last executing test programs: 5.075898218s ago: executing program 2 (id=3): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 3.221508079s ago: executing program 3 (id=17): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) 2.878403966s ago: executing program 3 (id=19): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000002240)) 2.853448138s ago: executing program 0 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x4c}}, 0x0) 2.790012973s ago: executing program 1 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x800000000000) 2.616672238s ago: executing program 0 (id=21): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="09007468e300000018000280140001"], 0x64}}, 0x0) 2.615047847s ago: executing program 3 (id=22): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$eJzs3U1sXEfhAPDZtdexk/Qfp/+EmjS0CYW2fNRpHBM+IkiqREhETYW4VKq4RGlaIkKQKBJQVcLJiRutqiBx4kOceqkKQqIXFPXEpRKNVCH1VDhwIAqiEgcIJIu8nlnvTnbzdh3vvrX395OeZ+fNezszz2/f97wJwNiqNv4uLs5VQrj85qsn/vbwX2eWxxxtTjHb+DvZEquFECoxPpl93/sTK+HND1460ymshIXG3+X4luURT11vzrsthLAU9oUrYTbsuXz1lbcXnjx18eSl/e+8duTagKoPAABj5atXjizu/vMf79954/UHjoUtzfHpeH02xrfH4/5j8cA/Hf9XQ3u80jK0msqmm4xDdaZ9uokO0zXymew83WSX/Key/GtdptsS7pz/RMu4TvWGjSytx7OhUp1vi1er8/Mr5+ShcV4/VZm/cO78cy+UVFBg3f3zwRDCvpbh+KX2+CCHtLHpZ56jgyhLZWW/PuD61oe1XDfbcGx4ed2oryi9zkMa6jvK3f4AJPn9wtss5VcW7k7z2yZ7y//6E9XO88M6GPb633P+1XhRraz8kzHP/1cXbXFYP5t1bUr1Sr+j7TGe9t7pGab8+aXuv7/8Tkf72Px+RK3Hcna7j7BR7i90K+fEkMuxVt3Kn68Xm9UXY5iWw5ey9NbfT/4/3Sj/Y6Czf+XX/zfyMB0rVUbeEyNQ/4EM+0agDIa2oX0dr93Nd9VL3PYAoy1/bq6e7o9G+XN9efqWgvTpgvSZgvStBenbCtJhnP3muz8OL1dWz/Pzc/p+r4en62z3xPD/+ixPfj2y3/zz5377dbf5588Twyj73emnz37u2Weurjz/X2mu/7fi+p5ON2bjb+tKnCBdL8yvqzef/Z9tz6faZbp7s/Lc02H6xudd7dNVdq1+T2jZztxWjrn2+XZ0m25v+3Sz2XQzcZjOypsfn2zN5kvHH2m7mpbXZFbfWlaPqawcabuyM4Z5OWAt0vrY7fn/tH7OhVrluXPnzz6e7WP/MFHbsjz+4JDLDdy9Xtv/zIX29j/bm+Nr1bRdCC3717S9OBjeiN/XPn6hmU/7+EMxnvZz35iYaYyfP/Pt88+uf/VhrL3wgxe/efr8+bPf8WHNH748GsXo50M6bRmV8vTwIZ0BlVaMaih/IQzxQ4kbJWAoDvxw5SDgsXPfOv382efPXjh0+PChhYXDnz+0eKBxXH+g9ei+1VIJpQXW0+pOP0/ZXk6BAAAAAAAAAAAAgELfO3ni6rtvffa9lfb/q+3/Uvv/9ORvav//o6z9f95OPrWDT+0Ad3ZIb0yTvWB1KpuuFof/z8q7K8tndzbfh2LY7Mcvtv9P2eXvdU3luS8bX8ujMcPsdQK3vS9lKmsfnfcX+NEYXorhLwOUqDLTeXQMi95vndb11Dqr5b0U9YlxeYnyJpD+b2ltWHmPyWpPrh3f69Tyz945pHKyvgbTeHDqji0LgNHw99F7//fS4L77H6sVL7+ehq7D5HDz+2ljjaiO43pRr3frxaPXHmwA1kfZ/X+m654pvPD7r0wvD2my60+0by/z95dCP/70bnt81PufHHT+eb99w86/7PoPu//PZv93PW//sh7zsvc891q6f//s2nst2YY9veaf1z+9B3pXjxlHN2L+qTaPhN7yr/8iyz+/IdSj/2T5b+0x/9vqv3dt+f835p8W26MPFeSfLgxfXClxpdpejpmsHun+X37dOLmZ1T+92/MO9f/ai53qv8Z7DLdi/jDONko/s/3KjiOaB+2tzxeEvvr/jZbWt//fZmGzzVr+HMZnYjztCNJzDnl/J/2WPz1fkfYDu7PvrxTs3/T/u7F9IYZFv4fU/29aH2fjLr8l3liWKV7rsGw367YGNqr3R+/+37gP0yNQBkPvQ31iDfM1+4krufz1en2wF7QKlJo5pS//ss8Tys6/7OVfJO//Nz+Gb55/7uucnvf/m6fn/f/m6TPxP9QtPe//N1+eef+/efp92ffm/QPPFaR/uCB9T+f05mK7v2D+vQXpHylI399MP9o2RUp/oGD+BwvS7y1If6gg/WMF6R8vSH+4IP3RlvTWPqBT+icK5t/sUnuUTvXXpx9sbnn7vHHb/sE4S/d/uv3+dxWkAxvXT14/ePyZX399dqX9/1Tzeki6j3csxmvx/On7MZ7f9w4t8eW0t2L8L1n6qF/vgHGSvz8j378/UpAObFzpOS+/bxhDlenOo2NY9N6qbsf5bCyfjOGnYvjpGD4Ww/kYHohhuje0MKTyMRjH3/jtkZcrq+f7O7L0Xp8nz9sDtb0nKoRwqMfy5NcH+n2ePX+PX7/uNv81NgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoTbXxd3FxrhLC5TdfPfH0qXMHlsccbU4x2/g72RKrNecL4fEYTsTw5/HDzQ9eOtMa3ophJSyESqg0x4enrjdz2hZCWAr7wpUwG/ZcvvrK2wtPnrp48tL+d147cm1wSwAAAAA2v/8FAAD//zjgCFM=") mount$afs(&(0x7f0000000680)=ANY=[@ANYBLOB='%'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 2.596589829s ago: executing program 2 (id=23): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) 2.45678877s ago: executing program 1 (id=24): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) 2.199773981s ago: executing program 2 (id=26): r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) 1.933246963s ago: executing program 0 (id=27): r0 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) 1.915777554s ago: executing program 1 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 1.584373931s ago: executing program 0 (id=30): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) fchmod(0xffffffffffffffff, 0xb0) 1.404172426s ago: executing program 1 (id=31): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x7, {0xfffffffe, 0x0, 0x0, 0xfffffff7}}) 1.34545915s ago: executing program 3 (id=32): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8040000, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x20) 1.106781869s ago: executing program 2 (id=33): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80) 1.006868868s ago: executing program 0 (id=34): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000000c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa92C2l6BBKSA+9VthyLLxWgqQUJYdW/X/tIddCetCtp0Lvhvbc3HLVMVDoJSdBDyozO7ta2autLNvSKvl8zNv33r437735zcyudhczAb6ylqbTfJgiS9NvbZX1n+/Mt3Z35i/Uza0kZbmRNNtZirWk+efkVtopoz3DFUfN8/Hq4juffbH7ebvWrFPVv3F4iJPYrlOmkozUebJ/4XC3AdPs7x853u3ueCdVdCNTBuxamW8/1YDwbOw/pnNm/vc4mx95vQPnR9F+33zMZHIxyXj9d0DqV4fG6a7u2fP+CwAAwFfBC3vZy1YunfU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dyp7/9f1KnRKU+l6Nz/f6x+LnX5nCkO1R6e2ToAAAAAAAAA4Nn5xl72spVLnfp+Uf3m/3pVuVw9fi0fZCMrWc/1bGU5m9nMemaTTPYMNLa1vLm5PnuMLef6bjl3OvsLAAAAAAAAAOfHzSfp/JssHfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6BIRtpZlS53ypNpNJOMJxkr+20nn3bK59nDs14AAAAAnIIX9rKXrVzq1PeL6jP/K9Xn/vF8kLVsZjWbaWUld6rvAtqf+hu7O/Ot3Z35B2V6fNwf/OeJllGNmPZ3D/1nvlr1mMjdrFbPXM/tvJdW7qRRbVm62llP/3X9ulxTcbOtOObK7tR52f9PdT4cJquIjHYjMlOvrYzGi4Mj8YRH59GZZtPofvNz+dGZRg5teijmN48538U6L/fnD0Md87n67Pu0vGYGxzz55t//+rN7rbX79+5uTA/PLp1QHYntZh2J+Z7r8NVzGonRE201U0XiSre+lB/np5nOVN7e/1WSX2Q5m1nJVH5UlZZTdM/oycGRunWo9vb/W8lYfVzal+ARa8p6Vvus6fVq20tZzU/yXu5kJW9W/+Yym+9mIQtZ7DnCV47xStt4sqv+2rfqwkSSP9b5MBit4vpiT1x7X3Mnq7beZw6i9NLRUSpO+NrY/HpdKOf4bZ0Ph0cjMdsTiZcHny9/2S8fN1pr99fvLb9/zPneqPMylL8fqneJ8nx5qTxYVe3w2VG2vdy3bbZqu9xtazzWdqXb1vdKXe/Mv1j1fqXvSHNV26t92+artqs9bf3+3gJg6F389sWxiX9P/Gvik4nfTdybeGv8hxe+d+G1sYz+c/T7zZmRNxqvFX/LJ/nlwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DY+/Oj+cqu1sj6g0LnBzqA+T1so6hv5PMcpFIaskPGhWMbzLDQzFMs40dEBvuRubD54/8bGhx99Z/XB8rsr766sjS4sLM4sLrw5f+Puamtlpv141qsEnoeDN/2zXgkAAAAAAAAAAABwXKfx3wnOeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA821pOs2HKTI7c32mrO/uzLfK1Ckf9GwmaSTjZbn4R3Ir7ZTJnuGKo+b5eHXxnc++2P38YKxmp39j0HZ9jT76xHadMpVkpM6fwqHxbj/1eEV3D8uAXesEDs7a/wIAAP//XHoJeA==") lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f47e18f61b633dfe20b8caa809be7d70931ea5de8de9f038f9ea325b106b65a44e4aabb34f8f2c6317b5be775bd0a396b307a406e6cc09e76e7df7ac67d160710a3f7fd97a0f19cbfb4795ba7371216bf2182820e13df77dc621a1f59385bdf9458dc32125b7063e361d1cc3d41e18dcc6bcc46ef031dae6c09717a8f08a43cbdb998d59c9fa4dca218c64c47cc28d99f802e54f0c375a31a"], 0x0, 0x0) 903.456766ms ago: executing program 1 (id=35): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) 783.926706ms ago: executing program 3 (id=36): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000009c0)='./file1\x00', 0x10400, &(0x7f0000000a00)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1255'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 682.369724ms ago: executing program 2 (id=37): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000280)=[{0x5, 0xd, 0x0, 0xfd, @tick=0x4c7f, {}, {0xe, 0x1}, @time=@time={0x3}}], 0x1c) 217.713022ms ago: executing program 2 (id=38): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="73828d6222", 0x5, 0x40000800, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, 0x18) 97.750132ms ago: executing program 0 (id=39): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x8, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) 34.345196ms ago: executing program 3 (id=40): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) 0s ago: executing program 1 (id=41): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}]}, 0x4, 0x4f5, &(0x7f0000000c00)="$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") lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 68.925561][ T5769] cgroup: Unknown subsys name 'net' [ 69.062796][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.450402][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.666750][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.673337][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.827157][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.842552][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.853702][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.864421][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.882584][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.891311][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.899255][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.907758][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.915181][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.927339][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.950539][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.955401][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.965357][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.977042][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.985661][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.989473][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.005474][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.015987][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.017617][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.032307][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.033715][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.048525][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.048528][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.062914][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.404864][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 72.530990][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 72.586702][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.594633][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.602417][ T5783] bridge_slave_0: entered allmulticast mode [ 72.609854][ T5783] bridge_slave_0: entered promiscuous mode [ 72.632494][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.639851][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.647115][ T5783] bridge_slave_1: entered allmulticast mode [ 72.654184][ T5783] bridge_slave_1: entered promiscuous mode [ 72.713273][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 72.747162][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.762255][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.787984][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 72.841945][ T5783] team0: Port device team_slave_0 added [ 72.869080][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.876336][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.883523][ T5779] bridge_slave_0: entered allmulticast mode [ 72.890794][ T5779] bridge_slave_0: entered promiscuous mode [ 72.900767][ T5783] team0: Port device team_slave_1 added [ 72.931240][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.938706][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.946039][ T5779] bridge_slave_1: entered allmulticast mode [ 72.952778][ T5779] bridge_slave_1: entered promiscuous mode [ 72.990116][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.997468][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.004711][ T5782] bridge_slave_0: entered allmulticast mode [ 73.011698][ T5782] bridge_slave_0: entered promiscuous mode [ 73.034438][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.041906][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.067886][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.080265][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.087824][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.095119][ T5782] bridge_slave_1: entered allmulticast mode [ 73.103706][ T5782] bridge_slave_1: entered promiscuous mode [ 73.123919][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.131424][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.157854][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.190997][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.203080][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.253113][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.265949][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.314201][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.321797][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.329953][ T5784] bridge_slave_0: entered allmulticast mode [ 73.337651][ T5784] bridge_slave_0: entered promiscuous mode [ 73.348229][ T5779] team0: Port device team_slave_0 added [ 73.354426][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.362779][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.370143][ T5784] bridge_slave_1: entered allmulticast mode [ 73.377586][ T5784] bridge_slave_1: entered promiscuous mode [ 73.388310][ T5783] hsr_slave_0: entered promiscuous mode [ 73.394734][ T5783] hsr_slave_1: entered promiscuous mode [ 73.418842][ T5779] team0: Port device team_slave_1 added [ 73.445338][ T5782] team0: Port device team_slave_0 added [ 73.455132][ T5782] team0: Port device team_slave_1 added [ 73.484052][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.493873][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.501836][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.528098][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.562391][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.572352][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.580498][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.606479][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.672598][ T5784] team0: Port device team_slave_0 added [ 73.680245][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.687525][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.714119][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.731005][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.738223][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.764706][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.778016][ T5784] team0: Port device team_slave_1 added [ 73.843226][ T5779] hsr_slave_0: entered promiscuous mode [ 73.851013][ T5779] hsr_slave_1: entered promiscuous mode [ 73.857358][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.865108][ T5779] Cannot create hsr debugfs directory [ 73.872019][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.879141][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.905888][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.919349][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.926599][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.953296][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.966895][ T5792] Bluetooth: hci0: command tx timeout [ 74.006807][ T5782] hsr_slave_0: entered promiscuous mode [ 74.013063][ T5782] hsr_slave_1: entered promiscuous mode [ 74.019901][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.028463][ T5782] Cannot create hsr debugfs directory [ 74.046039][ T5792] Bluetooth: hci1: command tx timeout [ 74.126229][ T5792] Bluetooth: hci2: command tx timeout [ 74.126662][ T50] Bluetooth: hci3: command tx timeout [ 74.157006][ T5784] hsr_slave_0: entered promiscuous mode [ 74.163302][ T5784] hsr_slave_1: entered promiscuous mode [ 74.170647][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.178539][ T5784] Cannot create hsr debugfs directory [ 74.420745][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.432937][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.444017][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.473974][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.569576][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.585471][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.611622][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.630441][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.693644][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.714601][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.724059][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.737585][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.802258][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.812892][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.833148][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.843952][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.950320][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.992990][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.023695][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.034538][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.055342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.062806][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.091690][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.104515][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.111668][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.139677][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.147054][ T2880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.172128][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.182569][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.189788][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.215452][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.222671][ T2880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.232951][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.240120][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.322486][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.333374][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.358906][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.431365][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.452380][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.459955][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.518980][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.526299][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.778442][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.933247][ T5779] veth0_vlan: entered promiscuous mode [ 75.967638][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.981110][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.008649][ T5779] veth1_vlan: entered promiscuous mode [ 76.046032][ T50] Bluetooth: hci0: command tx timeout [ 76.071257][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.127186][ T50] Bluetooth: hci1: command tx timeout [ 76.152189][ T5784] veth0_vlan: entered promiscuous mode [ 76.162257][ T5779] veth0_macvtap: entered promiscuous mode [ 76.174708][ T5782] veth0_vlan: entered promiscuous mode [ 76.187168][ T5779] veth1_macvtap: entered promiscuous mode [ 76.195743][ T5784] veth1_vlan: entered promiscuous mode [ 76.206836][ T50] Bluetooth: hci3: command tx timeout [ 76.207830][ T5792] Bluetooth: hci2: command tx timeout [ 76.234285][ T5782] veth1_vlan: entered promiscuous mode [ 76.251282][ T5783] veth0_vlan: entered promiscuous mode [ 76.281714][ T5783] veth1_vlan: entered promiscuous mode [ 76.318763][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.334962][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.364733][ T5784] veth0_macvtap: entered promiscuous mode [ 76.375024][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.385268][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.394733][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.403516][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.429239][ T5782] veth0_macvtap: entered promiscuous mode [ 76.441843][ T5782] veth1_macvtap: entered promiscuous mode [ 76.460249][ T5784] veth1_macvtap: entered promiscuous mode [ 76.502642][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.514005][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.525581][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.545239][ T5783] veth0_macvtap: entered promiscuous mode [ 76.563763][ T5783] veth1_macvtap: entered promiscuous mode [ 76.577247][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.588589][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.600913][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.625640][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.637464][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.648111][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.658773][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.670623][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.719981][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.729134][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.738728][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.747670][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.761273][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.772941][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.783622][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.794634][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.813675][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.833078][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.844377][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.864489][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.875367][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.891176][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.901998][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.920614][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.941830][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.958604][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971953][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.982251][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.000974][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.002744][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.026559][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.038405][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.048523][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.060319][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.070950][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.081638][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.094479][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.180113][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.191414][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.200327][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.210136][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.295938][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.303788][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.443849][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.456683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.493326][ T3414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.525309][ T3414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.570216][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.584579][ T5871] syz.2.3[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.601930][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.602108][ T5871] loop2: detected capacity change from 0 to 8 [ 77.670900][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.698005][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.708217][ T5871] SQUASHFS error: xz decompression failed, data probably corrupt [ 77.723225][ T5871] SQUASHFS error: Failed to read block 0x108: -5 [ 77.739647][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.765148][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.774942][ T5871] SQUASHFS error: Unable to read metadata cache entry [106] [ 77.783727][ T5871] SQUASHFS error: Unable to read inode 0x11f [ 77.809138][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.836255][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.127302][ T5792] Bluetooth: hci0: command tx timeout [ 78.165269][ T5879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5'. [ 78.206769][ T5792] Bluetooth: hci1: command tx timeout [ 78.286399][ T5792] Bluetooth: hci2: command tx timeout [ 78.286420][ T50] Bluetooth: hci3: command tx timeout [ 78.298111][ T5828] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.335376][ T5883] loop1: detected capacity change from 0 to 2048 [ 78.354061][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 78.357229][ T5883] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.406770][ T5888] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.514356][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 78.562869][ T5828] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 78.583788][ T5883] kAFS: unable to lookup cell 'ÛÿÌ…öö?Û›ãkÕ´]-û×´½8Þˆß×>~¡™OûøC1žösߘ˜iŒŸ?óíóÏ®õa¬½ðƒ¿yúüù³ßña;<ÅèçC' [ 78.598046][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 78.635785][ T5828] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 78.672705][ T5828] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 78.690264][ T5828] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 78.705042][ T5828] usb 3-1: Manufacturer: syz [ 78.721083][ T5828] usb 3-1: config 0 descriptor?? [ 78.730049][ T5871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.744586][ T5828] smsusb:smsusb_probe: board id=9, interface number 0 [ 78.775207][ T5828] smsusb:siano_media_device_register: media controller created [ 78.809521][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.817050][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.824402][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.831760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.839110][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.848419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.855763][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.863076][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.870392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.878227][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.885540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.892825][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.901325][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.908736][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.916167][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.923451][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.930725][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.940660][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.948106][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.955451][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.963265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.970766][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.978820][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.986138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.993451][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.000771][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.008078][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.016769][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.024096][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.031384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.038691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.045994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.054566][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.062705][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.070028][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.078049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.085370][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.092662][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.099932][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.107215][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.116838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.124758][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.132117][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.139465][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.146860][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.154877][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.162273][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.169564][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.176848][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.184093][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.192143][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.199471][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.206788][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.214096][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.221419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.230660][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.237961][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.245643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.252876][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.260132][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.268042][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.275351][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.282669][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.290168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.297457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.308718][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.316308][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.323628][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.330936][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.338249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.346086][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.353402][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.360712][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.368026][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.375344][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.383617][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.390949][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.398255][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.405556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.412873][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.422089][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.429513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.436828][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.444150][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.451474][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.459540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.466867][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.474174][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.481482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.488792][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.496652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.504207][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.511515][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.519013][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.526327][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.533642][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.542355][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.549674][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.557349][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.564770][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.572082][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.579479][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.586784][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.594443][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.601764][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.609076][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.616381][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.623702][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.632743][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.640056][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.647302][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.654539][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.661824][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.669709][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.677023][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.684331][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.691855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.699205][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.706878][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.714192][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.721509][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.728836][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.736237][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.744617][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.751938][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.759400][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.766693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.775046][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.782655][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.789981][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.797306][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.804623][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.811942][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.821329][ T5828] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 79.831227][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831338][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831422][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831507][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831590][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831673][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831844][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.831926][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.832008][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.915961][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.923322][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.930627][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.937927][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.945245][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.952550][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.959857][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.967173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.974520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.012183][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.019628][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.026935][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.034212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.041511][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.048861][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.056169][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.063473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.070782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.081229][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.088541][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.095853][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.103159][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.110454][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.117760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.125067][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.132389][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.140031][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.149571][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.156933][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.164250][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.171565][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.178884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.187768][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.195102][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.202409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.209786][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.217034][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.225748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.234779][ T50] Bluetooth: hci0: command tx timeout [ 80.240523][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.246621][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 80.247803][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.264227][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.271563][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.278891][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.286187][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.293492][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.300839][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.309194][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.316506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.323958][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.331264][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.338570][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.342949][ T5921] loop3: detected capacity change from 0 to 2048 [ 80.345851][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.359819][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.367099][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.375829][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.383353][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.385954][ T50] Bluetooth: hci1: command tx timeout [ 80.391209][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.396608][ T5792] Bluetooth: hci2: command tx timeout [ 80.404153][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.409191][ T50] Bluetooth: hci3: command tx timeout [ 80.416588][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.429063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.436374][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.443696][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.451866][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.459179][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.466592][ T5828] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 80.473729][ T5828] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 80.483556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.490860][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.498134][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.505411][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.512643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.519894][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.527112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.534419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.542967][ T5921] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.543022][ T5828] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 80.561033][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.568319][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.575550][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.582946][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.590223][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.597563][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.605420][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.612722][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.620019][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.627307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.634587][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.641922][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.651063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.658379][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.665669][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.672957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.680241][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.687521][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.695948][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.703255][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.710540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.717838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.725128][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.732682][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.741628][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.748980][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.756287][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.763633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.764232][ T5927] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.770920][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.788711][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.797129][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.804431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.811715][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.818979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.826201][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.833876][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.842797][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.846998][ T5928] delete_channel: no stack [ 80.850087][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.861944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.867631][ T5794] udevd[5794]: incorrect nilfs2 checksum on /dev/loop3 [ 80.869200][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.883295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.890657][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.899227][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.906545][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.913922][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.921219][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.928516][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.935826][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.944818][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.952159][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.959460][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.966784][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.972816][ T5921] kAFS: unable to lookup cell 'ÛÿÌ…öö?Û›ãkÕ´]-û×´½8Þˆß×>~¡™OûøC1žösߘ˜iŒŸ?óíóÏ®õa¬½ðƒ¿yúüù³ßña;<ÅèçC' [ 80.974068][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.993453][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.001602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.009010][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.016321][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.023387][ T5933] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 81.023588][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.039279][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.046625][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.055368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.062699][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.069944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.077179][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.084437][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.091666][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.100599][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.107909][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.115207][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.122502][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.129914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.137209][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.144838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.152169][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.159477][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.166785][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.174108][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.181430][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.191332][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.198744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.206031][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.213410][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.220716][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.228018][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.237254][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.245084][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.252401][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.259713][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.267021][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.274336][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.281658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.290917][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.298260][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.305589][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.312904][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.320232][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.327538][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.338627][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.346042][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.353333][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.360618][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.367906][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.375193][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.384828][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.392223][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.394105][ T28] audit: type=1326 audit(1754519918.205:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7a98ebe9 code=0x7ffc0000 [ 81.399484][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.429053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.436365][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.443659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.453312][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.460646][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.467944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.475243][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.482546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.489844][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.499433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.506762][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.514053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.521474][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.528704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.538513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.545842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.553151][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.560907][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.568212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.575549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.585169][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.592557][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.599850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.607153][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.614457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.621760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.628736][ T28] audit: type=1326 audit(1754519918.205:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7a98ebe9 code=0x7ffc0000 [ 81.629461][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.658682][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.666007][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.673349][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.680704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.688105][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.697556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.706554][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.713957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.721264][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.728551][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.735800][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.745073][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.752394][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.759723][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.767126][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.774423][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.781730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.790321][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.797666][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.804987][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.812310][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.819887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.827167][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.836539][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.843853][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.851141][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.858439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.865746][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.873148][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.881201][ T5945] loop0: detected capacity change from 0 to 1024 [ 81.882592][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.895132][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.902447][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.909752][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.917056][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.924369][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.935483][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.942810][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.950071][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.957693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.964932][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.972175][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.982781][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.990112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 81.995175][ T27] cfg80211: failed to load regulatory.db [ 81.997453][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.010698][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.018055][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.025354][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.035622][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.042950][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.050262][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.057574][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.064868][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.072153][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.081762][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.089168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.096473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.103873][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.111251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.118571][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.127913][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.135234][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.142550][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.149879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.150700][ T5949] loop3: detected capacity change from 0 to 1024 [ 82.157162][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.171146][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.181314][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.188661][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.195971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.203287][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.210647][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.217902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.226392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.233736][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.241032][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.248327][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.253538][ T5945] hfsplus: xattr searching failed [ 82.256028][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.268820][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.277621][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.285179][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.292497][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.299784][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.307144][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.314387][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.321621][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.329782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.337446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.344844][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.352148][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.359454][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.366765][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.375176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.382480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.389788][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.397088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.404402][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.411715][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.420322][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.427662][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.434995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.442311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.449721][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.457025][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.465419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.472751][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.480064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.487384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.494702][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.501984][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.510358][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 82.517643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.525040][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.532429][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.539726][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.547012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.554295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 82.563772][ T5828] ------------[ cut here ]------------ [ 82.569990][ T5828] ODEBUG: free active (active state 0) object: ffff888026856448 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 82.584372][ T5919] ================================================================== [ 82.592467][ T5919] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 82.600115][ T5919] Read of size 8 at addr ffff88802dfd4098 by task kworker/0:7/5919 [ 82.608024][ T5919] [ 82.610359][ T5919] CPU: 0 PID: 5919 Comm: kworker/0:7 Not tainted 6.6.101-syzkaller #0 [ 82.618500][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.628545][ T5919] Workqueue: events do_submit_urb [ 82.633586][ T5919] Call Trace: [ 82.636873][ T5919] [ 82.640064][ T5919] dump_stack_lvl+0x16c/0x230 [ 82.644735][ T5919] ? __lock_acquire+0x7c80/0x7c80 [ 82.649750][ T5919] ? show_regs_print_info+0x20/0x20 [ 82.655021][ T5919] ? load_image+0x3b0/0x3b0 [ 82.659523][ T5919] ? __virt_addr_valid+0x469/0x540 [ 82.664804][ T5919] print_report+0xac/0x220 [ 82.669226][ T5919] ? __lock_acquire+0xff/0x7c80 [ 82.674072][ T5919] kasan_report+0x117/0x150 [ 82.678564][ T5919] ? mark_lock+0x94/0x320 [ 82.682889][ T5919] ? __lock_acquire+0xff/0x7c80 [ 82.687751][ T5919] __lock_acquire+0xff/0x7c80 [ 82.692426][ T5919] ? mark_lock+0x94/0x320 [ 82.696839][ T5919] ? __lock_acquire+0x1334/0x7c80 [ 82.701870][ T5919] ? mark_lock+0x94/0x320 [ 82.706206][ T5919] ? look_up_lock_class+0x75/0x140 [ 82.711320][ T5919] ? verify_lock_unused+0x140/0x140 [ 82.716513][ T5919] ? register_lock_class+0xb5/0x890 [ 82.721716][ T5919] ? is_dynamic_key+0x260/0x260 [ 82.726557][ T5919] ? mark_lock+0x94/0x320 [ 82.730875][ T5919] ? __lock_acquire+0x1334/0x7c80 [ 82.735890][ T5919] lock_acquire+0x197/0x410 [ 82.740560][ T5919] ? smscore_getbuffer+0xa9/0x440 [ 82.745579][ T5919] ? read_lock_is_recursive+0x20/0x20 [ 82.750945][ T5919] _raw_spin_lock_irqsave+0xa8/0xf0 [ 82.756137][ T5919] ? smscore_getbuffer+0xa9/0x440 [ 82.761146][ T5919] ? _raw_spin_lock+0x40/0x40 [ 82.765816][ T5919] smscore_getbuffer+0xa9/0x440 [ 82.770746][ T5919] ? smscore_onresponse+0xf10/0xf10 [ 82.775945][ T5919] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 82.781925][ T5919] ? read_lock_is_recursive+0x20/0x20 [ 82.787308][ T5919] do_submit_urb+0x98/0x360 [ 82.791812][ T5919] ? process_scheduled_works+0x957/0x15b0 [ 82.797624][ T5919] ? process_scheduled_works+0x957/0x15b0 [ 82.803356][ T5919] process_scheduled_works+0xa45/0x15b0 [ 82.808990][ T5919] ? assign_work+0x400/0x400 [ 82.813578][ T5919] ? assign_work+0x39e/0x400 [ 82.818164][ T5919] worker_thread+0xa55/0xfc0 [ 82.822855][ T5919] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 82.828808][ T5919] ? _raw_spin_unlock+0x40/0x40 [ 82.834278][ T5919] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 82.840195][ T5919] kthread+0x2fa/0x390 [ 82.844271][ T5919] ? pr_cont_work+0x560/0x560 [ 82.848945][ T5919] ? kthread_blkcg+0xd0/0xd0 [ 82.853528][ T5919] ret_from_fork+0x48/0x80 [ 82.857969][ T5919] ? kthread_blkcg+0xd0/0xd0 [ 82.862543][ T5919] ret_from_fork_asm+0x11/0x20 [ 82.867299][ T5919] [ 82.870301][ T5919] [ 82.872645][ T5919] Allocated by task 5828: [ 82.876973][ T5919] kasan_set_track+0x4e/0x70 [ 82.881808][ T5919] __kasan_kmalloc+0x8f/0xa0 [ 82.886400][ T5919] smscore_register_device+0x63/0x10f0 [ 82.891952][ T5919] smsusb_probe+0x1362/0x1da0 [ 82.896636][ T5919] usb_probe_interface+0x5a4/0xb00 [ 82.901737][ T5919] really_probe+0x25b/0xb40 [ 82.906227][ T5919] __driver_probe_device+0x18c/0x330 [ 82.911494][ T5919] driver_probe_device+0x4f/0x420 [ 82.916518][ T5919] __device_attach_driver+0x2ca/0x520 [ 82.921891][ T5919] bus_for_each_drv+0x24b/0x2d0 [ 82.926774][ T5919] __device_attach+0x2b5/0x400 [ 82.931532][ T5919] bus_probe_device+0x180/0x260 [ 82.936439][ T5919] device_add+0x85b/0xc20 [ 82.940769][ T5919] usb_set_configuration+0x1a79/0x20c0 [ 82.946223][ T5919] usb_generic_driver_probe+0x8d/0x150 [ 82.951681][ T5919] usb_probe_device+0x13d/0x280 [ 82.956532][ T5919] really_probe+0x25b/0xb40 [ 82.961110][ T5919] __driver_probe_device+0x18c/0x330 [ 82.966390][ T5919] driver_probe_device+0x4f/0x420 [ 82.971418][ T5919] __device_attach_driver+0x2ca/0x520 [ 82.976793][ T5919] bus_for_each_drv+0x24b/0x2d0 [ 82.981660][ T5919] __device_attach+0x2b5/0x400 [ 82.986480][ T5919] bus_probe_device+0x180/0x260 [ 82.991337][ T5919] device_add+0x85b/0xc20 [ 82.995669][ T5919] usb_new_device+0xa31/0x1630 [ 83.000429][ T5919] hub_event+0x2962/0x49c0 [ 83.004841][ T5919] process_scheduled_works+0xa45/0x15b0 [ 83.010549][ T5919] worker_thread+0xa55/0xfc0 [ 83.015123][ T5919] kthread+0x2fa/0x390 [ 83.019175][ T5919] ret_from_fork+0x48/0x80 [ 83.023584][ T5919] ret_from_fork_asm+0x11/0x20 [ 83.028338][ T5919] [ 83.030645][ T5919] Freed by task 5828: [ 83.034652][ T5919] kasan_set_track+0x4e/0x70 [ 83.039235][ T5919] kasan_save_free_info+0x2e/0x50 [ 83.044250][ T5919] ____kasan_slab_free+0x126/0x1e0 [ 83.049370][ T5919] slab_free_freelist_hook+0x130/0x1b0 [ 83.054821][ T5919] __kmem_cache_free+0xba/0x1f0 [ 83.059660][ T5919] smscore_unregister_device+0x603/0x6e0 [ 83.065278][ T5919] smsusb_term_device+0x18f/0x220 [ 83.070293][ T5919] smsusb_probe+0x1708/0x1da0 [ 83.074958][ T5919] usb_probe_interface+0x5a4/0xb00 [ 83.080514][ T5919] really_probe+0x25b/0xb40 [ 83.085103][ T5919] __driver_probe_device+0x18c/0x330 [ 83.090383][ T5919] driver_probe_device+0x4f/0x420 [ 83.095403][ T5919] __device_attach_driver+0x2ca/0x520 [ 83.100770][ T5919] bus_for_each_drv+0x24b/0x2d0 [ 83.105616][ T5919] __device_attach+0x2b5/0x400 [ 83.110369][ T5919] bus_probe_device+0x180/0x260 [ 83.115637][ T5919] device_add+0x85b/0xc20 [ 83.120043][ T5919] usb_set_configuration+0x1a79/0x20c0 [ 83.125490][ T5919] usb_generic_driver_probe+0x8d/0x150 [ 83.131051][ T5919] usb_probe_device+0x13d/0x280 [ 83.136170][ T5919] really_probe+0x25b/0xb40 [ 83.140660][ T5919] __driver_probe_device+0x18c/0x330 [ 83.145928][ T5919] driver_probe_device+0x4f/0x420 [ 83.150935][ T5919] __device_attach_driver+0x2ca/0x520 [ 83.156334][ T5919] bus_for_each_drv+0x24b/0x2d0 [ 83.161167][ T5919] __device_attach+0x2b5/0x400 [ 83.165935][ T5919] bus_probe_device+0x180/0x260 [ 83.170766][ T5919] device_add+0x85b/0xc20 [ 83.175084][ T5919] usb_new_device+0xa31/0x1630 [ 83.179836][ T5919] hub_event+0x2962/0x49c0 [ 83.184238][ T5919] process_scheduled_works+0xa45/0x15b0 [ 83.189780][ T5919] worker_thread+0xa55/0xfc0 [ 83.194358][ T5919] kthread+0x2fa/0x390 [ 83.198513][ T5919] ret_from_fork+0x48/0x80 [ 83.202920][ T5919] ret_from_fork_asm+0x11/0x20 [ 83.207677][ T5919] [ 83.209988][ T5919] The buggy address belongs to the object at ffff88802dfd4000 [ 83.209988][ T5919] which belongs to the cache kmalloc-2k of size 2048 [ 83.224111][ T5919] The buggy address is located 152 bytes inside of [ 83.224111][ T5919] freed 2048-byte region [ffff88802dfd4000, ffff88802dfd4800) [ 83.238154][ T5919] [ 83.240462][ T5919] The buggy address belongs to the physical page: [ 83.246864][ T5919] page:ffffea0000b7f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2dfd0 [ 83.257001][ T5919] head:ffffea0000b7f400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.266003][ T5919] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 83.273969][ T5919] page_type: 0xffffffff() [ 83.278295][ T5919] raw: 00fff00000000840 ffff888017842000 dead000000000100 dead000000000122 [ 83.286868][ T5919] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 83.295432][ T5919] page dumped because: kasan: bad access detected [ 83.301845][ T5919] page_owner tracks the page as allocated [ 83.307554][ T5919] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3359, tgid 3359 (krfcommd), ts 13479669428, free_ts 0 [ 83.325700][ T5919] post_alloc_hook+0x1cd/0x210 [ 83.330462][ T5919] get_page_from_freelist+0x195c/0x19f0 [ 83.336003][ T5919] __alloc_pages+0x1e3/0x460 [ 83.340633][ T5919] alloc_slab_page+0x5d/0x170 [ 83.345326][ T5919] new_slab+0x87/0x2e0 [ 83.349381][ T5919] ___slab_alloc+0xc6d/0x12f0 [ 83.354045][ T5919] __kmem_cache_alloc_node+0x1a2/0x260 [ 83.359498][ T5919] kmalloc_trace+0x2a/0xe0 [ 83.363930][ T5919] l2cap_chan_create+0x50/0x760 [ 83.368938][ T5919] l2cap_sock_create+0x1e7/0x300 [ 83.373856][ T5919] bt_sock_create+0x159/0x230 [ 83.378608][ T5919] __sock_create+0x4a6/0x940 [ 83.383181][ T5919] rfcomm_run+0x263/0x5a30 [ 83.387585][ T5919] kthread+0x2fa/0x390 [ 83.391636][ T5919] ret_from_fork+0x48/0x80 [ 83.396034][ T5919] ret_from_fork_asm+0x11/0x20 [ 83.400785][ T5919] page_owner free stack trace missing [ 83.406131][ T5919] [ 83.408437][ T5919] Memory state around the buggy address: [ 83.414048][ T5919] ffff88802dfd3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.422351][ T5919] ffff88802dfd4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.430394][ T5919] >ffff88802dfd4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.438451][ T5919] ^ [ 83.443332][ T5919] ffff88802dfd4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.451397][ T5919] ffff88802dfd4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.459449][ T5919] ================================================================== [ 83.467490][ T5919] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.474661][ T5919] CPU: 0 PID: 5919 Comm: kworker/0:7 Not tainted 6.6.101-syzkaller #0 [ 83.482795][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.492841][ T5919] Workqueue: events do_submit_urb [ 83.498126][ T5919] Call Trace: [ 83.501390][ T5919] [ 83.504307][ T5919] dump_stack_lvl+0x16c/0x230 [ 83.508978][ T5919] ? show_regs_print_info+0x20/0x20 [ 83.514168][ T5919] ? load_image+0x3b0/0x3b0 [ 83.518665][ T5919] panic+0x2c0/0x710 [ 83.522898][ T5919] ? bpf_jit_dump+0xd0/0xd0 [ 83.527391][ T5919] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 83.533305][ T5919] ? _raw_spin_unlock+0x40/0x40 [ 83.538216][ T5919] ? print_memory_metadata+0x314/0x400 [ 83.543684][ T5919] ? __lock_acquire+0xff/0x7c80 [ 83.548533][ T5919] check_panic_on_warn+0x84/0xa0 [ 83.553550][ T5919] ? __lock_acquire+0xff/0x7c80 [ 83.558388][ T5919] end_report+0x6f/0x140 [ 83.562621][ T5919] kasan_report+0x128/0x150 [ 83.567111][ T5919] ? mark_lock+0x94/0x320 [ 83.571519][ T5919] ? __lock_acquire+0xff/0x7c80 [ 83.576381][ T5919] __lock_acquire+0xff/0x7c80 [ 83.581046][ T5919] ? mark_lock+0x94/0x320 [ 83.585366][ T5919] ? __lock_acquire+0x1334/0x7c80 [ 83.590383][ T5919] ? mark_lock+0x94/0x320 [ 83.594958][ T5919] ? look_up_lock_class+0x75/0x140 [ 83.600059][ T5919] ? verify_lock_unused+0x140/0x140 [ 83.605333][ T5919] ? register_lock_class+0xb5/0x890 [ 83.610525][ T5919] ? is_dynamic_key+0x260/0x260 [ 83.615366][ T5919] ? mark_lock+0x94/0x320 [ 83.619682][ T5919] ? __lock_acquire+0x1334/0x7c80 [ 83.624692][ T5919] lock_acquire+0x197/0x410 [ 83.629275][ T5919] ? smscore_getbuffer+0xa9/0x440 [ 83.634288][ T5919] ? read_lock_is_recursive+0x20/0x20 [ 83.639649][ T5919] _raw_spin_lock_irqsave+0xa8/0xf0 [ 83.644837][ T5919] ? smscore_getbuffer+0xa9/0x440 [ 83.649841][ T5919] ? _raw_spin_lock+0x40/0x40 [ 83.654520][ T5919] smscore_getbuffer+0xa9/0x440 [ 83.659362][ T5919] ? smscore_onresponse+0xf10/0xf10 [ 83.664556][ T5919] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 83.670520][ T5919] ? read_lock_is_recursive+0x20/0x20 [ 83.675878][ T5919] do_submit_urb+0x98/0x360 [ 83.680372][ T5919] ? process_scheduled_works+0x957/0x15b0 [ 83.686084][ T5919] ? process_scheduled_works+0x957/0x15b0 [ 83.691803][ T5919] process_scheduled_works+0xa45/0x15b0 [ 83.697348][ T5919] ? assign_work+0x400/0x400 [ 83.702375][ T5919] ? assign_work+0x39e/0x400 [ 83.706955][ T5919] worker_thread+0xa55/0xfc0 [ 83.711529][ T5919] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 83.717417][ T5919] ? _raw_spin_unlock+0x40/0x40 [ 83.722258][ T5919] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 83.728150][ T5919] kthread+0x2fa/0x390 [ 83.732205][ T5919] ? pr_cont_work+0x560/0x560 [ 83.736871][ T5919] ? kthread_blkcg+0xd0/0xd0 [ 83.741446][ T5919] ret_from_fork+0x48/0x80 [ 83.745850][ T5919] ? kthread_blkcg+0xd0/0xd0 [ 83.750425][ T5919] ret_from_fork_asm+0x11/0x20 [ 83.755197][ T5919] [ 83.758562][ T5919] Kernel Offset: disabled [ 83.762895][ T5919] Rebooting in 86400 seconds..