hpfs: code page support is disabled [ 140.889313][ T7437] hpfs: hpfs_map_4sectors(): unaligned read [ 140.903814][ T7437] hpfs: hpfs_map_4sectors(): unaligned read [ 140.918164][ T7437] hpfs: filesystem error: unable to find root dir [ 141.216952][ T7447] loop2: detected capacity change from 0 to 128 [ 141.423771][ T7453] program syz.2.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.468173][ T7457] loop0: detected capacity change from 0 to 8 [ 141.582753][ T172] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.778261][ T172] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.804817][ T172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.816583][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.831762][ T172] usb 4-1: SerialNumber: syz [ 142.335973][ T7484] loop2: detected capacity change from 0 to 2048 [ 142.402066][ T7484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.437396][ T7484] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.491229][ T7494] xt_connbytes: Forcing CT accounting to be enabled [ 142.507084][ T172] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 142.700362][ T172] usb 4-1: USB disconnect, device number 8 [ 142.742262][ T172] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 142.929674][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.352822][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.580494][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.615148][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 143.633052][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.647437][ T8] usb 3-1: Product: syz [ 143.671247][ T8] usb 3-1: Manufacturer: syz [ 143.700628][ T8] usb_debug 3-1:1.0: debug converter detected [ 143.717821][ T8] usb 3-1: debug converter now attached to ttyUSB0 [ 143.883062][ T7534] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 143.920951][ T8] usb 3-1: USB disconnect, device number 9 [ 143.940356][ T8] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 143.977128][ T8] usb_debug 3-1:1.0: device disconnected [ 144.037381][ T7540] netlink: 'syz.1.570': attribute type 2 has an invalid length. [ 144.047275][ T7540] netlink: 48 bytes leftover after parsing attributes in process `syz.1.570'. [ 144.275416][ T7524] loop0: detected capacity change from 0 to 32768 [ 144.366319][ T7552] loop3: detected capacity change from 0 to 1024 [ 144.421779][ T7552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.438617][ T7552] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.596364][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.843549][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 144.878127][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 144.922792][ T7566] netlink: 'syz.2.579': attribute type 2 has an invalid length. [ 144.969075][ T7568] input: syz1 as /devices/virtual/input/input12 [ 145.376146][ T7588] loop1: detected capacity change from 0 to 128 [ 145.531465][ T7592] loop0: detected capacity change from 0 to 256 [ 145.539821][ T7592] exfat: Deprecated parameter 'utf8' [ 145.546696][ T7592] exfat: Deprecated parameter 'utf8' [ 145.552256][ T7592] exfat: Deprecated parameter 'namecase' [ 145.558607][ T7592] exfat: Deprecated parameter 'namecase' [ 145.585891][ T7592] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 145.753543][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.866910][ T7600] loop3: detected capacity change from 0 to 512 [ 145.971800][ T23] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 146.001144][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.033086][ T23] usb 3-1: Product: syz [ 146.037355][ T23] usb 3-1: Manufacturer: syz [ 146.041973][ T23] usb 3-1: SerialNumber: syz [ 146.339420][ T7607] loop1: detected capacity change from 0 to 8192 [ 146.348015][ T7609] loop3: detected capacity change from 0 to 8192 [ 146.365950][ T7607] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.384131][ T7607] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 146.394634][ T7607] REISERFS (device loop1): using ordered data mode [ 146.401601][ T7607] reiserfs: using flush barriers [ 146.405563][ T7609] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.415807][ T23] rtl8150 3-1:1.0: couldn't reset the device [ 146.426176][ T23] rtl8150: probe of 3-1:1.0 failed with error -5 [ 146.433092][ T7607] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.442318][ T23] usb 3-1: USB disconnect, device number 10 [ 146.474237][ T7609] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 146.483858][ T7609] REISERFS (device loop3): using ordered data mode [ 146.490824][ T7609] reiserfs: using flush barriers [ 146.508107][ T7609] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.518533][ T7607] REISERFS (device loop1): checking transaction log (loop1) [ 146.549477][ T7609] REISERFS (device loop3): checking transaction log (loop3) [ 146.581191][ T7603] loop0: detected capacity change from 0 to 40427 [ 146.598943][ T7607] REISERFS (device loop1): Using r5 hash to sort names [ 146.608798][ T7609] REISERFS (device loop3): Using r5 hash to sort names [ 146.639267][ T7607] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 146.654993][ T7609] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 146.670167][ T7603] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 146.704011][ T7603] F2FS-fs (loop0): invalid crc value [ 146.716726][ T7603] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.800765][ T7609] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "18446744073709551615017777777777777777777770177777777777777777777718446744073709551615" [ 146.879379][ T7603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.970667][ T7603] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 147.284243][ T7623] program syz.2.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.451760][ T7627] loop1: detected capacity change from 0 to 512 [ 147.461527][ T7627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.470521][ T7629] team0: No ports can be present during mode change [ 147.486356][ T7627] EXT4-fs (loop1): 1 truncate cleaned up [ 147.493003][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.534366][ T7627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.611545][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.712993][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.737192][ T23] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 147.755583][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.016797][ T23] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 148.079916][ T7648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.103664][ T23] wwan wwan0: port wwan0qmi0 attached [ 148.142793][ T172] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 148.216838][ T23] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 02:96:30:17:ae:ce [ 148.345762][ T7657] loop1: detected capacity change from 0 to 512 [ 148.346431][ T172] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.364269][ T7657] EXT4-fs: Ignoring removed nobh option [ 148.378960][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.389894][ T172] usb 3-1: Product: syz [ 148.395306][ T172] usb 3-1: Manufacturer: syz [ 148.416180][ T172] usb 3-1: SerialNumber: syz [ 148.423359][ T5823] usb 4-1: USB disconnect, device number 9 [ 148.436856][ T5823] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 148.458778][ T7657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.501233][ T7657] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.657055][ T7657] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.618: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 148.685092][ T5823] wwan wwan0: port wwan0qmi0 disconnected [ 148.695772][ T172] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 148.777344][ T172] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 148.805440][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.012500][ T172] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 149.062680][ T172] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.126007][ T172] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.196855][ T172] lan78xx: probe of 3-1:1.0 failed with error -71 [ 149.252243][ T172] usb 3-1: USB disconnect, device number 11 [ 149.347385][ T28] audit: type=1800 audit(1785758925.775:7): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.623" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 149.383537][ T7680] syz.0.623: attempt to access beyond end of device [ 149.383537][ T7680] loop0: rw=0, sector=393284, nr_sectors = 2 limit=1024 [ 149.649019][ T7691] set_capacity_and_notify: 1 callbacks suppressed [ 149.649033][ T7691] loop3: detected capacity change from 0 to 8 [ 149.835476][ T7696] block nbd0: shutting down sockets [ 150.540680][ T7723] loop1: detected capacity change from 0 to 256 [ 150.751644][ T7729] loop2: detected capacity change from 0 to 256 [ 151.177606][ T7743] loop1: detected capacity change from 0 to 2048 [ 151.274294][ T7743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.292821][ T7745] mmap: syz.0.647 (7745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.583084][ T7755] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 151.599241][ T7755] syzkaller1: ignored: set checksum enabled [ 151.635070][ T7753] loop0: detected capacity change from 0 to 4096 [ 151.730243][ T7753] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 151.793839][ T7753] ntfs3: loop0: failed to convert name for inode 1e. [ 151.903572][ T7761] nbd0: detected capacity change from 0 to 63 [ 151.941160][ T5777] block nbd0: Receive control failed (result -104) [ 151.968721][ T1247] block nbd0: Dead connection, failed to find a fallback [ 151.978337][ T1247] block nbd0: shutting down sockets [ 151.985986][ T1247] blk_print_req_error: 10 callbacks suppressed [ 151.986002][ T1247] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.004895][ T1247] buffer_io_error: 10 callbacks suppressed [ 152.004911][ T1247] Buffer I/O error on dev nbd0, logical block 1, async page read [ 152.019211][ T1247] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 152.028489][ T1247] Buffer I/O error on dev nbd0, logical block 2, async page read [ 152.036355][ T1247] Buffer I/O error on dev nbd0, logical block 3, async page read [ 152.132802][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.332692][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 152.344840][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 152.369871][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.400703][ T9] usb 4-1: config 0 descriptor?? [ 152.421128][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 152.673735][ T7778] loop1: detected capacity change from 0 to 32768 [ 152.732199][ T7778] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.780490][ T7795] loop0: detected capacity change from 0 to 1024 [ 152.811025][ T7794] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 153.077460][ T7778] XFS (loop1): Ending clean mount [ 153.208365][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.247746][ T9] gspca_nw80x: reg_r err -71 [ 153.253958][ T9] nw80x: probe of 4-1:0.0 failed with error -71 [ 153.265466][ T9] usb 4-1: USB disconnect, device number 10 [ 153.859274][ T7824] block2mtd: illegal erase size [ 154.083730][ T7829] loop3: detected capacity change from 0 to 4096 [ 154.085251][ T7829] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 154.126120][ T7834] loop2: detected capacity change from 0 to 8 [ 154.603218][ T7842] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 154.929848][ T7852] loop2: detected capacity change from 0 to 128 [ 154.982704][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.187284][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 155.197164][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 155.211795][ T9] usb 2-1: config 0 has no interface number 0 [ 155.218701][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.236438][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.248648][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 155.279145][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 155.292857][ T9] usb 2-1: Product: syz [ 155.297085][ T9] usb 2-1: SerialNumber: syz [ 155.314534][ T9] usb 2-1: config 0 descriptor?? [ 155.331092][ T9] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 155.353366][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input13 [ 155.493885][ T7869] loop2: detected capacity change from 0 to 512 [ 155.558321][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.560643][ T5837] usb 2-1: USB disconnect, device number 5 [ 155.565662][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 155.597654][ T5837] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 155.770212][ T7871] netlink: 'syz.2.701': attribute type 12 has an invalid length. [ 155.791178][ T7871] netlink: 'syz.2.701': attribute type 29 has an invalid length. [ 155.809609][ T7871] netlink: 148 bytes leftover after parsing attributes in process `syz.2.701'. [ 155.821145][ T7873] loop7: detected capacity change from 0 to 7 [ 155.854273][ T7873] Dev loop7: unable to read RDB block 7 [ 155.870459][ T7873] loop7: unable to read partition table [ 155.893073][ T7873] loop7: partition table beyond EOD, truncated [ 155.920419][ T7873] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.993229][ T23] IPVS: starting estimator thread 0... [ 156.012598][ T7876] IPVS: fo: FWM 3 0x00000003 - no destination available [ 156.101582][ T7877] IPVS: using max 18 ests per chain, 43200 per kthread [ 156.118154][ T7865] loop3: detected capacity change from 0 to 40427 [ 156.143922][ T7865] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 156.151187][ T7865] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 156.186310][ T7865] F2FS-fs (loop3): Image doesn't support compression [ 156.197153][ T7865] F2FS-fs (loop3): Image doesn't support compression [ 156.225581][ T7865] F2FS-fs (loop3): invalid crc value [ 156.413914][ T7865] F2FS-fs (loop3): Start checkpoint disabled! [ 156.485520][ T7865] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 156.500854][ T7865] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 156.570427][ T7865] F2FS-fs (loop3): Skipping Checkpoint. Checkpoints currently disabled. [ 156.814415][ T7899] loop2: detected capacity change from 0 to 256 [ 157.196966][ T7905] loop2: detected capacity change from 0 to 4096 [ 157.221836][ T7905] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 157.258969][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 157.356201][ T7905] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 157.401753][ T7905] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 157.430209][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.485082][ T6277] ntfs3: loop2: ino=1e, failed to parse mft record [ 157.754486][ T7913] loop1: detected capacity change from 0 to 32768 [ 157.784139][ T6365] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.801349][ T7913] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.868288][ T7913] XFS (loop1): Ending clean mount [ 157.868681][ T7928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.722'. [ 157.913948][ T7913] XFS (loop1): User initiated shutdown received. [ 157.933138][ T7913] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 157.981841][ T7913] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 157.990465][ T6365] usb 4-1: Using ep0 maxpacket: 8 [ 158.006646][ T6365] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.016600][ T6365] usb 4-1: no configurations [ 158.031064][ T6365] usb 4-1: can't read configurations, error -22 [ 158.080735][ T6424] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 158.270859][ T7935] MTRR 1 not used [ 158.396047][ T7938] loop0: detected capacity change from 0 to 2048 [ 158.451901][ T7938] GPT:first_usable_lbas don't match. [ 158.470885][ T7938] GPT:34 != 290 [ 158.479835][ T7938] GPT: Use GNU Parted to correct GPT errors. [ 158.498523][ T7938] loop0: p1 p2 p3 [ 158.532737][ T5837] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.746781][ T5837] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 158.757051][ T7944] netlink: 44 bytes leftover after parsing attributes in process `syz.3.729'. [ 158.781608][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.798696][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 158.812516][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 158.812815][ T5837] usb 3-1: Product: syz [ 158.844894][ T5837] usb 3-1: Manufacturer: syz [ 158.855235][ T5837] usb 3-1: SerialNumber: syz [ 158.938759][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 159.150258][ T5837] rtl8150 3-1:1.0: couldn't reset the device [ 159.166889][ T5837] rtl8150: probe of 3-1:1.0 failed with error -5 [ 159.178161][ T7942] loop1: detected capacity change from 0 to 32768 [ 159.202811][ T5837] usb 3-1: USB disconnect, device number 12 [ 159.283106][ T7942] jfs_rmdir: dtDelete returned -2 [ 159.560310][ T7966] loop0: detected capacity change from 0 to 164 [ 159.798598][ T7970] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.829935][ T7970] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 159.859676][ T7970] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 159.897453][ T7970] exFAT-fs (loop3): failed to load alloc-bitmap [ 159.923350][ T7970] exFAT-fs (loop3): failed to recognize exfat type [ 159.949912][ T7977] set_capacity_and_notify: 1 callbacks suppressed [ 159.949927][ T7977] loop0: detected capacity change from 0 to 256 [ 160.267523][ T28] audit: type=1326 audit(1785758936.695:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.341855][ T28] audit: type=1326 audit(1785758936.715:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.405712][ T28] audit: type=1326 audit(1785758936.745:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fac0c99ce87 code=0x7ffc0000 [ 160.494787][ T28] audit: type=1326 audit(1785758936.745:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.542439][ T7997] loop9: detected capacity change from 0 to 524287999 [ 160.568724][ T28] audit: type=1326 audit(1785758936.745:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.596177][ T8003] raw_sendmsg: syz.2.752 forgot to set AF_INET. Fix it! [ 160.617018][ T28] audit: type=1326 audit(1785758936.745:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.640929][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.649345][ T28] audit: type=1326 audit(1785758936.745:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.673150][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.683172][ T28] audit: type=1326 audit(1785758936.745:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.706983][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.732201][ T28] audit: type=1326 audit(1785758936.745:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.0.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c99e019 code=0x7ffc0000 [ 160.756455][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.031930][ T8016] sctp: [Deprecated]: syz.3.758 (pid 8016) Use of int in maxseg socket option. [ 161.031930][ T8016] Use struct sctp_assoc_value instead [ 161.217595][ T8023] GUP no longer grows the stack in syz.0.760 (8023): 200000009000-20000000a000 (200000005000) [ 161.254070][ T8023] CPU: 1 PID: 8023 Comm: syz.0.760 Not tainted syzkaller #0 [ 161.261435][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.271781][ T8023] Call Trace: [ 161.275078][ T8023] [ 161.278022][ T8023] dump_stack_lvl+0x18c/0x250 [ 161.282860][ T8023] ? show_regs_print_info+0x20/0x20 [ 161.288088][ T8023] ? load_image+0x420/0x420 [ 161.292638][ T8023] ? find_vma+0x134/0x1b0 [ 161.297022][ T8023] __get_user_pages+0xfe7/0x1580 [ 161.302021][ T8023] ? populate_vma_page_range+0x380/0x380 [ 161.307695][ T8023] ? __gup_longterm_locked+0x21d8/0x2cb0 [ 161.313365][ T8023] ? down_read_killable+0x1d0/0x340 [ 161.318617][ T8023] __gup_longterm_locked+0x2345/0x2cb0 [ 161.324150][ T8023] ? pin_user_pages_remote+0x220/0x220 [ 161.329767][ T8023] ? mark_lock+0x94/0x320 [ 161.334144][ T8023] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 161.340149][ T8023] ? __lock_acquire+0x7d80/0x7d80 [ 161.345202][ T8023] ? lock_chain_count+0x20/0x20 [ 161.350064][ T8023] ? internal_get_user_pages_fast+0x1f8e/0x27a0 [ 161.356359][ T8023] internal_get_user_pages_fast+0x2174/0x27a0 [ 161.362487][ T8023] ? get_user_pages_fast_only+0xa0/0xa0 [ 161.368056][ T8023] ? trace_contention_end+0x39/0xe0 [ 161.373259][ T8023] ? __mutex_lock+0x30d/0xc80 [ 161.377953][ T8023] ? __lock_acquire+0x7d80/0x7d80 [ 161.383004][ T8023] ? iov_iter_iovec_advance+0x1ef/0x290 [ 161.388558][ T8023] __iov_iter_get_pages_alloc+0x380/0xac0 [ 161.394330][ T8023] iov_iter_get_pages2+0x5f/0xa0 [ 161.399364][ T8023] __se_sys_vmsplice+0x5e5/0x11f0 [ 161.404407][ T8023] ? __x64_sys_vmsplice+0xb0/0xb0 [ 161.409434][ T8023] ? futex_wake_mark+0x150/0x150 [ 161.414419][ T8023] ? fd_install+0x60/0x4e0 [ 161.418933][ T8023] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 161.424922][ T8023] ? lockdep_hardirqs_on+0x98/0x150 [ 161.430132][ T8023] do_syscall_64+0x55/0xb0 [ 161.434546][ T8023] ? clear_bhb_loop+0x40/0x90 [ 161.439244][ T8023] ? clear_bhb_loop+0x40/0x90 [ 161.444035][ T8023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.450157][ T8023] RIP: 0033:0x7fac0c99e019 [ 161.454623][ T8023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.474776][ T8023] RSP: 002b:00007fac0d785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 161.483294][ T8023] RAX: ffffffffffffffda RBX: 00007fac0cc25fa0 RCX: 00007fac0c99e019 [ 161.491268][ T8023] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 161.499257][ T8023] RBP: 00007fac0ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 161.507252][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.515354][ T8023] R13: 00007fac0cc26038 R14: 00007fac0cc25fa0 R15: 00007ffc25c70748 [ 161.523693][ T8023] [ 161.839048][ T8036] kvm: kvm [8035]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 161.945145][ T8039] loop0: detected capacity change from 0 to 4096 [ 162.142483][ T8051] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.317864][ T8055] loop2: detected capacity change from 0 to 2048 [ 162.440680][ T8055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.701665][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.896915][ T8070] loop2: detected capacity change from 0 to 64 [ 162.950784][ T8070] MINIX-fs: mounting file system with errors, running fsck is recommended [ 162.972363][ T8070] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 162.983999][ T8070] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 163.362070][ T8083] netlink: 76 bytes leftover after parsing attributes in process `syz.3.784'. [ 163.392823][ T8083] netlink: 528 bytes leftover after parsing attributes in process `syz.3.784'. [ 163.635646][ T8072] loop1: detected capacity change from 0 to 32768 [ 163.695429][ T8072] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 163.734833][ T8072] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.944514][ T8072] XFS (loop1): Ending clean mount [ 164.007872][ T8072] XFS (loop1): Quotacheck needed: Please wait. [ 164.071479][ T8072] XFS (loop1): Quotacheck: Done. [ 164.113935][ T8072] XFS (loop1): User initiated shutdown received. [ 164.131757][ T8072] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 164.162983][ T8072] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 164.208463][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 164.239175][ T6424] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.444451][ T8121] Falling back ldisc for ttyS3. [ 164.596053][ T8111] loop3: detected capacity change from 0 to 4096 [ 164.617905][ T8111] EXT4-fs: inline encryption not supported [ 164.631424][ T8111] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.689375][ T8111] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 164.726029][ T8111] System zones: 0-5 [ 164.738982][ T8111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.008776][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.211830][ T10] block nbd0: Connection timed out, retrying (0/1 alive) [ 165.222311][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.233392][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.243588][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.253090][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.262430][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 165.271622][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 165.279729][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 165.287748][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 165.298678][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.307997][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.319001][ T1247] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 165.328708][ T1247] Buffer I/O error on dev nbd0, logical block 1, async page read [ 165.336945][ T1247] Buffer I/O error on dev nbd0, logical block 2, async page read [ 165.344911][ T1247] Buffer I/O error on dev nbd0, logical block 3, async page read [ 165.368903][ T1247] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 165.378391][ T1247] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.390092][ T1247] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 165.399633][ T1247] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 165.410626][ T1247] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 165.420145][ T1247] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 165.429391][ T6465] ldm_validate_partition_table(): Disk read failed. [ 165.438139][ T6465] Dev nbd0: unable to read RDB block 0 [ 165.445651][ T6465] nbd0: unable to read partition table [ 165.447586][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 165.467812][ T6465] ldm_validate_partition_table(): Disk read failed. [ 165.476191][ T6465] Dev nbd0: unable to read RDB block 0 [ 165.484591][ T6465] nbd0: unable to read partition table [ 166.232915][ T6365] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.432854][ T6365] usb 2-1: Using ep0 maxpacket: 16 [ 166.450205][ T6365] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 166.472603][ T6365] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 166.501901][ T6365] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 166.523240][ T6365] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 166.549639][ T6365] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.580154][ T6365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.616928][ T6365] usb 2-1: Product: syz [ 166.629288][ T6365] usb 2-1: Manufacturer: syz [ 166.646645][ T6365] usb 2-1: SerialNumber: syz [ 166.822128][ T8180] netlink: 'syz.3.822': attribute type 6 has an invalid length. [ 166.927066][ T6365] usb 2-1: 0:2 : does not exist [ 166.952577][ C0] sched: RT throttling activated [ 166.963319][ T6365] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 167.012843][ T6365] usb 2-1: USB disconnect, device number 6 [ 167.020730][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 167.021782][ T8173] loop2: detected capacity change from 0 to 131072 [ 167.044423][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 167.079753][ T8173] F2FS-fs (loop2): invalid crc value [ 167.126914][ T8173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.177734][ T8173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 167.208244][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.238278][ T8185] loop3: detected capacity change from 0 to 64 [ 167.325622][ T8185] hfs: walked past end of dir [ 168.091374][ T8190] loop0: detected capacity change from 0 to 40427 [ 168.129275][ T8190] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 168.149881][ T8190] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.198791][ T8190] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 168.214230][ T8190] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 168.245165][ T8190] F2FS-fs (loop0): invalid crc value [ 168.276036][ T8190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.431877][ T8190] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 168.452758][ T8190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.499844][ T28] audit: type=1800 audit(1785758944.925:17): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.825" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 168.517224][ T8190] syz.0.825: attempt to access beyond end of device [ 168.517224][ T8190] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 168.565053][ T8218] loop1: detected capacity change from 0 to 256 [ 168.599840][ T5780] syz-executor: attempt to access beyond end of device [ 168.599840][ T5780] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.626625][ T5780] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 169.424010][ T8224] loop3: detected capacity change from 0 to 32768 [ 169.484724][ T8224] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.561415][ T8224] XFS (loop3): Ending clean mount [ 169.564371][ T8226] loop1: detected capacity change from 0 to 32768 [ 169.655767][ T8226] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.747318][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.818545][ T8254] loop0: detected capacity change from 0 to 256 [ 169.854254][ T8226] XFS (loop1): Ending clean mount [ 169.860227][ T8254] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.870242][ T8226] XFS (loop1): Quotacheck needed: Please wait. [ 169.973274][ T8226] XFS (loop1): Quotacheck: Done. [ 170.173904][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.298744][ T8260] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.601533][ T8264] loop3: detected capacity change from 0 to 8192 [ 170.624689][ T8264] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.638007][ T8264] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 170.647551][ T8264] REISERFS (device loop3): using ordered data mode [ 170.657155][ T8264] reiserfs: using flush barriers [ 170.700562][ T8264] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.717617][ T8264] REISERFS (device loop3): checking transaction log (loop3) [ 170.834106][ T8264] REISERFS (device loop3): Using tea hash to sort names [ 170.841589][ T8264] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 171.122993][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 171.326692][ T8272] block2mtd: device name too long [ 171.502957][ T8276] loop0: detected capacity change from 0 to 64 [ 171.548696][ T8276] syz.0.851: attempt to access beyond end of device [ 171.548696][ T8276] loop0: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 171.603412][ T8276] syz.0.851: attempt to access beyond end of device [ 171.603412][ T8276] loop0: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 171.680195][ T8280] loop1: detected capacity change from 0 to 4096 [ 171.790639][ T8276] syz.0.851: attempt to access beyond end of device [ 171.790639][ T8276] loop0: rw=34817, sector=76, nr_sectors = 2041 limit=64 [ 171.997714][ T8276] syz.0.851: attempt to access beyond end of device [ 171.997714][ T8276] loop0: rw=34817, sector=2117, nr_sectors = 2048 limit=64 [ 172.037176][ T8276] syz.0.851: attempt to access beyond end of device [ 172.037176][ T8276] loop0: rw=34817, sector=4165, nr_sectors = 6 limit=64 [ 172.071726][ T8276] syz.0.851: attempt to access beyond end of device [ 172.071726][ T8276] loop0: rw=34817, sector=4172, nr_sectors = 22 limit=64 [ 172.118047][ T8292] loop2: detected capacity change from 0 to 512 [ 172.131961][ T8276] syz.0.851: attempt to access beyond end of device [ 172.131961][ T8276] loop0: rw=34817, sector=4196, nr_sectors = 166 limit=64 [ 172.161955][ T8276] syz.0.851: attempt to access beyond end of device [ 172.161955][ T8276] loop0: rw=34817, sector=4363, nr_sectors = 22 limit=64 [ 172.263734][ T6366] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.453149][ T6366] usb 2-1: Using ep0 maxpacket: 16 [ 172.460541][ T6366] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.488279][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 172.502839][ T6366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.520073][ T6366] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 172.540069][ T6366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.564725][ T6366] usb 2-1: config 0 descriptor?? [ 172.681547][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 172.913300][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.926228][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.935347][ T8315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.948334][ T8315] bridge_slave_0: left allmulticast mode [ 172.955004][ T8315] bridge_slave_0: left promiscuous mode [ 172.961014][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.984408][ T8315] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 173.025945][ T6366] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 173.353115][ T8321] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 173.366334][ T8313] loop0: detected capacity change from 0 to 32768 [ 173.375075][ T8321] CPU: 0 PID: 8321 Comm: syz.2.871 Not tainted syzkaller #0 [ 173.382417][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.392498][ T8321] Call Trace: [ 173.395781][ T8321] [ 173.398708][ T8321] dump_stack_lvl+0x18c/0x250 [ 173.403394][ T8321] ? show_regs_print_info+0x20/0x20 [ 173.408618][ T8321] ? load_image+0x420/0x420 [ 173.413174][ T8321] sysfs_create_dir_ns+0x26e/0x2a0 [ 173.418319][ T8321] ? __lock_acquire+0x7d80/0x7d80 [ 173.423352][ T8321] ? sysfs_warn_dup+0xa0/0xa0 [ 173.428037][ T8321] ? rcu_is_watching+0x15/0xb0 [ 173.432826][ T8321] ? do_raw_spin_unlock+0x121/0x230 [ 173.438058][ T8321] kobject_add_internal+0x617/0xc90 [ 173.443281][ T8321] kobject_add+0x164/0x240 [ 173.447717][ T8321] ? kobject_init+0x1d0/0x1d0 [ 173.452434][ T8321] ? get_device_parent+0x366/0x390 [ 173.457565][ T8321] device_add+0x3fa/0xc40 [ 173.461910][ T8321] tty_register_device_attr+0x425/0x950 [ 173.467477][ T8321] ? tty_register_device+0x30/0x30 [ 173.472605][ T8321] ? tty_port_init+0x132/0x1a0 [ 173.477366][ T8321] ? gsm_dlci_alloc+0x32a/0x630 [ 173.482215][ T8321] ? __might_fault+0xaa/0x120 [ 173.486900][ T8321] gsm_activate_mux+0x110/0x2a0 [ 173.491757][ T8321] gsmld_ioctl+0x12ca/0x1900 [ 173.496355][ T8321] ? gsmld_write+0x120/0x120 [ 173.500962][ T8321] ? __init_ldsem+0x150/0x150 [ 173.505643][ T8321] ? __fget_files+0x28/0x460 [ 173.510246][ T8321] ? gsmld_write+0x120/0x120 [ 173.514836][ T8321] tty_ioctl+0x9b5/0xdc0 [ 173.519099][ T8321] ? tty_get_icount+0xb0/0xb0 [ 173.523779][ T8321] __se_sys_ioctl+0xfd/0x170 [ 173.528391][ T8321] do_syscall_64+0x55/0xb0 [ 173.532874][ T8321] ? clear_bhb_loop+0x40/0x90 [ 173.537583][ T8321] ? clear_bhb_loop+0x40/0x90 [ 173.542289][ T8321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.548210][ T8321] RIP: 0033:0x7fa64ad9e019 [ 173.552660][ T8321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.572277][ T8321] RSP: 002b:00007fa64bc81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.580705][ T8321] RAX: ffffffffffffffda RBX: 00007fa64b026090 RCX: 00007fa64ad9e019 [ 173.588697][ T8321] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 173.596671][ T8321] RBP: 00007fa64ae3500c R08: 0000000000000000 R09: 0000000000000000 [ 173.604650][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.612617][ T8321] R13: 00007fa64b026128 R14: 00007fa64b026090 R15: 00007fff9293f428 [ 173.620692][ T8321] [ 173.637291][ T6366] usb 2-1: USB disconnect, device number 7 [ 173.667617][ T8313] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 173.684426][ T8321] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.910599][ T8325] syz.0.868 (8325) used greatest stack depth: 17912 bytes left [ 174.101576][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 174.817535][ T8339] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.909892][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 174.923961][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 175.061357][ T8353] loop0: detected capacity change from 0 to 1024 [ 175.110529][ T8357] syz.3.887: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 175.141284][ T8357] CPU: 1 PID: 8357 Comm: syz.3.887 Not tainted syzkaller #0 [ 175.148623][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.158956][ T8357] Call Trace: [ 175.162336][ T8357] [ 175.165294][ T8357] dump_stack_lvl+0x18c/0x250 [ 175.170269][ T8357] ? show_regs_print_info+0x20/0x20 [ 175.175502][ T8357] ? load_image+0x420/0x420 [ 175.180053][ T8357] ? __rcu_read_unlock+0x7c/0xd0 [ 175.185027][ T8357] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.191479][ T8357] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 175.198020][ T8357] warn_alloc+0x246/0x340 [ 175.202379][ T8357] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.208567][ T8357] ? _end+0x67dda14a/0x0 [ 175.212842][ T8357] ? zone_watermark_ok_safe+0x230/0x230 [ 175.218418][ T8357] ? lock_acquire+0x208/0x420 [ 175.223111][ T8357] ? _end+0x67dda14a/0x0 [ 175.227377][ T8357] __vmalloc_node_range+0x129/0x1320 [ 175.232697][ T8357] ? __mutex_trylock_common+0x160/0x270 [ 175.238292][ T8357] ? trace_raw_output_contention_end+0xd0/0xd0 [ 175.244471][ T8357] ? rcu_is_watching+0x15/0xb0 [ 175.249273][ T8357] ? trace_contention_end+0x39/0xe0 [ 175.254480][ T8357] ? __mutex_lock+0x30d/0xc80 [ 175.259160][ T8357] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 175.264804][ T8357] ? free_vm_area+0x50/0x50 [ 175.269314][ T8357] ? dvb_demux_do_ioctl+0x317/0x530 [ 175.274517][ T8357] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 175.279990][ T8357] ? mutex_lock_nested+0x20/0x20 [ 175.284928][ T8357] ? _end+0x67dda14a/0x0 [ 175.289177][ T8357] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 175.295008][ T8357] vmalloc+0x79/0x90 [ 175.298911][ T8357] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 175.304719][ T8357] ? _end+0x67dda14a/0x0 [ 175.308961][ T8357] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 175.314602][ T8357] dvb_demux_do_ioctl+0x454/0x530 [ 175.319628][ T8357] ? _end+0x67dda14a/0x0 [ 175.323877][ T8357] ? _end+0x67dda14a/0x0 [ 175.328126][ T8357] dvb_usercopy+0x195/0x2b0 [ 175.332634][ T8357] ? _end+0x67dda14a/0x0 [ 175.336888][ T8357] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 175.342453][ T8357] ? dvb_generic_ioctl+0xb0/0xb0 [ 175.347407][ T8357] ? _end+0x67dda14a/0x0 [ 175.351653][ T8357] ? _end+0x67dda14a/0x0 [ 175.355900][ T8357] ? dvb_demux_poll+0x210/0x210 [ 175.360751][ T8357] ? _end+0x67dda14a/0x0 [ 175.365102][ T8357] dvb_demux_ioctl+0x29/0x30 [ 175.369695][ T8357] __se_sys_ioctl+0xfd/0x170 [ 175.374310][ T8357] do_syscall_64+0x55/0xb0 [ 175.378870][ T8357] ? clear_bhb_loop+0x40/0x90 [ 175.383600][ T8357] ? clear_bhb_loop+0x40/0x90 [ 175.388294][ T8357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.394198][ T8357] RIP: 0033:0x7fb36799e019 [ 175.398614][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.418233][ T8357] RSP: 002b:00007fb36893e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.426667][ T8357] RAX: ffffffffffffffda RBX: 00007fb367c25fa0 RCX: 00007fb36799e019 [ 175.434676][ T8357] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 175.442665][ T8357] RBP: 00007fb367a3500c R08: 0000000000000000 R09: 0000000000000000 [ 175.450640][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.458714][ T8357] R13: 00007fb367c26038 R14: 00007fb367c25fa0 R15: 00007ffc06577f18 [ 175.466699][ T8357] ? _end+0x67dda14a/0x0 [ 175.470991][ T8357] [ 175.534207][ T8357] Mem-Info: [ 175.537423][ T8357] active_anon:6545 inactive_anon:0 isolated_anon:0 [ 175.537423][ T8357] active_file:1326 inactive_file:40051 isolated_file:0 [ 175.537423][ T8357] unevictable:768 dirty:305 writeback:0 [ 175.537423][ T8357] slab_reclaimable:10716 slab_unreclaimable:93367 [ 175.537423][ T8357] mapped:25000 shmem:1739 pagetables:654 [ 175.537423][ T8357] sec_pagetables:0 bounce:0 [ 175.537423][ T8357] kernel_misc_reclaimable:0 [ 175.537423][ T8357] free:1360621 free_pcp:9239 free_cma:0 [ 175.567736][ T8364] loop2: detected capacity change from 0 to 1024 [ 175.583209][ T8357] Node 0 active_anon:26780kB inactive_anon:0kB active_file:5304kB inactive_file:160004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100000kB dirty:1220kB writeback:0kB shmem:5920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14308kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no [ 175.590444][ T8361] loop1: detected capacity change from 0 to 2048 [ 175.621692][ T8357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 175.664394][ T8357] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.746492][ T8357] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 175.753584][ T8357] Node 0 DMA32 free:1520612kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26140kB inactive_anon:0kB active_file:5304kB inactive_file:159176kB unevictable:1536kB writepending:1220kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:27604kB local_pcp:18196kB free_cma:0kB [ 175.799255][ T8364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.811871][ T8357] lowmem_reserve[]: 0 0 0 0 0 [ 175.821818][ T8357] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.851875][ T8364] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.883027][ T8357] lowmem_reserve[]: 0 0 0 0 0 [ 175.891453][ T8357] Node 1 Normal free:3905752kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9760kB local_pcp:0kB free_cma:0kB [ 175.978527][ T8357] lowmem_reserve[]: 0 0 0 0 0 [ 175.983860][ T8357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.996440][ T8364] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.890: Freeing blocks not in datazone - block = 0, count = 16 [ 175.997324][ T8357] Node 0 DMA32: 1*4kB (M) 380*8kB (UM) 60*16kB (UM) 138*32kB (UE) 131*64kB (UME) 115*128kB (UME) 65*256kB (UM) 43*512kB (UM) 18*1024kB (UM) 11*2048kB (UM) 344*4096kB (UM) = 1520164kB [ 176.053174][ T8357] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 176.112733][ T8357] Node 1 Normal: 214*4kB (UME) 50*8kB (UME) 39*16kB (UME) 172*32kB (UME) 40*64kB (UE) 12*128kB (UME) 6*256kB (UE) 1*512kB (M) 1*1024kB (U) 0*2048kB 950*4096kB (M) = 3905752kB [ 176.151854][ T6277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:29: bg 0: block 112: padding at end of block bitmap is not set [ 176.158324][ T8357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.179972][ T8357] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.189701][ T8357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.236989][ T6277] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.243182][ T8378] C: renamed from team_slave_0 (while UP) [ 176.251729][ T8357] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.269926][ T8357] 42865 total pagecache pages [ 176.277343][ T8357] 0 pages in swap cache [ 176.281721][ T8357] Free swap = 124684kB [ 176.286287][ T8378] netlink: 'syz.1.894': attribute type 8 has an invalid length. [ 176.290292][ T8357] Total swap = 124996kB [ 176.298568][ T8357] 2097051 pages RAM [ 176.302747][ T6277] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.302747][ T6277] [ 176.309719][ T8357] 0 pages HighMem/MovableOnly [ 176.314809][ T8378] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.329512][ T8357] 416955 pages reserved [ 176.343015][ T6277] EXT4-fs (loop2): Total free blocks count 0 [ 176.349352][ T8357] 0 pages cma reserved [ 176.350802][ T6277] EXT4-fs (loop2): Free/Dirty block details [ 176.359480][ T6277] EXT4-fs (loop2): free_blocks=16 [ 176.365652][ T6277] EXT4-fs (loop2): dirty_blocks=16 [ 176.370813][ T6277] EXT4-fs (loop2): Block reservation details [ 176.387316][ T6277] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 176.409062][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.499968][ T8383] loop0: detected capacity change from 0 to 8 [ 176.543251][ T8383] squashfs image failed sanity check [ 176.595017][ T8326] blk_print_req_error: 116 callbacks suppressed [ 176.595039][ T8326] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.696836][ T8390] loop2: detected capacity change from 0 to 256 [ 177.045689][ T8402] loop0: detected capacity change from 0 to 1024 [ 177.522700][ T172] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.531738][ T8396] loop2: detected capacity change from 0 to 32768 [ 177.603235][ T8396] JBD2: Ignoring recovery information on journal [ 177.710763][ T8396] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 177.732826][ T172] usb 2-1: Using ep0 maxpacket: 8 [ 177.763167][ T172] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 177.771439][ T172] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.837115][ T172] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.882070][ T172] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.900643][ T172] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.928225][ T172] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.943097][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.043728][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 178.072183][ T8428] loop3: detected capacity change from 0 to 2048 [ 178.165104][ T8428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.193134][ T172] usb 2-1: GET_CAPABILITIES returned 0 [ 178.198684][ T172] usbtmc 2-1:16.0: can't read capabilities [ 178.320348][ T8435] loop0: detected capacity change from 0 to 128 [ 178.340807][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.345216][ T8435] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.378342][ T8435] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.406749][ T172] usb 2-1: USB disconnect, device number 8 [ 178.583063][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.640974][ T8444] loop2: detected capacity change from 0 to 2048 [ 178.717167][ T8444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.791666][ T8446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.881556][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.019136][ T8456] input: syz1 as /devices/virtual/input/input14 [ 179.562870][ T8477] loop2: detected capacity change from 0 to 1024 [ 180.073438][ T8485] loop3: detected capacity change from 0 to 4096 [ 180.098474][ T8485] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 180.164495][ T8485] ntfs: volume version 3.1. [ 180.465538][ T8496] loop1: detected capacity change from 0 to 128 [ 180.519075][ T8497] loop0: detected capacity change from 0 to 512 [ 180.624748][ T8497] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #11: comm syz.0.944: unexpected EA_INODE flag [ 180.715465][ T8497] EXT4-fs (loop0): Remounting filesystem read-only [ 180.759457][ T8497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.897947][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.900453][ T8509] loop2: detected capacity change from 0 to 512 [ 181.031437][ T8514] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 181.031437][ T8514] The task syz.3.951 (8514) triggered the difference, watch for misbehavior. [ 181.331796][ T8518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.954'. [ 182.001559][ T8511] loop1: detected capacity change from 0 to 131072 [ 182.013833][ T8511] F2FS-fs (loop1): invalid crc value [ 182.026291][ T8511] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.089650][ T8511] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.116683][ T8511] F2FS-fs (loop1): access invalid blkaddr:0 [ 182.123564][ T8511] CPU: 0 PID: 8511 Comm: syz.1.952 Not tainted syzkaller #0 [ 182.130886][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.141238][ T8511] Call Trace: [ 182.144542][ T8511] [ 182.147488][ T8511] dump_stack_lvl+0x18c/0x250 [ 182.152198][ T8511] ? show_regs_print_info+0x20/0x20 [ 182.157469][ T8511] ? __up_read+0x2b8/0x6b0 [ 182.162003][ T8511] ? __lock_acquire+0x7d80/0x7d80 [ 182.167061][ T8511] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 182.172473][ T8511] sanity_check_extent_cache+0xfc/0x1f0 [ 182.178064][ T8511] f2fs_iget+0x336f/0x47d0 [ 182.182537][ T8511] f2fs_lookup+0x37f/0x780 [ 182.186992][ T8511] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 182.193098][ T8511] ? tomoyo_path_symlink+0xf0/0xf0 [ 182.198251][ T8511] ? make_vfsuid+0x67/0xb0 [ 182.202716][ T8511] ? inode_permission+0xf3/0x480 [ 182.208432][ T8511] ? bpf_lsm_inode_create+0x9/0x10 [ 182.213764][ T8511] ? security_inode_create+0xb7/0x100 [ 182.219224][ T8511] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 182.225332][ T8511] path_openat+0x1110/0x3270 [ 182.230026][ T8511] ? do_filp_open+0x430/0x430 [ 182.234854][ T8511] do_filp_open+0x1f2/0x430 [ 182.239558][ T8511] ? vfs_tmpfile+0x620/0x620 [ 182.244261][ T8511] ? _raw_spin_unlock+0x28/0x40 [ 182.249134][ T8511] ? alloc_fd+0x590/0x640 [ 182.253471][ T8511] do_sys_openat2+0x134/0x1d0 [ 182.258165][ T8511] ? do_sys_open+0xe0/0xe0 [ 182.262586][ T8511] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 182.268567][ T8511] ? lock_chain_count+0x20/0x20 [ 182.273432][ T8511] __x64_sys_creat+0x90/0xb0 [ 182.278033][ T8511] do_syscall_64+0x55/0xb0 [ 182.282445][ T8511] ? clear_bhb_loop+0x40/0x90 [ 182.287124][ T8511] ? clear_bhb_loop+0x40/0x90 [ 182.291801][ T8511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.297701][ T8511] RIP: 0033:0x7f32eb79e019 [ 182.302198][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.321814][ T8511] RSP: 002b:00007f32ec755028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 182.330327][ T8511] RAX: ffffffffffffffda RBX: 00007f32eba25fa0 RCX: 00007f32eb79e019 [ 182.338391][ T8511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 182.346369][ T8511] RBP: 00007f32eb83500c R08: 0000000000000000 R09: 0000000000000000 [ 182.354426][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.362415][ T8511] R13: 00007f32eba26038 R14: 00007f32eba25fa0 R15: 00007ffd3bf0a3e8 [ 182.370873][ T8511] [ 182.374854][ T8511] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 182.385134][ T6365] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.481593][ T8524] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.558319][ T8524] XFS (loop2): Ending clean mount [ 182.602861][ T6365] usb 4-1: Using ep0 maxpacket: 16 [ 182.613082][ T6365] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 182.627012][ T6365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.646395][ T6365] usb 4-1: Product: syz [ 182.650621][ T6365] usb 4-1: Manufacturer: syz [ 182.668788][ T6365] usb 4-1: SerialNumber: syz [ 182.681817][ T6365] usb 4-1: config 0 descriptor?? [ 182.702413][ T6365] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 182.723472][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.742496][ T8543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.961'. [ 183.521760][ T6365] ssu100: probe of 4-1:0.0 failed with error -71 [ 183.548346][ T6365] usb 4-1: USB disconnect, device number 13 [ 183.580021][ T8326] udevd[8326]: setting mode of /dev/bus/usb/004/013 to 020664 failed: No such file or directory [ 183.611963][ T8326] udevd[8326]: setting owner of /dev/bus/usb/004/013 to uid=0, gid=0 failed: No such file or directory [ 183.892896][ T8556] set_capacity_and_notify: 1 callbacks suppressed [ 183.892914][ T8556] loop0: detected capacity change from 0 to 32768 [ 183.953796][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.142777][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 184.150494][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.176020][ T9] usb 2-1: config 0 has no interface number 0 [ 184.182224][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.197691][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.222806][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 184.244803][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.264257][ T9] usb 2-1: config 0 descriptor?? [ 184.444599][ T8580] netlink: 104 bytes leftover after parsing attributes in process `syz.3.977'. [ 184.686732][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 184.705198][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.981'. [ 184.850046][ T8590] i2c i2c-0: delete_device: Can't parse I2C address [ 184.884963][ T9] uclogic 0003:28BD:0071.0007: pen parameters not found [ 184.893811][ T9] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 184.973891][ T8576] loop2: detected capacity change from 0 to 32768 [ 185.099428][ T9] usb 2-1: USB disconnect, device number 9 [ 185.148121][ T172] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 185.166099][ T8576] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 185.211717][ T172] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 185.281312][ T172] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 185.313226][ T8576] XFS (loop2): Ending clean mount [ 185.578667][ T8602] fido_id[8602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 185.699020][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 185.872669][ T8588] loop3: detected capacity change from 0 to 131072 [ 185.908085][ T8588] F2FS-fs (loop3): invalid crc value [ 185.988237][ T8588] F2FS-fs (loop3): Found nat_bits in checkpoint [ 186.042715][ T8588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 186.822657][ T6366] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 186.916337][ T8640] loop0: detected capacity change from 0 to 256 [ 186.934103][ T8640] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.053776][ T6366] usb 4-1: Using ep0 maxpacket: 32 [ 187.060688][ T6366] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.082606][ T6366] usb 4-1: config 0 has no interface number 0 [ 187.097408][ T6366] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 187.112710][ T6366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.131065][ T6366] usb 4-1: Product: syz [ 187.141424][ T6366] usb 4-1: Manufacturer: syz [ 187.151316][ T6366] usb 4-1: SerialNumber: syz [ 187.168484][ T6366] usb 4-1: config 0 descriptor?? [ 187.186360][ T6366] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 187.203261][ T6366] usb 4-1: selecting invalid altsetting 1 [ 187.209131][ T6366] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 187.254019][ T6366] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.280689][ T6366] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 187.304347][ T6366] usb 4-1: media controller created [ 187.355114][ T8647] sctp: [Deprecated]: syz.0.1003 (pid 8647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.355114][ T8647] Use struct sctp_sack_info instead [ 187.360830][ T6366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.657006][ T6366] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 187.664979][ T6366] zl10353_read_register: readreg error (reg=127, ret==-71) [ 187.689965][ T6366] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 187.777924][ T8643] loop1: detected capacity change from 0 to 32768 [ 187.791120][ T8643] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1001 (8643) [ 187.813022][ T6366] usb 4-1: USB disconnect, device number 14 [ 187.847663][ T8643] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 187.897515][ T8643] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 187.921231][ T8643] BTRFS info (device loop1): use zlib compression, level 3 [ 187.936588][ T8643] BTRFS info (device loop1): using free space tree [ 188.071022][ T8645] loop2: detected capacity change from 0 to 40427 [ 188.087142][ T8645] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 188.113326][ T8645] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 188.126752][ T8643] BTRFS info (device loop1): enabling ssd optimizations [ 188.163410][ T8645] F2FS-fs (loop2): invalid crc value [ 188.163553][ T8643] BTRFS info (device loop1): auto enabling async discard [ 188.354324][ T6424] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 188.407312][ T8645] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 188.423683][ T8645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 188.629549][ T5774] bio_check_eod: 7 callbacks suppressed [ 188.629568][ T5774] syz-executor: attempt to access beyond end of device [ 188.629568][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.697335][ T8685] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 188.710007][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 188.763094][ T8687] program syz.0.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.984279][ T8693] loop0: detected capacity change from 0 to 256 [ 189.034920][ T8695] loop1: detected capacity change from 0 to 16 [ 189.096957][ T8695] erofs: (device loop1): mounted with root inode @ nid 36. [ 189.166057][ T8695] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 189.177256][ T8695] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 189.187475][ T8695] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 189.203655][ T8695] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 189.217173][ T8695] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 192.176850][ T8699] nbd1: detected capacity change from 0 to 63 [ 192.214927][ T5788] block nbd1: Receive control failed (result -32) [ 192.225590][ T1247] block nbd1: Dead connection, failed to find a fallback [ 192.238996][ T1247] block nbd1: shutting down sockets [ 192.244527][ T1247] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 192.254049][ T1247] buffer_io_error: 135 callbacks suppressed [ 192.254062][ T1247] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.267932][ T1247] Buffer I/O error on dev nbd1, logical block 1, async page read [ 192.278807][ T1247] Buffer I/O error on dev nbd1, logical block 2, async page read [ 192.286773][ T1247] Buffer I/O error on dev nbd1, logical block 3, async page read [ 192.294911][ T1247] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 192.304126][ T1247] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.311880][ T1247] Buffer I/O error on dev nbd1, logical block 1, async page read [ 192.319762][ T1247] Buffer I/O error on dev nbd1, logical block 2, async page read [ 192.327578][ T1247] Buffer I/O error on dev nbd1, logical block 3, async page read [ 192.335699][ T1247] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 192.344873][ T1247] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.352766][ T1247] Buffer I/O error on dev nbd1, logical block 1, async page read [ 192.360780][ T1247] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 192.370113][ T1247] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.379577][ T1247] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 192.388983][ T1247] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.398410][ T1247] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.407712][ T1247] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 192.417103][ T1247] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.441482][ T5769] ldm_validate_partition_table(): Disk read failed. [ 192.510658][ T5769] Dev nbd1: unable to read RDB block 0 [ 192.533785][ T5769] nbd1: unable to read partition table [ 192.579123][ T8713] loop2: detected capacity change from 0 to 256 [ 192.594368][ T5769] ldm_validate_partition_table(): Disk read failed. [ 192.614827][ T8713] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 192.636031][ T5769] Dev nbd1: unable to read RDB block 0 [ 192.684400][ T5769] nbd1: unable to read partition table [ 192.730311][ T8713] gfs2: path_lookup on c::: returned error -2 [ 192.774221][ T8722] loop3: detected capacity change from 0 to 256 [ 193.981573][ T8764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1045'. [ 194.644082][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650480][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.973484][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 195.162691][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 195.169608][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.178021][ T9] usb 2-1: config 0 has no interface number 0 [ 195.186783][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.196806][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.204918][ T9] usb 2-1: Product: syz [ 195.209091][ T9] usb 2-1: Manufacturer: syz [ 195.213782][ T9] usb 2-1: SerialNumber: syz [ 195.220160][ T9] usb 2-1: config 0 descriptor?? [ 195.227633][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 195.485584][ T8799] loop3: detected capacity change from 0 to 512 [ 195.511221][ T8799] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1063: bg 0: block 5: invalid block bitmap [ 195.530613][ T8799] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 195.540211][ T8799] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1063: invalid indirect mapped block 3 (level 2) [ 195.559908][ T8799] EXT4-fs (loop3): 1 orphan inode deleted [ 195.565852][ T8799] EXT4-fs (loop3): 1 truncate cleaned up [ 195.572480][ T8799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.622680][ T28] audit: type=1800 audit(1785758972.045:18): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1063" name="file0" dev="loop3" ino=18 res=0 errno=0 [ 195.683563][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.704010][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.744880][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.768955][ T8803] loop0: detected capacity change from 0 to 1024 [ 195.831165][ T8807] gretap0: entered promiscuous mode [ 195.838818][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 195.854169][ T8807] gretap0: left promiscuous mode [ 195.926597][ T8803] hfsplus: xattr exists yet [ 195.977492][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.986571][ T9] usb 2-1: USB disconnect, device number 10 [ 196.023805][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.073668][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 196.127429][ T9] quatech2 2-1:0.51: device disconnected [ 197.195565][ T8820] loop0: detected capacity change from 0 to 32768 [ 197.211187][ T8820] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1069 (8820) [ 197.258851][ T8816] loop2: detected capacity change from 0 to 32768 [ 197.267377][ T8820] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 197.315357][ T8820] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 197.324549][ T8820] BTRFS info (device loop0): using free space tree [ 197.344810][ T8816] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 197.461476][ T8820] BTRFS info (device loop0): enabling ssd optimizations [ 197.469170][ T8820] BTRFS info (device loop0): auto enabling async discard [ 197.598617][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 197.807660][ T5780] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 198.052760][ T5769] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop0 scanned by udevd (5769) [ 198.993560][ T8873] loop0: detected capacity change from 0 to 32768 [ 199.047812][ T8879] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 199.058998][ T8871] loop2: detected capacity change from 0 to 32768 [ 199.162940][ T8871] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 199.218077][ T8871] JBD2: Ignoring recovery information on journal [ 199.267337][ T8884] netlink: 'syz.3.1090': attribute type 13 has an invalid length. [ 199.290179][ T8871] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 199.527779][ T8891] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 199.543872][ T8891] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1094'. [ 199.645098][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 200.552243][ T8922] loop0: detected capacity change from 0 to 8 [ 200.590844][ T8922] SQUASHFS error: zlib decompression failed, data probably corrupt [ 200.621507][ T8922] SQUASHFS error: Failed to read block 0x9b: -5 [ 200.627107][ T8931] loop1: detected capacity change from 0 to 512 [ 200.631677][ T8922] SQUASHFS error: Unable to read metadata cache entry [99] [ 200.651548][ T8931] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 200.667456][ T8922] SQUASHFS error: Unable to read inode 0x127 [ 200.680798][ T8931] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 200.709312][ T8931] EXT4-fs (loop1): 1 truncate cleaned up [ 200.785316][ T8931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.855861][ T5813] hid-generic 0005:0C45:1010.0009: unknown main item tag 0x0 [ 200.866591][ T5813] hid-generic 0005:0C45:1010.0009: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 201.062806][ T8933] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 201.165770][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.358553][ T8950] i2c i2c-0: new_device: Can't parse I2C address [ 201.466142][ T8935] loop2: detected capacity change from 0 to 32768 [ 201.550757][ T8935] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.658094][ T8935] XFS (loop2): Ending clean mount [ 201.859796][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.881918][ T6366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.893982][ T6366] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 202.363995][ T8979] loop3: detected capacity change from 0 to 164 [ 202.396113][ T8979] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 202.594651][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 203.222666][ T5837] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 203.412672][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 203.415877][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.439488][ T5837] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 203.449199][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.460779][ T5837] usb 3-1: config 0 descriptor?? [ 203.612755][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 203.620008][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 203.633232][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.647244][ T9] usb 2-1: config 0 descriptor?? [ 203.842724][ T6365] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 203.862461][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 203.876309][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.888552][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 203.889888][ T5837] hid-rmi 0003:0461:4E72.000B: unknown main item tag 0x2 [ 203.900317][ T9] usb 2-1: media controller created [ 203.909571][ T5837] hid-rmi 0003:0461:4E72.000B: unexpected long global item [ 203.919179][ T5837] hid-rmi 0003:0461:4E72.000B: parse failed [ 203.927399][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.936353][ T5837] hid-rmi: probe of 0003:0461:4E72.000B failed with error -22 [ 204.032647][ T6365] usb 4-1: Using ep0 maxpacket: 8 [ 204.039672][ T6365] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.048705][ T6365] usb 4-1: config 0 has no interface number 0 [ 204.055097][ T6365] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.066333][ T6365] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.077190][ T9] az6027: usb out operation failed. (-71) [ 204.077781][ T6365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.093506][ T9] az6027: usb out operation failed. (-71) [ 204.100615][ T9] stb0899_attach: Driver disabled by Kconfig [ 204.103717][ T6365] usb 4-1: config 0 descriptor?? [ 204.112486][ T9] az6027: no front-end attached [ 204.112486][ T9] [ 204.121177][ T9] az6027: usb out operation failed. (-71) [ 204.126014][ T6365] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 204.132715][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 204.159445][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 204.179995][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 204.190585][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 204.206444][ T6365] usb 3-1: USB disconnect, device number 13 [ 204.208472][ T9] usb 2-1: USB disconnect, device number 11 [ 204.267571][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 204.360690][ T5837] usb 4-1: USB disconnect, device number 15 [ 204.776026][ T9022] can0: slcan on ttyS3. [ 204.943036][ T9021] can0 (unregistered): slcan off ttyS3. [ 205.076956][ T9033] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 205.639222][ T9056] loop0: detected capacity change from 0 to 4096 [ 205.684687][ T9056] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 205.903980][ T9067] MTRR 1 not used [ 206.234818][ T9075] PM: suspend entry (deep) [ 206.346492][ T9072] loop1: detected capacity change from 0 to 8192 [ 206.401130][ T9072] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.448736][ T9072] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 206.517903][ T6277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.523323][ T9072] REISERFS (device loop1): using ordered data mode [ 206.553721][ T9072] reiserfs: using flush barriers [ 206.572654][ T9072] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.649709][ T9072] REISERFS (device loop1): checking transaction log (loop1) [ 206.684914][ T9072] REISERFS (device loop1): Using r5 hash to sort names [ 206.702983][ T9072] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 206.776382][ T6277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.869699][ T9075] Filesystems sync: 0.616 seconds [ 206.957133][ T6277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.969909][ T9091] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 207.080507][ T9075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.130130][ T9075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.156523][ T9075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.179878][ T6277] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 207.187060][ T9075] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.198571][ T6277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.216334][ T9075] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.265577][ T9075] Freezing user space processes [ 207.292901][ T9075] Freezing user space processes completed (elapsed 0.022 seconds) [ 207.300779][ T9075] OOM killer disabled. [ 207.305660][ T9075] Freezing remaining freezable tasks [ 207.315020][ T9075] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 207.327829][ T9075] printk: Suspending console(s) (use no_console_suspend to debug) [ 207.454038][ T9075] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 207.495032][ T9075] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 207.534090][ T9075] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 207.574400][ T9075] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 207.618163][ T9075] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 207.665855][ T9075] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 207.704141][ T9075] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 207.753417][ T9075] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 207.793794][ T9075] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 207.834074][ T9075] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 207.874902][ T9075] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 207.923185][ T9075] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 207.963554][ T9075] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 208.017253][ T9075] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 208.054090][ T9075] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 208.102991][ T6361] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 208.274691][ T6277] batadv0: left promiscuous mode [ 208.284784][ T6277] hsr_slave_0: left promiscuous mode [ 208.285619][ T6277] hsr_slave_1: left promiscuous mode [ 208.286786][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.286825][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.287572][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.287595][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.288244][ T6277] bridge_slave_1: left allmulticast mode [ 208.288264][ T6277] bridge_slave_1: left promiscuous mode [ 208.288445][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.290851][ T6277] bridge_slave_0: left allmulticast mode [ 208.290872][ T6277] bridge_slave_0: left promiscuous mode [ 208.291043][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.330085][ T6277] veth1_macvtap: left promiscuous mode [ 208.330144][ T6277] veth0_macvtap: left promiscuous mode [ 208.330232][ T6277] veth1_vlan: left promiscuous mode [ 208.330309][ T6277] veth0_vlan: left promiscuous mode [ 208.952782][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.979546][ T6277] team0 (unregistering): Port device team_slave_1 removed [ 209.024095][ T6277] team0 (unregistering): Port device team_slave_0 removed [ 209.060448][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.100812][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.196537][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.196595][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.472928][ T6277] bond0 (unregistering): Released all slaves [ 209.756843][ T9075] ACPI: PM: Preparing to enter system sleep state S3 [ 209.757159][ T9075] ACPI: PM: Saving platform NVS memory [ 209.757233][ T9075] Disabling non-boot CPUs ... [ 209.767093][ T9075] smpboot: CPU 1 is now offline [ 209.781037][ T9075] ACPI: PM: Low-level resume complete [ 209.781094][ T9075] ACPI: PM: Restoring platform NVS memory [ 209.799034][ T9075] Enabling non-boot CPUs ... [ 209.800609][ T9075] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 209.823897][ T9075] CPU1 is up [ 209.824108][ T9075] ACPI: PM: Waking up from system sleep state S3 [ 210.244089][ T9075] OOM killer enabled. [ 210.244774][ T9075] Restarting tasks ... done. [ 210.274241][ T9075] random: crng reseeded on system resumption [ 210.275406][ T9075] PM: suspend exit [ 210.442003][ T9103] loop1: detected capacity change from 0 to 2048 [ 210.615938][ T9103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.647759][ T9103] EXT4-fs error (device loop1): ext4_find_extent:947: inode #2: comm syz.1.1173: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 210.687477][ T9103] EXT4-fs (loop1): Remounting filesystem read-only [ 210.784836][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.793797][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.796454][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.804770][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.808481][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.811030][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.860169][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.201646][ T9129] loop1: detected capacity change from 0 to 1024 [ 211.202918][ T9127] loop0: detected capacity change from 0 to 1024 [ 211.254768][ T9127] EXT4-fs: Ignoring removed bh option [ 211.255700][ T9127] EXT4-fs: Ignoring removed oldalloc option [ 211.256584][ T9127] EXT4-fs: Ignoring removed nobh option [ 211.293321][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.294615][ T9127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.296174][ T9127] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 211.296174][ T9127] [ 211.498057][ T9137] loop2: detected capacity change from 0 to 2048 [ 211.563792][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 211.606227][ T9144] MTRR 1 not used [ 211.768890][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.774149][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.775526][ T9110] bridge_slave_0: entered allmulticast mode [ 211.778291][ T9110] bridge_slave_0: entered promiscuous mode [ 211.792901][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.798068][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.799465][ T9110] bridge_slave_1: entered allmulticast mode [ 211.809750][ T9110] bridge_slave_1: entered promiscuous mode [ 211.846599][ T9154] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1185'. [ 211.860088][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.873099][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.978350][ T9110] team0: Port device team_slave_0 added [ 211.999064][ T9110] team0: Port device team_slave_1 added [ 212.092728][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.099796][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.114058][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.126617][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.129089][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.132597][ T9164] loop0: detected capacity change from 0 to 64 [ 212.138010][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.295363][ T9110] hsr_slave_0: entered promiscuous mode [ 212.302953][ T9110] hsr_slave_1: entered promiscuous mode [ 212.305641][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.308507][ T9110] Cannot create hsr debugfs directory [ 212.894430][ T5788] Bluetooth: hci1: command tx timeout [ 213.218803][ T9200] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1200'. [ 213.373407][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.445115][ T9208] loop1: detected capacity change from 0 to 512 [ 213.473414][ T9208] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.474778][ T9208] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 213.497072][ T9208] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 213.499698][ T9208] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 213.501151][ T9208] System zones: 0-2, 18-18, 34-35 [ 213.516845][ T9208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.536044][ T9208] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 213.587879][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.679954][ T5769] blk_print_req_error: 48 callbacks suppressed [ 213.679972][ T5769] I/O error, dev loop1, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.755512][ T9110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.761737][ T9110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.769217][ T9110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.773570][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.793424][ T9110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.958432][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.968984][ T27] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 213.975198][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.976578][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.983420][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.985938][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.987450][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.988992][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.001757][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.003072][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.010478][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.027159][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.029131][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.030629][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.032206][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.044486][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.045820][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.047519][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.054473][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.055281][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.055884][ T6268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.057192][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.059679][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.068288][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.069621][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.071122][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.084279][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.085810][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.087485][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.095121][ T27] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 214.095261][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.096563][ T27] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 214.097518][ T6348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.098750][ T27] usb 3-1: Product: syz [ 214.100355][ T27] usb 3-1: Manufacturer: syz [ 214.101020][ T27] usb 3-1: SerialNumber: syz [ 214.128244][ T27] usb 3-1: config 0 descriptor?? [ 214.192018][ T27] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 214.484215][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 214.485961][ T5813] usb 3-1: USB disconnect, device number 14 [ 214.489847][ T5813] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 214.683557][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.779592][ T9110] veth0_vlan: entered promiscuous mode [ 214.791884][ T9110] veth1_vlan: entered promiscuous mode [ 214.871579][ T9110] veth0_macvtap: entered promiscuous mode [ 214.887575][ T9110] veth1_macvtap: entered promiscuous mode [ 214.917264][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.927933][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.929663][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.931168][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.932582][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.939794][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.942850][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.952918][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.955415][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.956867][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.958362][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.959761][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.971476][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.973460][ T5788] Bluetooth: hci1: command tx timeout [ 214.975637][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.990342][ T9110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.991646][ T9110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.004802][ T9110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.006080][ T9110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.175198][ T6297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.176516][ T6297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.277252][ T6277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.278470][ T6277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.481369][ T9241] loop1: detected capacity change from 0 to 32768 [ 215.527798][ T9262] batadv_slave_1: entered allmulticast mode [ 215.543787][ T9262] batadv_slave_1: left allmulticast mode [ 215.551289][ T9241] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 215.660857][ T9241] XFS (loop1): Ending clean mount [ 215.860048][ T6424] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 216.312475][ T9256] loop0: detected capacity change from 0 to 32768 [ 216.326148][ T9256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1211 (9256) [ 216.354603][ T9256] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.356682][ T9256] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 216.358042][ T9256] BTRFS info (device loop0): using free space tree [ 216.550219][ T9256] BTRFS info (device loop0): enabling ssd optimizations [ 216.551353][ T9256] BTRFS info (device loop0): auto enabling async discard [ 216.918650][ T5780] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.076616][ T5788] Bluetooth: hci1: command tx timeout [ 217.196752][ T5769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5769) [ 217.917123][ T9350] loop3: detected capacity change from 0 to 256 [ 218.256306][ T9361] loop2: detected capacity change from 0 to 512 [ 218.280255][ T9361] EXT4-fs: Ignoring removed orlov option [ 218.281125][ T9361] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.320632][ T9361] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.1238: corrupted in-inode xattr: e_value size too large [ 218.323585][ T9361] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1238: couldn't read orphan inode 15 (err -117) [ 218.332059][ T9361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.559633][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.927989][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 219.134491][ T5788] Bluetooth: hci1: command tx timeout [ 219.188049][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 219.189555][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'. [ 219.660929][ T9413] input: syz1 as /devices/virtual/input/input16 [ 220.127372][ T9424] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1261'. [ 220.802653][ T9434] loop0: detected capacity change from 0 to 128 [ 220.850368][ T9434] EXT4-fs (loop0): Test dummy encryption mode enabled [ 220.881645][ T9428] loop1: detected capacity change from 0 to 32768 [ 220.901418][ T9434] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.911060][ T9434] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.989233][ T9428] read_mapping_page failed! [ 220.989986][ T9428] ERROR: (device loop1): txCommit: [ 220.989986][ T9428] [ 221.101092][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.458065][ T9447] loop0: detected capacity change from 0 to 256 [ 221.598192][ T9452] loop0: detected capacity change from 0 to 128 [ 221.608131][ T9452] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 221.657728][ T9452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.195943][ T9466] loop1: detected capacity change from 0 to 4096 [ 222.200490][ T9466] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.202613][ T9466] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.231798][ T9466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.286585][ T28] audit: type=1800 audit(1785759001.718:19): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1280" name="file3" dev="loop1" ino=16 res=0 errno=0 [ 222.351877][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.423855][ T5823] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 222.531403][ T9478] loop1: detected capacity change from 0 to 4096 [ 222.579311][ T9478] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 222.582442][ T9478] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 222.603913][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 222.614935][ T5823] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.616196][ T5823] usb 4-1: config 0 has no interface number 0 [ 222.617116][ T5823] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.618802][ T5823] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.620249][ T5823] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 222.621515][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.638640][ T5823] usb 4-1: config 0 descriptor?? [ 222.725357][ T6297] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 222.726610][ T6424] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 222.727613][ T6424] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 222.729343][ T6424] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 222.730640][ T6297] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 222.981061][ T9482] loop2: detected capacity change from 0 to 32768 [ 223.290778][ T5823] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000C/input/input17 [ 223.330189][ T5823] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000C/input/input18 [ 223.411991][ T5823] uclogic 0003:28BD:0071.000C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 223.604336][ T5823] usb 4-1: USB disconnect, device number 16 [ 223.657223][ T9494] fido_id[9494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 223.811864][ T9505] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 223.827621][ T9505] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 223.913633][ T9100] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 224.105426][ T9100] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.119035][ T9100] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 224.128467][ T9100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.143248][ T9100] usb 1-1: Product: syz [ 224.147495][ T9100] usb 1-1: Manufacturer: syz [ 224.152126][ T9100] usb 1-1: SerialNumber: syz [ 224.182792][ T9100] usb 1-1: selecting invalid altsetting 1 [ 224.214039][ T9100] usb 1-1: unit 6 not found! [ 224.458966][ T9514] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1299'. [ 224.625856][ T9516] loop1: detected capacity change from 0 to 256 [ 224.652299][ T9516] FAT-fs (loop1): Directory bread(block 1285) failed [ 224.664015][ T9516] FAT-fs (loop1): Directory bread(block 1286) failed [ 224.691177][ T9516] FAT-fs (loop1): Directory bread(block 1287) failed [ 224.711652][ T9516] FAT-fs (loop1): Directory bread(block 1288) failed [ 224.740877][ T9510] loop3: detected capacity change from 0 to 40427 [ 224.757592][ T9510] F2FS-fs (loop3): invalid crc value [ 224.799134][ T9510] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.976153][ T9510] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.023383][ T9100] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 225.038970][ T9100] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 225.058779][ T9100] usb 1-1: selecting invalid altsetting 1 [ 225.084540][ T9100] usb 1-1: unit 6 not found! [ 225.104190][ T9100] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 225.131587][ T9100] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 225.150581][ T9100] usb 1-1: selecting invalid altsetting 1 [ 225.157498][ T9100] usb 1-1: unit 6 not found! [ 225.170226][ T9100] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 225.187755][ T9110] syz-executor: attempt to access beyond end of device [ 225.187755][ T9110] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.209038][ T9100] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 225.226324][ T9110] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 225.247207][ T9100] usb 1-1: USB disconnect, device number 5 [ 225.282538][ T9529] loop1: detected capacity change from 0 to 4096 [ 225.297538][ T9529] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 225.367311][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.471826][ T9534] loop2: detected capacity change from 0 to 128 [ 225.491679][ T9534] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 225.528766][ T9534] hpfs: filesystem error: improperly stopped [ 225.554844][ T9534] hpfs: You really don't want any checks? You are crazy... [ 225.594083][ T9534] hpfs: hpfs_map_sector(): read error [ 225.607452][ T9534] hpfs: code page support is disabled [ 225.613090][ T9534] hpfs: hpfs_map_4sectors(): unaligned read [ 225.641134][ T9534] hpfs: hpfs_map_4sectors(): unaligned read [ 225.650775][ T9534] hpfs: filesystem error: unable to find root dir [ 225.992202][ T9542] loop1: detected capacity change from 0 to 512 [ 226.015386][ T9542] EXT4-fs: inline encryption not supported [ 226.023658][ T9542] EXT4-fs (loop1): Test dummy encryption mode enabled [ 226.051857][ T9542] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.124826][ T9542] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1311: bad orphan inode 131083 [ 226.225498][ T9542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.319721][ T9542] EXT4-fs (loop1): shut down requested (1) [ 226.403112][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.571856][ T9567] loop2: detected capacity change from 0 to 256 [ 226.591033][ T9568] loop3: detected capacity change from 0 to 128 [ 226.617616][ T9569] loop0: detected capacity change from 0 to 128 [ 226.670169][ T9568] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 226.699909][ T9567] syz.2.1322: attempt to access beyond end of device [ 226.699909][ T9567] loop2: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 226.724007][ T9568] hpfs: filesystem error: improperly stopped [ 226.739054][ T9568] hpfs: You really don't want any checks? You are crazy... [ 226.805465][ T9568] hpfs: hpfs_map_sector(): read error [ 226.846837][ T9568] hpfs: code page support is disabled [ 226.866234][ T9568] hpfs: hpfs_map_4sectors(): unaligned read [ 226.872297][ T9568] hpfs: hpfs_map_4sectors(): unaligned read [ 226.881583][ T9568] hpfs: filesystem error: unable to find root dir [ 227.222558][ T9579] loop0: detected capacity change from 0 to 2048 [ 227.312150][ T9579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.351224][ T9579] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.371378][ T9584] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 227.528849][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.580138][ T9588] input: syz1 as /devices/virtual/input/input19 [ 227.693358][ T9100] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 227.915156][ T9100] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.944702][ T9100] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 227.955370][ T9100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 227.970164][ T9597] loop2: detected capacity change from 0 to 512 [ 227.976611][ T9100] usb 4-1: Product: syz [ 227.980800][ T9100] usb 4-1: Manufacturer: syz [ 228.012226][ T9100] usb_debug 4-1:1.0: debug converter detected [ 228.022355][ T9597] EXT4-fs: Ignoring removed nobh option [ 228.044458][ T9100] usb 4-1: debug converter now attached to ttyUSB0 [ 228.117380][ T9597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.145589][ T9597] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.188556][ T9597] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.1334: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 228.296361][ T27] usb 4-1: USB disconnect, device number 17 [ 228.311168][ T27] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 228.329210][ T9591] loop0: detected capacity change from 0 to 32768 [ 228.331332][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.347683][ T27] usb_debug 4-1:1.0: device disconnected [ 228.435653][ T9591] jfs_rmdir: dtDelete returned -2 [ 228.602400][ T9611] loop2: detected capacity change from 0 to 164 [ 228.706203][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1339'. [ 228.952788][ T28] audit: type=1326 audit(1785759008.378:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.029947][ T28] audit: type=1326 audit(1785759008.378:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.081654][ T28] audit: type=1326 audit(1785759008.428:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa64ad9ce87 code=0x7ffc0000 [ 229.183244][ T28] audit: type=1326 audit(1785759008.428:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.249732][ T28] audit: type=1326 audit(1785759008.458:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.292491][ T28] audit: type=1326 audit(1785759008.458:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.321406][ T28] audit: type=1326 audit(1785759008.458:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.336864][ T9635] loop3: detected capacity change from 0 to 64 [ 229.396370][ T28] audit: type=1326 audit(1785759008.458:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.429757][ T28] audit: type=1326 audit(1785759008.458:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.431317][ T9635] MINIX-fs: mounting file system with errors, running fsck is recommended [ 229.471306][ T28] audit: type=1326 audit(1785759008.458:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ad9e019 code=0x7ffc0000 [ 229.567262][ T9635] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 229.602640][ T9635] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 229.658492][ T9637] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.363336][ T5813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.555010][ T9670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'. [ 230.569545][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 230.587229][ T5813] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.613338][ T5813] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.628216][ T5813] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 230.650274][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.694490][ T5813] usb 1-1: config 0 descriptor?? [ 231.138348][ T5813] mcp2221 0003:04D8:00DD.000D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 231.249924][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 231.274255][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 231.310370][ T9680] C: renamed from team_slave_0 (while UP) [ 231.330526][ T9680] netlink: 'syz.3.1369': attribute type 8 has an invalid length. [ 231.360047][ T9680] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 231.480188][ T9686] loop1: detected capacity change from 0 to 8 [ 231.527939][ T9686] squashfs image failed sanity check [ 231.593420][ T27] usb 1-1: USB disconnect, device number 6 [ 232.002659][ T9704] loop3: detected capacity change from 0 to 512 [ 232.327289][ T9708] ------------[ cut here ]------------ [ 232.334221][ T9708] SVC: permsocks remain for nfsd [ 232.347180][ T9708] WARNING: CPU: 1 PID: 9708 at net/sunrpc/svc.c:583 svc_destroy+0x2ed/0x390 [ 232.356379][ T9708] Modules linked in: [ 232.360313][ T9708] CPU: 1 PID: 9708 Comm: syz.0.1382 Not tainted syzkaller #0 [ 232.368286][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.378746][ T9708] RIP: 0010:svc_destroy+0x2ed/0x390 [ 232.384302][ T9708] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 62 a7 35 f8 49 8b 37 48 c7 c7 a0 20 d9 8b e8 93 f2 a6 f7 <0f> 0b e9 78 fd ff ff e8 d7 24 dd f7 c6 05 f6 b7 cc 04 01 4c 89 e0 [ 232.404450][ T9708] RSP: 0018:ffffc9000bf87ae0 EFLAGS: 00010246 [ 232.410540][ T9708] RAX: 36923f461fbe3700 RBX: ffff888026fbfc50 RCX: 0000000000080000 [ 232.418838][ T9708] RDX: ffffc9000cd99000 RSI: 000000000002f464 RDI: 000000000002f465 [ 232.426889][ T9708] RBP: ffffc9000bf87cb8 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 232.435130][ T9708] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888026fbfc00 [ 232.443609][ T9708] R13: dffffc0000000000 R14: ffff888026fbfc50 R15: ffffffff8d3e18e0 [ 232.451617][ T9708] FS: 00007fac0d7856c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 232.461413][ T9708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.468132][ T9708] CR2: 00007f32eb7eb700 CR3: 000000005d8c2000 CR4: 00000000003506e0 [ 232.476223][ T9708] Call Trace: [ 232.479535][ T9708] [ 232.482505][ T9708] write_ports+0xb99/0xfa0 [ 232.487211][ T9708] ? write_versions+0xe00/0xe00 [ 232.492130][ T9708] ? __lock_acquire+0x7d80/0x7d80 [ 232.497445][ T9708] ? __virt_addr_valid+0x10c/0x380 [ 232.502602][ T9708] ? __virt_addr_valid+0x10c/0x380 [ 232.507801][ T9708] ? __might_fault+0xaa/0x120 [ 232.512520][ T9708] ? __might_fault+0xc6/0x120 [ 232.517322][ T9708] ? __might_fault+0xaa/0x120 [ 232.522048][ T9708] ? simple_transaction_get+0x11d/0x140 [ 232.527675][ T9708] nfsctl_transaction_write+0x10c/0x150 [ 232.533408][ T9708] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 232.539301][ T9708] vfs_write+0x299/0x9a0 [ 232.543730][ T9708] ? file_end_write+0x250/0x250 [ 232.548627][ T9708] ? __fget_files+0x28/0x460 [ 232.553280][ T9708] ? __fget_files+0x3fc/0x460 [ 232.558085][ T9708] ? __fdget_pos+0x2a3/0x330 [ 232.562716][ T9708] ? ksys_write+0x74/0x260 [ 232.567314][ T9708] ksys_write+0x151/0x260 [ 232.571684][ T9708] ? __ia32_sys_read+0x90/0x90 [ 232.576664][ T9708] ? lockdep_hardirqs_on+0x98/0x150 [ 232.581897][ T9708] do_syscall_64+0x55/0xb0 [ 232.586454][ T9708] ? clear_bhb_loop+0x40/0x90 [ 232.591181][ T9708] ? clear_bhb_loop+0x40/0x90 [ 232.595950][ T9708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.601922][ T9708] RIP: 0033:0x7fac0c99e019 [ 232.606456][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.626355][ T9708] RSP: 002b:00007fac0d785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.634943][ T9708] RAX: ffffffffffffffda RBX: 00007fac0cc25fa0 RCX: 00007fac0c99e019 [ 232.643417][ T9708] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000003 [ 232.651428][ T9708] RBP: 00007fac0ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 232.659580][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.667710][ T9708] R13: 00007fac0cc26038 R14: 00007fac0cc25fa0 R15: 00007ffc25c70748 [ 232.675773][ T9708] [ 232.678816][ T9708] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.686100][ T9708] CPU: 1 PID: 9708 Comm: syz.0.1382 Not tainted syzkaller #0 [ 232.693467][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.703531][ T9708] Call Trace: [ 232.706802][ T9708] [ 232.709725][ T9708] dump_stack_lvl+0x18c/0x250 [ 232.714403][ T9708] ? show_regs_print_info+0x20/0x20 [ 232.719595][ T9708] ? load_image+0x420/0x420 [ 232.724128][ T9708] panic+0x2ca/0x720 [ 232.728027][ T9708] ? bpf_jit_dump+0xd0/0xd0 [ 232.732538][ T9708] __warn+0x2e0/0x470 [ 232.736525][ T9708] ? svc_destroy+0x2ed/0x390 [ 232.741133][ T9708] ? svc_destroy+0x2ed/0x390 [ 232.745714][ T9708] report_bug+0x2be/0x4f0 [ 232.750051][ T9708] ? svc_destroy+0x2ed/0x390 [ 232.754634][ T9708] ? svc_destroy+0x2ed/0x390 [ 232.759214][ T9708] ? svc_destroy+0x2ef/0x390 [ 232.763798][ T9708] handle_bug+0xcf/0x120 [ 232.768034][ T9708] exc_invalid_op+0x1a/0x50 [ 232.772532][ T9708] asm_exc_invalid_op+0x1a/0x20 [ 232.777371][ T9708] RIP: 0010:svc_destroy+0x2ed/0x390 [ 232.782586][ T9708] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 62 a7 35 f8 49 8b 37 48 c7 c7 a0 20 d9 8b e8 93 f2 a6 f7 <0f> 0b e9 78 fd ff ff e8 d7 24 dd f7 c6 05 f6 b7 cc 04 01 4c 89 e0 [ 232.802203][ T9708] RSP: 0018:ffffc9000bf87ae0 EFLAGS: 00010246 [ 232.808281][ T9708] RAX: 36923f461fbe3700 RBX: ffff888026fbfc50 RCX: 0000000000080000 [ 232.816265][ T9708] RDX: ffffc9000cd99000 RSI: 000000000002f464 RDI: 000000000002f465 [ 232.824335][ T9708] RBP: ffffc9000bf87cb8 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 232.832413][ T9708] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888026fbfc00 [ 232.840494][ T9708] R13: dffffc0000000000 R14: ffff888026fbfc50 R15: ffffffff8d3e18e0 [ 232.849019][ T9708] write_ports+0xb99/0xfa0 [ 232.853441][ T9708] ? write_versions+0xe00/0xe00 [ 232.858291][ T9708] ? __lock_acquire+0x7d80/0x7d80 [ 232.863325][ T9708] ? __virt_addr_valid+0x10c/0x380 [ 232.868464][ T9708] ? __virt_addr_valid+0x10c/0x380 [ 232.873590][ T9708] ? __might_fault+0xaa/0x120 [ 232.878271][ T9708] ? __might_fault+0xc6/0x120 [ 232.882959][ T9708] ? __might_fault+0xaa/0x120 [ 232.887743][ T9708] ? simple_transaction_get+0x11d/0x140 [ 232.893382][ T9708] nfsctl_transaction_write+0x10c/0x150 [ 232.898935][ T9708] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 232.904568][ T9708] vfs_write+0x299/0x9a0 [ 232.908827][ T9708] ? file_end_write+0x250/0x250 [ 232.913689][ T9708] ? __fget_files+0x28/0x460 [ 232.918283][ T9708] ? __fget_files+0x3fc/0x460 [ 232.922977][ T9708] ? __fdget_pos+0x2a3/0x330 [ 232.927562][ T9708] ? ksys_write+0x74/0x260 [ 232.931976][ T9708] ksys_write+0x151/0x260 [ 232.936310][ T9708] ? __ia32_sys_read+0x90/0x90 [ 232.941072][ T9708] ? lockdep_hardirqs_on+0x98/0x150 [ 232.946270][ T9708] do_syscall_64+0x55/0xb0 [ 232.950688][ T9708] ? clear_bhb_loop+0x40/0x90 [ 232.955385][ T9708] ? clear_bhb_loop+0x40/0x90 [ 232.960085][ T9708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.966005][ T9708] RIP: 0033:0x7fac0c99e019 [ 232.970443][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.990057][ T9708] RSP: 002b:00007fac0d785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.998481][ T9708] RAX: ffffffffffffffda RBX: 00007fac0cc25fa0 RCX: 00007fac0c99e019 [ 233.006451][ T9708] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000003 [ 233.014426][ T9708] RBP: 00007fac0ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 233.022396][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.030365][ T9708] R13: 00007fac0cc26038 R14: 00007fac0cc25fa0 R15: 00007ffc25c70748 [ 233.038343][ T9708] [ 233.041592][ T9708] Kernel Offset: disabled [ 233.046025][ T9708] Rebooting in 86400 seconds..