last executing test programs: 7.024863292s ago: executing program 3 (id=7831): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.315962251s ago: executing program 3 (id=7856): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x24}}, 0x4) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61d53a0600522f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010081000005000b003e000086dd000988a8880081"], 0x0) 5.15941863s ago: executing program 1 (id=7859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073040032000000009c000000060a010400000000000000000100000308000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c0002800800034000000002080001400000001408000240000000120800048004000100080001400000000f0900010073797a30"], 0x110}}, 0x0) 5.083738835s ago: executing program 3 (id=7860): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) 4.973557381s ago: executing program 1 (id=7863): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) 4.873612867s ago: executing program 3 (id=7865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private1, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4c014) 4.785489232s ago: executing program 1 (id=7867): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 4.666112469s ago: executing program 3 (id=7869): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x5504, &(0x7f0000001600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) 4.488367249s ago: executing program 1 (id=7872): syz_emit_ethernet(0x2e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4002, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) 4.182378767s ago: executing program 2 (id=7876): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 4.181430707s ago: executing program 1 (id=7884): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 3.798348069s ago: executing program 2 (id=7878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000001a80000000a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 3.697303045s ago: executing program 2 (id=7880): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x5, 0x0) 3.594247771s ago: executing program 0 (id=7881): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000ac0)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@codepage={'codepage', 0x3d, 'cp869'}}, {@file_umask={'file_umask', 0x3d, 0xd}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 3.457716529s ago: executing program 0 (id=7882): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x103002) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 3.193752244s ago: executing program 0 (id=7883): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd1ffff8880552e7000(4096) [ 991.464443][T22477] cramfs: Error -5 while decompressing! [ 991.482698][T13460] udevd[13460]: incorrect cramfs checksum on /dev/loop2 [ 991.499954][T22477] cramfs: ffffffff973f7368(26)->ffff8880490b8000(4096) [ 991.530139][ T27] audit: type=1800 audit(973080951.227:63): pid=22477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6733" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 991.608042][T13460] udevd[13460]: incorrect cramfs checksum on /dev/loop2 [ 991.620097][T22493] loop3: detected capacity change from 0 to 4096 [ 991.651074][T22493] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 991.794394][T22493] ntfs: volume version 3.1. [ 991.896768][T22493] ntfs: (device loop3): parse_options(): Unrecognized mount option ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ. [ 991.973977][T22512] loop0: detected capacity change from 0 to 4096 [ 992.018638][T22512] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 992.143757][T22512] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 992.240551][T22524] loop2: detected capacity change from 0 to 2048 [ 992.296082][T22524] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 992.621511][T22545] binder: BC_ACQUIRE_RESULT not supported [ 992.652778][T22545] binder: 22544:22545 ioctl c0306201 200000000040 returned -22 [ 992.888316][T22554] loop3: detected capacity change from 0 to 4096 [ 992.965573][T22554] ntfs: volume version 3.1. [ 993.128239][T22554] ntfs: (device loop3): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 993.430736][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6762'. [ 994.318037][T22636] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 994.923053][T22677] netlink: 'syz.1.6793': attribute type 3 has an invalid length. [ 994.968392][T22677] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6793'. [ 995.586691][T22720] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6808'. [ 995.748140][T22729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6810'. [ 995.762190][T22727] xt_hashlimit: overflow, try lower: 3/0 [ 995.923639][T22738] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6813'. [ 996.067203][T22746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6816'. [ 996.485719][T22768] loop1: detected capacity change from 0 to 4096 [ 996.568841][T22768] ntfs: volume version 3.1. [ 996.712078][T22768] ntfs: (device loop1): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 996.734231][T22785] netlink: 'syz.0.6828': attribute type 1 has an invalid length. [ 996.977533][T22796] loop0: detected capacity change from 0 to 1024 [ 997.298325][T22815] loop3: detected capacity change from 0 to 2048 [ 997.367077][T22822] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 997.458982][T22815] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 997.489811][ T27] audit: type=1800 audit(973080957.614:64): pid=22801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.6834" name="/newroot/1679/file0" dev="tmpfs" ino=8830 res=0 errno=0 [ 997.516418][T22825] loop1: detected capacity change from 0 to 512 [ 997.554131][T22815] Remounting filesystem read-only [ 997.606073][T22825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.757545][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.058649][T22850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6843'. [ 998.494958][T22874] netlink: 'syz.0.6851': attribute type 32 has an invalid length. [ 999.042436][T22897] loop3: detected capacity change from 0 to 4096 [ 999.089739][T22897] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 999.171247][T22897] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 999.346223][T22913] netlink: 'syz.0.6863': attribute type 2 has an invalid length. [ 999.354600][T22913] netlink: 'syz.0.6863': attribute type 1 has an invalid length. [ 999.519911][T22877] loop2: detected capacity change from 0 to 32768 [ 999.589125][T22877] ERROR: (device loop2): diWrite: ixpxd invalid [ 999.589125][T22877] [ 999.645397][T22877] ERROR: (device loop2): remounting filesystem as read-only [ 999.680228][T22877] ERROR: (device loop2): txCommit: [ 999.680228][T22877] [ 999.722095][T22877] imap: ffff88807ba50000: 07ffffff 00000000 00000000 00000000 [ 999.756199][T22877] imap: ffff88807ba50010: 00000004 00000002 00000000 00000000 [ 999.795090][T22877] ERROR: (device loop2): diFree: inum = 7, iagno = 0, nextiag = 0 [ 999.795090][T22877] [ 1000.340643][T22958] loop1: detected capacity change from 0 to 1024 [ 1000.718020][T22970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6880'. [ 1000.765653][T22936] loop0: detected capacity change from 0 to 32768 [ 1000.790319][T22936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6869 (22936) [ 1000.825069][T22936] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1000.858271][T22936] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1000.872596][T22936] BTRFS info (device loop0): using free space tree [ 1000.885098][T22972] loop1: detected capacity change from 0 to 2048 [ 1000.939060][T22983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1001.020178][T22972] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1001.056984][T22936] BTRFS info (device loop0): enabling ssd optimizations [ 1001.088252][T22972] Remounting filesystem read-only [ 1001.106132][T22936] BTRFS info (device loop0): auto enabling async discard [ 1001.254512][T22957] loop3: detected capacity change from 0 to 40427 [ 1001.286043][T22957] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 1001.334278][T22957] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1001.366891][T22957] F2FS-fs (loop3): Image doesn't support compression [ 1001.390868][T22957] F2FS-fs (loop3): invalid crc value [ 1001.403962][ T5779] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1001.428243][T22957] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1001.657496][T22957] F2FS-fs (loop3): Start checkpoint disabled! [ 1001.665310][T22957] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1001.770734][T16307] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1001.871460][T22957] syz.3.6876: attempt to access beyond end of device [ 1001.871460][T22957] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1002.259960][T23041] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6893'. [ 1002.425386][ T1082] kworker/u4:6: attempt to access beyond end of device [ 1002.425386][ T1082] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1002.450628][ T1082] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1002.457821][ T1082] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1002.541138][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1002.568924][T23052] netlink: 'syz.1.6897': attribute type 10 has an invalid length. [ 1002.636858][T23052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.644251][T23052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.738799][T23052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.746032][T23052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.753609][T23052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.762052][T23052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.795423][T23052] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1002.805065][T23058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6898'. [ 1002.817169][T23058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6898'. [ 1002.843860][T23058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6898'. [ 1003.196742][T23079] loop2: detected capacity change from 0 to 64 [ 1004.533060][T23121] loop0: detected capacity change from 0 to 32768 [ 1004.561048][T23121] ERROR: (device loop0): diWrite: ixpxd invalid [ 1004.561048][T23121] [ 1004.593121][T23121] ERROR: (device loop0): remounting filesystem as read-only [ 1004.600494][T23121] ERROR: (device loop0): txCommit: [ 1004.600494][T23121] [ 1004.616994][T23121] imap: ffff88805bef0000: 07ffffff 00000000 00000000 00000000 [ 1004.632273][T23121] imap: ffff88805bef0010: 00000004 00000002 00000000 00000000 [ 1004.640433][T23121] ERROR: (device loop0): diFree: inum = 7, iagno = 0, nextiag = 0 [ 1004.640433][T23121] [ 1004.816364][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6930'. [ 1004.846862][T23173] xt_hashlimit: Unknown mode mask E2, kernel too old? [ 1005.718185][T23211] loop0: detected capacity change from 0 to 4096 [ 1005.752723][T23198] loop2: detected capacity change from 0 to 32768 [ 1005.754573][T23211] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1005.779026][T23198] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.6939 (23198) [ 1005.830665][T23198] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1005.846659][T23198] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1005.876693][T23198] BTRFS info (device loop2): force zlib compression, level 3 [ 1005.906739][T23198] BTRFS info (device loop2): turning on flush-on-commit [ 1005.913799][T23198] BTRFS info (device loop2): max_inline at 4096 [ 1005.938866][T23211] ntfs3: loop0: failed to convert "c46c" to iso8859-5 [ 1005.947007][T23198] BTRFS info (device loop2): using free space tree [ 1006.060827][T23198] BTRFS info (device loop2): enabling ssd optimizations [ 1006.068023][T23198] BTRFS info (device loop2): auto enabling async discard [ 1006.130098][T23240] loop3: detected capacity change from 0 to 256 [ 1006.252028][T23198] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 1006.278498][T23240] FAT-fs (loop3): Directory bread(block 64) failed [ 1006.300321][T23240] FAT-fs (loop3): Directory bread(block 65) failed [ 1006.333218][T23240] FAT-fs (loop3): Directory bread(block 66) failed [ 1006.361662][T23240] FAT-fs (loop3): Directory bread(block 67) failed [ 1006.368394][T23240] FAT-fs (loop3): Directory bread(block 68) failed [ 1006.395673][T23240] FAT-fs (loop3): Directory bread(block 69) failed [ 1006.413994][ T5778] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1006.431191][T23240] FAT-fs (loop3): Directory bread(block 70) failed [ 1006.454224][T23240] FAT-fs (loop3): Directory bread(block 71) failed [ 1006.478310][T23240] FAT-fs (loop3): Directory bread(block 72) failed [ 1006.516505][T23240] FAT-fs (loop3): Directory bread(block 73) failed [ 1006.521560][T23254] binder: 23253:23254 ioctl c018620c 0 returned -14 [ 1006.807295][T23240] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 1006.832389][ T27] audit: type=1800 audit(973080967.618:65): pid=23240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6947" name="cpu.stat" dev="loop3" ino=1048632 res=0 errno=0 [ 1007.380678][T23288] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1007.641839][T23299] netlink: 'syz.1.6962': attribute type 1 has an invalid length. [ 1007.679224][T23299] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6962'. [ 1007.712413][T23299] nbd: must specify at least one socket [ 1007.892425][T23263] loop0: detected capacity change from 0 to 32768 [ 1007.933622][T23263] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1007.973413][T23263] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1008.065058][T23263] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1008.129907][ T5865] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1008.146629][ T5865] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1008.324318][ T5865] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 190ms [ 1008.342305][ T5865] gfs2: fsid=syz:syz.0: jid=0: Done [ 1008.350905][T23263] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1008.394372][T23329] loop3: detected capacity change from 0 to 4096 [ 1008.457861][T23329] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1008.497489][T23329] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1008.582992][T23344] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1008.852864][T23263] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1009.044780][T23360] loop2: detected capacity change from 0 to 2048 [ 1009.110706][T23364] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1009.238311][ T5779] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 1009.276470][T23360] NILFS (loop2): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1009.302689][ T5779] CPU: 0 PID: 5779 Comm: syz-executor Not tainted syzkaller #0 [ 1009.310333][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.320438][ T5779] Call Trace: [ 1009.323760][ T5779] [ 1009.326734][ T5779] dump_stack_lvl+0x18c/0x250 [ 1009.331475][ T5779] ? show_regs_print_info+0x20/0x20 [ 1009.336731][ T5779] ? load_image+0x400/0x400 [ 1009.340443][T23360] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1009.341274][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 1009.341313][ T5779] gfs2_assert_warn_i+0x193/0x2c0 [ 1009.361561][ T5779] gfs2_qd_dispose+0x4aa/0x5b0 [ 1009.366394][ T5779] gfs2_quota_cleanup+0x410/0x720 [ 1009.371464][ T5779] ? spin_lock_bucket+0x150/0x150 [ 1009.376538][ T5779] ? __might_sleep+0xe0/0xe0 [ 1009.381199][ T5779] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 1009.386368][ T5779] ? gfs2_quota_sync+0x591/0x5a0 [ 1009.391352][ T5779] gfs2_make_fs_ro+0x2aa/0x320 [ 1009.396173][ T5779] ? gfs2_dinode_out+0xb10/0xb10 [ 1009.401168][ T5779] ? __lock_acquire+0x7d40/0x7d40 [ 1009.406261][ T5779] ? __rwlock_init+0x150/0x150 [ 1009.411085][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 1009.416372][ T5779] gfs2_put_super+0x224/0x930 [ 1009.421108][ T5779] ? gfs2_evict_inode+0x1350/0x1350 [ 1009.426372][ T5779] generic_shutdown_super+0x134/0x2b0 [ 1009.431794][ T5779] kill_block_super+0x44/0x90 [ 1009.436507][ T5779] deactivate_locked_super+0x97/0x100 [ 1009.441910][ T5779] cleanup_mnt+0x43b/0x4d0 [ 1009.446363][ T5779] task_work_run+0x1d4/0x260 [ 1009.450987][ T5779] ? task_work_cancel+0x220/0x220 [ 1009.456051][ T5779] ? exit_to_user_mode_loop+0x3b/0x110 [ 1009.461552][ T5779] exit_to_user_mode_loop+0xe6/0x110 [ 1009.466865][ T5779] exit_to_user_mode_prepare+0xee/0x180 [ 1009.472444][ T5779] syscall_exit_to_user_mode+0x1a/0x50 [ 1009.477922][ T5779] do_syscall_64+0x61/0xa0 [ 1009.482383][ T5779] ? clear_bhb_loop+0x40/0x90 [ 1009.487090][ T5779] ? clear_bhb_loop+0x40/0x90 [ 1009.491806][ T5779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1009.497750][ T5779] RIP: 0033:0x7fc87b39c117 [ 1009.502189][ T5779] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1009.521845][ T5779] RSP: 002b:00007ffdeafcaa08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1009.530301][ T5779] RAX: 0000000000000000 RBX: 00007fc87b40471f RCX: 00007fc87b39c117 [ 1009.538312][ T5779] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdeafcaac0 [ 1009.546308][ T5779] RBP: 00007ffdeafcaac0 R08: 00007ffdeafcbac0 R09: 00000000ffffffff [ 1009.554298][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdeafcbb50 [ 1009.562303][ T5779] R13: 00007fc87b40471f R14: 00000000000fcbb6 R15: 00007ffdeafcbb90 [ 1009.570320][ T5779] [ 1009.640304][T23360] Remounting filesystem read-only [ 1009.724400][T23360] NILFS (loop2): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1009.744408][T23360] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1009.786075][T23360] NILFS (loop2): error -5 truncating bmap (ino=16) [ 1009.826874][ T5778] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1009.833905][ T5778] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1009.855729][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1009.882992][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1009.901651][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1009.916251][ T5778] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1009.952038][T23349] loop1: detected capacity change from 0 to 40427 [ 1009.989318][T23349] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1010.014285][T23349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1010.067925][T23349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1010.161656][T23386] pimreg: entered allmulticast mode [ 1010.243345][T23349] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1010.261053][T23349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1010.353291][T23398] kAFS: unable to lookup cell '.,' [ 1010.423080][T23349] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 1010.610507][T23408] SET target dimension over the limit! [ 1010.967294][T23431] xt_TCPMSS: Only works on TCP SYN packets [ 1011.244476][ T5820] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1011.300670][T23457] tmpfs: Bad value for 'mpol' [ 1011.410491][ T1190] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1011.451342][ T5820] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1011.478094][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.517957][ T5820] usb 4-1: config 0 descriptor?? [ 1011.578922][T23472] loop0: detected capacity change from 0 to 256 [ 1011.587962][ T1190] usb 2-1: Using ep0 maxpacket: 16 [ 1011.607616][ T1190] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1011.628322][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.647403][T23472] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 1011.662580][ T1190] usb 2-1: Product: syz [ 1011.666796][ T1190] usb 2-1: Manufacturer: syz [ 1011.671422][ T1190] usb 2-1: SerialNumber: syz [ 1011.720833][ T1190] usb 2-1: config 0 descriptor?? [ 1011.777295][ T5820] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1011.815064][ T5820] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1011.937513][ T1190] usb 2-1: ignoring: not an USB2CAN converter [ 1011.959954][ T5820] [drm:udl_init] *ERROR* Selecting channel failed [ 1011.994618][ T5820] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1012.029648][ T5820] [drm] Initialized udl on minor 2 [ 1012.038899][ T5820] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1012.065193][ T5820] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1012.091191][T14524] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1012.111445][ T5820] usb 4-1: USB disconnect, device number 76 [ 1012.124510][T14524] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1012.159519][ T9] usb 2-1: USB disconnect, device number 73 [ 1012.520519][T23563] loop2: detected capacity change from 0 to 16 [ 1012.529140][T23563] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1012.598342][T23567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1012.618784][T23567] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1012.788712][T23574] loop3: detected capacity change from 0 to 2048 [ 1012.864062][T23583] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1013.115030][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1013.134445][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1013.540563][T23612] loop1: detected capacity change from 0 to 4096 [ 1013.594930][T23612] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1013.620435][T23612] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1013.667573][T23612] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1013.696172][T23631] loop0: detected capacity change from 0 to 128 [ 1013.707641][T23612] ntfs: volume version 3.1. [ 1013.728055][T23631] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1013.781373][T23612] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1014.005720][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1014.124282][T23650] netlink: 508 bytes leftover after parsing attributes in process `syz.1.7041'. [ 1014.540536][T23664] loop0: detected capacity change from 0 to 4096 [ 1014.564249][T23639] loop3: detected capacity change from 0 to 32768 [ 1014.596576][T23639] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.7038 (23639) [ 1014.643857][T23673] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1014.676011][T23639] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1014.729954][T23639] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1014.787455][T23639] BTRFS info (device loop3): force zlib compression, level 3 [ 1014.814866][T23639] BTRFS info (device loop3): turning on flush-on-commit [ 1014.837366][T23664] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 1014.847291][T23639] BTRFS info (device loop3): max_inline at 4096 [ 1014.863892][T23639] BTRFS info (device loop3): using free space tree [ 1015.002901][T23639] BTRFS info (device loop3): enabling ssd optimizations [ 1015.046815][T23639] BTRFS info (device loop3): auto enabling async discard [ 1015.130705][T23706] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1015.165456][T23706] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1015.189500][T23706] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1015.223975][T23706] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1015.233489][T23639] BTRFS error (device loop3): balance: mixed groups data and metadata options must be the same [ 1015.268002][T23706] geneve2: entered promiscuous mode [ 1015.361574][ T5785] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1015.500395][T23722] netlink: 'syz.2.7055': attribute type 1 has an invalid length. [ 1015.528430][T23722] netlink: 'syz.2.7055': attribute type 2 has an invalid length. [ 1015.716709][T23730] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1015.905442][T23742] overlayfs: missing 'workdir' [ 1015.932309][T13460] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (13460) [ 1016.285085][T23759] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7067'. [ 1016.637197][T23773] loop3: detected capacity change from 0 to 1764 [ 1017.131993][T23756] loop0: detected capacity change from 0 to 32768 [ 1017.139440][T23755] loop1: detected capacity change from 0 to 32768 [ 1017.170976][T23755] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1017.205042][T23756] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1017.311093][T23756] XFS (loop0): Ending clean mount [ 1017.391719][T23756] XFS (loop0): Quotacheck needed: Please wait. [ 1017.534540][T23756] XFS (loop0): Quotacheck: Done. [ 1017.535673][ T5795] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1017.822029][ T5779] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1018.128289][T23841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7086'. [ 1018.171195][T23841] veth2: entered promiscuous mode [ 1018.183734][T23841] veth2: entered allmulticast mode [ 1018.246493][T23847] netlink: 'syz.1.7087': attribute type 2 has an invalid length. [ 1018.292260][T23854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7088'. [ 1018.567009][T23860] loop0: detected capacity change from 0 to 4096 [ 1018.617769][T23873] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1018.693013][T23860] NILFS error (device loop0): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 1018.740453][T23860] Remounting filesystem read-only [ 1019.230609][T23906] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1019.679572][T23944] vlan0: entered promiscuous mode [ 1020.558542][T23997] Cannot find add_set index 3 as target [ 1020.736908][T23994] loop3: detected capacity change from 0 to 8192 [ 1020.767738][T23994] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1020.792159][T23994] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1020.834717][T23994] REISERFS (device loop3): using ordered data mode [ 1020.875165][T23994] reiserfs: using flush barriers [ 1020.896775][T23994] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1020.977627][T23994] REISERFS (device loop3): checking transaction log (loop3) [ 1021.276916][T23994] REISERFS (device loop3): Using tea hash to sort names [ 1021.305367][T23994] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1021.407615][ T5865] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1021.613931][ T5865] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1021.637475][ T5865] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1021.658814][ T5865] usb 1-1: config 0 has no interface number 0 [ 1021.671442][ T5865] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1021.683595][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.723904][ T5865] usb 1-1: Product: syz [ 1021.728363][ T5865] usb 1-1: Manufacturer: syz [ 1021.752474][ T5865] usb 1-1: SerialNumber: syz [ 1021.765230][ T5865] usb 1-1: config 0 descriptor?? [ 1021.859677][T24062] loop1: detected capacity change from 0 to 256 [ 1021.958423][T24066] loop3: detected capacity change from 0 to 2048 [ 1021.962875][T24062] FAT-fs (loop1): Directory bread(block 64) failed [ 1022.014349][T24062] FAT-fs (loop1): Directory bread(block 65) failed [ 1022.035559][T24066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1022.044843][T24062] FAT-fs (loop1): Directory bread(block 66) failed [ 1022.068162][T24062] FAT-fs (loop1): Directory bread(block 67) failed [ 1022.081906][T24062] FAT-fs (loop1): Directory bread(block 68) failed [ 1022.098462][T24062] FAT-fs (loop1): Directory bread(block 69) failed [ 1022.114664][T24062] FAT-fs (loop1): Directory bread(block 70) failed [ 1022.131066][T24062] FAT-fs (loop1): Directory bread(block 71) failed [ 1022.144305][T24062] FAT-fs (loop1): Directory bread(block 72) failed [ 1022.151628][T24062] FAT-fs (loop1): Directory bread(block 73) failed [ 1022.163642][T24066] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 1022.183500][ T5865] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1022.214004][ T5865] usb 1-1: No valid video chain found. [ 1022.247983][ T5865] usb 1-1: USB disconnect, device number 74 [ 1022.332178][T24082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7145'. [ 1022.479811][T24091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7147'. [ 1022.515956][T24091] veth2: entered promiscuous mode [ 1022.521219][T24091] veth2: entered allmulticast mode [ 1022.901667][T24113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7151'. [ 1023.024124][T24086] loop3: detected capacity change from 0 to 32768 [ 1023.070705][T24117] netlink: 'syz.2.7153': attribute type 11 has an invalid length. [ 1023.100308][T24117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1023.320279][T24104] loop1: detected capacity change from 0 to 32768 [ 1023.468114][T24104] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1023.589440][T24104] (syz.1.7149,24104,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=32, inode=17057, rec_len=4095, name_len=0 [ 1023.612714][T24141] dvmrp0: left allmulticast mode [ 1023.622566][T24141] pimreg: left allmulticast mode [ 1023.698877][T24104] (syz.1.7149,24104,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1023.763995][T24104] (syz.1.7149,24104,0):ocfs2_mknod:298 ERROR: status = -2 [ 1023.788295][T24104] (syz.1.7149,24104,0):ocfs2_mknod:502 ERROR: status = -2 [ 1023.810837][T24104] (syz.1.7149,24104,0):ocfs2_create:676 ERROR: status = -2 [ 1023.936729][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 1024.199699][T24158] loop0: detected capacity change from 0 to 4096 [ 1024.432344][T24173] loop1: detected capacity change from 0 to 256 [ 1024.503700][T24173] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1024.828259][T24191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.853871][T24191] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 1024.893129][T24191] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 1025.468702][ T23] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1025.478186][T14524] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1025.664999][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1025.703758][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.711557][T14524] usb 3-1: Using ep0 maxpacket: 8 [ 1025.723021][ T23] usb 4-1: Product: syz [ 1025.740105][ T23] usb 4-1: Manufacturer: syz [ 1025.744722][T14524] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.744846][T14524] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1025.791560][T14524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.807720][ T23] usb 4-1: SerialNumber: syz [ 1025.812591][T14524] usb 3-1: config 0 descriptor?? [ 1025.821377][T14524] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1025.902507][ T23] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1025.942334][T24275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7185'. [ 1025.948366][ T5865] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1026.175109][ C1] usb 4-1: ath: unknown panic pattern! [ 1026.238506][T14524] gspca_vc032x: reg_w err -71 [ 1026.271443][T14524] vc032x: probe of 3-1:0.0 failed with error -71 [ 1026.306031][T14524] usb 3-1: USB disconnect, device number 76 [ 1026.375196][ T9] usb 4-1: USB disconnect, device number 77 [ 1026.620078][T24304] x_tables: duplicate underflow at hook 2 [ 1026.955886][T24315] tmpfs: Bad value for 'mpol' [ 1026.998252][ T5865] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1027.005385][ T5865] ath9k_htc: Failed to initialize the device [ 1027.046125][T24318] loop0: detected capacity change from 0 to 8 [ 1027.090135][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 1027.367523][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1027.589481][T24347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.632313][T24347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.211610][T24324] loop3: detected capacity change from 0 to 32768 [ 1028.311943][T24324] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1028.440571][ T23] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1028.641410][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.673263][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.686611][T24343] loop0: detected capacity change from 0 to 40427 [ 1028.705469][ T23] usb 3-1: Product: syz [ 1028.709734][ T23] usb 3-1: Manufacturer: syz [ 1028.729320][T24343] F2FS-fs (loop0): heap/no_heap options were deprecated [ 1028.734655][ T23] usb 3-1: SerialNumber: syz [ 1028.736609][T24343] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x5 [ 1028.765021][ T23] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1028.805905][ T5865] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.826750][T24343] F2FS-fs (loop0): invalid crc value [ 1028.852623][T24343] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1028.887671][T24324] XFS (loop3): Ending clean mount [ 1028.949742][T24324] XFS (loop3): Quotacheck needed: Please wait. [ 1029.071408][T24343] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1029.088081][T24324] XFS (loop3): Quotacheck: Done. [ 1029.344594][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1029.508994][ T23] usb 3-1: USB disconnect, device number 77 [ 1029.573056][ T5779] syz-executor: attempt to access beyond end of device [ 1029.573056][ T5779] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1029.639806][ T5779] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1029.853485][T24431] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1029.958510][T24436] loop3: detected capacity change from 0 to 256 [ 1030.119769][ T5865] usb 3-1: Service connection timeout for: 256 [ 1030.137100][ T5865] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1030.152630][ T5865] ath9k_htc: Failed to initialize the device [ 1030.176269][ T23] usb 3-1: ath9k_htc: USB layer deinitialized [ 1030.682416][T24459] loop3: detected capacity change from 0 to 8192 [ 1030.746479][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1030.773368][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1030.806668][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1030.830176][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1030.850717][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1030.881021][T24478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7223'. [ 1030.900889][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1030.920438][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1030.963752][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1031.013936][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1031.049274][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1031.091497][T24459] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1031.172924][ T27] audit: type=1800 audit(973080993.776:66): pid=24459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7217" name="file2" dev="loop3" ino=1048636 res=0 errno=0 [ 1031.648092][T24514] snd_dummy snd_dummy.0: control 0:8:0:syz0:0 is already present [ 1031.838233][T24517] netlink: 'syz.3.7234': attribute type 21 has an invalid length. [ 1031.856311][T24517] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7234'. [ 1031.878128][T24517] netlink: 'syz.3.7234': attribute type 4 has an invalid length. [ 1031.894160][T24517] netlink: 'syz.3.7234': attribute type 5 has an invalid length. [ 1031.909497][T24517] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7234'. [ 1031.999001][T24493] loop0: detected capacity change from 0 to 32768 [ 1032.022506][T24493] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7227 (24493) [ 1032.073097][T24493] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1032.098609][T24493] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1032.131401][T24493] BTRFS info (device loop0): force clearing of disk cache [ 1032.145792][T24493] BTRFS info (device loop0): disabling free space tree [ 1032.167894][T24493] BTRFS info (device loop0): enabling auto defrag [ 1032.189884][T24493] BTRFS info (device loop0): max_inline at 0 [ 1032.204296][T24493] BTRFS info (device loop0): enabling disk space caching [ 1032.228356][T24493] BTRFS info (device loop0): disk space caching is enabled [ 1032.400165][T24493] BTRFS info (device loop0): enabling ssd optimizations [ 1032.437598][T24493] BTRFS info (device loop0): auto enabling async discard [ 1032.530196][T24512] loop2: detected capacity change from 0 to 40427 [ 1032.591946][T24512] F2FS-fs (loop2): invalid crc value [ 1032.658325][T24512] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1032.665204][T24493] BTRFS info (device loop0: state M): disabling disk space caching [ 1032.693752][T24493] BTRFS info (device loop0: state M): disabling free space tree [ 1032.727164][T24493] BTRFS error (device loop0: state M): cannot disable free space tree [ 1032.871074][T24512] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1032.913106][ T5779] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1033.169620][T13460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (13460) [ 1033.548535][T24588] bond1: entered promiscuous mode [ 1033.571657][T24588] bond1: entered allmulticast mode [ 1033.595752][T24588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1034.677061][T24674] ./file0: Can't open blockdev [ 1035.317904][T24658] loop0: detected capacity change from 0 to 32768 [ 1035.368359][T24658] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1035.667817][T24658] XFS (loop0): Ending clean mount [ 1035.704659][T24658] XFS (loop0): Quotacheck needed: Please wait. [ 1035.784695][T24700] loop1: detected capacity change from 0 to 32768 [ 1035.806938][T24700] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1035.872123][T24658] XFS (loop0): Quotacheck: Done. [ 1036.091400][T13460] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1036.144509][ T5779] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1036.391638][T24756] loop2: detected capacity change from 0 to 256 [ 1036.419523][T24759] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1036.445362][T24756] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1036.455501][T24759] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1036.497474][T24756] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1036.511572][T24759] netlink: 'syz.1.7288': attribute type 6 has an invalid length. [ 1036.526834][T24756] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1036.548440][T24756] UDF-fs: Scanning with blocksize 512 failed [ 1036.555116][T24759] netlink: 'syz.1.7288': attribute type 5 has an invalid length. [ 1036.565315][T24756] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1036.569488][T24759] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1036.590238][T24756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1037.315926][T24791] loop2: detected capacity change from 0 to 4096 [ 1037.332834][T24791] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1037.428380][T24797] bond1: entered promiscuous mode [ 1037.434778][T24797] bond1: entered allmulticast mode [ 1037.440816][T24797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1037.579880][T24791] ntfs3: loop2: failed to convert "c46c" to ascii [ 1037.703816][T24833] loop0: detected capacity change from 0 to 8 [ 1037.770692][T24833] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1037.794995][T24833] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1037.813601][T24833] SQUASHFS error: Failed to read block 0x8f: -5 [ 1037.821408][ T27] audit: type=1800 audit(973081000.904:67): pid=24833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7284" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1037.968658][T24778] loop1: detected capacity change from 0 to 32768 [ 1038.048006][T24778] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1038.297992][T24778] XFS (loop1): Ending clean mount [ 1038.308453][T24869] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1038.351315][T24778] XFS (loop1): Quotacheck needed: Please wait. [ 1038.461063][T24778] XFS (loop1): Quotacheck: Done. [ 1038.584773][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1039.526781][ T5865] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1039.629479][T24977] loop2: detected capacity change from 0 to 64 [ 1039.724504][ T5865] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1039.747681][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.766364][ T5865] usb 2-1: Product: syz [ 1039.776417][ T5865] usb 2-1: Manufacturer: syz [ 1039.779098][ T9] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1039.795770][ T5865] usb 2-1: SerialNumber: syz [ 1039.831283][ T5865] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1039.860699][ T1190] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1039.995242][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.015439][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 1040.034736][T24996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7330'. [ 1040.046532][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1040.086016][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 1040.112172][T16307] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1040.112919][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1040.167740][ C1] usb 2-1: ath: unknown panic pattern! [ 1040.216285][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1040.241858][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1040.254395][T25003] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1040.276778][ T9] usb 1-1: Manufacturer: syz [ 1040.299053][ T9] usb 1-1: config 0 descriptor?? [ 1040.381147][ T23] usb 2-1: USB disconnect, device number 74 [ 1040.544594][ T5865] usb 1-1: USB disconnect, device number 75 [ 1040.599921][T25030] loop3: detected capacity change from 0 to 256 [ 1040.643764][T25030] FAT-fs (loop3): Directory bread(block 64) failed [ 1040.651025][T25030] FAT-fs (loop3): Directory bread(block 65) failed [ 1040.663927][T25030] FAT-fs (loop3): Directory bread(block 66) failed [ 1040.670624][T25030] FAT-fs (loop3): Directory bread(block 67) failed [ 1040.680807][T25030] FAT-fs (loop3): Directory bread(block 68) failed [ 1040.689215][T25030] FAT-fs (loop3): Directory bread(block 69) failed [ 1040.707760][T25030] FAT-fs (loop3): Directory bread(block 70) failed [ 1040.721162][T25030] FAT-fs (loop3): Directory bread(block 71) failed [ 1040.728037][T25030] FAT-fs (loop3): Directory bread(block 72) failed [ 1040.743236][T25030] FAT-fs (loop3): Directory bread(block 73) failed [ 1040.848602][ T1190] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1040.888557][ T1190] ath9k_htc: Failed to initialize the device [ 1040.904415][ T23] usb 2-1: ath9k_htc: USB layer deinitialized [ 1041.655174][T25089] loop0: detected capacity change from 0 to 512 [ 1041.829630][T25089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.893352][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1041.948180][T25089] Quota error (device loop0): write_blk: dquota write failed [ 1041.968006][T25089] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1041.996886][T25089] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1042.018711][T25089] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.7352: Failed to acquire dquot type 1 [ 1042.056808][ T27] audit: type=1800 audit(973081005.455:68): pid=25089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7352" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1042.182243][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.408651][T25119] loop1: detected capacity change from 0 to 64 [ 1042.534910][T25119] Trying to free block not in datazone [ 1042.813932][T25135] loop0: detected capacity change from 0 to 64 [ 1042.856276][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7364'. [ 1042.986334][T25135] syz.0.7365: attempt to access beyond end of device [ 1042.986334][T25135] loop0: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 1043.020995][T25135] Buffer I/O error on dev loop0, logical block 117440531, async page read [ 1043.074272][T25135] syz.0.7365: attempt to access beyond end of device [ 1043.074272][T25135] loop0: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 1043.121327][T25135] Buffer I/O error on dev loop0, logical block 4274257920, async page read [ 1043.200418][T25135] syz.0.7365: attempt to access beyond end of device [ 1043.200418][T25135] loop0: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 1043.244159][T25135] Buffer I/O error on dev loop0, logical block 150994944, async page read [ 1043.263588][T25135] syz.0.7365: attempt to access beyond end of device [ 1043.263588][T25135] loop0: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 1043.299901][T25135] Buffer I/O error on dev loop0, logical block 117440531, async page read [ 1043.328044][ T27] audit: type=1800 audit(973081006.818:69): pid=25135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7365" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 1043.496129][T25159] netlink: 'syz.2.7370': attribute type 5 has an invalid length. [ 1043.539213][T25159] ip6erspan0: entered allmulticast mode [ 1043.778555][T25172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1043.972331][T25148] loop1: detected capacity change from 0 to 32768 [ 1044.050286][T25148] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1044.154589][T25148] (syz.1.7366,25148,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1044.191512][T25154] loop3: detected capacity change from 0 to 40427 [ 1044.219784][T25148] (syz.1.7366,25148,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1044.241259][T25154] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1044.248032][T25154] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1044.278458][T25148] (syz.1.7366,25148,0):ocfs2_mknod:298 ERROR: status = -2 [ 1044.285761][T25148] (syz.1.7366,25148,0):ocfs2_mknod:502 ERROR: status = -2 [ 1044.331579][T25148] (syz.1.7366,25148,1):ocfs2_mkdir:659 ERROR: status = -2 [ 1044.343378][T25154] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1044.507065][T25154] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1044.550763][T25201] netlink: 'syz.2.7382': attribute type 15 has an invalid length. [ 1044.552266][T25154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1044.588877][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 1044.754454][T25154] syz.3.7368: attempt to access beyond end of device [ 1044.754454][T25154] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 1044.872217][ T5785] syz-executor: attempt to access beyond end of device [ 1044.872217][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1044.902687][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1045.317272][T25233] C: renamed from team_slave_0 (while UP) [ 1045.370491][T25233] netlink: 'syz.0.7391': attribute type 1 has an invalid length. [ 1045.415106][T25233] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7391'. [ 1045.436588][T25233] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1046.791456][T25313] loop3: detected capacity change from 0 to 256 [ 1046.953929][T25313] FAT-fs (loop3): Directory bread(block 64) failed [ 1046.960638][T25313] FAT-fs (loop3): Directory bread(block 65) failed [ 1046.993662][T25313] FAT-fs (loop3): Directory bread(block 66) failed [ 1047.012219][T25313] FAT-fs (loop3): Directory bread(block 67) failed [ 1047.023937][T25313] FAT-fs (loop3): Directory bread(block 68) failed [ 1047.038973][T25313] FAT-fs (loop3): Directory bread(block 69) failed [ 1047.047429][T25313] FAT-fs (loop3): Directory bread(block 70) failed [ 1047.058557][T25313] FAT-fs (loop3): Directory bread(block 71) failed [ 1047.065783][T25313] FAT-fs (loop3): Directory bread(block 72) failed [ 1047.072343][T25313] FAT-fs (loop3): Directory bread(block 73) failed [ 1047.090549][T25326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1048.644142][T25366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1048.675637][T25366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1049.169997][T25356] loop2: detected capacity change from 0 to 32768 [ 1049.266835][T25356] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1049.449397][T25356] XFS (loop2): Ending clean mount [ 1049.470446][T25356] XFS (loop2): Quotacheck needed: Please wait. [ 1049.504470][T25411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1049.578155][T25356] XFS (loop2): Quotacheck: Done. [ 1049.835162][ T5778] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1049.885427][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7448'. [ 1050.082859][T25442] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1050.113498][T25442] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1050.439411][T25453] loop0: detected capacity change from 0 to 4096 [ 1050.471576][T25453] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1050.558625][T25467] netlink: 'syz.3.7459': attribute type 1 has an invalid length. [ 1050.593845][T25467] netlink: 'syz.3.7459': attribute type 3 has an invalid length. [ 1050.611011][T25467] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1050.679172][T25453] ntfs3: loop0: failed to convert "c46c" to cp869 [ 1051.227747][T14524] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1051.269318][T25508] xt_hashlimit: size too large, truncated to 1048576 [ 1051.364107][T25511] loop3: detected capacity change from 0 to 1764 [ 1051.405557][T14524] usb 3-1: Using ep0 maxpacket: 8 [ 1051.414393][T25511] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1051.431188][T14524] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1051.443681][T14524] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1051.471227][T14524] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.514343][T14524] usb 3-1: config 4 has no interface number 0 [ 1051.524325][T14524] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1051.553227][T14524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.563663][T14524] usb 3-1: Product: syz [ 1051.568939][T14524] usb 3-1: Manufacturer: syz [ 1051.574349][T14524] usb 3-1: SerialNumber: syz [ 1051.602726][T25523] openvswitch: netlink: Actions may not be safe on all matching packets [ 1051.799176][T14524] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 1051.818575][T14524] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 1051.826738][T14524] usb 3-1: No valid video chain found. [ 1051.836978][T14524] usb 3-1: USB disconnect, device number 78 [ 1052.283638][T25569] kernel read not supported for file /  (pid: 25569 comm: syz.3.7487) [ 1052.295544][ T27] audit: type=1800 audit(973081016.447:70): pid=25569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7487" name=200120 dev="mqueue" ino=55043 res=0 errno=0 [ 1052.684819][T25581] loop3: detected capacity change from 0 to 4096 [ 1052.719350][T25581] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1052.817798][T25596] loop1: detected capacity change from 0 to 512 [ 1052.889990][T25596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1052.921892][T25581] ntfs3: loop3: failed to convert "c46c" to cp869 [ 1052.968258][T25596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.183102][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.296274][ T23] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1053.423743][ T27] audit: type=1326 audit(973081017.649:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1053.482892][ T27] audit: type=1326 audit(973081017.649:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1053.505116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.539180][ T23] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1053.549026][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.557069][ T23] usb 1-1: Product: syz [ 1053.571509][ T27] audit: type=1326 audit(973081017.649:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1053.593896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.600395][ T23] usb 1-1: Manufacturer: syz [ 1053.613425][ T1190] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1053.621216][ T23] usb 1-1: SerialNumber: syz [ 1053.642215][ T23] usb 1-1: config 0 descriptor?? [ 1053.663040][ T23] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1053.674061][ T27] audit: type=1326 audit(973081017.649:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1053.811034][ T1190] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1053.832688][ T1190] usb 2-1: config 0 has no interface number 0 [ 1053.859266][ T1190] usb 2-1: config 0 interface 120 has no altsetting 0 [ 1053.877798][ T1190] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1053.891750][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.900342][ T1190] usb 2-1: Product: syz [ 1053.910273][ T1190] usb 2-1: Manufacturer: syz [ 1053.916817][ T1190] usb 2-1: SerialNumber: syz [ 1053.929947][ T1190] usb 2-1: config 0 descriptor?? [ 1054.044528][ T5865] usb 1-1: USB disconnect, device number 76 [ 1054.180091][ T1190] comedi comedi5: could not switch to alternate setting 1 [ 1054.180119][ T1190] usbduxfast 2-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1054.210796][ T1190] usb 2-1: USB disconnect, device number 75 [ 1054.345304][T25649] loop2: detected capacity change from 0 to 32768 [ 1054.375042][T25649] JBD2: Ignoring recovery information on journal [ 1054.402849][T25649] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1054.566991][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 1054.891849][T25689] loop3: detected capacity change from 0 to 2048 [ 1054.947142][T25689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1055.964778][T25702] loop1: detected capacity change from 0 to 32768 [ 1056.187702][T25754] loop2: detected capacity change from 0 to 8 [ 1056.226623][T25754] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1056.261181][T25754] SQUASHFS error: Failed to read block 0x91: -5 [ 1056.267536][T25754] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1056.313060][T25754] SQUASHFS error: Unable to read inode 0x11f [ 1056.399312][T25757] loop0: detected capacity change from 0 to 4096 [ 1056.429613][T25757] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1057.124038][T25803] netlink: 'syz.2.7544': attribute type 6 has an invalid length. [ 1057.375193][T25813] netlink: 'syz.2.7547': attribute type 3 has an invalid length. [ 1057.412777][T25813] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1057.837859][T25800] loop0: detected capacity change from 0 to 32768 [ 1057.894548][T25805] loop3: detected capacity change from 0 to 32768 [ 1057.914644][T25800] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1057.965460][T25805] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 1057.987888][T25805] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1058.066273][T25800] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 1058.085291][T25800] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1058.096507][T25800] OCFS2: File system is now read-only. [ 1058.102033][T25800] (syz.0.7541,25800,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1058.111554][T25800] (syz.0.7541,25800,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1058.119936][T25800] (syz.0.7541,25800,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1058.129178][T25800] (syz.0.7541,25800,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1058.138920][T25800] (syz.0.7541,25800,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1058.142685][T25805] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1058.149126][T25800] (syz.0.7541,25800,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1058.209640][ T1130] (kworker/u4:7,1130,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 1058.240546][T25800] (syz.0.7541,25800,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1058.263198][T25800] (syz.0.7541,25800,1):ocfs2_mknod:385 ERROR: status = -30 [ 1058.342916][T25800] (syz.0.7541,25800,1):ocfs2_mknod:502 ERROR: status = -30 [ 1058.380805][T25800] (syz.0.7541,25800,1):ocfs2_create:676 ERROR: status = -30 [ 1058.510504][T25805] syz.3.7545 (25805) used greatest stack depth: 18224 bytes left [ 1058.603131][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 1058.640017][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 1059.047174][T25858] loop0: detected capacity change from 0 to 164 [ 1059.113882][T25858] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1059.201826][T25847] loop1: detected capacity change from 0 to 32768 [ 1059.242272][T25865] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7560'. [ 1059.316314][T25847] jfs_strtoUCS: char2uni returned -22. [ 1059.318334][T25850] loop2: detected capacity change from 0 to 32768 [ 1059.352653][T25847] charset = cp932, char = 0xfc [ 1059.396404][T25850] JBD2: Ignoring recovery information on journal [ 1059.476436][T25879] netlink: 'syz.0.7562': attribute type 32 has an invalid length. [ 1059.725363][T25850] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1059.940724][ T27] audit: type=1800 audit(973081024.647:75): pid=25850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7557" name="file0" dev="loop2" ino=17058 res=0 errno=0 [ 1060.131347][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 1060.590591][ T5865] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1060.767565][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 1060.775996][ T5865] usb 2-1: config 127 has an invalid interface number: 102 but max is 2 [ 1060.790370][ T5865] usb 2-1: config 127 has no interface number 2 [ 1060.799907][ T5865] usb 2-1: config 127 interface 0 has no altsetting 0 [ 1060.819009][ T5865] usb 2-1: config 127 interface 1 has no altsetting 0 [ 1060.845746][ T5865] usb 2-1: config 127 interface 102 has no altsetting 0 [ 1060.867772][ T5865] usb 2-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 1060.890178][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.911847][ T5865] usb 2-1: Product: syz [ 1060.916090][ T5865] usb 2-1: Manufacturer: syz [ 1060.941027][ T5865] usb 2-1: SerialNumber: syz [ 1061.013707][T25978] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1061.184794][T25956] loop3: detected capacity change from 0 to 32768 [ 1061.235803][T25956] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1061.237249][ T5865] usb 2-1: selecting invalid altsetting 0 [ 1061.271087][ T5865] usb 2-1: Could not set interface, error -22 [ 1061.284333][ T5865] usb 2-1: selecting invalid altsetting 0 [ 1061.298918][ T5865] usb 2-1: Could not set interface, error -22 [ 1061.326931][ T5865] usb 2-1: USB disconnect, device number 76 [ 1061.449376][T25956] XFS (loop3): Ending clean mount [ 1061.477648][T25956] XFS (loop3): Quotacheck needed: Please wait. [ 1061.557461][T26017] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7586'. [ 1061.574545][T26017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7586'. [ 1061.596791][T25956] XFS (loop3): Quotacheck: Done. [ 1061.774481][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1061.983445][ T27] audit: type=1326 audit(973081026.848:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26033 comm="syz.1.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b619aeb9 code=0x7ffc0000 [ 1062.020677][ T27] audit: type=1326 audit(973081026.869:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26033 comm="syz.1.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b619aeb9 code=0x7ffc0000 [ 1062.043035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1062.100874][ T27] audit: type=1326 audit(973081026.869:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26033 comm="syz.1.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe8b619aeb9 code=0x7ffc0000 [ 1062.156857][ T27] audit: type=1326 audit(973081026.923:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26033 comm="syz.1.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b619aeb9 code=0x7ffc0000 [ 1062.179079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1062.304897][ T27] audit: type=1326 audit(973081026.923:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26033 comm="syz.1.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b619aeb9 code=0x7ffc0000 [ 1062.497277][T26044] loop0: detected capacity change from 0 to 4096 [ 1062.548533][T26044] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1062.588438][T26044] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1062.655280][T26044] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1062.693458][T26044] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1062.738776][T26044] ntfs: volume version 3.1. [ 1062.782548][T26064] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7600'. [ 1063.112698][T26075] loop3: detected capacity change from 0 to 4096 [ 1063.243535][T26075] ntfs: volume version 3.1. [ 1063.484381][T26098] loop0: detected capacity change from 0 to 512 [ 1063.559844][T26098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.901492][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.976132][T26122] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7616'. [ 1063.995462][T26099] loop2: detected capacity change from 0 to 32768 [ 1064.031083][T26099] (syz.2.7610,26099,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1064.058747][T26099] (syz.2.7610,26099,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1064.127672][T26099] JBD2: Ignoring recovery information on journal [ 1064.134683][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1064.259837][T26134] loop0: detected capacity change from 0 to 4096 [ 1064.292588][T26099] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1064.335997][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1064.353323][ T9] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1064.378625][T26134] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1064.409088][T26134] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1064.417787][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.447371][ T9] usb 4-1: New USB device found, idVendor=046b, idProduct=0000, bcdDevice= 0.00 [ 1064.456500][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.518346][ T9] usb 4-1: 0:2 : does not exist [ 1064.801288][ T9] usb 4-1: USB disconnect, device number 78 [ 1064.937233][T26171] loop0: detected capacity change from 0 to 512 [ 1064.974438][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 1064.990923][T26171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.209296][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.290973][T26155] loop1: detected capacity change from 0 to 32768 [ 1065.319763][T26155] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1065.543337][T13460] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1065.767757][T26204] netlink: 'syz.2.7629': attribute type 2 has an invalid length. [ 1065.981327][T26217] loop2: detected capacity change from 0 to 512 [ 1066.008863][T26217] FAT-fs (loop2): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 1067.046026][T26281] netlink: 'syz.2.7652': attribute type 10 has an invalid length. [ 1067.089688][T26281] veth1_macvtap: left promiscuous mode [ 1067.130748][T26281] bridge0: port 3(macsec0) entered blocking state [ 1067.152708][T26281] bridge0: port 3(macsec0) entered disabled state [ 1067.162654][T26281] macsec0: entered allmulticast mode [ 1067.182045][T26281] macsec0: entered promiscuous mode [ 1067.456709][ T1190] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1067.503627][T26311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7662'. [ 1067.662109][ T1190] usb 2-1: Using ep0 maxpacket: 8 [ 1067.681209][ T1190] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1067.689540][ T1190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.693237][T26317] netlink: 'syz.2.7664': attribute type 10 has an invalid length. [ 1067.725132][ T1190] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1067.728338][T26317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7664'. [ 1067.753459][ T1190] usb 2-1: config 1 has no interface number 0 [ 1067.770913][T26317] veth0_vlan: entered allmulticast mode [ 1067.777704][ T1190] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1067.792938][T26317] bridge0: port 4(veth0_vlan) entered blocking state [ 1067.800198][T26317] bridge0: port 4(veth0_vlan) entered disabled state [ 1067.808636][ T1190] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1067.823553][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.833920][T26317] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1067.858693][ T1190] usb 2-1: Product: syz [ 1067.862921][ T1190] usb 2-1: Manufacturer: syz [ 1067.876402][ T1190] usb 2-1: SerialNumber: syz [ 1067.892255][ T1190] cdc_wdm 2-1:1.128: skipping garbage [ 1067.902971][ T1190] cdc_wdm 2-1:1.128: invalid descriptor buffer length [ 1067.923084][ T1190] cdc_wdm: probe of 2-1:1.128 failed with error -22 [ 1068.031414][T26328] loop0: detected capacity change from 0 to 1024 [ 1068.061485][T26328] EXT4-fs: Ignoring removed orlov option [ 1068.136835][T26328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.179389][ T9] usb 2-1: USB disconnect, device number 77 [ 1068.518322][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.878277][T26382] netlink: 'syz.2.7680': attribute type 5 has an invalid length. [ 1069.172778][T26396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1069.352841][T26408] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1069.496635][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1069.496652][ T27] audit: type=1400 audit(973081034.898:81): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=26412 comm="syz.2.7690" [ 1070.049732][T26436] loop2: detected capacity change from 0 to 1024 [ 1070.052528][T26434] loop1: detected capacity change from 0 to 1764 [ 1070.063550][T26402] loop3: detected capacity change from 0 to 32768 [ 1070.083956][T26436] hfsplus: failed to load extents file [ 1070.100104][T26402] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1070.134610][ T5795] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1070.884914][ T27] audit: type=1326 audit(973081036.390:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1070.943632][ T27] audit: type=1326 audit(973081036.423:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.011210][ T27] audit: type=1326 audit(973081036.444:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.033486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.071653][T26472] openvswitch: netlink: Message has 245 unknown bytes. [ 1071.080459][ T27] audit: type=1326 audit(973081036.444:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.109672][T26472] openvswitch: netlink: Actions may not be safe on all matching packets [ 1071.132985][ T27] audit: type=1326 audit(973081036.444:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.208456][ T27] audit: type=1326 audit(973081036.455:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.266890][ T27] audit: type=1326 audit(973081036.455:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.303474][T26459] loop1: detected capacity change from 0 to 32768 [ 1071.310692][ T27] audit: type=1326 audit(973081036.476:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.332880][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.356074][ T27] audit: type=1326 audit(973081036.476:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1071.378279][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.424354][T26459] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1071.563776][T26463] loop0: detected capacity change from 0 to 32768 [ 1071.624001][T26463] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1071.636435][T26459] XFS (loop1): Ending clean mount [ 1071.688535][T26463] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1071.735178][ T144] (kworker/u4:5,144,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 1071.818560][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1071.833970][T26503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1071.865430][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1071.887141][T26503] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1071.903523][T26503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1071.936538][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1072.152019][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 1072.583743][T26528] nfs: Unknown parameter 'ntext' [ 1072.651458][T26531] loop3: detected capacity change from 0 to 128 [ 1072.692459][ T1191] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1072.701890][T26531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1072.742977][T26531] System zones: 1-3, 19-19, 35-36 [ 1072.758701][T26531] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1072.921449][ T1191] usb 2-1: Using ep0 maxpacket: 16 [ 1072.944997][ T1191] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1072.964693][ T1191] usb 2-1: config 254 has no interface number 0 [ 1072.971068][ T1191] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1072.996193][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1073.005347][ T1191] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1073.016599][ T1191] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1073.027086][ T1191] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1073.093338][ T1191] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1073.102460][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 1073.137324][ T1191] usb 2-1: Product: syz [ 1073.143818][ T1191] usb 2-1: Manufacturer: syz [ 1073.167970][ T1191] usb 2-1: SerialNumber: syz [ 1073.186900][T26516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1073.402722][T26516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1073.439684][ T1191] usbtest 2-1:254.235: Linux gadget zero [ 1073.445432][ T1191] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1073.621517][ T1191] usb 2-1: USB disconnect, device number 78 [ 1073.886879][T26603] loop2: detected capacity change from 0 to 4096 [ 1073.923991][T26608] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1074.034878][T26603] syz.2.7740: attempt to access beyond end of device [ 1074.034878][T26603] loop2: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1074.061064][T26603] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 1074.078168][T26614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1074.217062][T26619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1074.292422][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1074.292437][ T27] audit: type=1326 audit(973081040.051:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.350989][ T27] audit: type=1326 audit(973081040.094:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.404286][ T27] audit: type=1326 audit(973081040.094:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.462668][ T27] audit: type=1326 audit(973081040.094:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.518265][ T27] audit: type=1326 audit(973081040.094:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.589272][ T27] audit: type=1326 audit(973081040.094:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.623521][T26636] netlink: 'syz.0.7749': attribute type 10 has an invalid length. [ 1074.655658][ T27] audit: type=1326 audit(973081040.094:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.713422][ T27] audit: type=1326 audit(973081040.094:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.788016][ T27] audit: type=1326 audit(973081040.094:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.2.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd5739aeb9 code=0x7ffc0000 [ 1074.865365][T26636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.883406][T26636] team0: Port device bond0 added [ 1075.145010][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1075.541094][T26639] loop2: detected capacity change from 0 to 32768 [ 1075.633347][T26639] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1075.744390][T26639] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 1075.768310][T26639] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1075.786566][T26639] OCFS2: File system is now read-only. [ 1075.796225][T26639] (syz.2.7752,26639,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 1075.973406][T26691] netlink: 'syz.0.7766': attribute type 2 has an invalid length. [ 1076.056880][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 1076.405554][T26711] loop3: detected capacity change from 0 to 256 [ 1076.543121][T26714] loop1: detected capacity change from 0 to 4096 [ 1076.628931][T26724] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1076.712301][T26714] syz.1.7773: attempt to access beyond end of device [ 1076.712301][T26714] loop1: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1076.736660][T26714] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 1077.404476][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7788'. [ 1077.546711][ T5865] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1077.725723][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 1077.748072][ T5865] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1077.793445][ T5865] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1077.814870][ T5865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1077.828642][ T5865] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1077.863336][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.871425][ T5865] usb 1-1: Product: syz [ 1077.899763][ T5865] usb 1-1: Manufacturer: syz [ 1077.905037][ T5865] usb 1-1: SerialNumber: syz [ 1077.916461][ T5865] usb 1-1: config 0 descriptor?? [ 1077.963902][ T5865] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1078.113423][T26807] loop2: detected capacity change from 0 to 2048 [ 1078.139887][ T5865] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 1078.162601][ T5865] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1078.178433][ T5865] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 1078.190805][T26807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.274555][T26807] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.7800: bg 0: block 234: padding at end of block bitmap is not set [ 1078.352562][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.362296][T14524] usb 1-1: USB disconnect, device number 77 [ 1078.754800][ T27] audit: type=1326 audit(973081044.838:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26846 comm="syz.3.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5ff9aeb9 code=0x7ffc0000 [ 1078.869226][T26852] netlink: 'syz.3.7809': attribute type 21 has an invalid length. [ 1078.877179][T26852] netlink: 'syz.3.7809': attribute type 6 has an invalid length. [ 1078.920397][T26852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7809'. [ 1079.045908][T26862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7811'. [ 1079.535138][T26902] mmap: syz.0.7822 (26902): VmData 47947776 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1079.591029][T26904] loop3: detected capacity change from 0 to 256 [ 1079.687757][T13460] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1079.705177][T26904] nfs4: Unknown parameter 'fscontext' [ 1079.907028][T26913] loop2: detected capacity change from 0 to 4096 [ 1079.933059][T26913] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1080.138321][T26913] ntfs3: loop2: failed to convert "c46c" to iso8859-3 [ 1080.210251][T26932] netlink: 'syz.1.7830': attribute type 10 has an invalid length. [ 1080.287006][T26932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.322708][T26932] team0: Port device bond0 added [ 1080.452864][T26944] loop0: detected capacity change from 0 to 2048 [ 1080.508215][T26950] sctp: [Deprecated]: syz.1.7834 (pid 26950) Use of int in max_burst socket option deprecated. [ 1080.508215][T26950] Use struct sctp_assoc_value instead [ 1080.552462][T26944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.587399][T26956] loop2: detected capacity change from 0 to 64 [ 1080.611626][ T5865] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1080.640000][T26944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.7833: bg 0: block 234: padding at end of block bitmap is not set [ 1080.788203][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 1080.799468][ T5865] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1080.839887][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.870538][ T5865] usb 4-1: Product: syz [ 1080.883614][ T5865] usb 4-1: Manufacturer: syz [ 1080.901681][ T5865] usb 4-1: SerialNumber: syz [ 1080.921086][ T5865] r8152-cfgselector 4-1: config 0 descriptor?? [ 1080.949363][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.081102][T26974] loop0: detected capacity change from 0 to 8 [ 1081.129730][T26974] SQUASHFS error: Failed to read block 0x285: -5 [ 1081.136203][ T5865] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1081.153797][T26974] SQUASHFS error: Unable to read metadata cache entry [283] [ 1081.179870][T26974] SQUASHFS error: Unable to read symlink [8f:60] [ 1081.225523][T26980] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1081.253931][T26982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7841'. [ 1081.382141][T14524] usb 4-1: USB disconnect, device number 79 [ 1081.464488][T26998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7845'. [ 1081.491019][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7845'. [ 1081.927050][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1082.136185][T27035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7857'. [ 1082.600997][T27062] bridge1: entered promiscuous mode [ 1082.633188][T27062] bridge1: entered allmulticast mode [ 1083.168731][T27095] loop1: detected capacity change from 0 to 8 [ 1083.222812][T27097] netlink: 'syz.2.7876': attribute type 10 has an invalid length. [ 1083.226920][T27095] SQUASHFS error: xz decompression failed, data probably corrupt [ 1083.250663][T27095] SQUASHFS error: Failed to read block 0x108: -5 [ 1083.257078][T27095] SQUASHFS error: Unable to read metadata cache entry [106] [ 1083.273382][T27095] SQUASHFS error: Unable to read inode 0x11f [ 1083.324633][T27097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.347250][T27097] team0: Port device bond0 added [ 1083.733138][T27121] loop0: detected capacity change from 0 to 64 [ 1083.741360][ T1190] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1083.827353][T27072] loop3: detected capacity change from 0 to 40427 [ 1083.851651][T27072] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1083.876628][T27072] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1083.899614][T27072] F2FS-fs (loop3): invalid crc value [ 1083.932230][ T1190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1083.947116][T27072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1083.950726][ T1190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1083.968170][ T1190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 1083.979621][ T1190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1083.999149][ T1190] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1084.022391][ T1190] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1084.035656][ T1190] usb 2-1: Manufacturer: syz [ 1084.046724][ T1190] usb 2-1: config 0 descriptor?? [ 1084.055198][T27095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1084.091792][ T1190] smsusb:smsusb_probe: board id=9, interface number 0 [ 1084.111460][ T1190] smsusb:siano_media_device_register: media controller created [ 1084.127438][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.134852][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.142203][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.149544][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.156907][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.169624][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.176963][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.184259][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.191559][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.198861][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.206644][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.213938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.221200][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.228451][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.235723][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.243634][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.250986][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.258313][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.265655][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.272983][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.282163][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.289503][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.296824][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.304140][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.311450][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.320098][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.327453][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.334757][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.342400][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.349700][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.356475][T27072] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1084.359989][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.371322][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.378613][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.379346][T27072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1084.386168][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.386235][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.408899][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.416196][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.423465][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.430722][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.437977][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.446101][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.453434][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.460735][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.468048][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.475344][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.483015][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.490336][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.497645][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.504942][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.512227][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.521839][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.529207][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.536552][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.543914][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.551255][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.558596][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.571177][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.578524][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.585829][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.593121][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.600423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.607705][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.621455][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.628798][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.632343][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.636084][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.649731][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.657044][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.664335][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.673127][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.680444][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.687744][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.695041][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.702336][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.709603][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.717295][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.724597][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.731864][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.739128][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.746382][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.753631][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.761335][ T1190] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 1084.771289][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.771410][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.771503][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.771593][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.771682][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.771777][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.771867][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.771959][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.772049][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.772138][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.858745][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.866121][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.873428][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.880739][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.888061][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.895373][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.902689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.910021][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.917358][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.930454][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.937825][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.945227][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.952571][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.959948][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.967251][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.974540][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.981822][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.992126][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1084.999470][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.006802][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.014141][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.027706][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.035055][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.042407][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.049715][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.057025][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.064321][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.071626][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.078952][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.086258][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.094048][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.101371][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.108675][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.115975][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.123290][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.130597][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.137956][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.146254][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.153589][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.160902][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.168219][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.175539][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.182855][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.190195][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.197486][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.204763][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.213084][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.220399][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.227725][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.235037][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.242341][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.249670][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.256960][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.264254][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.271538][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.279652][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.286972][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.294263][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.301560][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.308856][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.316222][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.323513][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.330793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.338145][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.346482][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.353799][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.361124][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.368430][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.375734][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.383114][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.390401][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.397712][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.405008][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.414020][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.421359][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.428656][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.435966][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.443264][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.450575][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.457903][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.465464][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.472770][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.480916][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.488236][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.495542][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.502857][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.510168][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.517481][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.524793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.532144][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.541806][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.549579][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.556896][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.564190][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.571458][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.578727][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.586016][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.593286][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.600543][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.612929][ T1190] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 1085.621396][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.621500][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.621598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.621721][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.621813][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.621904][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.621995][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.622087][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.622173][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.689216][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.696549][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.703857][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.711153][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.718467][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.725774][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.733067][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.740455][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.747741][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.755366][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.762691][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.769979][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.777271][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.784555][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.791810][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.799056][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.806302][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.813554][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.821137][ T1190] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 1085.830099][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830208][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830304][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830397][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830486][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830582][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830670][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830770][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830865][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.830959][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.859967][T27147] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1085.861212][ T1190] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 1085.925259][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.932578][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.939886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.947191][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.954543][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.961867][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.969172][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.976486][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.987295][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1085.994617][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.007140][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.014479][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.021789][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.029096][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.036402][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.043709][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.051002][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.058283][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.066653][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.073981][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.081302][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.088598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.095920][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.103216][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.110499][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.117781][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.125412][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.132958][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.140282][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.147590][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.154906][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.162216][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.169532][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.176847][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.184144][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.192195][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.199508][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.206803][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.214098][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.221365][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.228614][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.235875][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.243127][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.250376][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.258633][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.265960][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.273253][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.280559][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.287857][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.295145][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.302848][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.310196][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.317510][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.324830][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.332147][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.339445][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.346756][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.363165][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.370507][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.377813][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.385114][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.392414][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.399728][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.407422][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.414728][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.422038][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.429339][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.436645][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.443938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.451240][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.458543][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.467390][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.474707][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.482041][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.489359][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.496669][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.503973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.511293][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.518598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.526296][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.534071][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.541382][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.548688][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.556008][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.563301][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.570610][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.577922][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.586301][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.593606][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 1086.600860][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.608156][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.615460][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.622757][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.630038][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.637362][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.646526][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.653903][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.661215][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 1086.668470][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.678988][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.687965][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.695612][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.704615][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.712138][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.719722][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.727386][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.735479][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.743074][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.760395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.767968][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.780129][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.788059][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.802710][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.810733][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.818504][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.826656][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.834256][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.841769][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.849456][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.857071][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.864720][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.872295][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.879856][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.887856][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.895555][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.903175][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.910791][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.919754][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.927808][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.935528][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.943153][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.950880][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.958492][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.966128][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.973633][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.981510][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1086.996839][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.004548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.012187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.020513][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.028080][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.035711][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.043345][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.051033][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.058690][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.066173][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.073752][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.081306][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.089060][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.096701][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.104248][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.112418][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.120066][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.127755][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.136185][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.143734][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.151440][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.159146][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.167091][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.174706][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.182521][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.190535][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.202723][T27159] loop1: detected capacity change from 0 to 1024 [ 1087.210578][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.220188][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.227868][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.236641][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.246120][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.257744][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.266013][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.282027][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.291183][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.298743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.306949][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.314583][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.322365][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.329979][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.337652][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.346051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.353700][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.361390][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.369759][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.377565][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.385233][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.392765][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.412547][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.420144][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.427719][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.435329][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.443012][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.450636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.458183][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.465860][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.473586][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.481302][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.494636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.502715][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.511050][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.518664][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.526238][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.533816][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.541364][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.548958][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.556557][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.565397][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.573467][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.581284][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.589471][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.597021][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.605052][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.612811][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.620452][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.628072][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.635792][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.643334][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.650979][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.658634][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.666306][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.673907][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.683023][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.690609][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.698327][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.720112][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.727718][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.735300][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.743179][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.750857][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.758442][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.766246][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.773910][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.784323][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.791922][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.799472][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.807049][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.814672][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.822493][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.830035][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1087.837593][ T1190] smsmdtv:smscore_unregister_device: exiting although not all buffers released. [ 1087.850416][ T1190] ------------[ cut here ]------------ [ 1087.850773][T27159] hfsplus: xattr searching failed [ 1087.855914][ T1190] ODEBUG: free active (active state 0) object: ffff88807d5a0688 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 1087.856929][ T1190] WARNING: CPU: 1 PID: 1190 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1087.885377][ T1190] Modules linked in: [ 1087.889370][ T1190] CPU: 1 PID: 1190 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1087.896972][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1087.907149][ T1190] Workqueue: usb_hub_wq hub_event [ 1087.912271][ T1190] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1087.918716][ T1190] Code: 4c 8b 4d 00 48 c7 c7 a0 8a 1c 8b 48 c7 c6 00 87 1c 8b 48 c7 c2 20 8c 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 8d 5a [ 1087.938440][ T1190] RSP: 0018:ffffc900049beb38 EFLAGS: 00010282 [ 1087.943999][T27167] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7892'. [ 1087.944739][ T1190] RAX: d790ad8decd70400 RBX: ffffffff974c95b8 RCX: 0000000000100000 [ 1087.961694][ T1190] RDX: ffffc90017669000 RSI: 0000000000099760 RDI: 0000000000099761 [ 1087.970957][ T1190] RBP: ffffffff8ac9f640 R08: ffffffff911be577 R09: 1ffffffff2237cae [ 1087.979028][ T1190] R10: dffffc0000000000 R11: fffffbfff2237caf R12: ffff88807d5a1000 [ 1087.987350][ T1190] R13: ffffffff871f3860 R14: ffff88807d5a0000 R15: ffff88807d5a0688 [ 1087.995500][ T1190] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1088.004599][ T1190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.011278][ T1190] CR2: 00007fc87c1456b8 CR3: 000000003077a000 CR4: 00000000003506e0 [ 1088.019365][ T1190] Call Trace: [ 1088.022729][ T1190] [ 1088.025752][ T1190] slab_free_freelist_hook+0xd2/0x1a0 [ 1088.031287][ T1190] ? smsusb_term_device+0x1ac/0x220 [ 1088.036609][ T1190] __kmem_cache_free+0xba/0x1e0 [ 1088.041541][ T1190] smsusb_term_device+0x1ac/0x220 [ 1088.046668][ T1190] smsusb_probe+0x17a0/0x1e50 [ 1088.051415][ T1190] ? s2255_print_cfg+0x1b0/0x1b0 [ 1088.056447][ T1190] ? smsusb1_detectmode+0x260/0x260 [ 1088.061727][ T1190] ? pm_runtime_enable+0xa7/0x2c0 [ 1088.068097][ T1190] ? __pm_runtime_set_status+0x8ab/0xb80 [ 1088.074023][ T1190] usb_probe_interface+0x5c9/0xb20 [ 1088.079216][ T1190] ? usb_register_driver+0x3d0/0x3d0 [ 1088.084616][ T1190] really_probe+0x25b/0xb20 [ 1088.089176][ T1190] ? pm_runtime_barrier+0x14b/0x1c0 [ 1088.094601][ T1190] __driver_probe_device+0x18c/0x330 [ 1088.099950][ T1190] driver_probe_device+0x4f/0x420 [ 1088.105123][ T1190] __device_attach_driver+0x2ca/0x510 [ 1088.110558][ T1190] bus_for_each_drv+0x252/0x2e0 [ 1088.115526][ T1190] ? coredump_store+0x90/0x90 [ 1088.120288][ T1190] ? bus_find_device+0x300/0x300 [ 1088.125338][ T1190] __device_attach+0x2c2/0x420 [ 1088.130219][ T1190] ? device_attach+0x20/0x20 [ 1088.134861][ T1190] ? kobject_uevent_env+0x363/0x8b0 [ 1088.140182][ T1190] ? do_raw_spin_unlock+0x121/0x230 [ 1088.145452][ T1190] bus_probe_device+0x180/0x260 [ 1088.150425][ T1190] device_add+0x85b/0xc20 [ 1088.154822][ T1190] usb_set_configuration+0x1a79/0x20c0 [ 1088.161598][ T1190] usb_generic_driver_probe+0x8d/0x150 [ 1088.167344][ T1190] usb_probe_device+0x13d/0x270 [ 1088.172261][ T1190] ? usb_register_device_driver+0x230/0x230 [ 1088.178248][ T1190] really_probe+0x25b/0xb20 [ 1088.182821][ T1190] ? pm_runtime_barrier+0x14b/0x1c0 [ 1088.188152][ T1190] __driver_probe_device+0x18c/0x330 [ 1088.193511][ T1190] driver_probe_device+0x4f/0x420 [ 1088.198644][ T1190] __device_attach_driver+0x2ca/0x510 [ 1088.204101][ T1190] bus_for_each_drv+0x252/0x2e0 [ 1088.209014][ T1190] ? coredump_store+0x90/0x90 [ 1088.213784][ T1190] ? bus_find_device+0x300/0x300 [ 1088.218816][ T1190] __device_attach+0x2c2/0x420 [ 1088.223674][ T1190] ? device_attach+0x20/0x20 [ 1088.228326][ T1190] ? kobject_uevent_env+0x363/0x8b0 [ 1088.233612][ T1190] ? do_raw_spin_unlock+0x121/0x230 [ 1088.238886][ T1190] bus_probe_device+0x180/0x260 [ 1088.243883][ T1190] device_add+0x85b/0xc20 [ 1088.248292][ T1190] usb_new_device+0xa3c/0x1660 [ 1088.253158][ T1190] ? usb_disconnect+0x8a0/0x8a0 [ 1088.259225][ T1190] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.264692][ T1190] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.270032][ T1190] hub_event+0x29bf/0x49f0 [ 1088.274594][ T1190] ? hub_post_resume+0x120/0x120 [ 1088.279650][ T1190] ? read_lock_is_recursive+0x20/0x20 [ 1088.285086][ T1190] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.290392][ T1190] ? process_scheduled_works+0x96f/0x15d0 [ 1088.296171][ T1190] ? process_scheduled_works+0x96f/0x15d0 [ 1088.302096][ T1190] process_scheduled_works+0xa5d/0x15d0 [ 1088.307817][ T1190] ? assign_work+0x430/0x430 [ 1088.312504][ T1190] ? assign_work+0x3d0/0x430 [ 1088.317316][ T1190] worker_thread+0xa55/0xfc0 [ 1088.322007][ T1190] kthread+0x2fa/0x390 [ 1088.326252][ T1190] ? pr_cont_work+0x560/0x560 [ 1088.331011][ T1190] ? kthread_blkcg+0xd0/0xd0 [ 1088.335730][ T1190] ret_from_fork+0x48/0x80 [ 1088.340214][ T1190] ? kthread_blkcg+0xd0/0xd0 [ 1088.344914][ T1190] ret_from_fork_asm+0x11/0x20 [ 1088.350933][ T1190] [ 1088.354189][ T1190] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1088.361514][ T1190] CPU: 1 PID: 1190 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1088.368991][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.379064][ T1190] Workqueue: usb_hub_wq hub_event [ 1088.384118][ T1190] Call Trace: [ 1088.387416][ T1190] [ 1088.390363][ T1190] dump_stack_lvl+0x18c/0x250 [ 1088.395089][ T1190] ? show_regs_print_info+0x20/0x20 [ 1088.400317][ T1190] ? load_image+0x400/0x400 [ 1088.404849][ T1190] panic+0x2dc/0x730 [ 1088.408769][ T1190] ? bpf_jit_dump+0xd0/0xd0 [ 1088.413301][ T1190] ? ret_from_fork_asm+0x11/0x20 [ 1088.418301][ T1190] __warn+0x2e0/0x470 [ 1088.422304][ T1190] ? debug_check_no_obj_freed+0x446/0x540 [ 1088.428051][ T1190] ? debug_check_no_obj_freed+0x446/0x540 [ 1088.433815][ T1190] report_bug+0x2be/0x4f0 [ 1088.438178][ T1190] ? debug_check_no_obj_freed+0x446/0x540 [ 1088.443924][ T1190] ? debug_check_no_obj_freed+0x446/0x540 [ 1088.449668][ T1190] ? debug_check_no_obj_freed+0x448/0x540 [ 1088.455426][ T1190] handle_bug+0xcf/0x120 [ 1088.459720][ T1190] exc_invalid_op+0x1a/0x50 [ 1088.464274][ T1190] asm_exc_invalid_op+0x1a/0x20 [ 1088.469163][ T1190] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1088.475533][ T1190] Code: 4c 8b 4d 00 48 c7 c7 a0 8a 1c 8b 48 c7 c6 00 87 1c 8b 48 c7 c2 20 8c 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 8d 5a [ 1088.495178][ T1190] RSP: 0018:ffffc900049beb38 EFLAGS: 00010282 [ 1088.501370][ T1190] RAX: d790ad8decd70400 RBX: ffffffff974c95b8 RCX: 0000000000100000 [ 1088.509369][ T1190] RDX: ffffc90017669000 RSI: 0000000000099760 RDI: 0000000000099761 [ 1088.517379][ T1190] RBP: ffffffff8ac9f640 R08: ffffffff911be577 R09: 1ffffffff2237cae [ 1088.525388][ T1190] R10: dffffc0000000000 R11: fffffbfff2237caf R12: ffff88807d5a1000 [ 1088.533398][ T1190] R13: ffffffff871f3860 R14: ffff88807d5a0000 R15: ffff88807d5a0688 [ 1088.541404][ T1190] ? smsusb_onresponse+0x890/0x890 [ 1088.546574][ T1190] ? smsusb_onresponse+0x890/0x890 [ 1088.551765][ T1190] slab_free_freelist_hook+0xd2/0x1a0 [ 1088.557181][ T1190] ? smsusb_term_device+0x1ac/0x220 [ 1088.562417][ T1190] __kmem_cache_free+0xba/0x1e0 [ 1088.567307][ T1190] smsusb_term_device+0x1ac/0x220 [ 1088.572365][ T1190] smsusb_probe+0x17a0/0x1e50 [ 1088.577091][ T1190] ? s2255_print_cfg+0x1b0/0x1b0 [ 1088.582095][ T1190] ? smsusb1_detectmode+0x260/0x260 [ 1088.587324][ T1190] ? pm_runtime_enable+0xa7/0x2c0 [ 1088.592376][ T1190] ? __pm_runtime_set_status+0x8ab/0xb80 [ 1088.598040][ T1190] usb_probe_interface+0x5c9/0xb20 [ 1088.603183][ T1190] ? usb_register_driver+0x3d0/0x3d0 [ 1088.608503][ T1190] really_probe+0x25b/0xb20 [ 1088.613031][ T1190] ? pm_runtime_barrier+0x14b/0x1c0 [ 1088.618260][ T1190] __driver_probe_device+0x18c/0x330 [ 1088.623588][ T1190] driver_probe_device+0x4f/0x420 [ 1088.628634][ T1190] __device_attach_driver+0x2ca/0x510 [ 1088.634030][ T1190] bus_for_each_drv+0x252/0x2e0 [ 1088.638912][ T1190] ? coredump_store+0x90/0x90 [ 1088.643612][ T1190] ? bus_find_device+0x300/0x300 [ 1088.648758][ T1190] __device_attach+0x2c2/0x420 [ 1088.653568][ T1190] ? device_attach+0x20/0x20 [ 1088.658178][ T1190] ? kobject_uevent_env+0x363/0x8b0 [ 1088.663420][ T1190] ? do_raw_spin_unlock+0x121/0x230 [ 1088.668650][ T1190] bus_probe_device+0x180/0x260 [ 1088.673558][ T1190] device_add+0x85b/0xc20 [ 1088.677915][ T1190] usb_set_configuration+0x1a79/0x20c0 [ 1088.683502][ T1190] usb_generic_driver_probe+0x8d/0x150 [ 1088.688995][ T1190] usb_probe_device+0x13d/0x270 [ 1088.693879][ T1190] ? usb_register_device_driver+0x230/0x230 [ 1088.699815][ T1190] really_probe+0x25b/0xb20 [ 1088.704350][ T1190] ? pm_runtime_barrier+0x14b/0x1c0 [ 1088.709585][ T1190] __driver_probe_device+0x18c/0x330 [ 1088.714898][ T1190] driver_probe_device+0x4f/0x420 [ 1088.719953][ T1190] __device_attach_driver+0x2ca/0x510 [ 1088.725356][ T1190] bus_for_each_drv+0x252/0x2e0 [ 1088.730261][ T1190] ? coredump_store+0x90/0x90 [ 1088.734982][ T1190] ? bus_find_device+0x300/0x300 [ 1088.739994][ T1190] __device_attach+0x2c2/0x420 [ 1088.744816][ T1190] ? device_attach+0x20/0x20 [ 1088.749465][ T1190] ? kobject_uevent_env+0x363/0x8b0 [ 1088.754709][ T1190] ? do_raw_spin_unlock+0x121/0x230 [ 1088.760001][ T1190] bus_probe_device+0x180/0x260 [ 1088.764904][ T1190] device_add+0x85b/0xc20 [ 1088.769296][ T1190] usb_new_device+0xa3c/0x1660 [ 1088.774133][ T1190] ? usb_disconnect+0x8a0/0x8a0 [ 1088.779042][ T1190] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.784284][ T1190] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.789535][ T1190] hub_event+0x29bf/0x49f0 [ 1088.794032][ T1190] ? hub_post_resume+0x120/0x120 [ 1088.799010][ T1190] ? read_lock_is_recursive+0x20/0x20 [ 1088.804417][ T1190] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.809645][ T1190] ? process_scheduled_works+0x96f/0x15d0 [ 1088.815400][ T1190] ? process_scheduled_works+0x96f/0x15d0 [ 1088.821161][ T1190] process_scheduled_works+0xa5d/0x15d0 [ 1088.826770][ T1190] ? assign_work+0x430/0x430 [ 1088.831389][ T1190] ? assign_work+0x3d0/0x430 [ 1088.836012][ T1190] worker_thread+0xa55/0xfc0 [ 1088.840697][ T1190] kthread+0x2fa/0x390 [ 1088.844789][ T1190] ? pr_cont_work+0x560/0x560 [ 1088.849486][ T1190] ? kthread_blkcg+0xd0/0xd0 [ 1088.854098][ T1190] ret_from_fork+0x48/0x80 [ 1088.858542][ T1190] ? kthread_blkcg+0xd0/0xd0 [ 1088.863151][ T1190] ret_from_fork_asm+0x11/0x20 [ 1088.867960][ T1190] [ 1088.871576][ T1190] Kernel Offset: disabled [ 1088.875976][ T1190] Rebooting in 86400 seconds..