last executing test programs: 2m56.199932884s ago: executing program 0 (id=6476): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 2m55.93256826s ago: executing program 0 (id=6480): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) 2m55.684573754s ago: executing program 0 (id=6483): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) 2m55.486940706s ago: executing program 0 (id=6488): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m53.504697642s ago: executing program 0 (id=6513): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m52.455493183s ago: executing program 0 (id=6523): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 2m36.346377356s ago: executing program 32 (id=6523): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 5.874283726s ago: executing program 2 (id=8451): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) 5.268162552s ago: executing program 2 (id=8448): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 2.935230309s ago: executing program 1 (id=8476): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x2, 0x4) 2.934444368s ago: executing program 2 (id=8477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), 0x0}, 0x20) 2.835186225s ago: executing program 1 (id=8478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x20, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2.723077061s ago: executing program 1 (id=8479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) capget(0x0, 0x0) 2.540978331s ago: executing program 1 (id=8481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, 0x0, &(0x7f0000000ac0)=""/68}, 0x20) 2.326430264s ago: executing program 1 (id=8483): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) 2.016231872s ago: executing program 1 (id=8487): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.399952688s ago: executing program 2 (id=8493): r0 = socket(0x15, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 1.208379589s ago: executing program 2 (id=8495): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000001c0)='./file1\x00', 0x4040, &(0x7f0000000580)=ANY=[], 0x4, 0xfc0, &(0x7f0000002240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) 1.208177119s ago: executing program 3 (id=8496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1.100402066s ago: executing program 4 (id=8497): r0 = fanotify_init(0x0, 0x80000) fanotify_mark(r0, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 1.02154631s ago: executing program 3 (id=8498): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1260}}], 0x1, 0x20000010) 847.04295ms ago: executing program 3 (id=8499): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4008, 0x3, 0x240, 0xd8, 0x500b, 0x148, 0xd8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 846.289211ms ago: executing program 4 (id=8507): r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x10f, 0x1d, 0x0, &(0x7f0000000640)) 716.422088ms ago: executing program 4 (id=8500): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x70, 0x30, 0x9, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800, 0x0, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) 696.70169ms ago: executing program 4 (id=8501): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80404531, 0x0) 522.60648ms ago: executing program 4 (id=8502): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000) 522.48578ms ago: executing program 3 (id=8503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000015c0)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x812}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x14) 465.402573ms ago: executing program 2 (id=8504): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000380)=ANY=[], 0xfe, 0x152b, &(0x7f0000003e00)="$eJzs3AuYjtX6MPB1r7Uehia9TXIY1r3uhzcNlkmSHJLkkCRJkuSUJGmSJCEx5JQ0JCHHSZPDEJJTY9I4nw85J022NEkSklNY38Wubfe1/+39/3bf3//ac/+ua12z7vd57/Xez9xzzbue571mvus2vE6zujWbEJH4t8BfvyQLIWKEEIOFENcIIQIhRMW4inEXj+dTkPzvvQj7cz2UfqUrYFcS9z934/7nbtz/3I37n7tx/3M37n/uxv3P3bj/jOVmW2YUvZZH7h18/z834/f//yA55SZ8ta7c9d3/Gync/9yN+5+7cf9zkeD3D3H/czfuf+7G/f/Pd+cfHOP+/4eK+deexv1nLDf7273gc977/wX3o//skfd3n3H8egv6ytf2v2Fc4R8/xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGO5xGl/mRZC/Dq/0nUxxhhjjDHGGGPsz+PzXukKGGOMMcYYY4wx9v8fCCmU0CIQeUReESPyifziKhErrhYFxDUiIq4VceI6UVBcLwqJwqKIKCriRTFRXBiBwgoSoSghSoqouEGUEjeKBFFalBFlhRPlRKK4SZQXN4sK4hZRUdwqKonbRGVRRVQV1cTtorq4Q9QQd4qa4i5RS9QWdURdcbeoJ+4R9cW9ooG4TzQU94tG4gHRWDwomoiHRFPxsGgmHhHNxaOihWgpWonWos3/U/5Lopd4WfQWfUSy6Cv6iVdEfzFADBSDxGDxqhgiXhNDxesiRQwTw8UbYoR4U4wUb4lRYrQYI94WY8U4MV5MEBPFJJEq3hGTxbsiTbwnpoipYpqYLtLFDDFTvC9midlijvhAzBUfinlivlggFopF4iORIRaLTPGxWCI+EVliqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNost4lOxVWwT28UOsVPsErvFZ2KP+FzsFV+IbPHlfzP/1P+V3x0ECJAgQYOGPJAHYiAG8kN+iIVYKAAFIAIRiIM4KAgFoRAUgiJQBOIhHopDcUBAICAoASUgClEoBaUgARKgDJQBBw4SIRHKw81QASpARagIlaASVIYqUAWqQTWoDtWhBtSAmlATakEtqAN14G64G+6B+lAfGkADaAgNoRE0gsbQGJpAE2gKTaEZNIPm0BxaQAtoBa2gDbSBttAW2kE7aA/toQN0gI7QEZIgCTpBJ+gMnaELdIGu0BW6QTfoDj2gB7wEL8HL8DL0gVqyL/SDftAf+sNAGASD4FUYAq/Ba/A6pMAwGA5vwBvwJoyEkzAKRsMYGAPV5TgYDxOA5CRIhVSYDJMhDdJgCkyFqTAd0mEGzISZMAtmw2z4AObCh/AhzIf5sBAWwSLIgMWQCZmwBE5BFiyFZbAcVsBKWAGrYQ2shnWwHtbBRtgIm2EzfAqfwjbYBjtgB+yCXfAZfAafw+eQAtmQDftgH+yH/XAADkAO5MBBOAiH4BAchsNwBI7AUTgGx+EYnIATcBJOwWk4DWfhLJyDF+K/abqr9NoUIS/SUss8Mo+MkTEyv8wvY2WsLCALyIiMyDgZJwvKgrKQLCSLyCIyXsbL4rK4RImSZChLyBIyKqOylCwlE2SCLCPLSCedTJSJsrwsLyvICrKivFVWkrfJyrKKfMJVk9Vkddne1ZB3ypqypqwla8s6sq6sK+vJerK+rC8byAayoWwoG8kHZGPZFwbCQ/JiZ5rJYdBcDocWsqVsJVvLN+Ex2VaOhHbyCdlePilHwyjoKNu6JPmM7CTHQ2f5nJwAz8uuchJ0ky/K7rKH7Clfkr1kO9db9pFToK/sJ6dDfzlADpSD5CyoLS92rI58XabIYXK4fEMuhDflSPmWHCVHyzHybTlWjpPj5QQ5UU6SqfIdOVm+K9Pke3KKnCqnyekyXc6QM+X7cpacLefID+Rc+aGcJ+fLBXKhXCQ/khlyscyUH8sl8hOZJZfKZXK5XCFXylVytVwj18p1cr3cIDfKTXKz3CI/lVvlNrld7pA75S65W34m98jP5V75hcyWX8p98i9yv/xKHpBfyxz5jTwov5WH5HfysPxeHpE/yKPymDwuf5Qn5E/ypDwlT8sz8qz8WZ6T5+UF6aVQoKRSSqtA5VF5VYzKp/Krq1SsuloVUNeoiLpWxanrVEF1vSqkCqsiqqiKV8VUcWUUKqtIhaqEKqmi6gZVSt2oElRpVUaVVU6VU4nqJlVe3awqqFtURXWrqqRuU5VVFVVVVVO3q+rqDlVD3alqqrtULVVb1VF11d2qnrpH1Vf3qgbqPtVQ3a8aqQdUY/WgaqIeUk3Vw6qZekQ1V4+qFqqlaqVaqzbqMdVWPa7aBUII9aTqoJ5SHdXTKkk9ozqpZ1Vn9Zzqop5XXdULqpt6UXVXPVRPdV5dUF71Vn1Usuqr+qlXVH81QA1Ug9Rg9aoaol5TQ9XrKkUNU8PVG2qEelONVG+pUWq0GqPeVmPVODVeTVAT1SSVqt5Rk9W7Kk29p6aoqWqamq7S1Qw18JeV5vwL+e/+g/yhl159s9qiPlVb1Ta1Xe1QO9UutVvtVnvUHrVX7VXZKlvtU/vUfrVfHVAHVI7KUQfVQXVIHVKH1WF1RB1RR9UxdUb9qE6on9RJdUqdUmfUWXVWnfvleyA0aKmV1jrQeXReHaPz6fz6Kh2rr9YF9DU6oq/Vcfo6XVBfrwvpwrqILqrjdTFdXBuN2mrSoS6hS+qovkGX0jfqBF1al9FltdPldKK+6d/O/2f1tdFtdFvdVrfT7XR73V530B10R91RJ+kk3Ul30p11Z91Fd9FddVfdTXfT3XV33VP31L10L91b99bJOln306/o/nqAHqgH6cH6VT1ED9FD9VCdolP0cD1cj9Aj9Eg9Uo/So/QYPUaP1WP1eD1eT9QTdapO1ZP1ZJ2m0/QUPUVP09N0uk7XM/VMPUvP0nP0HD1Xz9Xz9Dy9QC/Qi/QinaEzdKbO1Ev0Ep2ll+qlerlerlfqlXq1Xq3X6rV6vV6vN+qNOktv0Vv0Vr1Vb9fb9U69U+/Wu/UevUfv1Xt1ts7W+/Q+vV/v1wf0AZ2jc/RBfVAf0of0YX1YH9FH9FF9VB/Xx/UJfUKf1Cf1aX1an9Vn9Tl9Tl/QFy5u+wIZyEAHOsgT5Aligpggf5A/iA1igwJBgSASRIK4IC4oGFwfFAoKB0WCokF8UCwoHpgAAxtQEAYlgpJBNLghKBXcGCQEpYMyQdnABeWCxOCmoHxwc1AhuCWoGNwaVApuCyoHVYKqQbXg9qB6cEdQI7gzqBncFdQKav/6OVRwT1A/uDdoENwXNAzuDxoFDwSNgweDJsFDQdPg4aBZ8EjQPHg0aBG0DFoFrYM2/+r6QZ2gbnB3UO8P1/f+ZOHHXW/TxySbvqafecX0NwPMQDPIDDavmiHmNTPUvG5SzDAz3LxhRpg3zUjzlhllRpsx5m0z1owz480EM9FMMqnmHTPZvGvSzHtmiplqppnpJt3MMDPN+2aWmW3mmA/MXPOhmWfmmwVmoVlkPjIZZrHJNB+bJeYTk2WWmmVmuVlhVppVZrVZY9aadWa92WA2mk1ms9liPjVbzTaz3ewwO80us9t8ZvaYz81e84XJNl+afeYvZr/5yhwwX5sc8405aL41h8x35rD53hwxP5ij5pg5bn40J8xP5qQ5ZU6bM+as+dmcM+fNBeMvbu4vvr2jRo15MA/GYAzmx/wYi7FYAAtgBCMYh3FYEAtiISyERbAIxmM8FsfieBEhYQksgVGMYikshQmYgGWwDDp0mIiJWB7LYwWsgBWxIlbCSlgZK2NVrIq34+14B96Bd+KdeBfehbWxNtbFulgP62F9rI8NsAE2xIbYCBthY2yMTbAJNsWm2AybYXNsji2wBbbCVtgG22BbbIvtsB22x/bYATtgR+yISZiEnbATdsbO2AW7YFfsit2wG3bH7tgTe2Iv7IW9z/TGZEzGftgP+2N/HIgDcTAOxiE4BIfiUEzBFByOw3EEjsCROBJH4Wgcg2/jWByH43ECTsRJmIqpOBknYxqm4RScgtNwGqZjOs7EmTgLZ+EcnINzcS7Ow3m4ABfgIlyEGZiBmZiJS3AJZmEWLsNluAJX4CpchWtwDa7DdbgBN+Am3IRbcAtuVVtxO27HnbgTd+Nu3IN7cC/uxWzMxn24D/fjfjyABzAHc/AgHsRDeAgP42E8gkfwKB7F43gcT+AJPIkn8TSexrP4M57D83gBPcZYKfLbq2ysvdoWsNfYGJvP/n1cxBa18baYLW6NLWQL/yZGa22CLW3L2LLW2XI20d70u7iyrWKr2mr2dlvd3mFr/C6uZ++x9e29toG9z9a1d/8mbmjvt43sI7axfdQ2sS1tU9vaNrOP2Ob2UdvCtrStbGvbwT5lO9qnbZJ9xnayz/4uzrCL7Rq71q6z6+0e+7k9bc/YQ/Y7e9b+bHvbPnawfdUOsa/ZofZ1m9Jg2G9jO8yOsW/bsXacHW8n2Il20u/iaXa6Tbcz7Ez7vp1lZ/8uXmQ/snNtpp1n59sFduGl+GJNmfZju8R+YrPsUrvMLrcr7Eq7yq7+W63L7Ua7yW62u+1ndqvdZrfbHXan3XUpvngee+0XNtt+aQ/ab+1++5U9YA/bHPvNpfji+R2239sj9gd71B6zx+2P9oT9yZ60py6d/8Vz/9Getxest4KAJCnSFFAeyksxlI/y01UUS1dTAbqGInQtxdF1VJCup0JUmIpQUYqnYlScDCFZIgqpBJWkKN1ApehGSqDSVIbKkqNylEg3UXm6mSrQLVSRbqVKdBtVpipUlarR7VSd7qAaWlBNuotqUW2qQ3XpbqpH91B9upca0H3UkO6nRvQANaYHqQk9RE3pYWpGj1BzepRaUEtqRa2pDT1GbelxakdPUHt6kjrQU9SRnqYkeoY60bPUmZ6jLvQ8daUXqBu9SN2pB/Wkl6gXvUy9qQ8lU1/qR69QfxpAA2kQDaZXaQi9RkPpdUqhYTSc3qAR9CaNpLdoFI2mMfQ2jaVxNJ4m0ESaRKn0Dk2mdymN3qMpNJWm0XRKpxk0k96nWTSb5tAHNJc+pHk0nxbQQlpEH1EGLaZM+piW0CeURUtpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCn9JW2kbbaQftpF20mz6jPfQ57aUvKJu+pH30F9pPX9EB+ppy6Bs6SN/SIfqODtP3dIR+oKN0jI7Tj3SCfqKTdIpO0xk6Sz/TOTpPF8iTCCGUoQp1GIR5wrxhTJgvzB9eFcaGV4cFwmvCSHhtGBdeFxYMrw8LhYXDImHRMD4sFhYPTYihDSkMwxJhyTAa3hCWCm8ME8LSYZmwbOjCcmFieFNYPrw5rBDeElYMbw0rhbeFlcMq4SP3VQtvD6uHd4Q1wjvDmuFdYa2wdlgnrBveHdYL7wnrh/eGDcL7wgrh/WGj8IGwcfhg2CR8KGwaPhw2Cx8Jm4ePhi3ClmGrsHXYJnwsbBs+HrYLnwjbh0+GHcKnwo7h02FS+EzYKXz2nx5PDvuG/cJXwldC7+9VC6ILo4uiH0UzooujmdGPo0uin0Szokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo97XzSscOOmU0y5weVxeF+PyufzuKhfrrnYF3DUu4q51ce46V9Bd7wq5wq6IK+riXTFX3BmHzjpyoSvhSrqou8GVcje6BFfalXFlnXPlXKJr7dq4Nq6te9y1c0+49u5J96R7yj3lnnZPu2dcJ/es6+yec13c866re8G94F503V0P19O95Hq5l11v18clu2TXz/Vz/V1/N9ANzPPLHswNdUNdiktxw91wN8KNcCPdSDfKjXJj3Bg31o114914N9FNdKku1U12k12aS3NT3BQ3zU1z6S7dzXQz3Sw3y81xc9zchLlunpvnFrgFbpFb5DJchst0mW6JW+KyXJZb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+q2uu1uu9vpdrrdbrfb4/a4vW6vy3bZbp/b5/a7/e6A+9rluG/cQfetO+S+c4fd9+6I+8EddcfccfejO+F+cifdKXfanXFn3c/unDvvLjjvUiPvRCZH3o2kRd6LTIlMjUyLTI+kR2ZEZkbej8yKzI7MiXwQmRv5MDIvMj+yIBIjhPgokhFZHMmMfBxZEvkkkhVZGlkWWR5ZEVkZ8b7Y1tCX8CV91N/gS/kbfYIv7cv4st75cj7R3+TL+5t9BX+Lr+hv9ZX8bb6yr+Kr+kd9C9/St/KtfRv/mG/rH/ft/BO+vX/Sd/BP+Y7+aZ/kn/Gd/LO+s3/Od/HP+67+Bd/Nv+i7+x6+p3/J9/Iv+96+j0/2fX0//4rv7wf4gX6QH+xf9UP8a36of92n+GF+uH/Dj/Bv+pH+LT/Kj/Zj/Nt+rB/nx/sJfqKf5FP9O35yvnd9mn/PT/FT/TQ/3af7GX6mf9/P8rP9HP+Bn+s/9PP8fL/AL/SL/Ec+wy/2mf5jv8R/4rP8Ur/ML/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Kd+q9/mt/sdfqff5Xf7z/we/7nf67/w2f5Lv8//xe/3X/kD/muf47/xB/23/pD/zh/23/sj/gd/1B/zx/2P/oT/yZ/0p/xpf8af9T/7c/68v8B/s8YYY4wx9i9JO/DHx/v+g8fkL+OifkKIq7cVzfn741oIsaHQX+cDZHyHiBDimT7dHvp11KqVnJz8y3OzlAhKzhdCRC7nX7oM+SVeKtqLp0SSeEKU/4f1DZA9ztIfrA9HvY/eKkT+v8u5uI//Nb68/s3/xfqPPTkmo1J4Ou6365/7Zb95sf7ofCESSl7OyScux5fXr/BfrF+47R/Vn6VEvq9ShWj3dzmx4nJ8ef1E8bh4ViT95pmMMcYYY4wxxthfDZBVu/yT689L1+fx+lJ46eG84m/xP70+Z4wxxhhjjDHG2JX3fI+eTz+WlPREF57whCc8+dvkSv9mYowxxhhjjP3ZLm/6r3QljDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY7vU/8e/ErvQ5MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1fa/wkAAP//jKQ7JQ==") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 284.471224ms ago: executing program 3 (id=8505): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 103.427544ms ago: executing program 3 (id=8506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0002000000000040000003000000000000080001"], 0x20}}, 0x0) 0s ago: executing program 4 (id=8508): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 838.934112][T22030] ip6tnl1: left allmulticast mode [ 838.952929][T22030] bond1: left allmulticast mode [ 838.965706][T22030] ip6gretap2: left allmulticast mode [ 838.980404][T22030] bond0: left allmulticast mode [ 838.995439][T22030] bond2: left allmulticast mode [ 839.012521][T22030] veth3: left allmulticast mode [ 839.023583][T22030] ip6tnl5: left allmulticast mode [ 839.078525][T22035] gretap1: entered allmulticast mode [ 839.154364][T22040] ip6tnl3: entered allmulticast mode [ 840.268280][T22078] loop3: detected capacity change from 0 to 512 [ 840.333510][T22078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 840.443369][T22078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.478831][T22078] ext4 filesystem being mounted at /1838/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.563049][T22078] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.7156: verity file corrupted; can't find descriptor [ 840.627906][T22078] EXT4-fs (loop3): Remounting filesystem read-only [ 840.660533][T22078] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 840.877728][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.942032][T22097] loop2: detected capacity change from 0 to 4096 [ 841.007522][T22097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.335497][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.922521][T22133] loop3: detected capacity change from 0 to 16 [ 841.953017][T22133] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 842.055743][T22131] loop1: detected capacity change from 0 to 4096 [ 843.141316][T22153] loop3: detected capacity change from 0 to 4096 [ 843.207672][T22153] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 843.257857][T22153] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 843.297404][T22153] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 843.351879][T22153] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 843.489325][T22153] ntfs: volume version 3.1. [ 843.499591][T22165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7190'. [ 843.671407][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.678000][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.056243][T22179] netlink: 'syz.4.7197': attribute type 11 has an invalid length. [ 844.089099][T22181] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 844.506280][T22196] SET target dimension over the limit! [ 844.947192][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7214'. [ 845.060867][T22216] xt_hashlimit: max too large, truncated to 1048576 [ 845.069313][T22216] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 845.885125][T22238] loop3: detected capacity change from 0 to 4096 [ 845.929707][T22238] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 846.079375][T22246] loop1: detected capacity change from 0 to 1764 [ 846.081537][T22242] loop4: detected capacity change from 0 to 8192 [ 846.137751][T22242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 846.172200][T22238] ntfs3: loop3: Failed to load $Extend (-22). [ 846.178375][T22238] ntfs3: loop3: Failed to initialize $Extend. [ 846.184724][T22242] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 846.189023][T22246] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 846.195190][T22242] REISERFS (device loop4): using ordered data mode [ 846.209232][T22242] reiserfs: using flush barriers [ 846.225489][T22242] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 846.243014][T22242] REISERFS (device loop4): checking transaction log (loop4) [ 846.275705][T22242] REISERFS (device loop4): Using rupasov hash to sort names [ 846.297443][T22244] loop2: detected capacity change from 0 to 8192 [ 846.312660][T22242] REISERFS (device loop4): using 3.5.x disk format [ 846.319498][T22242] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 846.386060][T22242] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 846.472330][T22242] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 846.512104][T22242] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 846.533191][T22244] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 846.568316][T22244] FAT-fs (loop2): Filesystem has been set read-only [ 846.621032][T22242] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 846.630647][T22251] ieee802154 phy0 wpan0: encryption failed: -22 [ 846.784745][T22242] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 846.857036][T22242] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 847.145422][T22259] binder: 22258:22259 ioctl 400c620e 200000000040 returned -22 [ 847.501133][T22274] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 848.161665][T22290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.736254][T22271] loop2: detected capacity change from 0 to 32768 [ 849.585700][T22339] netlink: 'syz.1.7271': attribute type 1 has an invalid length. [ 849.797183][T22344] netlink: 328 bytes leftover after parsing attributes in process `syz.3.7274'. [ 849.832838][T22345] netlink: 'syz.1.7275': attribute type 4 has an invalid length. [ 850.631041][T22372] loop4: detected capacity change from 0 to 2048 [ 850.661542][T22374] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.710059][T22372] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 850.742819][T22372] Remounting filesystem read-only [ 850.799696][ T5841] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 850.846942][ T28] audit: type=1326 audit(2000000173.133:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22377 comm="syz.2.7289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72499aeb9 code=0x7ffc0000 [ 850.930217][ T28] audit: type=1326 audit(2000000173.133:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22377 comm="syz.2.7289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72499aeb9 code=0x7ffc0000 [ 850.988141][ T28] audit: type=1326 audit(2000000173.151:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22377 comm="syz.2.7289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fa72499aeb9 code=0x7ffc0000 [ 851.017221][ T5841] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 851.042608][ T28] audit: type=1326 audit(2000000173.151:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22377 comm="syz.2.7289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72499aeb9 code=0x7ffc0000 [ 851.052721][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.140900][ T5841] usb 2-1: config 0 has no interface number 0 [ 851.176110][ T5841] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 851.213013][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.251076][ T5841] usb 2-1: config 0 descriptor?? [ 851.270775][ T5841] ttusbir 2-1:0.83: cannot find expected altsetting [ 851.501684][T22390] loop2: detected capacity change from 0 to 8192 [ 851.545739][T22390] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 851.545773][T22390] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 851.545905][T22390] REISERFS (device loop2): using ordered data mode [ 851.545917][T22390] reiserfs: using flush barriers [ 851.549614][T22390] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 851.550229][T22390] REISERFS (device loop2): checking transaction log (loop2) [ 851.680642][ T5841] usb 2-1: USB disconnect, device number 89 [ 851.864332][T22390] REISERFS (device loop2): Using tea hash to sort names [ 851.912050][T22390] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 852.343878][T22409] loop3: detected capacity change from 0 to 64 [ 853.740102][T22449] netlink: 'syz.4.7322': attribute type 2 has an invalid length. [ 853.786636][T22422] loop2: detected capacity change from 0 to 32768 [ 853.838406][T22422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.7310 (22422) [ 853.891552][T22422] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 853.922318][T22422] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 853.976550][T22422] BTRFS info (device loop2): enabling auto defrag [ 853.983439][T22422] BTRFS info (device loop2): turning on sync discard [ 854.019672][T22422] BTRFS info (device loop2): force clearing of disk cache [ 854.027185][T22422] BTRFS info (device loop2): using default commit interval 30s [ 854.100378][T22422] BTRFS info (device loop2): max_inline at 0 [ 854.119058][T22422] BTRFS info (device loop2): disabling free space tree [ 854.370420][T22422] BTRFS info (device loop2): enabling ssd optimizations [ 854.404491][T22422] BTRFS info (device loop2): rebuilding free space tree [ 854.495622][T22422] BTRFS info (device loop2): disabling free space tree [ 854.514276][T22422] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 854.543209][T22422] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 855.001990][ T5773] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 855.034693][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 855.280482][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 855.325356][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 855.355544][ T9] usb 2-1: config 0 has no interface number 0 [ 855.361954][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 855.424070][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 855.441040][T22502] netlink: 'syz.3.7341': attribute type 10 has an invalid length. [ 855.460263][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.471159][T22502] vlan0: left promiscuous mode [ 855.492882][T22502] vlan0: entered allmulticast mode [ 855.503547][ T9] usb 2-1: Product: syz [ 855.514446][T22502] veth0_vlan: entered allmulticast mode [ 855.520439][ T9] usb 2-1: Manufacturer: syz [ 855.536192][ T9] usb 2-1: SerialNumber: syz [ 855.580819][ T9] usb 2-1: config 0 descriptor?? [ 855.590974][T22489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 855.902614][T22489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 856.184051][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 856.224142][T22518] netlink: 'syz.2.7347': attribute type 1 has an invalid length. [ 856.234913][ T9] asix: probe of 2-1:0.188 failed with error -71 [ 856.267768][T22521] QAT: failed to copy from user cfg_data. [ 856.292627][ T9] usb 2-1: USB disconnect, device number 90 [ 856.702338][T22524] loop2: detected capacity change from 0 to 4096 [ 856.725596][T22524] EXT4-fs: Ignoring removed mblk_io_submit option [ 856.808251][T22532] loop4: detected capacity change from 0 to 64 [ 856.816241][T22524] EXT4-fs (loop2): Test dummy encryption mode enabled [ 856.904454][T22524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.069812][T22536] loop3: detected capacity change from 0 to 2048 [ 857.093857][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.980416][T22560] netlink: 'syz.3.7365': attribute type 1 has an invalid length. [ 858.954237][T22588] ipip0: entered allmulticast mode [ 859.714020][T22613] loop2: detected capacity change from 0 to 512 [ 859.804936][T22613] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 859.830873][T22613] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 859.888362][T22613] System zones: 0-1, 15-15, 18-18, 34-34 [ 859.931316][T22613] EXT4-fs (loop2): orphan cleanup on readonly fs [ 859.938295][T22613] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 859.995472][T22613] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 860.048705][T22613] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 860.105591][T22613] EXT4-fs (loop2): 1 truncate cleaned up [ 860.145780][T22613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 860.233724][T22613] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 860.412358][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.057391][T22654] loop1: detected capacity change from 0 to 512 [ 861.065103][T22598] loop3: detected capacity change from 0 to 32768 [ 861.101986][T22598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 861.146434][T22598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 861.188319][T22654] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 861.207794][T22654] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 861.232559][T22654] System zones: 0-1, 15-15, 18-18, 34-34 [ 861.252303][T22654] EXT4-fs (loop1): orphan cleanup on readonly fs [ 861.267432][T22654] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 861.297690][T22654] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 861.318503][T22598] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 861.352959][T22654] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 861.364985][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 861.372042][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 861.392858][T22654] EXT4-fs (loop1): 1 truncate cleaned up [ 861.413791][T22654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 861.576669][T22654] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 861.614324][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 226ms [ 861.642539][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 861.662817][ T5806] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 861.682434][T22598] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 861.723507][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.909661][ T5806] usb 5-1: Using ep0 maxpacket: 32 [ 861.952510][ T5806] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 861.961876][ T5806] usb 5-1: config 0 has no interface number 0 [ 862.034215][ T5806] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 862.108174][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.165169][ T5806] usb 5-1: Product: syz [ 862.172124][ T5806] usb 5-1: Manufacturer: syz [ 862.218783][ T5806] usb 5-1: SerialNumber: syz [ 862.262914][ T5806] usb 5-1: config 0 descriptor?? [ 862.308692][ T5806] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 862.765642][ T5806] gspca_sn9c2028: read1 error -71 [ 862.785926][ T5806] gspca_sn9c2028: read1 error -71 [ 862.791315][ T5806] sn9c2028: probe of 5-1:0.119 failed with error -71 [ 862.854371][ T5806] usb 5-1: USB disconnect, device number 5 [ 863.200928][T21076] Bluetooth: hci2: Malformed LE Event: 0x1d [ 863.625158][T22710] loop3: detected capacity change from 0 to 4096 [ 863.769093][T22710] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 863.819582][T22710] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 863.856025][T22722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7420'. [ 863.884316][T22710] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 863.965588][T22710] ntfs: volume version 3.1. [ 864.037071][T22710] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 864.464792][T22734] loop3: detected capacity change from 0 to 128 [ 864.505994][T22734] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 864.603046][T22734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 864.817319][T22743] xt_cgroup: xt_cgroup: no path or classid specified [ 864.985090][T22748] loop2: detected capacity change from 0 to 1024 [ 865.048096][T22748] EXT4-fs: Ignoring removed bh option [ 865.073240][T22748] EXT4-fs: inline encryption not supported [ 865.112246][T22748] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 865.158881][T22748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 865.224152][T22720] loop4: detected capacity change from 0 to 32768 [ 865.311848][T22748] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.7430: lblock 2 mapped to illegal pblock 2 (length 1) [ 865.349318][T22748] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 865.395163][T22748] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 48: comm syz.2.7430: lblock 0 mapped to illegal pblock 48 (length 1) [ 865.468819][T22748] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 865.507131][T22748] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.7430: Failed to acquire dquot type 0 [ 865.567391][T22748] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 865.618326][T22748] EXT4-fs error (device loop2): ext4_evict_inode:252: inode #11: comm syz.2.7430: mark_inode_dirty error [ 865.661344][T22748] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 865.693261][T22748] EXT4-fs (loop2): 1 orphan inode deleted [ 865.701015][T22748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.730012][ T12] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 865.819091][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 865.849484][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:1: Failed to release dquot type 0 [ 865.904587][T22748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.917355][T22748] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.7430: Invalid inode table block 1 in block_group 0 [ 865.972333][T22748] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 866.028573][T22748] EXT4-fs error (device loop2): ext4_quota_off:7233: inode #3: comm syz.2.7430: mark_inode_dirty error [ 867.361161][ T5806] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 867.401331][T22813] loop1: detected capacity change from 0 to 512 [ 867.477024][T22813] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 867.519705][T22813] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 867.563777][T22813] System zones: 0-1, 15-15, 18-18, 34-34 [ 867.572166][T22813] EXT4-fs (loop1): orphan cleanup on readonly fs [ 867.583961][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 867.613103][ T5806] usb 4-1: config 0 has no interfaces? [ 867.626798][ T5806] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 867.681614][T22813] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 867.691365][T22813] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 867.710582][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.730222][ T5806] usb 4-1: Product: syz [ 867.734601][ T5806] usb 4-1: Manufacturer: syz [ 867.745755][ T5806] usb 4-1: SerialNumber: syz [ 867.767251][T22813] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 867.786481][T22813] EXT4-fs (loop1): 1 truncate cleaned up [ 867.800657][T22813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 867.814581][ T5806] r8152-cfgselector 4-1: config 0 descriptor?? [ 867.922948][T22813] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 867.990438][T22815] loop4: detected capacity change from 0 to 32768 [ 868.018957][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.118102][ T5806] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 868.127096][T22815] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 868.250840][T22815] XFS (loop4): Ending clean mount [ 868.316283][T21074] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 868.394431][ T5806] usb 4-1: USB disconnect, device number 96 [ 868.494866][T22833] Non-string source [ 868.546720][T22835] ieee802154 phy0 wpan0: encryption failed: -90 [ 868.901340][T22842] netlink: 'syz.4.7455': attribute type 1 has an invalid length. [ 868.985004][T22843] xt_CT: No such helper "netbios-ns" [ 869.023466][T22846] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7461'. [ 869.512010][T22864] loop1: detected capacity change from 0 to 8 [ 869.519251][T22864] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 869.583436][T22864] cramfs: Error -3 while decompressing! [ 869.590965][ T5910] udevd[5910]: incorrect cramfs checksum on /dev/loop1 [ 869.627613][T22864] cramfs: ffffffff973f82f8(16)->ffff8880563e0000(4096) [ 869.680642][ T5910] udevd[5910]: incorrect cramfs checksum on /dev/loop1 [ 869.706375][T22864] cramfs: Error -3 while decompressing! [ 869.733882][T22864] cramfs: ffffffff973f82f8(16)->ffff8880563e0000(4096) [ 869.778969][ T28] audit: type=1800 audit(2000000190.849:583): pid=22864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7470" name="file0" dev="loop1" ino=244 res=0 errno=0 [ 869.855579][T22872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7474'. [ 870.112932][T22880] autofs4:pid:22880:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375) [ 870.156018][T22880] autofs4:pid:22880:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 870.452080][T22886] loop1: detected capacity change from 0 to 4096 [ 870.773446][T22886] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 870.904364][T22886] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 871.038450][ T5765] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 871.052815][T22904] loop3: detected capacity change from 0 to 4096 [ 871.253720][T22904] ntfs: volume version 3.1. [ 871.862537][T22922] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 872.159198][T22903] loop2: detected capacity change from 0 to 32768 [ 872.222555][T22903] XFS (loop2): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 872.354771][T22903] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2e5/0x11d0, inode 0x1803 dinode [ 872.385566][T22903] XFS (loop2): Unmount and run xfs_repair [ 872.391377][T22903] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 872.421550][T22903] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 872.439024][T22947] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7508'. [ 872.458928][T22903] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 872.487116][T22903] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 872.524498][T22903] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 872.533595][T22903] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 872.573905][T22903] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 872.602645][T22903] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 872.652745][T22903] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 872.875740][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 873.123252][T22964] program syz.1.7517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 873.511342][T22974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7522'. [ 873.707428][T22976] loop4: detected capacity change from 0 to 4096 [ 873.724994][T22976] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 873.974863][T22976] ntfs3: loop4: failed to convert "c46c" to cp869 [ 874.641451][T23006] netlink: 'syz.2.7538': attribute type 21 has an invalid length. [ 874.680837][T23006] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7538'. [ 874.706793][T23006] netlink: 'syz.2.7538': attribute type 4 has an invalid length. [ 874.721949][T23003] loop1: detected capacity change from 0 to 8192 [ 874.736986][T23006] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7538'. [ 874.823193][ T5910] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 875.208963][T23018] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7543'. [ 875.699871][T23032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 876.393560][T21076] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 876.459481][T23021] loop4: detected capacity change from 0 to 32768 [ 876.557524][T23021] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 876.579090][T23021] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 876.659434][T23021] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 876.685199][ T787] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 876.692156][ T787] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 876.727795][T23058] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 876.780071][ T787] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 82ms [ 876.787741][ T787] gfs2: fsid=syz:syz.0: jid=0: Done [ 876.809848][T23021] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 878.083632][T23099] netlink: 'syz.1.7580': attribute type 1 has an invalid length. [ 878.109247][T23099] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7580'. [ 878.397463][T23110] netlink: 'syz.3.7587': attribute type 5 has an invalid length. [ 878.774359][T23123] loop1: detected capacity change from 0 to 256 [ 879.381183][T23143] netlink: 4476 bytes leftover after parsing attributes in process `syz.1.7603'. [ 879.565736][T23148] loop2: detected capacity change from 0 to 16 [ 879.607164][T23148] erofs: (device loop2): mounted with root inode @ nid 36. [ 879.665232][T23148] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 879.700516][T23148] syz.2.7605: attempt to access beyond end of device [ 879.700516][T23148] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 879.785269][T23148] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 879.797082][T23156] loop3: detected capacity change from 0 to 256 [ 879.828429][T23148] syz.2.7605: attempt to access beyond end of device [ 879.828429][T23148] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 879.852993][T23156] exfat: Deprecated parameter 'utf8' [ 879.901063][T23148] syz.2.7605: attempt to access beyond end of device [ 879.901063][T23148] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 879.922263][T23156] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 879.958839][ T28] audit: type=1800 audit(2000000200.381:584): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7605" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 880.257580][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.286718][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.316672][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.340457][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.373114][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.392954][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.417198][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.457223][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.467983][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.500583][T23167] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 880.746921][T23179] netlink: 2184 bytes leftover after parsing attributes in process `syz.3.7621'. [ 880.785038][T23179] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7621'. [ 881.067757][T23185] bridge4: entered promiscuous mode [ 881.100020][T23185] bridge4: entered allmulticast mode [ 881.133228][T23166] loop4: detected capacity change from 0 to 32768 [ 881.269734][T23166] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 881.317238][T23198] loop2: detected capacity change from 0 to 8 [ 881.624846][T23166] XFS (loop4): Ending clean mount [ 881.652842][T23166] XFS (loop4): Quotacheck needed: Please wait. [ 881.686109][T23209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7631'. [ 881.795613][T23166] XFS (loop4): Quotacheck: Done. [ 881.827838][T23207] loop3: detected capacity change from 0 to 4096 [ 881.897688][T23207] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 882.035392][T21074] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 882.413651][T23217] tmpfs: Unknown parameter 'func' [ 883.596641][T23260] loop4: detected capacity change from 0 to 8 [ 883.632779][T23260] SQUASHFS error: Failed to read block 0x2d7: -5 [ 883.639018][T23261] loop2: detected capacity change from 0 to 256 [ 883.639590][T23260] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 883.691955][T23261] exfat: Deprecated parameter 'utf8' [ 883.712764][T23261] exfat: Deprecated parameter 'utf8' [ 883.754096][T23261] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 883.815825][T23265] loop1: detected capacity change from 0 to 16 [ 883.867640][T23265] erofs: (device loop1): mounted with root inode @ nid 36. [ 883.917960][T21076] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 883.929970][T23265] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 883.976278][ T28] audit: type=1800 audit(2000000204.132:585): pid=23265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7660" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 884.003993][T23269] xt_limit: Overflow, try lower: 2147483649/3300 [ 884.223112][T23275] i2c i2c-0: Invalid block write size 34 [ 884.454523][T23283] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7669'. [ 884.465913][ T5806] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 884.485823][T23285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7670'. [ 884.689055][ T5806] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 884.722336][ T5806] usb 3-1: config 0 has no interface number 0 [ 884.733134][ T5806] usb 3-1: config 0 interface 29 has no altsetting 0 [ 884.757548][ T5806] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 884.785991][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.807892][ T5806] usb 3-1: Product: syz [ 884.826755][ T5806] usb 3-1: Manufacturer: syz [ 884.837549][ T5806] usb 3-1: SerialNumber: syz [ 884.925068][ T5806] usb 3-1: config 0 descriptor?? [ 884.983180][T23297] loop4: detected capacity change from 0 to 1024 [ 885.043954][T23297] hfsplus: xattr searching failed [ 885.196331][ T5806] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v184 fw v210.0.0 (2 channels) [ 885.361001][T23301] loop3: detected capacity change from 0 to 4096 [ 885.396162][T23301] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 885.412238][ T5806] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 885.423174][T23303] overlayfs: conflicting options: metacopy=off,verity=on [ 885.435998][ T5806] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 885.450935][T23301] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 885.513511][T23304] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 885.564192][ T5806] peak_usb: probe of 3-1:0.29 failed with error -71 [ 885.603179][ T5806] usb 3-1: USB disconnect, device number 88 [ 885.729391][T23301] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 885.769465][T23281] loop1: detected capacity change from 0 to 40427 [ 885.796180][T23301] Remounting filesystem read-only [ 885.801388][T23281] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 885.809698][T23281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 885.848818][T23281] F2FS-fs (loop1): invalid crc value [ 885.872352][ T5768] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 885.888423][ T5768] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 885.904222][T23281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 885.931157][ T5768] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 885.951783][ T5768] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 885.980964][ T5768] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 886.026653][ T5768] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 886.052138][ T5768] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 886.061606][T23311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7682'. [ 886.082781][ T5768] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 886.103858][ T5768] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 886.132863][T23281] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 886.140130][ T5768] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 886.153866][T23281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 886.164638][ T5768] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 886.187082][ T5768] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 886.194349][ T5768] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 886.519702][T23320] validate_nla: 88 callbacks suppressed [ 886.519721][T23320] netlink: 'syz.2.7686': attribute type 1 has an invalid length. [ 886.627244][ T739] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 886.646876][T23324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7687'. [ 886.669159][ T739] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 886.967938][T23332] xt_TCPMSS: Only works on TCP SYN packets [ 887.175006][ T28] audit: type=1326 audit(2000000207.125:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.4.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 887.176221][T23340] loop2: detected capacity change from 0 to 22 [ 887.209171][ T28] audit: type=1326 audit(2000000207.153:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.4.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 887.257580][T23340] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 887.299034][ T28] audit: type=1326 audit(2000000207.153:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.4.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 887.317304][T23340] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 887.416745][ T28] audit: type=1326 audit(2000000207.153:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.4.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 887.482355][ T28] audit: type=1326 audit(2000000207.153:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.4.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 887.634824][T23344] loop4: detected capacity change from 0 to 64 [ 887.981036][T23352] loop4: detected capacity change from 0 to 512 [ 888.069551][T23352] EXT4-fs: Ignoring removed oldalloc option [ 888.149525][T23352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.163391][T23352] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 888.254974][T23336] loop3: detected capacity change from 0 to 32768 [ 888.334188][T23362] loop2: detected capacity change from 0 to 22 [ 888.359664][T23336] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 888.359664][T23336] [ 888.385295][T23362] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 888.391736][T21074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.405165][T23362] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 888.413007][T23336] ERROR: (device loop3): remounting filesystem as read-only [ 888.502303][T23362] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 888.667282][ T5806] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 888.712882][T23367] loop3: detected capacity change from 0 to 1024 [ 888.883211][T23371] No such timeout policy "syz0" [ 888.897920][ T5806] usb 2-1: Using ep0 maxpacket: 16 [ 888.929750][ T5806] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 888.960999][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.993532][ T5806] usb 2-1: Product: syz [ 888.998106][ T5806] usb 2-1: Manufacturer: syz [ 889.020224][ T5806] usb 2-1: SerialNumber: syz [ 889.043506][ T5806] usb 2-1: config 0 descriptor?? [ 889.054211][ T5806] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 889.145697][ T28] audit: type=1326 audit(2000000208.968:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23374 comm="syz.3.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 889.184776][T23376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7712'. [ 889.221477][T23376] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7712'. [ 889.235780][ T28] audit: type=1326 audit(2000000208.968:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23374 comm="syz.3.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 889.285401][T23376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7712'. [ 889.303730][ T28] audit: type=1326 audit(2000000208.977:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23374 comm="syz.3.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 889.326115][T23379] loop2: detected capacity change from 0 to 256 [ 889.328182][T23376] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7712'. [ 889.357796][T23379] exfat: Deprecated parameter 'namecase' [ 889.380285][T23379] exfat: Deprecated parameter 'utf8' [ 889.390555][T23379] exfat: Deprecated parameter 'utf8' [ 889.396651][T23379] exfat: Deprecated parameter 'namecase' [ 889.404185][ T28] audit: type=1326 audit(2000000208.977:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23374 comm="syz.3.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 889.417170][T23376] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7712'. [ 889.427830][ T28] audit: type=1326 audit(2000000208.977:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23374 comm="syz.3.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 889.517247][T23379] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 889.532241][ T5806] ssu100: probe of 2-1:0.0 failed with error -71 [ 889.546456][ T5806] usb 2-1: USB disconnect, device number 91 [ 889.711079][T23385] loop4: detected capacity change from 0 to 16 [ 889.737119][T23385] erofs: (device loop4): mounted with root inode @ nid 36. [ 889.797078][T23385] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 889.809348][T23385] syz.4.7716: attempt to access beyond end of device [ 889.809348][T23385] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 889.830361][T23385] erofs: (device loop4): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 889.841472][T23385] syz.4.7716: attempt to access beyond end of device [ 889.841472][T23385] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 889.857880][T23388] loop3: detected capacity change from 0 to 764 [ 889.876295][T23385] syz.4.7716: attempt to access beyond end of device [ 889.876295][T23385] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 890.190253][T23392] loop3: detected capacity change from 0 to 64 [ 890.513646][T23402] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 890.541756][T23405] ptrace attach of "./syz-executor exec"[5768] was attempted by "./syz-executor exec"[23405] [ 890.809303][T23408] loop4: detected capacity change from 0 to 8192 [ 890.877485][T23408] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 890.892312][T23408] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 890.912484][T23408] REISERFS (device loop4): using ordered data mode [ 890.919095][T23408] reiserfs: using flush barriers [ 890.959338][T23408] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 890.976722][T23408] REISERFS (device loop4): checking transaction log (loop4) [ 891.198915][T23408] REISERFS (device loop4): Using tea hash to sort names [ 891.228994][T23408] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 891.455070][T23431] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7738'. [ 892.211094][T23453] netlink: 'syz.4.7749': attribute type 3 has an invalid length. [ 892.234243][T23453] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7749'. [ 893.455793][T23499] loop4: detected capacity change from 0 to 164 [ 893.557461][T23505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7775'. [ 893.984746][T23517] xt_TCPMSS: Only works on TCP SYN packets [ 894.196571][T23525] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.248613][T23525] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.279367][T23525] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.299388][T23525] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.319499][T23525] geneve3: entered promiscuous mode [ 894.630845][T23543] cgroup: subsys name conflicts with all [ 894.769358][T23546] loop3: detected capacity change from 0 to 512 [ 894.878536][T23546] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 894.948193][T23551] loop4: detected capacity change from 0 to 128 [ 895.013623][T23551] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 895.091446][T23551] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 895.265657][T23551] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.7796: reserved inode found cleared - inode=2 [ 895.352567][T23563] ip6t_srh: unknown srh match flags 4001 [ 895.382189][ T5806] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 895.383932][T21074] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 895.428353][T23565] loop1: detected capacity change from 0 to 256 [ 895.470460][T23565] FAT-fs (loop1): Directory bread(block 64) failed [ 895.489380][T23565] FAT-fs (loop1): Directory bread(block 65) failed [ 895.496308][T23565] FAT-fs (loop1): Directory bread(block 66) failed [ 895.516907][T23565] FAT-fs (loop1): Directory bread(block 67) failed [ 895.537338][T23565] FAT-fs (loop1): Directory bread(block 68) failed [ 895.555010][T23565] FAT-fs (loop1): Directory bread(block 69) failed [ 895.573090][T23565] FAT-fs (loop1): Directory bread(block 70) failed [ 895.610067][T23565] FAT-fs (loop1): Directory bread(block 71) failed [ 895.628354][ T5806] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.648323][T23565] FAT-fs (loop1): Directory bread(block 72) failed [ 895.658996][ T5806] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.696394][T23565] FAT-fs (loop1): Directory bread(block 73) failed [ 895.709083][ T5806] usb 3-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 895.740232][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.759428][ T5806] usb 3-1: Product: syz [ 895.776270][ T5806] usb 3-1: Manufacturer: syz [ 895.787347][ T5806] usb 3-1: SerialNumber: syz [ 895.821751][ T5806] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 895.822408][T23572] loop4: detected capacity change from 0 to 1024 [ 895.828903][ T5806] cdc_mbim 3-1:1.0: bind() failure [ 895.969284][T23572] hfsplus: invalid file type 03755 for inode 20 [ 896.129046][T23578] loop1: detected capacity change from 0 to 128 [ 896.162852][ T9] usb 3-1: USB disconnect, device number 89 [ 896.181017][T23578] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 896.703806][T23592] loop1: detected capacity change from 0 to 2048 [ 896.728765][T23592] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 896.810760][T23598] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 897.206010][T23612] loop1: detected capacity change from 0 to 64 [ 898.101154][T23609] loop4: detected capacity change from 0 to 32768 [ 898.167152][T23609] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 898.247298][ T5910] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 899.126591][T23668] netlink: 'syz.1.7854': attribute type 1 has an invalid length. [ 899.508141][T23682] binder: 23681:23682 unknown command 1074553619 [ 899.529037][T23682] binder: 23681:23682 ioctl c0306201 200000000540 returned -22 [ 900.313775][T23712] loop2: detected capacity change from 0 to 256 [ 900.453673][T23717] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.7878'. [ 900.480398][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 900.489964][T23712] FAT-fs (loop2): Directory bread(block 64) failed [ 900.497527][T23712] FAT-fs (loop2): Directory bread(block 65) failed [ 900.523227][T23712] FAT-fs (loop2): Directory bread(block 66) failed [ 900.544536][T23712] FAT-fs (loop2): Directory bread(block 67) failed [ 900.551216][T23712] FAT-fs (loop2): Directory bread(block 68) failed [ 900.587061][T23712] FAT-fs (loop2): Directory bread(block 69) failed [ 900.594075][T23712] FAT-fs (loop2): Directory bread(block 70) failed [ 900.630997][T23712] FAT-fs (loop2): Directory bread(block 71) failed [ 900.637722][T23712] FAT-fs (loop2): Directory bread(block 72) failed [ 900.666956][T23712] FAT-fs (loop2): Directory bread(block 73) failed [ 900.716428][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 900.751815][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 900.781702][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.823942][ T8] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 900.862810][ T8] usb 5-1: config 1 has no interface number 1 [ 900.886585][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 900.919126][T23724] loop1: detected capacity change from 0 to 64 [ 900.956499][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 900.994099][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.034964][ T8] usb 5-1: Product: syz [ 901.046905][ T8] usb 5-1: Manufacturer: syz [ 901.057334][ T8] usb 5-1: SerialNumber: syz [ 901.355907][ T8] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 901.378344][ T8] usb 5-1: MIDIStreaming interface descriptor not found [ 901.431902][ T8] usb 5-1: USB disconnect, device number 6 [ 901.494079][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.517370][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 901.641278][T23739] loop2: detected capacity change from 0 to 4096 [ 901.662902][T23739] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 901.708700][T23739] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 901.723039][ T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 901.732612][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.760129][ T9] usb 4-1: config 0 descriptor?? [ 901.777950][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 902.144495][T23745] loop2: detected capacity change from 0 to 1024 [ 902.156729][T23745] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 902.182713][T23745] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 902.199603][T23745] EXT4-fs (loop2): journal inode is deleted [ 902.214263][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 902.225969][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 902.243476][ T9] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 902.273956][ T9] usb 4-1: USB disconnect, device number 97 [ 902.342334][T23749] loop4: detected capacity change from 0 to 8 [ 902.466365][T23751] loop1: detected capacity change from 0 to 512 [ 902.512962][T23751] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 902.533034][ T8] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 902.579655][T23751] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 902.598067][T23751] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.7894: bg 0: block 248: padding at end of block bitmap is not set [ 902.634665][T23751] __quota_error: 5 callbacks suppressed [ 902.634686][T23751] Quota error (device loop1): write_blk: dquota write failed [ 902.656704][T23751] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 902.671978][T23751] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.7894: Failed to acquire dquot type 1 [ 902.686885][T23758] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7896'. [ 902.688586][T23751] EXT4-fs (loop1): 1 truncate cleaned up [ 902.703622][T23751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 902.705378][T23758] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 902.777770][ T8] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 902.804649][ T28] audit: type=1800 audit(2000000221.745:601): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7894" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 902.825816][ T8] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 902.825858][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 902.846921][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 902.868500][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.903170][ T8] usb 3-1: Product: syz [ 902.917791][ T8] usb 3-1: Manufacturer: syz [ 902.932990][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 902.945161][T23760] netlink: 'syz.4.7898': attribute type 10 has an invalid length. [ 902.949035][ T8] usb 3-1: SerialNumber: syz [ 902.954231][T23760] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7898'. [ 902.958030][ T12] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 902.997573][ T8] usb 3-1: config 0 descriptor?? [ 903.007503][ T8] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 903.015385][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:1: Failed to release dquot type 1 [ 903.029718][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 903.040441][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 903.053377][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 903.065857][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 903.074879][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 903.102730][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 903.127523][T23762] netlink: 'syz.3.7897': attribute type 2 has an invalid length. [ 903.137624][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 903.153877][T23762] netlink: 'syz.3.7897': attribute type 8 has an invalid length. [ 903.177992][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 903.186835][T23762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7897'. [ 903.205813][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 903.242889][T23764] loop1: detected capacity change from 0 to 64 [ 903.260053][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 903.281435][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 903.302729][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 903.322578][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 903.365468][ T8] usb 3-1: USB disconnect, device number 90 [ 903.378151][T23764] syz.1.7899: attempt to access beyond end of device [ 903.378151][T23764] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 903.403118][T23766] loop4: detected capacity change from 0 to 256 [ 903.404735][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 903.446068][T23764] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 903.467323][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 903.515938][T23766] FAT-fs (loop4): Directory bread(block 64) failed [ 903.517297][ T8] keyspan 3-1:0.0: device disconnected [ 903.550692][T23766] FAT-fs (loop4): Directory bread(block 65) failed [ 903.557492][T23766] FAT-fs (loop4): Directory bread(block 66) failed [ 903.591469][T23766] FAT-fs (loop4): Directory bread(block 67) failed [ 903.606280][T23766] FAT-fs (loop4): Directory bread(block 68) failed [ 903.626756][T23766] FAT-fs (loop4): Directory bread(block 69) failed [ 903.633538][T23766] FAT-fs (loop4): Directory bread(block 70) failed [ 903.656508][T23766] FAT-fs (loop4): Directory bread(block 71) failed [ 903.672804][T23766] FAT-fs (loop4): Directory bread(block 72) failed [ 903.699939][T23766] FAT-fs (loop4): Directory bread(block 73) failed [ 904.105733][ T28] audit: type=1326 audit(2000000222.971:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.3.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 904.205249][ T28] audit: type=1326 audit(2000000222.971:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.3.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 904.243858][ T28] audit: type=1326 audit(2000000222.980:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.3.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 904.305875][ T28] audit: type=1326 audit(2000000222.980:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.3.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 904.385448][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7909'. [ 904.400628][ T28] audit: type=1326 audit(2000000222.980:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.3.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721db9aeb9 code=0x7ffc0000 [ 904.457704][T23784] loop3: detected capacity change from 0 to 2048 [ 904.538180][T23784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.676028][T23784] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 904.724784][T23784] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 904.863641][ T5832] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 904.994720][T23796] loop2: detected capacity change from 0 to 4096 [ 905.033794][T23796] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 905.079943][T23796] ntfs: volume version 3.1. [ 905.098892][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 905.123990][ T5832] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 905.152252][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.194053][ T5832] usb 5-1: config 0 descriptor?? [ 905.240243][ T5832] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 905.434089][T23802] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 905.493415][T23806] binder: BC_ACQUIRE_RESULT not supported [ 905.523102][T23806] binder: 23805:23806 ioctl c0306201 200000000040 returned -22 [ 905.692168][ T5832] gspca_nw80x: reg_r err -71 [ 905.708067][ T5832] nw80x: probe of 5-1:0.0 failed with error -71 [ 905.742462][ T5832] usb 5-1: USB disconnect, device number 7 [ 905.847200][ T8] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 906.052447][ T8] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 906.060905][ T5806] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 906.071549][ T8] usb 2-1: config 0 has no interface number 0 [ 906.088597][ T8] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 906.113475][ T8] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 906.133590][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.144363][ T8] usb 2-1: Product: syz [ 906.152604][ T8] usb 2-1: Manufacturer: syz [ 906.163405][ T8] usb 2-1: SerialNumber: syz [ 906.179923][ T8] usb 2-1: config 0 descriptor?? [ 906.196536][T23808] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 906.205351][ T8] usb-storage 2-1:0.20: USB Mass Storage device detected [ 906.227458][ T8] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 906.274708][ T5806] usb 3-1: Using ep0 maxpacket: 16 [ 906.287706][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.310113][ T5806] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 906.332720][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.348299][ T5806] usb 3-1: Product: syz [ 906.360152][ T5806] usb 3-1: Manufacturer: syz [ 906.370863][ T5806] usb 3-1: SerialNumber: syz [ 906.388332][ T5806] usb 3-1: config 0 descriptor?? [ 906.408093][ T5806] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 906.424368][ T5806] gspca_stv06xx: st6422 sensor detected [ 906.445811][ T8] scsi host1: usb-storage 2-1:0.20 [ 906.483005][T23814] set_capacity_and_notify: 1 callbacks suppressed [ 906.483025][T23814] loop3: detected capacity change from 0 to 32768 [ 906.663646][ T9] usb 2-1: USB disconnect, device number 92 [ 906.952726][ T5806] STV06xx: probe of 3-1:0.0 failed with error -71 [ 906.983075][ T5806] usb 3-1: USB disconnect, device number 91 [ 907.568741][T23843] loop4: detected capacity change from 0 to 2048 [ 907.616151][T23843] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 907.667137][T23848] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.856449][T23851] loop2: detected capacity change from 0 to 2048 [ 907.952839][T23857] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 908.054160][T23851] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 908.177710][T23851] Remounting filesystem read-only [ 909.122434][T23854] loop1: detected capacity change from 0 to 32768 [ 909.186105][T23854] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 909.325745][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 909.343180][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.471303][T23854] XFS (loop1): Ending clean mount [ 909.476177][T23903] netlink: 292 bytes leftover after parsing attributes in process `syz.4.7962'. [ 909.512325][T23854] XFS (loop1): Quotacheck needed: Please wait. [ 909.652489][T23854] XFS (loop1): Quotacheck: Done. [ 909.740626][T23907] loop4: detected capacity change from 0 to 8 [ 909.813862][T23907] SQUASHFS error: Failed to read block 0x738: -5 [ 909.820284][T23907] SQUASHFS error: Unable to read metadata cache entry [736] [ 909.983864][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 910.657338][T23929] loop2: detected capacity change from 0 to 764 [ 910.728601][T23929] rock: directory entry would overflow storage [ 910.736185][T23929] rock: sig=0x4f50, size=4, remaining=3 [ 910.741802][T23929] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 910.850482][T23937] netlink: 'syz.4.7979': attribute type 10 has an invalid length. [ 910.858384][T23937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7979'. [ 910.882319][T23937] veth0_vlan: entered allmulticast mode [ 910.909475][T23937] bridge0: port 3(veth0_vlan) entered blocking state [ 910.937286][T23937] bridge0: port 3(veth0_vlan) entered disabled state [ 910.955140][T23937] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 911.348032][T23949] loop1: detected capacity change from 0 to 1024 [ 911.557230][ T2880] hfsplus: b-tree write err: -5, ino 4 [ 911.933033][T23962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7991'. [ 912.180116][T23968] loop1: detected capacity change from 0 to 764 [ 912.194806][T23966] loop4: detected capacity change from 0 to 4096 [ 912.324479][T23966] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 912.347861][T23966] ntfs3: loop4: Failed to load $Extend (-22). [ 912.355322][T23966] ntfs3: loop4: Failed to initialize $Extend. [ 912.419395][T23947] loop2: detected capacity change from 0 to 32768 [ 912.524974][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 912.524992][ T28] audit: type=1400 audit(2000000230.838:607): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=23975 comm="syz.1.7996" [ 912.562048][T23947] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 912.727633][T23986] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8000'. [ 912.813559][T23947] XFS (loop2): Ending clean mount [ 912.885100][T23947] XFS (loop2): Quotacheck needed: Please wait. [ 913.017062][T23947] XFS (loop2): Quotacheck: Done. [ 913.112002][ T28] audit: type=1326 audit(2000000231.389:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.4.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 913.160516][ T28] audit: type=1326 audit(2000000231.389:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.4.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 913.223614][ T28] audit: type=1326 audit(2000000231.408:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.4.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 913.257691][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 913.287747][ T9] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 913.308579][ T28] audit: type=1326 audit(2000000231.408:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.4.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb8b9aeb9 code=0x7ffc0000 [ 913.473575][T24000] sit0: entered promiscuous mode [ 913.495719][T24000] netlink: 'syz.4.8007': attribute type 1 has an invalid length. [ 913.523402][T24000] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8007'. [ 913.530332][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 913.567320][ T9] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 913.611686][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.621378][ T9] usb 2-1: Product: syz [ 913.640544][ T9] usb 2-1: Manufacturer: syz [ 913.645310][ T9] usb 2-1: SerialNumber: syz [ 913.695141][ T9] usb 2-1: config 0 descriptor?? [ 913.708412][ T9] usbtouchscreen: probe of 2-1:0.0 failed with error -12 [ 913.927626][ T5806] usb 2-1: USB disconnect, device number 93 [ 914.024407][T24008] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 914.082597][T23996] loop3: detected capacity change from 0 to 32768 [ 914.148260][T23996] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 914.224189][T23996] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 914.372224][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 914.775907][T24030] loop2: detected capacity change from 0 to 1024 [ 914.818779][T24029] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.893912][T24029] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.007503][ T11] hfsplus: b-tree write err: -5, ino 4 [ 915.702618][T24058] loop1: detected capacity change from 0 to 16 [ 915.736625][T24058] erofs: (device loop1): mounted with root inode @ nid 36. [ 915.785911][T24058] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 915.815541][T24058] syz.1.8032: attempt to access beyond end of device [ 915.815541][T24058] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 915.870447][T24058] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 915.907521][T24058] syz.1.8032: attempt to access beyond end of device [ 915.907521][T24058] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 915.951647][T24058] syz.1.8032: attempt to access beyond end of device [ 915.951647][T24058] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 915.996258][ T28] audit: type=1800 audit(2000000234.083:612): pid=24058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8032" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 916.271618][T24072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 916.346148][T24074] loop2: detected capacity change from 0 to 16 [ 916.375193][T24052] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 916.389722][T24074] erofs: (device loop2): mounted with root inode @ nid 36. [ 916.422707][T24074] syz.2.8041: attempt to access beyond end of device [ 916.422707][T24074] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 916.489652][T24074] syz.2.8041: attempt to access beyond end of device [ 916.489652][T24074] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 916.930330][T24094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8050'. [ 917.051079][T24098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8053'. [ 917.646661][T24118] bridge4: entered promiscuous mode [ 917.853254][T24126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.965016][T24124] loop3: detected capacity change from 0 to 4096 [ 918.007388][T24124] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 918.199767][T24124] ntfs3: loop3: failed to convert "c46c" to iso8859-6 [ 918.239464][T24124] ntfs3: loop3: failed to convert "0030" to iso8859-6 [ 918.274584][T24124] ntfs3: loop3: failed to convert "0031" to iso8859-6 [ 919.088481][T24165] set match dimension is over the limit! [ 919.658367][T24187] loop3: detected capacity change from 0 to 64 [ 920.033586][ T8] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 920.181628][T24203] loop2: detected capacity change from 0 to 1024 [ 920.238998][ T8] usb 2-1: config 16 has an invalid interface number: 19 but max is 0 [ 920.255336][ T8] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 920.310141][ T8] usb 2-1: config 16 has no interface number 0 [ 920.334972][ T8] usb 2-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 920.376282][ T8] usb 2-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 920.418118][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.461826][ T8] usb 2-1: Product: syz [ 920.466112][ T8] usb 2-1: Manufacturer: syz [ 920.470775][ T8] usb 2-1: SerialNumber: syz [ 921.028887][ T8] usb 2-1: USB disconnect, device number 94 [ 921.097621][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.333231][T24230] loop3: detected capacity change from 0 to 512 [ 921.378828][T24230] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 921.500510][T24230] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 921.583587][T24230] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.8119: bg 0: block 248: padding at end of block bitmap is not set [ 921.661107][T24230] Quota error (device loop3): write_blk: dquota write failed [ 921.668673][T24230] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 921.723820][T24230] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.8119: Failed to acquire dquot type 1 [ 921.798154][T24230] EXT4-fs (loop3): 1 truncate cleaned up [ 921.809395][T24247] loop4: detected capacity change from 0 to 64 [ 921.810054][T24230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 921.938754][T24230] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 922.000618][T24230] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 922.065602][T24230] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.8119: Failed to acquire dquot type 1 [ 922.241853][T24253] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8128'. [ 922.297743][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 922.322441][T23387] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 922.359475][T23387] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 1 [ 922.769507][T24271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8137'. [ 922.790246][T24271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8137'. [ 923.335675][T24294] loop2: detected capacity change from 0 to 256 [ 923.461475][T24294] FAT-fs (loop2): Directory bread(block 64) failed [ 923.470609][T24294] FAT-fs (loop2): Directory bread(block 65) failed [ 923.492260][T24294] FAT-fs (loop2): Directory bread(block 66) failed [ 923.529474][T24294] FAT-fs (loop2): Directory bread(block 67) failed [ 923.561617][T24294] FAT-fs (loop2): Directory bread(block 68) failed [ 923.582907][T24294] FAT-fs (loop2): Directory bread(block 69) failed [ 923.594126][T24294] FAT-fs (loop2): Directory bread(block 70) failed [ 923.625608][T24294] FAT-fs (loop2): Directory bread(block 71) failed [ 923.632410][T24294] FAT-fs (loop2): Directory bread(block 72) failed [ 923.657750][T24294] FAT-fs (loop2): Directory bread(block 73) failed [ 924.162444][T24315] bridge4: entered promiscuous mode [ 924.167730][T24315] bridge4: entered allmulticast mode [ 924.234195][T24308] loop3: detected capacity change from 0 to 4096 [ 924.341927][ T5841] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 924.555768][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 924.574756][ T5841] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 924.609051][ T5841] usb 5-1: config 0 has no interface number 0 [ 924.633245][ T5841] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 924.666352][T24308] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 924.677117][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.719600][ T5841] usb 5-1: config 0 descriptor?? [ 924.751216][ T5841] usb 5-1: NDI device with a latency value of 1 [ 924.971786][ T5841] ftdi_sio 5-1:0.255: FTDI USB Serial Device converter detected [ 925.005965][ T5841] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 925.089269][ T5841] usb 5-1: USB disconnect, device number 8 [ 925.096624][ T5841] ftdi_sio 5-1:0.255: device disconnected [ 925.740199][T24348] loop2: detected capacity change from 0 to 2048 [ 925.780640][T24348] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 925.834929][T24353] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 925.899631][T24348] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 925.966408][T24348] Remounting filesystem read-only [ 926.229028][T24364] loop4: detected capacity change from 0 to 256 [ 926.275480][T24365] loop2: detected capacity change from 0 to 256 [ 926.321009][T24365] exfat: Deprecated parameter 'utf8' [ 926.326464][T24365] exfat: Deprecated parameter 'utf8' [ 926.402575][T24365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 926.547268][T24365] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 927.088168][T24385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 927.311385][T24389] loop4: detected capacity change from 0 to 4096 [ 927.337669][T24391] loop1: detected capacity change from 0 to 1024 [ 927.351196][T24389] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 927.384766][T24389] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 927.407186][T24389] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 927.444860][T24389] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 927.475081][T24389] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 927.500060][T24389] ntfs: volume version 3.1. [ 927.525549][T24389] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 927.551311][T24389] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 927.613751][T24389] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 927.646071][T24389] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 927.688349][T24389] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 928.865391][ T787] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 929.120674][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 929.142964][ T787] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 929.162164][ T787] usb 5-1: config 0 has no interface number 0 [ 929.180282][ T787] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 929.195355][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.203531][ T787] usb 5-1: Product: syz [ 929.214329][ T787] usb 5-1: Manufacturer: syz [ 929.224969][ T787] usb 5-1: SerialNumber: syz [ 929.258638][ T787] usb 5-1: config 0 descriptor?? [ 929.519977][ T787] radio-si470x 5-1:0.35: this is not a si470x device. [ 929.730693][ T787] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 929.755446][ T787] usb 5-1: USB disconnect, device number 9 [ 929.783415][ T5841] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 929.988661][ T5841] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 930.001070][ T5841] usb 2-1: config 0 has no interface number 0 [ 930.018706][ T5841] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 930.061979][ T5841] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 930.096271][ T5841] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 930.114983][ T5841] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 930.133200][ T5841] usb 2-1: Product: syz [ 930.146792][ T5841] usb 2-1: Manufacturer: syz [ 930.162361][ T5841] usb 2-1: SerialNumber: syz [ 930.180237][ T5841] usb 2-1: config 0 descriptor?? [ 930.203406][ T5841] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 930.232756][ T5841] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 930.244953][ T5841] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 930.286945][ T5841] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 930.309671][ T5841] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 930.360418][ T5841] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 930.392105][ T5841] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 930.422208][ T5841] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 930.459287][ T5841] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 930.494216][ T5841] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 930.554321][ T5841] usb 2-1: USB disconnect, device number 95 [ 930.582897][ T5841] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 930.679204][ T5841] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 930.717528][ T5841] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 930.762253][ T5841] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 930.806026][ T5841] keyspan 2-1:0.107: device disconnected [ 931.132021][T24483] netlink: zone id is out of range [ 931.483288][T24490] loop4: detected capacity change from 0 to 4096 [ 931.517266][T24490] ntfs: volume version 3.1. [ 931.528693][T24489] loop2: detected capacity change from 0 to 4096 [ 931.560496][T24489] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 931.611109][T24457] loop3: detected capacity change from 0 to 32768 [ 931.758242][T24489] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 931.868821][T24457] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 931.965315][ T5773] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 932.167148][T24510] netlink: 'syz.1.8250': attribute type 10 has an invalid length. [ 932.208532][T24510] bridge0: port 3(macsec0) entered blocking state [ 932.266091][T24510] bridge0: port 3(macsec0) entered disabled state [ 932.287825][T24510] macsec0: entered allmulticast mode [ 932.298429][T24510] veth1_macvtap: entered allmulticast mode [ 932.319647][T24510] macsec0: entered promiscuous mode [ 932.343423][T24510] bridge0: port 3(macsec0) entered blocking state [ 932.350130][T24510] bridge0: port 3(macsec0) entered forwarding state [ 932.504014][T24457] XFS (loop3): Ending clean mount [ 932.948167][T24520] loop1: detected capacity change from 0 to 1764 [ 933.018917][T24509] loop4: detected capacity change from 0 to 32768 [ 933.043569][ T5768] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 933.095127][T24509] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 933.186461][T24509] OCFS2: ERROR (device loop4): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 933.241962][T24509] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 933.299690][T24509] OCFS2: Returning error to the calling process. [ 933.343317][T24509] (syz.4.8251,24509,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 933.351922][T24509] (syz.4.8251,24509,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 933.411412][T24509] (syz.4.8251,24509,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 933.420273][T24509] (syz.4.8251,24509,1):ocfs2_mknod:306 ERROR: status = -5 [ 933.441900][T24509] (syz.4.8251,24509,1):ocfs2_mknod:502 ERROR: status = -5 [ 933.464915][T24509] (syz.4.8251,24509,1):ocfs2_mkdir:659 ERROR: status = -5 [ 933.834452][T21074] ocfs2: Unmounting device (7,4) on (node local) [ 934.342223][T24551] netlink: 'syz.1.8270': attribute type 8 has an invalid length. [ 934.631981][T24562] netlink: 'syz.1.8275': attribute type 10 has an invalid length. [ 934.683094][T24562] team0: Device hsr_slave_0 failed to register rx_handler [ 935.016172][T24575] loop4: detected capacity change from 0 to 256 [ 935.117561][T24575] FAT-fs (loop4): Directory bread(block 64) failed [ 935.132178][T24575] FAT-fs (loop4): Directory bread(block 65) failed [ 935.165466][T24575] FAT-fs (loop4): Directory bread(block 66) failed [ 935.183906][T24575] FAT-fs (loop4): Directory bread(block 67) failed [ 935.190610][T24575] FAT-fs (loop4): Directory bread(block 68) failed [ 935.223299][T24580] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.230994][T24575] FAT-fs (loop4): Directory bread(block 69) failed [ 935.257298][T24575] FAT-fs (loop4): Directory bread(block 70) failed [ 935.263904][T24575] FAT-fs (loop4): Directory bread(block 71) failed [ 935.301937][T24575] FAT-fs (loop4): Directory bread(block 72) failed [ 935.308544][T24575] FAT-fs (loop4): Directory bread(block 73) failed [ 936.502806][T24624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8307'. [ 936.950909][T24638] loop4: detected capacity change from 0 to 256 [ 936.978263][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 937.113910][T24604] loop1: detected capacity change from 0 to 40427 [ 937.154545][T24604] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 937.170512][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 937.180525][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.192097][T24604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 937.234963][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 937.255591][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.283404][T24604] F2FS-fs (loop1): Found nat_bits in checkpoint [ 937.292697][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.345606][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 937.362901][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.391946][ T9] usb 3-1: Product: syz [ 937.401980][ T9] usb 3-1: Manufacturer: syz [ 937.414698][ T9] usb 3-1: SerialNumber: syz [ 937.450181][ T9] usb 3-1: config 0 descriptor?? [ 937.467538][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 937.480298][T24604] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 937.498885][T24604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 937.687107][ T9] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 937.729917][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 937.764326][ T9] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 937.928882][ T5841] usb 3-1: USB disconnect, device number 92 [ 938.453624][T24674] loop4: detected capacity change from 0 to 16 [ 938.478497][T24674] erofs: (device loop4): mounted with root inode @ nid 36. [ 938.530647][T21076] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 938.563464][T24674] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 938.575093][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 938.575110][ T28] audit: type=1800 audit(2000000255.205:613): pid=24674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8330" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 938.699320][ T5841] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 938.770331][T24682] loop2: detected capacity change from 0 to 512 [ 938.814296][T24682] EXT4-fs (loop2): orphan cleanup on readonly fs [ 938.849272][T24682] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.8333: corrupted in-inode xattr: invalid size in ea xattr [ 938.935673][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 938.956906][T24682] EXT4-fs (loop2): Remounting filesystem read-only [ 938.966825][ T5841] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 939.005898][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.016801][T24682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 939.049585][ T5841] usb 4-1: config 0 has no interface number 0 [ 939.080962][ T5841] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 939.108150][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.145953][ T5841] usb 4-1: Product: syz [ 939.159087][ T5841] usb 4-1: Manufacturer: syz [ 939.170137][ T5841] usb 4-1: SerialNumber: syz [ 939.182073][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.203271][ T5841] usb 4-1: config 0 descriptor?? [ 939.387055][T24699] cgroup: name respecified [ 939.463069][ T5841] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 939.473761][ T5841] usb 4-1: No valid video chain found. [ 939.673073][ T5841] usb 4-1: USB disconnect, device number 98 [ 939.681795][T24709] loop4: detected capacity change from 0 to 8 [ 939.763409][T24711] cifs: Unknown parameter '2í¡Qƒé [ 939.763409][T24711] @Ý"2a×ch}#úä`Ü[TäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 939.763409][T24711] SÃÿ' [ 939.763614][T24709] SQUASHFS error: xz decompression failed, data probably corrupt [ 939.820445][T24709] SQUASHFS error: Failed to read block 0x108: -5 [ 939.836855][T24709] SQUASHFS error: Unable to read metadata cache entry [106] [ 939.844588][T24709] SQUASHFS error: Unable to read inode 0x11f [ 939.870366][T24713] netlink: 'syz.1.8348': attribute type 21 has an invalid length. [ 939.886490][T24713] netlink: 'syz.1.8348': attribute type 1 has an invalid length. [ 940.270885][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 940.510379][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 940.542240][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 940.574191][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 940.607183][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 940.641633][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 940.676230][ T9] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 940.697834][ T9] usb 5-1: Manufacturer: syz [ 940.705569][T24737] loop1: detected capacity change from 0 to 2048 [ 940.722705][ T9] usb 5-1: config 0 descriptor?? [ 940.739512][T24709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 940.781396][T24740] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 940.806326][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 940.832711][ T9] smsusb:siano_media_device_register: media controller created [ 940.840507][ T5841] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 940.848713][T24737] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 940.873923][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.881663][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.889336][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.896691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.904034][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.912971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.921772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.929180][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.936439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.944339][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.951682][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.958935][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.966162][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.973456][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.980115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.987416][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 940.994659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.001896][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.009247][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.015877][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.023225][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.030561][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.037931][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.045237][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.051750][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.059053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.066312][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.073566][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.080875][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.087260][T24737] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 941.097034][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.104339][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.111590][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.118875][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.126111][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.132670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.140003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.147310][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.154578][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.161902][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.168520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.175850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.183127][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.190395][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.197846][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.204739][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.212070][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.219528][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.226821][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.234508][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.241799][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.249065][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.256375][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.263675][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.270327][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.277645][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.284994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.292288][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.299624][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.305967][T24737] Remounting filesystem read-only [ 941.311343][T24737] NILFS (loop1): error -5 truncating bmap (ino=16) [ 941.318463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.325819][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.333129][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.340414][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.347751][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.354471][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.361748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.369000][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.376239][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.383548][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.389930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.397206][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.405068][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.412328][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.419647][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.426080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.433355][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.440695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.447939][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.455232][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.461653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.468980][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.476249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.483499][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.490804][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.497421][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.504719][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.512028][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.519285][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.526596][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.537029][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.544300][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.551538][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.558782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.566142][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.573274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.580650][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.587938][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.595190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.602523][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.636140][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.643496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.650987][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.658726][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.666806][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.674228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.681595][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.688937][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.696260][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.703104][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.710454][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.717761][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.725156][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.732529][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.739830][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.747149][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.754444][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.761752][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.769571][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.777336][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.784699][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.792099][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.799459][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.807382][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.814748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.822084][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.829397][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.836855][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.843754][ T5765] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 941.850866][ T5765] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 941.858659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.866021][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.873332][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.880652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.888117][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.894556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.901857][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.909156][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.916512][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.923870][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.930277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.937604][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.944942][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.952249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.959541][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.966437][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.973779][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.981087][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.988452][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 941.995906][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.002630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.009971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.017295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.024579][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.031835][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.056389][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.063853][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.071271][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.078584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.085880][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.092343][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.099695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.107030][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.114368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.121791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.129361][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.135655][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 942.135951][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.151937][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.159245][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.166561][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.173872][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.182837][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.190162][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.197613][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.204868][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.212116][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.219411][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.225777][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.233072][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.240340][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.247590][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.254919][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.262211][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.269570][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.276849][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.284105][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.291335][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.298823][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.306053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.313277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.320500][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.327793][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.335791][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.345662][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.352978][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.360971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.368251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.375488][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.382719][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.389993][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.397282][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.404537][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.411866][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.418723][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.428511][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 942.442385][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.449962][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.457202][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.464479][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.471710][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.478940][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.486171][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.493393][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.500653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.507989][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.515283][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.521550][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.530927][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.538200][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.545446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.552689][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.560053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.567323][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.584607][ T5765] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 942.601305][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 942.609271][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.616575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.623912][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.631137][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.638360][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 942.645653][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.695025][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 942.701923][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 942.718889][ T5765] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 942.729109][ T5841] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 942.739292][ T9] smsusb:smsusb_probe: Device initialized with return code -22 [ 942.746966][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.761790][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.780906][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.790187][ T5841] usb 3-1: Product: syz [ 942.794804][ T5841] usb 3-1: Manufacturer: syz [ 942.799454][ T5841] usb 3-1: SerialNumber: syz [ 942.815125][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.834783][ T9] smsusb: probe of 5-1:0.0 failed with error -22 [ 942.841727][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 942.862763][ T5841] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 942.872985][ T9] usb 5-1: USB disconnect, device number 10 [ 942.880952][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.903384][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 942.922244][T17619] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 942.953303][ T5765] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 942.975664][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 943.212479][T24742] loop3: detected capacity change from 0 to 32768 [ 943.241724][T24742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8362 (24742) [ 943.284978][T24757] loop1: detected capacity change from 0 to 8 [ 943.298545][T24742] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 943.301585][T24755] loop4: detected capacity change from 0 to 64 [ 943.320275][T24742] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 943.360739][T24742] BTRFS info (device loop3): using free space tree [ 943.386774][T24757] SQUASHFS error: Failed to read block 0x2d7: -5 [ 943.403403][ T9] usb 3-1: USB disconnect, device number 93 [ 943.436168][T24757] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 943.466520][T24755] Trying to free block not in datazone [ 943.617836][T24742] BTRFS info (device loop3): enabling ssd optimizations [ 943.638995][T24742] BTRFS info (device loop3): auto enabling async discard [ 943.791329][T24742] BTRFS warning (device loop3): get dev_stats failed, device not found [ 943.919791][ T5768] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 944.077292][T17619] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 944.084400][T17619] ath9k_htc: Failed to initialize the device [ 944.123348][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 944.205570][T24789] netlink: 'syz.4.8378': attribute type 27 has an invalid length. [ 944.248519][T24789] netlink: 'syz.4.8378': attribute type 3 has an invalid length. [ 944.298126][T24789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8378'. [ 944.379427][T24793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8380'. [ 944.579593][T24796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8381'. [ 944.712902][T24801] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8383'. [ 946.054455][T21195] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 946.057733][T24846] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8405'. [ 946.249254][T21195] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 946.269036][T21195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.271297][T24850] loop2: detected capacity change from 0 to 1024 [ 946.281431][T21195] usb 5-1: config 0 descriptor?? [ 946.342867][T24850] hfsplus: xattr searching failed [ 946.633810][T24828] loop3: detected capacity change from 0 to 40427 [ 946.660369][T24828] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 946.691887][T24828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 946.725391][T24828] F2FS-fs (loop3): invalid crc value [ 946.730454][T21195] ath6kl: Failed to read usb control message: -71 [ 946.746550][T21195] ath6kl: Unable to read the bmi data from the device: -71 [ 946.749567][T24828] F2FS-fs (loop3): Found nat_bits in checkpoint [ 946.761658][T21195] ath6kl: Unable to recv target info: -71 [ 946.783263][T21195] ath6kl: Failed to init ath6kl core: -71 [ 946.806802][T21195] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 946.835278][T21195] usb 5-1: USB disconnect, device number 11 [ 946.996091][T24828] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 947.003210][T24828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 947.189532][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 947.210068][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 947.241432][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 947.437038][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 947.448810][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.470053][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 947.488121][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 947.521931][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 947.551789][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.561849][ T9] usb 2-1: Product: syz [ 947.570736][ T9] usb 2-1: Manufacturer: syz [ 947.581524][ T9] usb 2-1: SerialNumber: syz [ 947.607250][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 947.626349][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 947.634227][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 947.658159][ T9] cdc_ncm 2-1:1.0: bind() failure [ 947.690161][ T5806] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 947.837143][ T9] usb 2-1: USB disconnect, device number 96 [ 947.910534][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 947.914942][T24883] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 947.933314][ T5806] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 947.961495][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.989642][ T5806] usb 3-1: Product: syz [ 947.993885][ T5806] usb 3-1: Manufacturer: syz [ 948.010819][ T5806] usb 3-1: SerialNumber: syz [ 948.026211][ T5806] usb 3-1: config 0 descriptor?? [ 948.285725][ T5806] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 948.350373][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8426'. [ 948.515339][ T5806] usb write operation failed. (-71) [ 948.557743][ T5806] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 948.578010][T24897] netlink: 'syz.1.8428': attribute type 1 has an invalid length. [ 948.597286][ T5806] dvbdev: DVB: registering new adapter (Terratec H7) [ 948.618433][ T5806] usb 3-1: media controller created [ 948.637879][ T5806] usb read operation failed. (-71) [ 948.654599][ T5806] usb write operation failed. (-71) [ 948.678819][ T5806] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 948.732321][ T5806] usb 3-1: USB disconnect, device number 94 [ 948.951084][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8431'. [ 948.975059][T24889] loop4: detected capacity change from 0 to 40427 [ 949.009744][T24889] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 949.021261][T24889] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 949.061358][T24889] F2FS-fs (loop4): invalid crc value [ 949.106128][T24889] F2FS-fs (loop4): Found nat_bits in checkpoint [ 949.263802][T24889] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 949.270924][T24889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 949.515386][ T11] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 949.535137][ T11] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 949.779173][T24927] loop3: detected capacity change from 0 to 256 [ 949.823556][T24923] loop1: detected capacity change from 0 to 4096 [ 950.104750][T24929] loop2: detected capacity change from 0 to 512 [ 950.146497][T24929] EXT4-fs: Ignoring removed oldalloc option [ 950.170314][T24931] xt_TCPMSS: Only works on TCP SYN packets [ 950.268762][T24929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.378735][T24929] ext4 filesystem being mounted at /2124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 950.606156][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.944836][T24956] loop4: detected capacity change from 0 to 256 [ 950.981855][T24956] exfat: Deprecated parameter 'utf8' [ 951.001063][T24956] exfat: Deprecated parameter 'namecase' [ 951.033455][T24956] exfat: Deprecated parameter 'utf8' [ 951.061132][T24956] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 951.453277][ T9] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 951.681038][ T9] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 951.696081][T24975] loop4: detected capacity change from 0 to 22 [ 951.699103][ T9] usb 4-1: config 0 has no interface number 0 [ 951.713811][ T9] usb 4-1: config 0 interface 29 has no altsetting 0 [ 951.721451][T24975] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 951.752696][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 951.757814][T24975] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 951.783438][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.813672][ T9] usb 4-1: Product: syz [ 951.824480][ T9] usb 4-1: Manufacturer: syz [ 951.836834][ T9] usb 4-1: SerialNumber: syz [ 951.864685][ T9] usb 4-1: config 0 descriptor?? [ 952.159174][ T9] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v184 fw v210.0.0 (2 channels) [ 952.217724][T24952] loop2: detected capacity change from 0 to 40427 [ 952.269168][T24952] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 952.295137][T24952] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 952.355207][T24952] F2FS-fs (loop2): invalid crc value [ 952.391606][ T9] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 952.417412][T24952] F2FS-fs (loop2): Found nat_bits in checkpoint [ 952.434675][ T9] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 952.567576][ T9] peak_usb: probe of 4-1:0.29 failed with error -71 [ 952.589172][ T9] usb 4-1: USB disconnect, device number 99 [ 952.630657][T24952] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 952.637785][T24952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 952.832540][ T28] audit: type=1326 audit(2000000268.534:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25000 comm="syz.1.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 952.937296][ T28] audit: type=1326 audit(2000000268.534:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25000 comm="syz.1.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 952.982185][ T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 953.035563][ T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 953.068597][ T28] audit: type=1326 audit(2000000268.581:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25000 comm="syz.1.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.106950][ T28] audit: type=1326 audit(2000000268.581:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25000 comm="syz.1.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.224090][ T28] audit: type=1326 audit(2000000268.908:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.1.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.283716][ T28] audit: type=1326 audit(2000000268.908:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.1.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.376714][ T28] audit: type=1326 audit(2000000268.908:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.1.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.465685][ T28] audit: type=1326 audit(2000000268.918:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.1.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.489578][ T28] audit: type=1326 audit(2000000268.918:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.1.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.566989][ T28] audit: type=1326 audit(2000000268.918:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25010 comm="syz.1.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f7b9aeb9 code=0x7ffc0000 [ 953.950384][T25026] loop3: detected capacity change from 0 to 22 [ 953.977339][T25026] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 954.005184][T25026] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 954.070205][T25026] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 954.900904][T25048] loop2: detected capacity change from 0 to 4096 [ 954.923852][T25048] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 954.971560][T25048] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 955.024458][T25053] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 955.181886][T25059] Timeout policy `syz0' can only be used by L3 protocol number 37120 [ 955.199346][T25048] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 955.249634][T25048] Remounting filesystem read-only [ 955.410231][ T5773] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 955.420223][T25030] loop1: detected capacity change from 0 to 40427 [ 955.440500][ T5773] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 955.450150][T25030] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 955.468996][ T5773] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 955.476553][T25030] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 955.495835][ T5773] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 955.506548][ T5773] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 955.513791][T25030] F2FS-fs (loop1): invalid crc value [ 955.527556][ T5773] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 955.548040][ T5773] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 955.558138][T25030] F2FS-fs (loop1): Found nat_bits in checkpoint [ 955.575809][T25068] loop4: detected capacity change from 0 to 1024 [ 955.592847][ T5773] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 955.599596][ T5773] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 955.647501][ T5773] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 955.674232][ T5773] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 955.692923][ T5773] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 955.740408][ T5773] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 955.788496][T25030] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 955.815188][T25030] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 955.858483][ T29] INFO: task syz-executor:5766 blocked for more than 143 seconds. [ 955.867283][ T29] Not tainted syzkaller #0 [ 955.893905][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.907962][ T29] task:syz-executor state:D stack:21608 pid:5766 ppid:1 flags:0x00004004 [ 955.943544][ T29] Call Trace: [ 955.950600][ T29] [ 955.953645][ T29] __schedule+0x1553/0x45a0 [ 955.958396][ T29] ? mark_lock+0x94/0x320 [ 955.962889][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 955.969348][ T29] ? asan.module_dtor+0x20/0x20 [ 955.974569][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 955.981370][ T29] schedule+0xbd/0x170 [ 955.985627][ T29] io_schedule+0x80/0xd0 [ 955.990543][ T29] folio_wait_bit_common+0x714/0xfa0 [ 955.996008][ T29] ? folio_wait_bit+0x30/0x30 [ 956.005980][ T29] ? filemap_get_entry+0x379/0x3f0 [ 956.019768][ T29] ? _compound_head+0x120/0x120 [ 956.038461][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 956.046521][T25075] loop2: detected capacity change from 0 to 256 [ 956.055677][ T29] __filemap_get_folio+0xbc/0xbb0 [ 956.077156][T25075] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 956.078399][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 956.108965][ T29] ? mapping_evict_folio+0x510/0x510 [ 956.122180][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 956.135152][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.140920][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 956.152844][ T29] evict+0x4dd/0x8d0 [ 956.157220][ T29] ? proc_nr_inodes+0x230/0x230 [ 956.162628][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 956.168323][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 956.173689][ T29] evict_inodes+0x606/0x6a0 [ 956.178269][ T29] ? clear_inode+0x150/0x150 [ 956.183643][ T29] generic_shutdown_super+0x97/0x2b0 [ 956.189049][ T29] kill_block_super+0x44/0x90 [ 956.193764][ T29] deactivate_locked_super+0x97/0x100 [ 956.199150][ T29] cleanup_mnt+0x43b/0x4d0 [ 956.204415][ T29] task_work_run+0x1d4/0x260 [ 956.209052][ T29] ? task_work_cancel+0x220/0x220 [ 956.214387][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 956.219962][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 956.225313][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 956.230994][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 956.236872][ T29] do_syscall_64+0x61/0xa0 [ 956.241357][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.247599][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.252350][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.258647][ T29] RIP: 0033:0x7f1bfcf9c117 [ 956.263096][ T29] RSP: 002b:00007ffd34bf8b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 956.271589][ T29] RAX: 0000000000000000 RBX: 00007f1bfd00471f RCX: 00007f1bfcf9c117 [ 956.284598][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd34bf8c00 [ 956.292681][ T29] RBP: 00007ffd34bf8c00 R08: 00007ffd34bf9c00 R09: 00000000ffffffff [ 956.300880][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd34bf9c90 [ 956.308918][ T29] R13: 00007f1bfd00471f R14: 00000000000b7b83 R15: 00007ffd34bf9cd0 [ 956.316976][ T29] [ 956.320327][ T29] [ 956.320327][ T29] Showing all locks held in the system: [ 956.328982][ T29] 1 lock held by khungtaskd/29: [ 956.333878][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 956.343917][ T29] 2 locks held by kworker/u4:2/42: [ 956.349076][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 956.356743][ T48] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 956.364760][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 956.403115][ T48] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 956.412864][ T29] 4 locks held by kworker/u4:3/48: [ 956.419862][ T29] 2 locks held by getty/5528: [ 956.424889][ T29] #0: ffff88802d6a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 956.434734][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 956.445072][ T29] 1 lock held by syz-executor/5765: [ 956.450501][ T29] #0: ffff8880236c60e0 (&type->s_umount_key#81){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 956.460995][ T29] 1 lock held by syz-executor/5766: [ 956.466286][ T29] #0: ffff88807e7640e0 (&type->s_umount_key#111){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 956.494872][ T29] 2 locks held by udevd/5910: [ 956.502358][ T29] #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 956.520619][ T29] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 956.529437][ T29] 5 locks held by kworker/u4:4/23387: [ 956.544669][ T29] #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 956.558362][ T29] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 956.568100][ T29] #2: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x73b/0xdb0 [ 956.577749][ T29] #3: ffffffff974e6310 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x4f0 [ 956.590829][ T29] #4: ffffffff8cfe1ee8 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0x17/0x30 [ 956.602164][ T29] [ 956.604544][ T29] ============================================= [ 956.604544][ T29] [ 956.617250][ T29] NMI backtrace for cpu 1 [ 956.621617][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 956.628857][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 956.638948][ T29] Call Trace: [ 956.642260][ T29] [ 956.645217][ T29] dump_stack_lvl+0x18c/0x250 [ 956.649941][ T29] ? show_regs_print_info+0x20/0x20 [ 956.655184][ T29] ? load_image+0x400/0x400 [ 956.659734][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 956.664723][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 956.670913][ T29] ? _printk+0xde/0x130 [ 956.675114][ T29] ? load_image+0x400/0x400 [ 956.679659][ T29] ? load_image+0x400/0x400 [ 956.684210][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 956.690306][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 956.696304][ T29] watchdog+0xf3d/0xf80 [ 956.700488][ T29] ? watchdog+0x1e1/0xf80 [ 956.704821][ T29] kthread+0x2fa/0x390 [ 956.708889][ T29] ? hungtask_pm_notify+0x90/0x90 [ 956.713941][ T29] ? kthread_blkcg+0xd0/0xd0 [ 956.718559][ T29] ret_from_fork+0x48/0x80 [ 956.722994][ T29] ? kthread_blkcg+0xd0/0xd0 [ 956.727594][ T29] ret_from_fork_asm+0x11/0x20 [ 956.732454][ T29] [ 956.736172][ T29] Sending NMI from CPU 1 to CPUs 0: [ 956.741487][ C0] NMI backtrace for cpu 0 [ 956.741498][ C0] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 956.741514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 956.741523][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 956.741543][ C0] RIP: 0010:try_to_wake_up+0x2fc/0x1190 [ 956.741562][ C0] Code: 8d bd 18 0a 00 00 be ff ff ff ff e8 be 1d 27 09 85 c0 0f 84 d1 04 00 00 4c 8d bd 10 04 00 00 4c 89 f8 48 c1 e8 03 0f b6 04 18 <84> c0 0f 85 1b 06 00 00 41 83 3f 02 7c 25 4c 8d bd 38 04 00 00 4c [ 956.741575][ C0] RSP: 0018:ffffc90000b97ae0 EFLAGS: 00000802 [ 956.741588][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 642b1bb180652b00 [ 956.741600][ C0] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c81e0 [ 956.741610][ C0] RBP: ffff88801c243c00 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5 [ 956.741622][ C0] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 0000000000000000 [ 956.741632][ C0] R13: 0000000000000003 R14: 1ffff11003848786 R15: ffff88801c244010 [ 956.741643][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 956.741656][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.741667][ C0] CR2: 00007fa724be1198 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 956.741684][ C0] Call Trace: [ 956.741690][ C0] [ 956.741702][ C0] kick_pool+0x320/0x420 [ 956.741720][ C0] process_scheduled_works+0x7c8/0x15d0 [ 956.741745][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 956.741770][ C0] ? assign_work+0x430/0x430 [ 956.741789][ C0] ? assign_work+0x3d0/0x430 [ 956.741808][ C0] worker_thread+0xa55/0xfc0 [ 956.741838][ C0] kthread+0x2fa/0x390 [ 956.741851][ C0] ? pr_cont_work+0x560/0x560 [ 956.741868][ C0] ? kthread_blkcg+0xd0/0xd0 [ 956.741883][ C0] ret_from_fork+0x48/0x80 [ 956.741900][ C0] ? kthread_blkcg+0xd0/0xd0 [ 956.741914][ C0] ret_from_fork_asm+0x11/0x20 [ 956.741947][ C0] [ 956.751677][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 956.751691][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 956.751709][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 956.751719][ T29] Call Trace: [ 956.751727][ T29] [ 956.751735][ T29] dump_stack_lvl+0x18c/0x250 [ 956.751766][ T29] ? show_regs_print_info+0x20/0x20 [ 956.751791][ T29] ? load_image+0x400/0x400 [ 956.751823][ T29] panic+0x2dc/0x730 [ 956.751842][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 956.751869][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 956.751888][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 956.751914][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 956.751945][ T29] watchdog+0xf7c/0xf80 [ 956.751970][ T29] ? watchdog+0x1e1/0xf80 [ 956.751998][ T29] kthread+0x2fa/0x390 [ 956.752015][ T29] ? hungtask_pm_notify+0x90/0x90 [ 956.752037][ T29] ? kthread_blkcg+0xd0/0xd0 [ 956.752055][ T29] ret_from_fork+0x48/0x80 [ 956.752075][ T29] ? kthread_blkcg+0xd0/0xd0 [ 956.752094][ T29] ret_from_fork_asm+0x11/0x20 [ 956.752129][ T29] [ 956.754185][ T29] Kernel Offset: disabled [ 957.043673][ T29] Rebooting in 86400 seconds..