last executing test programs: 4.910654478s ago: executing program 0 (id=1117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="800100001000010000000000000000000a010100000000000000000000000000ac1e010100000000000000000000000000000000200000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc01000000000000000000000000000100000000020000000000000000000000070000000000000000000000000000000000000030000000000000000000000000006905ceb40010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000002abd7000000000000a0001060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002"], 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 4.749522441s ago: executing program 0 (id=1121): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 2.50527835s ago: executing program 0 (id=1150): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000e80)={'syz_tun\x00', {0x2, 0x4e25, @empty}}) 2.346334753s ago: executing program 2 (id=1153): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) 2.282019938s ago: executing program 0 (id=1156): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.157529968s ago: executing program 2 (id=1159): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 1.582680474s ago: executing program 1 (id=1169): r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) 1.465673553s ago: executing program 3 (id=1170): r0 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x4004510d, 0x0) 1.465574993s ago: executing program 1 (id=1171): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2}, {0x0, 0x3}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xfd}, @connect={{0x7, 0x5f}, {0x2, 0x1}}}, {0x1, 0x0, 0x1, 0x0, @tick=0x2, {0x4, 0x3}, {0x4, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) 1.408495177s ago: executing program 3 (id=1172): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98) 1.355258472s ago: executing program 1 (id=1173): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0x2}}) 1.25338449s ago: executing program 1 (id=1174): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0xffff0000}}, 0x6}, &(0x7f0000000200)=0x90) 1.25273551s ago: executing program 3 (id=1175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@allocspi={0x1dc, 0x16, 0x411, 0x0, 0x0, {{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x67}, {@in6=@empty, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x4, 0x2}, {}, {0x0, 0x0, 0xffffffff}, 0x2000}, 0x0, 0xfdfffefe}, [@sa={0xe4, 0x20, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x30}, {@in=@multicast1, 0x4d5, 0x3c}, @in=@broadcast, {0x8000000000000000, 0x1900, 0xc9, 0x83d, 0x278, 0x0, 0x101, 0x1}, {0xffffffff, 0x1, 0x4, 0x5}, {0x8, 0x0, 0x7}, 0x70bd28, 0x803507, 0x2, 0x3, 0xc}}]}, 0x1dc}}, 0x0) 1.144804559s ago: executing program 3 (id=1176): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 1.053701406s ago: executing program 1 (id=1177): r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8935, &(0x7f0000000000)) 602.515902ms ago: executing program 3 (id=1178): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 547.397857ms ago: executing program 1 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0xdf}}]}, 0x3c}}, 0x0) 477.909262ms ago: executing program 3 (id=1180): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 429.830176ms ago: executing program 0 (id=1181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x80000005, 0x4) 341.876193ms ago: executing program 0 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c00028008000100"], 0x38}}, 0x0) 220.450723ms ago: executing program 2 (id=1183): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 117.759601ms ago: executing program 2 (id=1184): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d80)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xa8, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x25}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 71.773715ms ago: executing program 2 (id=1185): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x1b4) write$tcp_mem(r0, &(0x7f0000000100)={0x2, 0x2d, 0x4000, 0xa, 0x0, 0x2c}, 0x48) 0s ago: executing program 2 (id=1186): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 73.592242][ T23] usb 3-1: Product: syz [ 73.606751][ T23] usb 3-1: SerialNumber: syz [ 73.620152][ T23] usb 3-1: config 0 descriptor?? [ 73.662450][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 73.766171][ T5911] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17'. [ 73.823757][ T5911] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17'. [ 73.964754][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 73.974596][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 73.981948][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 73.989119][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 73.996305][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.003554][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.010758][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.017935][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.025112][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.032267][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.043612][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 74.052940][ T5872] usb 3-1: USB disconnect, device number 2 [ 74.078567][ T5872] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 74.106821][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.260478][ T5921] loop3: detected capacity change from 0 to 4096 [ 74.292192][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.311613][ T23] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 74.331060][ T23] usb 2-1: config 2 has no interface number 0 [ 74.348220][ T23] usb 2-1: config 2 interface 99 has no altsetting 0 [ 74.359422][ T23] usb 2-1: New USB device found, idVendor=0840, idProduct=0082, bcdDevice= 0.01 [ 74.370047][ T5924] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.383637][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.392533][ T23] usb 2-1: Product: syz [ 74.396933][ T23] usb 2-1: Manufacturer: syz [ 74.401939][ T23] usb 2-1: SerialNumber: syz [ 74.488529][ T5926] loop0: detected capacity change from 0 to 4096 [ 74.513985][ T5926] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 74.734208][ T5926] ntfs3: loop0: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 74.747254][ T5926] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.860607][ T23] usb-storage 2-1:2.99: USB Mass Storage device detected [ 74.875011][ T5930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.25'. [ 74.892633][ T12] ntfs3: loop0: ino=1e, ntfs3_write_inode failed, -22. [ 74.904590][ T23] usb-storage 2-1:2.99: Quirks match for vid 0840 pid 0082: 10 [ 74.983231][ T23] usb 2-1: USB disconnect, device number 2 [ 75.063383][ T5936] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 75.167680][ T5799] Bluetooth: hci1: command tx timeout [ 75.246530][ T5799] Bluetooth: hci0: command tx timeout [ 75.256840][ T5799] Bluetooth: hci2: command tx timeout [ 75.286853][ T5943] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 75.294447][ T5943] netlink: 80 bytes leftover after parsing attributes in process `syz.0.31'. [ 75.326560][ T5799] Bluetooth: hci3: command tx timeout [ 76.214661][ T5959] loop2: detected capacity change from 0 to 32768 [ 76.236641][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.307557][ T5974] loop0: detected capacity change from 0 to 4096 [ 76.333303][ T5974] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 76.409336][ T1093] read_mapping_page failed! [ 76.429130][ T1093] ERROR: (device loop2): txCommit: [ 76.429130][ T1093] [ 76.440206][ T9] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 76.473669][ T1093] jfs_write_inode: jfs_commit_inode failed! [ 76.487599][ T9] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 61 [ 76.506957][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.519945][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 76.566517][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 76.616904][ T9] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 76.640743][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.671638][ T9] usb 2-1: config 0 descriptor?? [ 76.706106][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 76.756777][ T5974] syz.0.46 (5974) used greatest stack depth: 20528 bytes left [ 76.787225][ T9] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 77.007977][ T9] usb 2-1: USB disconnect, device number 3 [ 78.173146][ T6019] erofs: (device nbd0): erofs_read_superblock: cannot find valid erofs superblock [ 78.454385][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.647383][ T6034] loop3: detected capacity change from 0 to 4096 [ 78.676018][ T6034] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 78.683777][ T6042] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 78.892840][ T6048] loop0: detected capacity change from 0 to 1024 [ 79.106923][ T6054] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 79.109061][ T6056] ======================================================= [ 79.109061][ T6056] WARNING: The mand mount option has been deprecated and [ 79.109061][ T6056] and is ignored by this kernel. Remove the mand [ 79.109061][ T6056] option from the mount to silence this warning. [ 79.109061][ T6056] ======================================================= [ 79.245575][ T6056] ./file0: Can't open blockdev [ 79.445412][ T6066] loop2: detected capacity change from 0 to 1024 [ 79.852475][ T6076] loop0: detected capacity change from 0 to 4096 [ 79.896015][ T6076] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 80.035674][ T6084] netlink: 2980 bytes leftover after parsing attributes in process `syz.1.97'. [ 80.058594][ T6076] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 80.065407][ T6076] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 80.134248][ T3460] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 80.160886][ T5784] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 80.190318][ T5784] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 80.218581][ T5784] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 80.236194][ T3460] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 80.962425][ T6086] loop2: detected capacity change from 0 to 32768 [ 81.038285][ T6086] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.313397][ T6086] XFS (loop2): Ending clean mount [ 81.471351][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.837145][ T27] cfg80211: failed to load regulatory.db [ 81.886576][ T5873] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.986539][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.076578][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 82.093345][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 82.115430][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 82.151312][ T5873] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 82.170121][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.190800][ T5873] usb 2-1: Product: syz [ 82.195016][ T5873] usb 2-1: Manufacturer: syz [ 82.200110][ T5873] usb 2-1: SerialNumber: syz [ 82.209526][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.225323][ T5873] usb 2-1: config 0 descriptor?? [ 82.238571][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.261965][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 82.271548][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.286717][ T9] usb 4-1: Product: syz [ 82.290928][ T9] usb 4-1: Manufacturer: syz [ 82.295542][ T9] usb 4-1: SerialNumber: syz [ 82.333528][ T9] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 82.482297][ T9] usb 2-1: USB disconnect, device number 4 [ 82.489188][ T6150] loop2: detected capacity change from 0 to 40427 [ 82.506231][ T6150] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x7ffff [ 82.520438][ T6150] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7698c [ 82.544059][ T6150] F2FS-fs (loop2): invalid crc value [ 82.575990][ T27] usb 4-1: USB disconnect, device number 2 [ 82.584076][ T6150] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 82.608994][ T6150] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.649215][ T6163] mmap: syz.0.132 (6163) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.680749][ T6150] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 82.746710][ T6150] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.830347][ T6150] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 82.894769][ C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 82.905195][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 82.905754][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 82.914608][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.133'. [ 82.921867][ T5787] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 82.931667][ T6166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.133'. [ 83.153918][ T6170] loop1: detected capacity change from 0 to 512 [ 83.283376][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.356640][ T6170] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.405333][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.134'. [ 83.523908][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.751753][ T6190] loop0: detected capacity change from 0 to 256 [ 83.833691][ T6190] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 83.933595][ T6190] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 83.965886][ T6190] exFAT-fs (loop0): Filesystem has been set read-only [ 84.194471][ T6184] loop3: detected capacity change from 0 to 32768 [ 84.224753][ T6184] XFS: noikeep mount option is deprecated. [ 84.234686][ T6200] loop1: detected capacity change from 0 to 1024 [ 84.264552][ T6200] EXT4-fs: Ignoring removed bh option [ 84.305242][ T6184] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.357479][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 84.364934][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'. [ 84.384851][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 84.591235][ T6184] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 84.661676][ T6184] XFS (loop3): Starting recovery (logdev: internal) [ 84.701218][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 84.816868][ T6184] XFS (loop3): Ending recovery (logdev: internal) [ 84.839347][ T6184] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 84.859508][ T6184] XFS (loop3): Failed to initialize disk quotas. [ 84.891367][ T6227] sp0: Synchronizing with TNC [ 85.017233][ T6184] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 85.140668][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.192249][ T6235] loop0: detected capacity change from 0 to 1024 [ 85.236584][ T6235] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.297950][ T6235] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 85.326987][ T6235] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.407183][ T6235] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.159: Invalid inode table block 0 in block_group 0 [ 85.471441][ T6235] EXT4-fs (loop0): Remounting filesystem read-only [ 85.507891][ T6235] Quota error (device loop0): write_blk: dquota write failed [ 85.544417][ T6235] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 85.586946][ T6235] EXT4-fs (loop0): 1 truncate cleaned up [ 85.614267][ T6235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.800409][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.815566][ T6254] netlink: 1088 bytes leftover after parsing attributes in process `syz.1.168'. [ 85.935152][ T6258] netlink: 666 bytes leftover after parsing attributes in process `syz.3.171'. [ 86.158678][ T28] audit: type=1326 audit(1755702525.546:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.237411][ T28] audit: type=1326 audit(1755702525.546:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.296569][ T28] audit: type=1326 audit(1755702525.546:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.353149][ T28] audit: type=1326 audit(1755702525.546:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.436466][ T28] audit: type=1326 audit(1755702525.546:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.491566][ T6276] capability: warning: `syz.3.179' uses deprecated v2 capabilities in a way that may be insecure [ 86.516543][ T28] audit: type=1326 audit(1755702525.546:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.596509][ T28] audit: type=1326 audit(1755702525.546:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.669801][ T28] audit: type=1326 audit(1755702525.546:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x50000 [ 86.986587][ T6268] loop0: detected capacity change from 0 to 32768 [ 87.016072][ T6268] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.175 (6268) [ 87.105506][ T6268] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 87.137520][ T6268] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 87.164457][ T6268] BTRFS info (device loop0): force zlib compression, level 3 [ 87.187974][ T6268] BTRFS info (device loop0): force clearing of disk cache [ 87.227020][ T6268] BTRFS info (device loop0): setting nodatasum [ 87.233246][ T6268] BTRFS info (device loop0): doing ref verification [ 87.260574][ T6268] BTRFS info (device loop0): allowing degraded mounts [ 87.301383][ T6268] BTRFS info (device loop0): using free space tree [ 87.491211][ T6310] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 87.546522][ T6268] BTRFS info (device loop0): enabling ssd optimizations [ 87.554826][ T6268] BTRFS info (device loop0): auto enabling async discard [ 87.642638][ T6268] BTRFS info (device loop0): rebuilding free space tree [ 87.943494][ T5784] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 89.325401][ T6363] netlink: 'syz.1.213': attribute type 21 has an invalid length. [ 89.334728][ T6363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.213'. [ 89.346598][ T6363] netlink: 'syz.1.213': attribute type 4 has an invalid length. [ 89.357933][ T6363] netlink: 3 bytes leftover after parsing attributes in process `syz.1.213'. [ 89.526584][ T786] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.748502][ T786] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 89.776628][ T786] usb 3-1: config 0 has no interface number 0 [ 89.782778][ T786] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 89.812237][ T786] usb 3-1: config 0 interface 110 has no altsetting 0 [ 89.834704][ T786] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 89.856445][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.877385][ T786] usb 3-1: Product: syz [ 89.881586][ T786] usb 3-1: Manufacturer: syz [ 89.886191][ T786] usb 3-1: SerialNumber: syz [ 89.923740][ T786] usb 3-1: config 0 descriptor?? [ 89.937013][ T6359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.992509][ T6389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 90.176346][ T6359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.213245][ T786] cdc_subset: probe of 3-1:0.110 failed with error -22 [ 90.411342][ T6382] loop1: detected capacity change from 0 to 40427 [ 90.427175][ T6382] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 90.434939][ T6382] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.472118][ T5873] usb 3-1: USB disconnect, device number 3 [ 90.517580][ T6382] F2FS-fs (loop1): invalid crc value [ 90.570266][ T6382] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.686509][ T6382] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.704048][ T6382] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.710138][ T6409] loop3: detected capacity change from 0 to 2048 [ 90.739048][ T6382] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 90.792011][ T6409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.046915][ T6420] IPVS: set_ctl: invalid protocol: 41 172.30.0.1:65534 [ 91.181444][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'. [ 92.177232][ T6468] netlink: 'syz.3.260': attribute type 11 has an invalid length. [ 92.195995][ T6468] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.260'. [ 92.566198][ T6449] loop0: detected capacity change from 0 to 32768 [ 92.592357][ T6449] XFS: noikeep mount option is deprecated. [ 92.606739][ T6449] XFS: ikeep mount option is deprecated. [ 92.707366][ T6449] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.855287][ T6496] /dev/nullb0: Can't open blockdev [ 92.878784][ T6449] XFS (loop0): Ending clean mount [ 92.976144][ T6449] XFS: noikeep mount option is deprecated. [ 93.143012][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.463743][ T6491] loop3: detected capacity change from 0 to 32768 [ 93.506100][ T6491] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.270 (6491) [ 93.564906][ T6491] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 93.590313][ T6491] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 93.633348][ T6491] BTRFS info (device loop3): turning off barriers [ 93.646753][ T6491] BTRFS info (device loop3): enabling ssd optimizations [ 93.653732][ T6491] BTRFS info (device loop3): using spread ssd allocation scheme [ 93.688697][ T6491] BTRFS info (device loop3): enabling auto defrag [ 93.695177][ T6491] BTRFS info (device loop3): not using ssd optimizations [ 93.736463][ T6491] BTRFS info (device loop3): not using spread ssd allocation scheme [ 93.744533][ T6491] BTRFS info (device loop3): ignoring data csums [ 93.763731][ T6482] loop2: detected capacity change from 0 to 32768 [ 93.785640][ T6491] BTRFS info (device loop3): force zlib compression, level 3 [ 93.808570][ T6491] BTRFS info (device loop3): enabling ssd optimizations [ 93.815565][ T6491] BTRFS info (device loop3): using spread ssd allocation scheme [ 93.849135][ T6482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.867046][ T6491] BTRFS info (device loop3): using free space tree [ 93.876870][ T6482] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.010101][ T6482] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 94.098001][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 94.115579][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.197562][ T6491] BTRFS error (device loop3: state MC): ignoredatacsums must be used with ro mount option [ 94.267499][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms [ 94.284095][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 94.320656][ T6482] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.411016][ T5785] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 94.417510][ T6482] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 94.505939][ T6482] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 94.505939][ T6482] inode = 12 2341 [ 94.505939][ T6482] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 94.589573][ T6482] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 94.630731][ T6482] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6482 [syz.2.268] __gfs2_lookup+0x90/0x270 [ 94.705040][ T6482] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 94.736609][ T6482] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 94.744829][ T6482] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 94.796443][ T6482] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 94.803724][ T6482] gfs2: fsid=syz:syz.0: File system withdrawn [ 94.856296][ T6482] CPU: 0 PID: 6482 Comm: syz.2.268 Not tainted 6.6.102-syzkaller #0 [ 94.860637][ T6547] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 94.864315][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.864330][ T6482] Call Trace: [ 94.864339][ T6482] [ 94.864359][ T6482] dump_stack_lvl+0x16c/0x230 [ 94.864386][ T6482] ? kobject_uevent_env+0x363/0x8c0 [ 94.864410][ T6482] ? show_regs_print_info+0x20/0x20 [ 94.864428][ T6482] ? load_image+0x3b0/0x3b0 [ 94.864449][ T6482] ? kobject_uevent_env+0x363/0x8c0 [ 94.864476][ T6482] gfs2_withdraw+0xe50/0x13b0 [ 94.864508][ T6482] ? gfs2_lm+0x220/0x220 [ 94.864528][ T6482] ? load_image+0x3b0/0x3b0 [ 94.926564][ T6482] ? gfs2_consist_inode_i+0xf5/0x110 [ 94.931883][ T6482] gfs2_dirent_scan+0x525/0x650 [ 94.936759][ T6482] ? gfs2_dirent_search+0x7e0/0x7e0 [ 94.941978][ T6482] ? gfs2_dirent_search+0x7e0/0x7e0 [ 94.947197][ T6482] gfs2_dirent_search+0x2e1/0x7e0 [ 94.952246][ T6482] ? gfs2_permission+0x370/0x430 [ 94.957205][ T6482] ? __might_sleep+0xe0/0xe0 [ 94.961814][ T6482] ? gfs2_dir_search+0x220/0x220 [ 94.966769][ T6482] ? gfs2_lookupi+0x5a0/0x5a0 [ 94.971464][ T6482] ? do_raw_spin_lock+0x121/0x2c0 [ 94.976524][ T6482] gfs2_dir_search+0x4d/0x220 [ 94.981227][ T6482] gfs2_lookupi+0x3d9/0x5a0 [ 94.985759][ T6482] ? gfs2_lookup_meta+0x170/0x170 [ 94.990811][ T6482] ? __gfs2_lookup+0x90/0x270 [ 94.995522][ T6482] __gfs2_lookup+0x90/0x270 [ 95.000042][ T6482] ? __lock_acquire+0x7c80/0x7c80 [ 95.005087][ T6482] ? gfs2_atomic_open+0x220/0x220 [ 95.010142][ T6482] ? do_raw_spin_unlock+0x121/0x230 [ 95.015448][ T6482] ? _raw_spin_unlock+0x28/0x40 [ 95.020320][ T6482] ? d_alloc+0x173/0x1b0 [ 95.024586][ T6482] lookup_one_qstr_excl+0x112/0x250 [ 95.029809][ T6482] filename_create+0x222/0x460 [ 95.034604][ T6482] ? kern_path_create+0x50/0x50 [ 95.039483][ T6482] ? __virt_addr_valid+0x469/0x540 [ 95.044620][ T6482] do_mkdirat+0xa1/0x440 [ 95.048881][ T6482] ? vfs_mkdir+0x440/0x440 [ 95.053325][ T6482] ? getname_flags+0x20a/0x500 [ 95.058138][ T6482] __x64_sys_mkdir+0x6e/0x80 [ 95.062744][ T6482] do_syscall_64+0x55/0xb0 [ 95.067180][ T6482] ? clear_bhb_loop+0x40/0x90 [ 95.071873][ T6482] ? clear_bhb_loop+0x40/0x90 [ 95.076566][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.082476][ T6482] RIP: 0033:0x7f366c98ebe9 [ 95.086918][ T6482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.106540][ T6482] RSP: 002b:00007f366d71e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 95.114976][ T6482] RAX: ffffffffffffffda RBX: 00007f366cbb5fa0 RCX: 00007f366c98ebe9 [ 95.122964][ T6482] RDX: 0000000000000000 RSI: 00000000000001ad RDI: 0000200000000180 [ 95.130978][ T6482] RBP: 00007f366ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.138960][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.146941][ T6482] R13: 00007f366cbb6038 R14: 00007f366cbb5fa0 R15: 00007ffc0b3039c8 [ 95.154940][ T6482] [ 95.177922][ T6554] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 95.346774][ T6541] loop1: detected capacity change from 0 to 32768 [ 95.388730][ T6541] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.285 (6541) [ 95.538077][ T6541] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 95.577794][ T6541] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 95.608091][ T6541] BTRFS info (device loop1): force zlib compression, level 3 [ 95.630069][ T6541] BTRFS info (device loop1): force clearing of disk cache [ 95.652283][ T6541] BTRFS info (device loop1): setting nodatasum [ 95.672084][ T6541] BTRFS info (device loop1): doing ref verification [ 95.696493][ T6541] BTRFS info (device loop1): allowing degraded mounts [ 95.723671][ T6541] BTRFS info (device loop1): using free space tree [ 95.840139][ T6541] BTRFS info (device loop1): enabling ssd optimizations [ 95.879680][ T6541] BTRFS info (device loop1): auto enabling async discard [ 95.954798][ T6541] BTRFS info (device loop1): rebuilding free space tree [ 96.265682][ T5786] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 96.479713][ T5981] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop1 scanned by udevd (5981) [ 96.618705][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 96.628204][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 97.385423][ T6630] netlink: 260 bytes leftover after parsing attributes in process `syz.3.319'. [ 97.548910][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.753314][ T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 97.790978][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.818434][ T23] usb 2-1: config 0 descriptor?? [ 97.929774][ T6650] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 98.043922][ T23] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 98.081243][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 98.244777][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 98.302005][ T23] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 98.339057][ T23] [drm] Initialized udl on minor 2 [ 98.366684][ T23] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 98.400876][ T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 98.422154][ T27] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 98.445642][ T23] usb 2-1: USB disconnect, device number 5 [ 98.453421][ T27] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 98.959896][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 99.565623][ T6684] loop2: detected capacity change from 0 to 32768 [ 99.592231][ T6684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.346 (6684) [ 99.646816][ T6684] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.659812][ T6684] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 99.669733][ T6684] BTRFS info (device loop2): setting nodatacow, compression disabled [ 99.679340][ T6684] BTRFS info (device loop2): setting datasum, datacow enabled [ 99.705782][ T6684] BTRFS info (device loop2): enabling ssd optimizations [ 99.732307][ T6684] BTRFS info (device loop2): turning off barriers [ 99.763401][ T6684] BTRFS info (device loop2): turning on barriers [ 99.792091][ T6684] BTRFS info (device loop2): doing ref verification [ 99.805350][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.813000][ T6684] BTRFS info (device loop2): force clearing of disk cache [ 99.813054][ T6684] BTRFS info (device loop2): turning on async discard [ 99.813073][ T6684] BTRFS info (device loop2): disabling tree log [ 99.813087][ T6684] BTRFS info (device loop2): using free space tree [ 100.059827][ T23] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.070364][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.081725][ T5787] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.087905][ T23] usb 1-1: config 0 descriptor?? [ 100.329212][ T23] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 100.351615][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 100.420364][ T6736] netlink: 136 bytes leftover after parsing attributes in process `syz.1.365'. [ 100.421371][ T6710] loop3: detected capacity change from 0 to 32768 [ 100.444419][ T6736] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 100.495123][ T6710] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.536510][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 100.613379][ T23] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 100.654371][ T23] [drm] Initialized udl on minor 2 [ 100.676591][ T23] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 100.709104][ T23] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 100.758016][ T5872] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 100.771530][ T23] usb 1-1: USB disconnect, device number 2 [ 100.783694][ T5872] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 100.990000][ T6710] XFS (loop3): Ending clean mount [ 101.012387][ T6757] team0: entered promiscuous mode [ 101.025016][ T6757] team_slave_0: entered promiscuous mode [ 101.041526][ T6757] team_slave_1: entered promiscuous mode [ 101.087631][ T6757] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 101.111044][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.280133][ T6763] loop1: detected capacity change from 0 to 256 [ 101.321680][ T6762] sp0: Synchronizing with TNC [ 101.578720][ T6767] loop0: detected capacity change from 0 to 1024 [ 101.623738][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.377'. [ 101.649990][ T6767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.880829][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.245293][ T6799] netlink: 'syz.1.388': attribute type 6 has an invalid length. [ 102.274993][ T6798] sp0: Synchronizing with TNC [ 102.386609][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.600807][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.623125][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.646999][ T9] usb 3-1: config 0 descriptor?? [ 102.885264][ T9] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 102.905937][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 103.087029][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 103.129693][ T9] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 103.147482][ T9] [drm] Initialized udl on minor 2 [ 103.153466][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.165685][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 103.181611][ T5831] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.195001][ T9] usb 3-1: USB disconnect, device number 4 [ 103.207176][ T5831] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.225485][ T5831] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 103.400859][ T6829] sp0: Synchronizing with TNC [ 103.414046][ T6834] netlink: 996 bytes leftover after parsing attributes in process `syz.0.411'. [ 104.079577][ T6832] loop1: detected capacity change from 0 to 32768 [ 104.118504][ T6832] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.162866][ T6862] sp0: Synchronizing with TNC [ 104.488263][ T6832] XFS (loop1): Ending clean mount [ 104.613818][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.717029][ T6877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.422'. [ 104.770400][ T6880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.075128][ T6891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.488457][ T6907] program syz.3.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.721488][ T28] kauditd_printk_skb: 2799 callbacks suppressed [ 105.721502][ T28] audit: type=1326 audit(1755702545.116:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.2.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f366c98ebe9 code=0x0 [ 105.804537][ T28] audit: type=1326 audit(1755702545.126:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5578ebe9 code=0x7ffc0000 [ 105.847411][ T28] audit: type=1326 audit(1755702545.126:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5578ebe9 code=0x7ffc0000 [ 105.903527][ T28] audit: type=1326 audit(1755702545.126:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f8e5578ebe9 code=0x7ffc0000 [ 105.946708][ T5873] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.971488][ T28] audit: type=1326 audit(1755702545.126:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5578ebe9 code=0x7ffc0000 [ 106.013081][ T6925] loop0: detected capacity change from 0 to 4096 [ 106.080963][ T6925] ntfs: volume version 3.1. [ 106.156537][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 106.164774][ T5873] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 106.176696][ T5873] usb 4-1: config 0 has no interface number 0 [ 106.191202][ T5873] usb 4-1: config 0 interface 108 has no altsetting 0 [ 106.217863][ T5873] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 106.231533][ T6937] SET target dimension over the limit! [ 106.238417][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.266486][ T5873] usb 4-1: Product: syz [ 106.270731][ T5873] usb 4-1: Manufacturer: syz [ 106.279933][ T5873] usb 4-1: SerialNumber: syz [ 106.299728][ T5873] usb 4-1: config 0 descriptor?? [ 106.315789][ T5873] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 106.658099][ T6951] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 106.750155][ T5873] usb 4-1: USB disconnect, device number 3 [ 106.786152][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 106.806603][ T6955] tc_dump_action: action bad kind [ 107.218743][ T6972] netlink: 'syz.0.469': attribute type 21 has an invalid length. [ 107.414027][ T6978] loop2: detected capacity change from 0 to 4096 [ 107.447466][ T6978] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 107.518915][ T6978] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 107.587235][ T6978] ntfs3: loop2: Failed to load $Extend (-22). [ 107.593379][ T6978] ntfs3: loop2: Failed to initialize $Extend. [ 108.141234][ T7008] loop0: detected capacity change from 0 to 16 [ 108.148078][ T7006] binder: 7005:7006 ioctl c018620c 200000000100 returned -22 [ 108.179385][ T7008] erofs: (device loop0): mounted with root inode @ nid 36. [ 108.231561][ T7008] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 108.778468][ T6996] loop3: detected capacity change from 0 to 32768 [ 109.105207][ T28] audit: type=1326 audit(1755702548.496:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f858ebe9 code=0x7ffc0000 [ 109.167883][ T28] audit: type=1326 audit(1755702548.496:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f858ebe9 code=0x7ffc0000 [ 109.240393][ T28] audit: type=1326 audit(1755702548.516:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f17f858ebe9 code=0x7ffc0000 [ 109.288075][ T7048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.502'. [ 109.302030][ T7048] unsupported nlmsg_type 40 [ 109.308351][ T28] audit: type=1326 audit(1755702548.516:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f858ebe9 code=0x7ffc0000 [ 109.393895][ T28] audit: type=1326 audit(1755702548.516:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f858ebe9 code=0x7ffc0000 [ 110.124416][ T7077] overlayfs: empty lowerdir [ 110.283875][ T7083] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 110.302157][ T7054] loop3: detected capacity change from 0 to 32768 [ 110.330917][ T7054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.504 (7054) [ 110.372629][ T7054] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.384296][ T7054] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 110.410655][ T7054] BTRFS info (device loop3): setting nodatacow, compression disabled [ 110.444468][ T7089] loop2: detected capacity change from 0 to 512 [ 110.456096][ T7054] BTRFS info (device loop3): setting datasum, datacow enabled [ 110.476998][ T7054] BTRFS info (device loop3): enabling ssd optimizations [ 110.500890][ T7054] BTRFS info (device loop3): turning off barriers [ 110.517159][ T7054] BTRFS info (device loop3): turning on barriers [ 110.537146][ T7054] BTRFS info (device loop3): doing ref verification [ 110.549638][ T7054] BTRFS info (device loop3): force clearing of disk cache [ 110.554942][ T7089] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 110.557056][ T7054] BTRFS info (device loop3): turning on async discard [ 110.572259][ T7054] BTRFS info (device loop3): disabling tree log [ 110.578768][ T7054] BTRFS info (device loop3): using free space tree [ 110.583784][ T7089] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 110.644486][ T7089] EXT4-fs (loop2): 1 truncate cleaned up [ 110.687718][ T7089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.787478][ T7089] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 110.843834][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.523'. [ 110.860177][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.523'. [ 110.878767][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.057665][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.101954][ T7121] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 111.313874][ T28] audit: type=1326 audit(1755702550.706:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x7ffc0000 [ 111.401257][ T28] audit: type=1326 audit(1755702550.706:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x7ffc0000 [ 111.477071][ T28] audit: type=1326 audit(1755702550.706:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fba9098ebe9 code=0x7ffc0000 [ 111.565214][ T28] audit: type=1326 audit(1755702550.706:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x7ffc0000 [ 111.629174][ T28] audit: type=1326 audit(1755702550.706:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9098ebe9 code=0x7ffc0000 [ 111.689093][ T7138] loop3: detected capacity change from 0 to 1024 [ 111.876247][ T7145] loop2: detected capacity change from 0 to 1024 [ 111.961031][ T7145] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.035469][ T7145] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 112.064865][ T7145] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.117202][ T7145] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.539: Invalid inode table block 0 in block_group 0 [ 112.201376][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 112.211961][ T7145] EXT4-fs (loop2): Remounting filesystem read-only [ 112.248329][ T7145] Quota error (device loop2): write_blk: dquota write failed [ 112.261358][ T7145] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 112.275439][ T7145] EXT4-fs (loop2): 1 truncate cleaned up [ 112.289300][ T7145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.413499][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.423865][ T7165] ./file0: Can't open blockdev [ 112.876815][ T7186] loop2: detected capacity change from 0 to 1024 [ 112.886849][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.096474][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 113.113653][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 113.131704][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 113.150517][ T5873] usb 1-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 113.170720][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.189656][ T5873] usb 1-1: Product: syz [ 113.193859][ T5873] usb 1-1: Manufacturer: syz [ 113.206483][ T5873] usb 1-1: SerialNumber: syz [ 113.229511][ T5873] usb 1-1: config 0 descriptor?? [ 113.314868][ T7196] netlink: 1088 bytes leftover after parsing attributes in process `syz.3.562'. [ 113.458009][ T7185] loop1: detected capacity change from 0 to 40427 [ 113.492167][ T7185] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x7ffff [ 113.520371][ T7202] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 113.528913][ T7185] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7698c [ 113.551580][ T5873] usb 1-1: USB disconnect, device number 3 [ 113.598704][ T7185] F2FS-fs (loop1): invalid crc value [ 113.608969][ T7185] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 113.631230][ T7185] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.696076][ T7185] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 113.723487][ T7185] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.783491][ T7185] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 113.878698][ C0] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 113.889250][ C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 113.927325][ T5786] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint [ 114.283589][ T7223] loop1: detected capacity change from 0 to 256 [ 114.294554][ T7219] loop3: detected capacity change from 0 to 4096 [ 114.312063][ T7219] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 114.341114][ T7223] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 114.512182][ T7223] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 114.592827][ T7223] exFAT-fs (loop1): Filesystem has been set read-only [ 114.810166][ T7217] loop2: detected capacity change from 0 to 32768 [ 114.853522][ T7217] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.571 (7217) [ 114.912546][ T7217] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 114.925527][ T7217] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 114.947642][ T7217] BTRFS info (device loop2): turning off barriers [ 114.976586][ T7217] BTRFS info (device loop2): enabling ssd optimizations [ 114.984280][ T7217] BTRFS info (device loop2): using spread ssd allocation scheme [ 115.000582][ T7217] BTRFS info (device loop2): enabling auto defrag [ 115.022573][ T7217] BTRFS info (device loop2): not using ssd optimizations [ 115.046588][ T7217] BTRFS info (device loop2): not using spread ssd allocation scheme [ 115.056505][ T7217] BTRFS info (device loop2): ignoring data csums [ 115.062903][ T7217] BTRFS info (device loop2): force zlib compression, level 3 [ 115.119115][ T7217] BTRFS info (device loop2): enabling ssd optimizations [ 115.137225][ T7217] BTRFS info (device loop2): using spread ssd allocation scheme [ 115.172592][ T7217] BTRFS info (device loop2): using free space tree [ 115.374172][ T7263] loop3: detected capacity change from 0 to 4096 [ 115.391912][ T7263] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 115.500797][ T7217] BTRFS error (device loop2: state MC): ignoredatacsums must be used with ro mount option [ 115.550839][ T7263] ntfs3: loop3: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 115.564123][ T7263] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 115.627548][ T5787] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 115.702583][ T12] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22. [ 116.135655][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 116.236961][ T7283] libceph: resolve '. [ 116.236961][ T7283] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 116.236961][ T7283] ' (ret=-3): failed [ 116.539005][ T7269] loop1: detected capacity change from 0 to 32768 [ 116.567031][ T7269] XFS: noikeep mount option is deprecated. [ 116.579107][ T7269] XFS: ikeep mount option is deprecated. [ 116.599206][ T7290] SET target dimension over the limit! [ 116.614545][ T7269] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.888466][ T7269] XFS (loop1): Ending clean mount [ 116.912518][ T7277] loop0: detected capacity change from 0 to 32768 [ 116.921854][ T7277] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.591 (7277) [ 116.950139][ T7277] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.004638][ T7277] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 117.024860][ T7269] XFS: noikeep mount option is deprecated. [ 117.053085][ T7277] BTRFS info (device loop0): setting nodatacow, compression disabled [ 117.080086][ T7277] BTRFS info (device loop0): setting datasum, datacow enabled [ 117.108925][ T7277] BTRFS info (device loop0): enabling ssd optimizations [ 117.115932][ T7277] BTRFS info (device loop0): turning off barriers [ 117.170228][ T7277] BTRFS info (device loop0): turning on barriers [ 117.189554][ T7277] BTRFS info (device loop0): doing ref verification [ 117.196300][ T7277] BTRFS info (device loop0): force clearing of disk cache [ 117.253334][ T7277] BTRFS info (device loop0): turning on async discard [ 117.266457][ T7277] BTRFS info (device loop0): disabling tree log [ 117.267713][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.286532][ T7277] BTRFS info (device loop0): using free space tree [ 117.696934][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.714770][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.917681][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.936455][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.972965][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.996454][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 118.021164][ T23] usb 4-1: SerialNumber: syz [ 118.148453][ T7346] Unsupported ieee802154 address type: 0 [ 118.235828][ T7350] netlink: zone id is out of range [ 118.270475][ T23] usb 4-1: 0:2 : does not exist [ 118.307469][ T7350] netlink: set zone limit has 4 unknown bytes [ 118.308348][ T23] usb 4-1: USB disconnect, device number 4 [ 118.383205][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.556471][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.736645][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 118.743969][ T27] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 118.752464][ T27] usb 2-1: config 0 has no interface number 0 [ 118.758631][ T27] usb 2-1: config 0 interface 108 has no altsetting 0 [ 118.768234][ T27] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 118.777369][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.785375][ T27] usb 2-1: Product: syz [ 118.789658][ T27] usb 2-1: Manufacturer: syz [ 118.794266][ T27] usb 2-1: SerialNumber: syz [ 118.801353][ T27] usb 2-1: config 0 descriptor?? [ 118.822554][ T27] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 119.083372][ T27] usb 2-1: USB disconnect, device number 6 [ 119.854103][ T7371] veth3: entered allmulticast mode [ 120.120271][ T7381] loop0: detected capacity change from 0 to 2048 [ 120.159457][ T7381] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504 [ 120.194005][ T7381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.217975][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 120.309971][ T7369] loop1: detected capacity change from 0 to 32768 [ 120.334669][ T7369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.622 (7369) [ 120.361277][ T7369] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.452689][ T7369] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 120.473585][ T7369] BTRFS info (device loop1): setting nodatacow, compression disabled [ 120.496565][ T7369] BTRFS info (device loop1): setting datasum, datacow enabled [ 120.510473][ T7369] BTRFS info (device loop1): enabling ssd optimizations [ 120.534034][ T7369] BTRFS info (device loop1): turning off barriers [ 120.544162][ T7369] BTRFS info (device loop1): turning on barriers [ 120.571346][ T7369] BTRFS info (device loop1): doing ref verification [ 120.580136][ T7395] tmpfs: User quota block hardlimit too large. [ 120.601902][ T7369] BTRFS info (device loop1): force clearing of disk cache [ 120.610097][ T7369] BTRFS info (device loop1): turning on async discard [ 120.621963][ T7369] BTRFS info (device loop1): disabling tree log [ 120.640852][ T7369] BTRFS info (device loop1): using free space tree [ 120.749970][ T7401] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 121.050237][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.247982][ T7431] xt_limit: Overflow, try lower: 65536/2147483648 [ 121.436677][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.631565][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.647430][ T27] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 121.665837][ T27] usb 4-1: config 2 has no interface number 0 [ 121.697033][ T27] usb 4-1: config 2 interface 99 has no altsetting 0 [ 121.716245][ T27] usb 4-1: New USB device found, idVendor=0840, idProduct=0082, bcdDevice= 0.01 [ 121.735052][ T7447] loop1: detected capacity change from 0 to 64 [ 121.743709][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.756335][ T27] usb 4-1: Product: syz [ 121.760591][ T27] usb 4-1: Manufacturer: syz [ 121.779296][ T27] usb 4-1: SerialNumber: syz [ 122.297503][ T27] usb-storage 4-1:2.99: USB Mass Storage device detected [ 122.320419][ T27] usb-storage 4-1:2.99: Quirks match for vid 0840 pid 0082: 10 [ 122.394693][ T27] usb 4-1: USB disconnect, device number 5 [ 122.563125][ T7466] netlink: 996 bytes leftover after parsing attributes in process `syz.1.664'. [ 122.569790][ T7451] loop0: detected capacity change from 0 to 32768 [ 122.604839][ T7451] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 122.643612][ T7451] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 122.656326][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 122.694615][ T7451] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 122.744323][ T5831] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 122.751182][ T5831] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 122.858089][ T5831] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 122.866992][ T5831] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.872262][ T7451] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 122.924054][ T7451] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 122.933843][ T7451] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 122.933843][ T7451] inode = 12 2341 [ 122.933843][ T7451] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 122.986813][ T7478] cgroup: noprefix used incorrectly [ 122.995825][ T7451] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 123.029073][ T7451] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:7451 [syz.0.658] __gfs2_lookup+0x90/0x270 [ 123.056558][ T7451] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 123.109221][ T7451] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 123.142436][ T7451] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 123.187579][ T7451] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 123.195452][ T7451] gfs2: fsid=syz:syz.0: File system withdrawn [ 123.221149][ T7485] netlink: 'syz.2.672': attribute type 11 has an invalid length. [ 123.230262][ T7451] CPU: 1 PID: 7451 Comm: syz.0.658 Not tainted 6.6.102-syzkaller #0 [ 123.238286][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.248362][ T7451] Call Trace: [ 123.251638][ T7451] [ 123.254579][ T7451] dump_stack_lvl+0x16c/0x230 [ 123.259260][ T7451] ? kobject_uevent_env+0x363/0x8c0 [ 123.264455][ T7451] ? show_regs_print_info+0x20/0x20 [ 123.269647][ T7451] ? load_image+0x3b0/0x3b0 [ 123.274152][ T7451] ? kobject_uevent_env+0x363/0x8c0 [ 123.279357][ T7451] gfs2_withdraw+0xe50/0x13b0 [ 123.284037][ T7451] ? gfs2_lm+0x220/0x220 [ 123.288304][ T7451] ? load_image+0x3b0/0x3b0 [ 123.292812][ T7451] ? gfs2_consist_inode_i+0xf5/0x110 [ 123.298093][ T7451] gfs2_dirent_scan+0x525/0x650 [ 123.302938][ T7451] ? gfs2_dirent_search+0x7e0/0x7e0 [ 123.308125][ T7451] ? gfs2_dirent_search+0x7e0/0x7e0 [ 123.313315][ T7451] gfs2_dirent_search+0x2e1/0x7e0 [ 123.318335][ T7451] ? gfs2_permission+0x370/0x430 [ 123.323269][ T7451] ? __might_sleep+0xe0/0xe0 [ 123.327850][ T7451] ? gfs2_dir_search+0x220/0x220 [ 123.332774][ T7451] ? gfs2_lookupi+0x5a0/0x5a0 [ 123.337440][ T7451] ? do_raw_spin_lock+0x121/0x2c0 [ 123.342459][ T7451] gfs2_dir_search+0x4d/0x220 [ 123.347126][ T7451] gfs2_lookupi+0x3d9/0x5a0 [ 123.351625][ T7451] ? gfs2_lookup_meta+0x170/0x170 [ 123.356642][ T7451] ? __gfs2_lookup+0x90/0x270 [ 123.361316][ T7451] __gfs2_lookup+0x90/0x270 [ 123.365811][ T7451] ? __lock_acquire+0x7c80/0x7c80 [ 123.370825][ T7451] ? gfs2_atomic_open+0x220/0x220 [ 123.375860][ T7451] ? do_raw_spin_unlock+0x121/0x230 [ 123.381073][ T7451] ? _raw_spin_unlock+0x28/0x40 [ 123.385932][ T7451] ? d_alloc+0x173/0x1b0 [ 123.390184][ T7451] lookup_one_qstr_excl+0x112/0x250 [ 123.395387][ T7451] filename_create+0x222/0x460 [ 123.400152][ T7451] ? kern_path_create+0x50/0x50 [ 123.405345][ T7451] ? __virt_addr_valid+0x469/0x540 [ 123.410460][ T7451] do_mkdirat+0xa1/0x440 [ 123.414695][ T7451] ? vfs_mkdir+0x440/0x440 [ 123.419103][ T7451] ? getname_flags+0x20a/0x500 [ 123.423866][ T7451] __x64_sys_mkdir+0x6e/0x80 [ 123.428451][ T7451] do_syscall_64+0x55/0xb0 [ 123.432856][ T7451] ? clear_bhb_loop+0x40/0x90 [ 123.437527][ T7451] ? clear_bhb_loop+0x40/0x90 [ 123.442198][ T7451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.448085][ T7451] RIP: 0033:0x7f8e5578ebe9 [ 123.452490][ T7451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.472090][ T7451] RSP: 002b:00007f8e565cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 123.480493][ T7451] RAX: ffffffffffffffda RBX: 00007f8e559b5fa0 RCX: 00007f8e5578ebe9 [ 123.488470][ T7451] RDX: 0000000000000000 RSI: 00000000000001ad RDI: 0000200000000180 [ 123.496436][ T7451] RBP: 00007f8e55811e19 R08: 0000000000000000 R09: 0000000000000000 [ 123.504400][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.512430][ T7451] R13: 00007f8e559b6038 R14: 00007f8e559b5fa0 R15: 00007fff12512158 [ 123.520504][ T7451] [ 123.529554][ T7487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.674'. [ 123.538590][ T7485] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.672'. [ 123.547848][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 123.566469][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'. [ 123.939913][ T7501] loop2: detected capacity change from 0 to 256 [ 124.060196][ T7501] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 124.413606][ T7520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.691'. [ 124.436263][ T7520] netlink: 43 bytes leftover after parsing attributes in process `syz.0.691'. [ 124.472496][ T7520] netlink: 'syz.0.691': attribute type 5 has an invalid length. [ 124.499021][ T7520] netlink: 43 bytes leftover after parsing attributes in process `syz.0.691'. [ 124.580536][ T7529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.588330][ T7529] IPv6: NLM_F_CREATE should be set when creating new route [ 124.595615][ T7529] IPv6: NLM_F_CREATE should be set when creating new route [ 125.614077][ T7577] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 125.656908][ T7579] loop1: detected capacity change from 0 to 1764 [ 125.714076][ T7573] loop3: detected capacity change from 0 to 4096 [ 125.728474][ T7577] veth0_vlan: left promiscuous mode [ 125.752700][ T7579] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 125.755611][ T7577] veth0_vlan: entered promiscuous mode [ 125.773204][ T7573] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 125.806279][ T7577] team0: Device veth0_vlan failed to register rx_handler [ 126.482053][ T7593] loop2: detected capacity change from 0 to 8192 [ 126.547792][ T7593] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.569254][ T7593] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 126.580260][ T7593] REISERFS (device loop2): using ordered data mode [ 126.587007][ T7593] reiserfs: using flush barriers [ 126.595096][ T7593] REISERFS warning (device loop2): journal-1393 journal_init: journal 1st super block is invalid: 1st reserved block 130, but actual 1st block is 18 [ 126.928004][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 127.088208][ T7624] ubi0: attaching mtd0 [ 127.092670][ T7624] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 127.296726][ T5799] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 127.302776][ T7632] netlink: 'syz.0.739': attribute type 5 has an invalid length. [ 127.377182][ T7632] ip6erspan0: entered promiscuous mode [ 127.427244][ T7637] fuse: Bad value for 'rootmode' [ 127.717143][ T7651] __nla_validate_parse: 2 callbacks suppressed [ 127.717158][ T7651] netlink: 2 bytes leftover after parsing attributes in process `syz.2.750'. [ 127.883732][ T7659] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 128.154581][ T7665] loop1: detected capacity change from 0 to 4096 [ 128.170088][ T7665] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.289400][ T7665] ntfs: volume version 3.1. [ 128.433469][ T7665] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.516545][ T7665] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 128.588621][ T7665] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page. [ 128.607232][ T7665] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 128.632805][ T7665] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -5. [ 129.013195][ T7699] loop1: detected capacity change from 0 to 2048 [ 129.039494][ T7699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.197655][ T5872] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.217144][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 129.419879][ T5872] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 129.432415][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.449985][ T5872] usb 4-1: Product: syz [ 129.459328][ T5872] usb 4-1: Manufacturer: syz [ 129.469506][ T5872] usb 4-1: SerialNumber: syz [ 129.485711][ T5872] usb 4-1: config 0 descriptor?? [ 129.502130][ T5872] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 129.809750][ T7725] vivid-004: disconnect [ 129.815805][ T7724] vivid-004: reconnect [ 129.831672][ T7727] netlink: 156 bytes leftover after parsing attributes in process `syz.0.785'. [ 129.918707][ T5872] gspca_sunplus: reg_r err -71 [ 129.933039][ T5872] sunplus: probe of 4-1:0.0 failed with error -71 [ 129.952185][ T7711] loop1: detected capacity change from 0 to 32768 [ 129.974839][ T5872] usb 4-1: USB disconnect, device number 6 [ 130.020675][ T7711] [ 130.020675][ T7711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.020675][ T7711] [ 130.103367][ T7711] ERROR: (device loop1): ea_get: invalid ea.flag [ 130.103367][ T7711] [ 130.121484][ T7711] ERROR: (device loop1): remounting filesystem as read-only [ 130.165668][ T7734] loop0: detected capacity change from 0 to 1024 [ 131.036494][ T7762] ERROR: device name not specified. [ 131.205463][ T7742] loop0: detected capacity change from 0 to 32768 [ 131.266569][ T7742] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.792 (7742) [ 131.295081][ T7774] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.350668][ T7742] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 131.366601][ T7742] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 131.407094][ T7742] BTRFS info (device loop0): turning off barriers [ 131.416736][ T7742] BTRFS info (device loop0): enabling ssd optimizations [ 131.423759][ T7742] BTRFS info (device loop0): using spread ssd allocation scheme [ 131.462355][ T7742] BTRFS info (device loop0): enabling auto defrag [ 131.492619][ T7742] BTRFS info (device loop0): not using ssd optimizations [ 131.526771][ T7742] BTRFS info (device loop0): not using spread ssd allocation scheme [ 131.546591][ T7742] BTRFS info (device loop0): ignoring data csums [ 131.553005][ T7742] BTRFS info (device loop0): force zlib compression, level 3 [ 131.606927][ T7742] BTRFS info (device loop0): enabling ssd optimizations [ 131.624945][ T7742] BTRFS info (device loop0): using spread ssd allocation scheme [ 131.656836][ T7742] BTRFS info (device loop0): using free space tree [ 131.682976][ T7785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.813'. [ 131.699533][ T28] audit: type=1400 audit(1755702571.086:2824): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7786 comm="syz.1.814" [ 131.885455][ T7806] loop1: detected capacity change from 0 to 256 [ 131.955739][ T7808] xt_policy: too many policy elements [ 132.029806][ T7742] BTRFS error (device loop0: state MC): ignoredatacsums must be used with ro mount option [ 132.193656][ T5784] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 132.362691][ T7817] loop2: detected capacity change from 0 to 512 [ 132.456656][ T7817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.526894][ T7817] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.799980][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.011241][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.017770][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.080226][ T7844] comedi comedi0: Minor 3 could not be opened [ 133.246717][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.434603][ T7853] comedi comedi3: board detection failed [ 133.453348][ T9] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 133.473009][ T9] usb 2-1: config 0 has no interface number 0 [ 133.486575][ T9] usb 2-1: too many endpoints for config 0 interface 194 altsetting 233: 59, using maximum allowed: 30 [ 133.499908][ T9] usb 2-1: config 0 interface 194 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 133.523558][ T9] usb 2-1: config 0 interface 194 has no altsetting 0 [ 133.548565][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 133.576448][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.593949][ T9] usb 2-1: Product: syz [ 133.603315][ T9] usb 2-1: Manufacturer: syz [ 133.617583][ T9] usb 2-1: SerialNumber: syz [ 133.634205][ T9] usb 2-1: config 0 descriptor?? [ 133.722972][ T7863] loop3: detected capacity change from 0 to 64 [ 133.885359][ T9] peak_usb: probe of 2-1:0.194 failed with error 194 [ 133.895193][ T9] usb 2-1: USB disconnect, device number 7 [ 134.605433][ T7876] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 134.650843][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 134.707170][ T7876] veth0_vlan: left promiscuous mode [ 134.729215][ T7876] veth0_vlan: entered promiscuous mode [ 134.743983][ T7876] team0: Device veth0_vlan failed to register rx_handler [ 135.037670][ T5831] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.252564][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 135.262284][ T5831] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 135.275119][ T5831] usb 2-1: config 0 has no interface number 0 [ 135.284693][ T5831] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.306752][ T5831] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.328415][ T5831] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 135.336970][ T7903] loop3: detected capacity change from 0 to 128 [ 135.350092][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 135.363237][ T7903] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 135.370843][ T5831] usb 2-1: Product: syz [ 135.376270][ T5831] usb 2-1: SerialNumber: syz [ 135.376427][ T7903] FAT-fs (loop3): Filesystem has been set read-only [ 135.420902][ T5831] usb 2-1: config 0 descriptor?? [ 135.435090][ T5831] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 135.440811][ T7905] tmpfs: Bad value for 'nr_inodes' [ 135.462823][ T5831] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 135.696807][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 135.797167][ T7913] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 135.872737][ T7915] loop2: detected capacity change from 0 to 4096 [ 135.884022][ T7913] veth0_vlan: left promiscuous mode [ 135.913439][ T7913] veth0_vlan: entered promiscuous mode [ 135.919946][ T5872] usb 2-1: USB disconnect, device number 8 [ 135.940369][ T5872] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 135.957549][ T7913] team0: Device veth0_vlan failed to register rx_handler [ 136.022091][ T7918] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.253057][ T7924] loop0: detected capacity change from 0 to 1024 [ 136.798292][ T7944] veth3: entered allmulticast mode [ 136.852723][ T7943] loop0: detected capacity change from 0 to 4096 [ 136.921442][ T7947] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.968364][ T7946] loop2: detected capacity change from 0 to 512 [ 137.072884][ T7946] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 137.142377][ T7946] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 137.153388][ T7946] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.882: Failed to acquire dquot type 1 [ 137.203119][ T7946] EXT4-fs (loop2): 1 truncate cleaned up [ 137.213109][ T7946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.226872][ T7946] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.357664][ T7946] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 137.418002][ T7946] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 137.456650][ T7946] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.882: Failed to acquire dquot type 1 [ 137.478674][ T7962] loop3: detected capacity change from 0 to 4096 [ 137.517528][ T7962] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 137.611337][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.620871][ T7970] libceph: resolve '. [ 137.620871][ T7970] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 137.620871][ T7970] ' (ret=-3): failed [ 137.684024][ T7962] ntfs: volume version 3.1. [ 137.816905][ T7962] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 137.883330][ T7962] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 137.907865][ T7976] ieee802154 phy0 wpan0: encryption failed: -90 [ 137.948413][ T7962] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to map page. [ 137.967441][ T7978] loop1: detected capacity change from 0 to 8 [ 137.978097][ T7962] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 138.010305][ T7962] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -5. [ 138.054967][ T7978] SQUASHFS error: xz decompression failed, data probably corrupt [ 138.076933][ T7978] SQUASHFS error: Failed to read block 0x108: -5 [ 138.096681][ T7978] SQUASHFS error: Unable to read metadata cache entry [106] [ 138.104035][ T7978] SQUASHFS error: Unable to read inode 0x11f [ 138.393895][ T7988] veth3: entered allmulticast mode [ 138.586612][ T7995] libceph: resolve '. [ 138.586612][ T7995] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 138.586612][ T7995] ' (ret=-3): failed [ 138.607624][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.800504][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 138.836472][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 138.878974][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 138.910324][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 138.942167][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 138.971725][ T5872] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 139.007433][ T5872] usb 2-1: Manufacturer: syz [ 139.020871][ T5872] usb 2-1: config 0 descriptor?? [ 139.026834][ T7978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.048620][ T5872] smsusb:smsusb_probe: board id=9, interface number 0 [ 139.083155][ T5872] smsusb:siano_media_device_register: media controller created [ 139.109398][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.116759][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.124074][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.131389][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.138708][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.146028][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.155284][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.162877][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.170191][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.177493][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.186832][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.194139][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.201810][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.209108][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.216398][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.223680][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.235589][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.242878][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.250506][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.257795][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.265049][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.272286][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.279516][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.286745][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.294921][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.302215][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.309513][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.316791][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.324071][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.331421][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.339330][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.346628][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.353889][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.361130][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.368368][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.375609][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.383463][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.390741][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.398060][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.405345][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.412627][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.419921][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.430210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.437507][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.444789][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.452336][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.459597][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.466836][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.474061][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.481290][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.488832][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.496868][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.504168][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.511448][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.518732][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.526011][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.533295][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.540852][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.548177][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.555502][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.562821][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.570181][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.577532][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.585156][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.592459][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.599750][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.607051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.614351][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.621656][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.627675][ T8010] loop2: detected capacity change from 0 to 32768 [ 139.636178][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.643469][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.650746][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.658063][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.665324][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.672554][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.680398][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.687692][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.694980][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.702266][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.709558][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.716840][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.726859][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.734165][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.741423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.748655][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.755892][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.763117][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.770788][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.778089][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.785365][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.792643][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.799927][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.807210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.816719][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.824114][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.831400][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.838676][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.846038][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.853326][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.860888][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.868220][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.875545][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.882834][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.890193][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.897474][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.904734][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.911997][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.928210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.935535][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.942924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.950212][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.957504][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.964793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.972162][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.979454][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.987958][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 139.995392][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.002781][ T5872] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 140.012448][ T5872] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 140.019890][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.027188][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.034451][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.041696][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.048950][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.056191][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.063429][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.070674][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.078485][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.085777][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.096778][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.104093][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.111386][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.118678][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.125941][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.133186][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.140434][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.147673][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.157555][ T5872] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 140.165209][ T5872] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 140.173092][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.186646][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.216650][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.226635][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.246619][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 140.266608][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 140.281580][ T5872] smsusb:smsusb_probe: Device initialized with return code -22 [ 140.364065][ T5872] smsusb: probe of 2-1:0.0 failed with error -22 [ 140.388605][ T5872] usb 2-1: USB disconnect, device number 9 [ 140.416052][ T8016] loop0: detected capacity change from 0 to 4096 [ 140.468297][ T8020] veth3: entered allmulticast mode [ 140.488319][ T8016] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 140.565231][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 140.720444][ T8025] A6: renamed from team_slave_1 (while UP) [ 141.002632][ T8037] loop1: detected capacity change from 0 to 256 [ 141.041192][ T8037] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 141.485435][ T8049] loop2: detected capacity change from 0 to 4096 [ 141.526776][ T8049] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 141.787264][ T8064] nftables ruleset with unbound chain [ 142.813162][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.960'. [ 142.919792][ T8109] loop0: detected capacity change from 0 to 4096 [ 142.964692][ T8109] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 143.001204][ T8113] Illegal XDP return value 1400208171 on prog (id 46) dev N/A, expect packet loss! [ 143.011719][ T8109] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 143.030101][ T8109] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 143.076547][ T8109] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 143.211412][ T8109] ntfs: volume version 3.1. [ 143.288964][ T8109] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 143.316823][ T8109] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 143.336066][ T8122] loop2: detected capacity change from 0 to 16 [ 143.358288][ T8122] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 143.899337][ T8125] loop1: detected capacity change from 0 to 32768 [ 143.945785][ T8125] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 144.015541][ T8125] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.055351][ T8142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.976'. [ 144.113584][ T8125] (syz.1.969,8125,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 144.133118][ T8125] (syz.1.969,8125,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 144.150593][ T8125] (syz.1.969,8125,0):ocfs2_mknod:298 ERROR: status = -2 [ 144.158047][ T8125] (syz.1.969,8125,0):ocfs2_mknod:502 ERROR: status = -2 [ 144.165147][ T8125] (syz.1.969,8125,0):ocfs2_create:676 ERROR: status = -2 [ 144.182231][ T8144] loop2: detected capacity change from 0 to 64 [ 144.264519][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 144.359188][ T8148] loop3: detected capacity change from 0 to 128 [ 144.459130][ T8150] loop2: detected capacity change from 0 to 64 [ 144.803080][ T8160] cgroup: Unexpected value for 'cpuset_v2_mode' [ 145.671928][ T8200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'. [ 145.835461][ T8209] mmap: syz.1.1009 (8209): VmData 37466112 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 145.847333][ T8205] loop2: detected capacity change from 0 to 4096 [ 145.867903][ T8205] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 145.960884][ T8205] ntfs3: loop2: failed to convert "c46c" to koi8-u [ 146.016723][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.217249][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 146.226782][ T5872] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 146.250332][ T5872] usb 4-1: config 0 has no interface number 0 [ 146.265132][ T5872] usb 4-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 146.288025][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.312817][ T5872] usb 4-1: Product: syz [ 146.320675][ T5872] usb 4-1: Manufacturer: syz [ 146.330999][ T5872] usb 4-1: SerialNumber: syz [ 146.349104][ T5872] usb 4-1: config 0 descriptor?? [ 146.372858][ T5872] usb 4-1: bad CDC descriptors [ 146.394281][ T5872] usb 4-1: bad CDC descriptors [ 146.420257][ T5872] cdc_acm 4-1:0.180: Zero length descriptor references [ 146.452478][ T5872] cdc_acm: probe of 4-1:0.180 failed with error -22 [ 146.888597][ T8231] loop2: detected capacity change from 0 to 512 [ 147.140710][ T5916] usb 4-1: USB disconnect, device number 7 [ 147.559983][ T8252] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1029'. [ 147.585117][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.593530][ T8232] loop1: detected capacity change from 0 to 32768 [ 147.636862][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.670934][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.682553][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.692646][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.703372][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.708460][ T8232] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.713679][ T8252] batadv_slave_1: entered promiscuous mode [ 147.767446][ T8258] loop2: detected capacity change from 0 to 64 [ 147.882301][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 148.255498][ T8276] loop1: detected capacity change from 0 to 1024 [ 148.367196][ T786] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 148.551511][ T8286] xt_CONNSECMARK: invalid mode: 0 [ 148.571823][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.596687][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.613403][ T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 148.663266][ T786] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.693254][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.725192][ T8269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.748276][ T786] hub 3-1:1.0: bad descriptor, ignoring hub [ 148.754231][ T786] hub: probe of 3-1:1.0 failed with error -5 [ 148.780259][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 148.795759][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 148.805010][ T8292] comedi comedi1: dmm32at: I/O port conflict (0x10002f03,16) [ 148.847339][ T786] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 148.853303][ T786] cdc_wdm 3-1:1.0: Unknown control protocol [ 149.141391][ T786] usb 3-1: USB disconnect, device number 5 [ 149.271952][ T8312] loop3: detected capacity change from 0 to 512 [ 149.289932][ T8312] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.307082][ T8312] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.347198][ T8312] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.403220][ T8318] loop0: detected capacity change from 0 to 16 [ 149.410389][ T8318] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 149.426544][ T8318] cramfs: empty filesystem [ 149.431401][ T8312] EXT4-fs (loop3): 1 truncate cleaned up [ 149.456740][ T8312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.685131][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.815499][ T8328] : renamed from bond_slave_0 (while UP) [ 149.906904][ T8332] No such timeout policy "syz0" [ 149.947698][ T5831] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.148228][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 150.157271][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 150.194047][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.219037][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.248110][ T5831] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 150.257517][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.265523][ T5831] usb 1-1: Product: syz [ 150.284556][ T5831] usb 1-1: Manufacturer: syz [ 150.300917][ T5831] usb 1-1: SerialNumber: syz [ 150.323839][ T5831] usb 1-1: config 0 descriptor?? [ 150.349009][ T5831] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 150.559039][ T5831] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 150.572431][ T8358] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.580355][ T5831] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 150.594728][ T5831] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 150.611310][ T8358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.758055][ T27] usb 1-1: USB disconnect, device number 4 [ 151.036809][ T8373] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 151.139206][ T8356] loop3: detected capacity change from 0 to 32768 [ 151.207939][ T8356] ERROR: (device loop3): diNewExt: no free extents [ 151.207939][ T8356] [ 151.240241][ T8356] ERROR: (device loop3): remounting filesystem as read-only [ 151.272395][ T8356] ialloc: diAlloc returned -5! [ 151.915752][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 151.958636][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.000987][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.016800][ T8402] cgroup: Unknown subsys name 'smackfshat' [ 152.019572][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.034591][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.044782][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.054834][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.075165][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.103202][ T8399] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 152.114025][ T8403] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1100'. [ 152.137134][ T8403] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1100'. [ 152.424596][ T8419] futex_wake_op: syz.3.1108 tries to shift op by -1; fix this program [ 152.904922][ T8442] x_tables: duplicate underflow at hook 2 [ 153.030132][ T8446] loop0: detected capacity change from 0 to 8 [ 153.133203][ T8446] SQUASHFS error: xz decompression failed, data probably corrupt [ 153.164564][ T8446] SQUASHFS error: Failed to read block 0x108: -5 [ 153.196569][ T8446] SQUASHFS error: Unable to read metadata cache entry [106] [ 153.203912][ T8446] SQUASHFS error: Unable to read inode 0x11f [ 153.686729][ T27] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 153.694616][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.720909][ T8475] loop2: detected capacity change from 0 to 256 [ 153.736118][ T8475] exfat: Deprecated parameter 'utf8' [ 153.768855][ T8475] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 153.879018][ T27] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 153.897689][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.911809][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.936882][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 153.962816][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 153.976844][ T27] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 153.988535][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.997089][ T27] usb 4-1: Product: syz [ 154.001271][ T27] usb 4-1: Manufacturer: syz [ 154.005872][ T27] usb 4-1: SerialNumber: syz [ 154.010570][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 154.022565][ T5872] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 154.051165][ T27] usb 4-1: config 0 descriptor?? [ 154.056564][ T5872] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 154.082178][ T27] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 154.089038][ T5872] usb 1-1: Manufacturer: syz [ 154.098601][ T5872] usb 1-1: config 0 descriptor?? [ 154.105602][ T8446] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.119763][ T5872] smsusb:smsusb_probe: board id=9, interface number 0 [ 154.132150][ T5872] smsusb:siano_media_device_register: media controller created [ 154.143167][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.150509][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.157793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.165109][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.172374][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.180069][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.187381][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.194677][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.201973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.209261][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.216910][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.224212][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.231501][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.238792][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.246108][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.255905][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.263228][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.270572][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.283291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.290637][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.297942][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.305239][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.312539][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.320708][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.328014][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.335299][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.342605][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.350342][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.380555][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.387926][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.395215][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.402481][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.409749][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.417466][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.424778][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.432053][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.439344][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.446624][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.455480][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.462781][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.470066][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.477343][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.484640][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.491917][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.499200][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.506479][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.513795][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.521073][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.540680][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.548006][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.555271][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.562508][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.569757][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.576987][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.584216][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.592423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.599738][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.607112][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.614379][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.621671][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.628973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.636267][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.643552][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.650844][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.658162][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.665714][ T27] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 154.674101][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.681405][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.688694][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.695992][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.703277][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.710644][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.717935][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.725222][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.732524][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.739951][ T27] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 154.750556][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.757839][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.765395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.772711][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.780009][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.787307][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.794599][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.802027][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.809317][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.816603][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.823876][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.831269][ T5872] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 154.840012][ T5872] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 154.847608][ T5872] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 154.856536][ T5872] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 154.865907][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.873210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.880488][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.887761][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.895017][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.902260][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.909628][ T27] usb 4-1: USB disconnect, device number 8 [ 154.917337][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.924678][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.929820][ T8497] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 154.931961][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.945445][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.952830][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.960121][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.969354][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.976637][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.983916][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.991183][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 154.998456][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 155.005767][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 155.024984][ T5872] smsusb:smsusb_probe: Device initialized with return code -22 [ 155.090904][ T5872] smsusb: probe of 1-1:0.0 failed with error -22 [ 155.111252][ T5872] usb 1-1: USB disconnect, device number 5 [ 155.601002][ T8524] loop2: detected capacity change from 0 to 8 [ 155.676983][ T8524] SQUASHFS error: xz decompression failed, data probably corrupt [ 155.694967][ T8524] SQUASHFS error: Failed to read block 0x108: -5 [ 155.716448][ T8524] SQUASHFS error: Unable to read metadata cache entry [106] [ 155.723790][ T8524] SQUASHFS error: Unable to read inode 0x11f [ 155.735435][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.937286][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 155.950839][ T786] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 155.968186][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.989616][ T786] usb 1-1: Product: syz [ 155.993901][ T786] usb 1-1: Manufacturer: syz [ 156.017407][ T786] usb 1-1: SerialNumber: syz [ 156.030661][ T786] usb 1-1: config 0 descriptor?? [ 156.136830][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.270068][ T8548] dlm: no locking on control device [ 156.328593][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 156.341090][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 156.351074][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 156.369332][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 156.403274][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 156.426590][ T9] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 156.434901][ T9] usb 3-1: Manufacturer: syz [ 156.442895][ T9] usb 3-1: config 0 descriptor?? [ 156.465712][ T786] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 156.475890][ T8524] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.494903][ T8555] validate_nla: 45 callbacks suppressed [ 156.494918][ T8555] netlink: 'syz.3.1175': attribute type 32 has an invalid length. [ 156.495280][ T786] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 156.527232][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 156.539160][ T9] smsusb:siano_media_device_register: media controller created [ 156.552098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.559451][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.566793][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.574112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.581438][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.588772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.597108][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.604481][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.612093][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.619437][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.626789][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.634131][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.641943][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.649230][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.656489][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.663726][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.670998][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.678232][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.685964][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.693315][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.700647][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.707980][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.715339][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.722850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.726215][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'. [ 156.746687][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.754061][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.761376][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.768649][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.775901][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.783602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.791287][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.798629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.805963][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.813296][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.822117][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.829419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.836708][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.843998][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.851268][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.858513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.865743][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.873447][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.880751][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.888038][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.895338][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.902613][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.909879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.917132][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.924449][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.931691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.938925][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.947369][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.954670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.961936][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.969174][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.976423][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.983659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.990888][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 156.998119][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.005347][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.012582][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.027901][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.035280][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.042624][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.049970][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.057294][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.064633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.071990][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.079333][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.086664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.094010][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.103512][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.110832][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.118129][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.125420][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.132731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.140016][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.147294][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.156506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.164071][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.171371][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.178670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.185972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.193268][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.200554][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.207803][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.216080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.223378][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.231015][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.238313][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.245598][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.252878][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.260166][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.267453][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.274734][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.282038][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.295213][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.302535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.309834][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.317127][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.324454][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.331751][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.339024][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.346273][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.353510][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.361114][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 157.371041][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371157][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371247][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371330][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371414][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371507][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371601][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371689][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371783][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.371877][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.455355][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.462680][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.469975][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.477265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.484560][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.491855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.499152][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.506446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.513737][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.521023][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.528580][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 157.535717][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 157.544359][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.544482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.544570][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.544658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.544745][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.544830][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.544917][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.545003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.545089][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.545169][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.619202][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.626506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.633789][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.641075][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.648369][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.655660][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.662943][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.670236][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.677525][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.685125][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.692713][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.699979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.707220][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.714458][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.721697][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.728992][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.736218][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.743447][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.753571][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 157.762705][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 157.771303][ T9] ------------[ cut here ]------------ [ 157.776879][ T9] ODEBUG: free active (active state 0) object: ffff88807e2a0b08 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 157.789870][ T9] WARNING: CPU: 0 PID: 9 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 157.799741][ T9] Modules linked in: [ 157.803678][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.6.102-syzkaller #0 [ 157.811821][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.822902][ T9] Workqueue: usb_hub_wq hub_event [ 157.828149][ T9] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 157.834512][ T9] Code: 4c 8b 4d 00 48 c7 c7 80 70 fc 8a 48 c7 c6 e0 6c fc 8a 48 c7 c2 00 72 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 9e 97 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 93 48 25 [ 157.854353][ T9] RSP: 0000:ffffc900000e6b38 EFLAGS: 00010282 [ 157.860534][ T9] RAX: df9e978407836a00 RBX: ffffffff970e2ff8 RCX: 0000000000100000 [ 157.868697][ T9] RDX: ffffc9001812a000 RSI: 00000000000974f6 RDI: 00000000000974f7 [ 157.876776][ T9] RBP: ffffffff8aa9e760 R08: ffffc900000e6827 R09: 1ffff9200001cd04 [ 157.884765][ T9] R10: dffffc0000000000 R11: fffff5200001cd05 R12: ffff88807e2a1000 [ 157.885465][ T28] audit: type=1326 audit(1755702597.276:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c98ebe9 code=0x7ffc0000 [ 157.892822][ T9] R13: ffffffff870aef30 R14: ffff88807e2a0000 R15: ffff88807e2a0b08 [ 157.892841][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 157.892858][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.892872][ T9] CR2: 0000001b2e815ff8 CR3: 00000000612b0000 CR4: 00000000003506f0 [ 157.892888][ T9] Call Trace: [ 157.892896][ T9] [ 157.892918][ T9] slab_free_freelist_hook+0xd2/0x1b0 [ 157.959853][ T9] ? smsusb_term_device+0x1ac/0x220 [ 157.965080][ T9] __kmem_cache_free+0xba/0x1f0 [ 157.970275][ T9] smsusb_term_device+0x1ac/0x220 [ 157.975340][ T9] smsusb_probe+0x1708/0x1da0 [ 157.981626][ T9] ? s2255_print_cfg+0x1b0/0x1b0 [ 157.982334][ T28] audit: type=1326 audit(1755702597.276:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c98ebe9 code=0x7ffc0000 [ 157.986688][ T9] ? smsusb1_detectmode+0x260/0x260 [ 157.986719][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 157.986749][ T9] ? pm_runtime_enable+0x192/0x2a0 [ 157.986773][ T9] ? __pm_runtime_set_status+0x8ab/0xb80 [ 157.986803][ T9] usb_probe_interface+0x5a4/0xb00 [ 158.037290][ T9] ? usb_register_driver+0x3d0/0x3d0 [ 158.042602][ T9] really_probe+0x25b/0xb40 [ 158.047311][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 158.052622][ T9] __driver_probe_device+0x18c/0x330 [ 158.057963][ T9] driver_probe_device+0x4f/0x420 [ 158.063002][ T9] __device_attach_driver+0x2ca/0x520 [ 158.068495][ T9] bus_for_each_drv+0x24b/0x2d0 [ 158.073361][ T9] ? coredump_store+0x90/0x90 [ 158.078082][ T9] ? bus_find_device+0x320/0x320 [ 158.083033][ T9] __device_attach+0x2b5/0x400 [ 158.087898][ T9] ? device_attach+0x20/0x20 [ 158.092518][ T9] ? __kmem_cache_free+0xba/0x1f0 [ 158.097610][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 158.102823][ T9] bus_probe_device+0x180/0x260 [ 158.107777][ T9] device_add+0x85b/0xc20 [ 158.112142][ T9] usb_set_configuration+0x1a79/0x20c0 [ 158.117714][ T9] usb_generic_driver_probe+0x8d/0x150 [ 158.123192][ T9] usb_probe_device+0x13d/0x280 [ 158.129267][ T9] ? usb_register_device_driver+0x230/0x230 [ 158.135175][ T9] really_probe+0x25b/0xb40 [ 158.139896][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 158.145108][ T9] __driver_probe_device+0x18c/0x330 [ 158.150456][ T9] driver_probe_device+0x4f/0x420 [ 158.155512][ T9] __device_attach_driver+0x2ca/0x520 [ 158.160948][ T9] bus_for_each_drv+0x24b/0x2d0 [ 158.165900][ T9] ? coredump_store+0x90/0x90 [ 158.170639][ T9] ? bus_find_device+0x320/0x320 [ 158.175591][ T9] __device_attach+0x2b5/0x400 [ 158.180406][ T9] ? device_attach+0x20/0x20 [ 158.185004][ T9] ? __kmem_cache_free+0xba/0x1f0 [ 158.190108][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 158.195321][ T9] bus_probe_device+0x180/0x260 [ 158.200233][ T9] device_add+0x85b/0xc20 [ 158.204581][ T9] usb_new_device+0xa31/0x1630 [ 158.209456][ T9] ? usb_disconnect+0x8a0/0x8a0 [ 158.214338][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.219648][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 158.224862][ T9] hub_event+0x2962/0x49c0 [ 158.230197][ T9] ? hub_post_resume+0x120/0x120 [ 158.235137][ T9] ? read_lock_is_recursive+0x20/0x20 [ 158.240779][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.245999][ T9] ? process_scheduled_works+0x957/0x15b0 [ 158.251815][ T9] ? process_scheduled_works+0x957/0x15b0 [ 158.257604][ T9] process_scheduled_works+0xa45/0x15b0 [ 158.263201][ T9] ? assign_work+0x400/0x400 [ 158.267907][ T9] ? assign_work+0x39e/0x400 [ 158.272615][ T9] worker_thread+0xa55/0xfc0 [ 158.277284][ T9] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 158.283205][ T9] ? _raw_spin_unlock+0x40/0x40 [ 158.288168][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 158.294088][ T9] kthread+0x2fa/0x390 [ 158.298219][ T9] ? pr_cont_work+0x560/0x560 [ 158.302908][ T9] ? kthread_blkcg+0xd0/0xd0 [ 158.307611][ T9] ret_from_fork+0x48/0x80 [ 158.312056][ T9] ? kthread_blkcg+0xd0/0xd0 [ 158.316732][ T9] ret_from_fork_asm+0x11/0x20 [ 158.321540][ T9] [ 158.324563][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.331837][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.6.102-syzkaller #0 [ 158.339749][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.349804][ T9] Workqueue: usb_hub_wq hub_event [ 158.354818][ T9] Call Trace: [ 158.358088][ T9] [ 158.361006][ T9] dump_stack_lvl+0x16c/0x230 [ 158.365683][ T9] ? show_regs_print_info+0x20/0x20 [ 158.370886][ T9] ? load_image+0x3b0/0x3b0 [ 158.375420][ T9] panic+0x2c0/0x710 [ 158.379325][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 158.383856][ T9] ? ret_from_fork_asm+0x11/0x20 [ 158.388797][ T9] __warn+0x2e0/0x470 [ 158.392774][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 158.398512][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 158.404227][ T9] report_bug+0x2be/0x4f0 [ 158.408550][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 158.414288][ T9] ? debug_check_no_obj_freed+0x446/0x540 [ 158.419995][ T9] ? debug_check_no_obj_freed+0x448/0x540 [ 158.425702][ T9] handle_bug+0xcf/0x120 [ 158.429955][ T9] exc_invalid_op+0x1a/0x50 [ 158.434469][ T9] asm_exc_invalid_op+0x1a/0x20 [ 158.439323][ T9] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 158.445662][ T9] Code: 4c 8b 4d 00 48 c7 c7 80 70 fc 8a 48 c7 c6 e0 6c fc 8a 48 c7 c2 00 72 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 9e 97 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 93 48 25 [ 158.465314][ T9] RSP: 0000:ffffc900000e6b38 EFLAGS: 00010282 [ 158.471374][ T9] RAX: df9e978407836a00 RBX: ffffffff970e2ff8 RCX: 0000000000100000 [ 158.479336][ T9] RDX: ffffc9001812a000 RSI: 00000000000974f6 RDI: 00000000000974f7 [ 158.487296][ T9] RBP: ffffffff8aa9e760 R08: ffffc900000e6827 R09: 1ffff9200001cd04 [ 158.495258][ T9] R10: dffffc0000000000 R11: fffff5200001cd05 R12: ffff88807e2a1000 [ 158.503216][ T9] R13: ffffffff870aef30 R14: ffff88807e2a0000 R15: ffff88807e2a0b08 [ 158.511199][ T9] ? smsusb_onresponse+0x890/0x890 [ 158.516328][ T9] ? smsusb_onresponse+0x890/0x890 [ 158.521446][ T9] slab_free_freelist_hook+0xd2/0x1b0 [ 158.526817][ T9] ? smsusb_term_device+0x1ac/0x220 [ 158.532021][ T9] __kmem_cache_free+0xba/0x1f0 [ 158.536880][ T9] smsusb_term_device+0x1ac/0x220 [ 158.541904][ T9] smsusb_probe+0x1708/0x1da0 [ 158.546601][ T9] ? s2255_print_cfg+0x1b0/0x1b0 [ 158.551543][ T9] ? smsusb1_detectmode+0x260/0x260 [ 158.556742][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 158.562633][ T9] ? pm_runtime_enable+0x192/0x2a0 [ 158.567736][ T9] ? __pm_runtime_set_status+0x8ab/0xb80 [ 158.573385][ T9] usb_probe_interface+0x5a4/0xb00 [ 158.578518][ T9] ? usb_register_driver+0x3d0/0x3d0 [ 158.583797][ T9] really_probe+0x25b/0xb40 [ 158.588292][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 158.593487][ T9] __driver_probe_device+0x18c/0x330 [ 158.598766][ T9] driver_probe_device+0x4f/0x420 [ 158.603786][ T9] __device_attach_driver+0x2ca/0x520 [ 158.609154][ T9] bus_for_each_drv+0x24b/0x2d0 [ 158.613992][ T9] ? coredump_store+0x90/0x90 [ 158.618657][ T9] ? bus_find_device+0x320/0x320 [ 158.623584][ T9] __device_attach+0x2b5/0x400 [ 158.628344][ T9] ? device_attach+0x20/0x20 [ 158.632917][ T9] ? __kmem_cache_free+0xba/0x1f0 [ 158.637935][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 158.643129][ T9] bus_probe_device+0x180/0x260 [ 158.647971][ T9] device_add+0x85b/0xc20 [ 158.652294][ T9] usb_set_configuration+0x1a79/0x20c0 [ 158.657766][ T9] usb_generic_driver_probe+0x8d/0x150 [ 158.663223][ T9] usb_probe_device+0x13d/0x280 [ 158.668064][ T9] ? usb_register_device_driver+0x230/0x230 [ 158.673944][ T9] really_probe+0x25b/0xb40 [ 158.678436][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 158.683626][ T9] __driver_probe_device+0x18c/0x330 [ 158.688902][ T9] driver_probe_device+0x4f/0x420 [ 158.693913][ T9] __device_attach_driver+0x2ca/0x520 [ 158.699275][ T9] bus_for_each_drv+0x24b/0x2d0 [ 158.704123][ T9] ? coredump_store+0x90/0x90 [ 158.708790][ T9] ? bus_find_device+0x320/0x320 [ 158.713717][ T9] __device_attach+0x2b5/0x400 [ 158.718468][ T9] ? device_attach+0x20/0x20 [ 158.723042][ T9] ? __kmem_cache_free+0xba/0x1f0 [ 158.728059][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 158.733251][ T9] bus_probe_device+0x180/0x260 [ 158.738115][ T9] device_add+0x85b/0xc20 [ 158.742533][ T9] usb_new_device+0xa31/0x1630 [ 158.747300][ T9] ? usb_disconnect+0x8a0/0x8a0 [ 158.752147][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.757335][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 158.762528][ T9] hub_event+0x2962/0x49c0 [ 158.766969][ T9] ? hub_post_resume+0x120/0x120 [ 158.771891][ T9] ? read_lock_is_recursive+0x20/0x20 [ 158.777254][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.782626][ T9] ? process_scheduled_works+0x957/0x15b0 [ 158.788337][ T9] ? process_scheduled_works+0x957/0x15b0 [ 158.794039][ T9] process_scheduled_works+0xa45/0x15b0 [ 158.799593][ T9] ? assign_work+0x400/0x400 [ 158.804176][ T9] ? assign_work+0x39e/0x400 [ 158.808756][ T9] worker_thread+0xa55/0xfc0 [ 158.813335][ T9] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 158.819216][ T9] ? _raw_spin_unlock+0x40/0x40 [ 158.824059][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 158.829970][ T9] kthread+0x2fa/0x390 [ 158.834032][ T9] ? pr_cont_work+0x560/0x560 [ 158.838728][ T9] ? kthread_blkcg+0xd0/0xd0 [ 158.843329][ T9] ret_from_fork+0x48/0x80 [ 158.847754][ T9] ? kthread_blkcg+0xd0/0xd0 [ 158.852338][ T9] ret_from_fork_asm+0x11/0x20 [ 158.857105][ T9] [ 158.860356][ T9] Kernel Offset: disabled [ 158.864726][ T9] Rebooting in 86400 seconds..