last executing test programs: 4m7.720959615s ago: executing program 2 (id=57): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000280)) 4m7.601789177s ago: executing program 2 (id=59): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180d00000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 4m7.327277831s ago: executing program 2 (id=63): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000006c0)=0x15, 0x4) 4m6.864126488s ago: executing program 2 (id=67): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL9zzu/0O86neb6fz/5Yz+z9rP287/Ne1t6YbzoOqtageuV6RAT/FrzwRxIAxAJAPwC4BgACACgdVzru/P7sEpP+vZOwP9fDqVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtnFq/mt5y7ob3///66vzh3v4+/8vJLPE6C9Wl7i+E0DMP5vC/c/auP9/WcE/cxD3P2vj/mdVsVe6APZfgN//f0lNfh1m+8MDuf9ZG/efsazsSt9/vtIbRLL2c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKGU/6i0+AVAFwKr3RdjDHGGGOMMcYY+/P4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/Yv7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFc1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiTDOl/If5b/9O/oCfz75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/Sr4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufPLvkAEIlCBCmKCmCA2iA1yBDmCnEHOIFeQK4gEkSAuiAtyB9cHeYK8Qb4gfxAfFAgKBjowgQ3ExaZHgxuCIsGNQdHgpqBYUDxwQYkgIbg5KBncEpQKbg1KB7cFZYLbg7JBuaB8UCG4I6gY3BlUCu4KKgd3B1WCqkG1oHpwT1AjuDeoGdwX1AruD2oHDwR1ggeDusFDQb3g4aB+8EjQIHg0aBg8FjQKGgdNgqZBsz91fu9P5H3CddPddZLuoXvql3Uv3Vv30X11P/2K7q9f1QP0azpZD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYnaLH6fH6bT1Bv6Mn6kl6sp6iU/VUPU2/q6frGXqmfk/P0u/r2XqOnqvn6TT9gZ6vF+h0/aFeqD/SGXqRXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepverj/WO/QneqfepXfrT/Ue/Zneqz/X+/QXer/+Umfqr/QB/bU+qL/Rh/S3+rD+Th/RR/Ux/b0+rn/QJ/RJfUqf1mf0j/qs/kmf0/784v7817tRRpkYE2NiTazJYXKYnCanyWVymYiJmDgTZ3Kb3CaPyWPymXwm3sSbgqagOY8MmUKmkImaqCliipiipqgpZooZZ5xJMAmmpClpSplSprQpbcqYMqasKWvKm/LmDnOHudPcae4yd5m7zd2mqqlqqpvqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkmpgmpplpZpqb5qaFaWFamVamtWlt2pg2JtEkmramrWln2pn2pr3pYDqYjqaj6WQ6mS6mi+lquppupptJMkmmp+lpeplepo/pY/qZfqa/6W8GmAEm2SSbQWaQGWwGmyFmiBlqhpnh5xeqZqQZZUZ/O8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz36SbdLPQLDQZJsMsNovNUrPULDfLzUqz0qw2q81aWGvWm/Vmo9loNpvNZqvZarab7WaH2WF2mp1mt9lt9pg9Zq/Za/aZfWa/2W8yTaY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm78XvS29ibXabw15lc9qrbS57jf37OJ/Nb+NtAVvQapvH5v1VbKy1Re1Ntpgtbp0tYRPszb+Jy9pytrytYO+wFe2dttJv4hr2XlvT3mdr2fttdXvPr+La9gFbxz5q6yIC2Ma2vm1qG9hHbUP7mG1kG9smtqltbZ+ybezTNtE+Y9vaZ38Tz7cL7Eq7yq62a+xOu8uesqftQfuNPWN/tN1sd9vPvmL721ftAPuaTbYDfxMPt2/ZEXakHWVH2zF27G/iyXaKTbVT7TT7rp1uZ/wmTrMf2Fk23c62c+xcO+/n+HxN6fZDu9B+ZDNsAIvtErvULrPL7Yr/X+sSu86utxvsDvuJ3Wy32K12m91+aSFsd9nd9lO7x35mD9iv7T77hd1vD9lM+9XP8fnHd8h+aw/b7+wRe9Qes9/b4/YH9XPuyF4A9kf7vf3JnrPeAiEBSVIUUAxlo1jKTjnoKspJV1MuuoYidC3F0XWUm66nPJSX8lF+iqcCVJA0GbJEFFIhKkxRuoEulVeMipOjEpRAN1NJuoVK0a1Umm6jMnQ7laVyVJ4q0B1Uke6kSnQXVaa7qQpVpWpUne6hGnQv1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE1pibUlJrR49ScnqAW1JJa0ZPUmp6iNvQ0JdIz1JaepXb0N2pPz1EHep460gvUiTpTF3qRutJL1I26UxL1oJ70MvWi3tSH+lI/eoX606s0gF6jZBpIg+h1Gkxv0BB6k4bSMBpOb9EIGkmjaDSNobGUQuNoPL1NE+gdmkiTaDJNoVSaStPoXZpOM2gmvUez6H2aTXNoLs2jNPqA5tMCSqcPaSF9RBm0iBbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDt9TDvoE9pJu2g3fUp76DPaS5/TPvqC9tOXlElf0QH6mg7SN3SIvvXd6Ts6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHREMNiYfHQhSXChPDmsGR4S1gqvDUsHd4WlglvD8uG5cJH768Q3hFWDO8MK4V3hZXDu8MqYdWwWlg9vCesEd4b1gzvC2uF94elwgfCOuGDYd3wobBe+HBYP3wkbBA+GjYMHwsbhY3DJmHTsFn4eNg8fCJsEbYMW4VPhq3Dp8I24dNhYvhM2DZ89uf9Dyz44/1JYY+wZ/hy+HLo/X1ybnReNC36QXR+dEE0PfphdGH0o2hGdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1Pvq2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1N3kirnizrkSLsE1dc1cM9fcPeFauJaulXvSPemeck+5p93T7hnX1j3r2rm/ufbuOdfBPe+edy+4Tq6z6+JedF3duFwX3pNJrqfr6Xq5Xq6P6+P6uX6uv+vvBrgBLtklu0FukBvsBrshbogb6oa64W64G+FGuFFulBvjxrgUl+LGu/FugpvgJrqJbrKb7FJdqpvmprnpbrqrOOPCWWa72W6um+vSXJqb786vGdPdQrfQZbgMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9Nfc2FSt8ftdXvdPrfP7Xdfukz3lTvgvnYH3TfukPvWHXbfuSPuqDvmvnfH3Q/uhDvpTrnT7oz70Z11P7lzzruUyLjI+MjbkQmRdyITI5MikyNTIqmRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF9gc+gL+cI+6m/wRfyNvqi/yRfzxb3zJXyCv9mX9Lf4Uv5WX9rf5sv4231ZX86X94/5Rr6xb+Kb+mb+cd/cP+Fb+Ja+lX/St/ZP+Tb+aZ/on/Ft/bO+nf+bb++f8x38876jf8F38p19F/+i7+pf8t18d5/ke/ie/mXfy/f2fXxf38+/4vv7V/0A/5pP9gP9IP+6H+zf8EP8m36oH+aHx7zlR1y6RIaxPsWP8+P9236Cf8dP9JP8ZD/Fp/qpfpp/10/3M/xM/56f5d/3s/0cP9fP82n+Az/fL/Dp/kO/0H/kM/yiSzeV/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2/7Hf4T/xO/0uv9t/6vf4z/xe/7nf57/w+/2XPtN/5Q/4r/1B/40/5L/1h/13/og/6o/57/1x/4M/4U/6U/60P+N/9Gf9T/4c/581xhhjjLF/yrjLQ/HrPRdu5/f4nRzxi4N7AsDVW/Jn/nL/+RXl2jwXxr1FfOsIADzTvePDl7YqVZKSki4emyEhKDwH4NLfBJ0XA5fjRdAKnoJEaAklf7f+3qLzGfoH80dvA8jxi5xYuBxfnv9zAEz6nfkff3L4/DLhqbj/Yf45AEULX87JDpfjRdDq5/srLaHUH9Sft/kv64/97fzZv0gBaPGLnJxwOb5cfwI8Ac9C4q+OZIwxxhhjjDHGLugtyre/dP156V98/t71eby6nJMNLsf/6PqcMcYYY4wxxhhjV95znbs8/XhiYsv2//qg0v8q658eNIT/q5l58LsD7wEu/UQBwL85IcD5gfxPPopN/5FzJV986/z9rqWnfQD/Ha38MwZX+IOJMcYYY4wx9qe7vOj/9c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgv4Tv07sSj9GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//nXwDKg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 4m6.435984274s ago: executing program 2 (id=69): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) 4m5.822394653s ago: executing program 2 (id=76): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x3, 0x4, 0x87a, "55696801520b"}}) 4m5.258602692s ago: executing program 32 (id=76): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x3, 0x4, 0x87a, "55696801520b"}}) 3m1.165976273s ago: executing program 1 (id=769): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r0, 0x0, 0xffde) 3m0.993871506s ago: executing program 1 (id=770): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@acl}, {@nouser_xattr}, {@cache_strategy_disabled}, {@cache_strategy_readahead}, {@nouser_xattr}]}, 0x1, 0x177, &(0x7f0000000240)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 3m0.471855334s ago: executing program 1 (id=773): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x0, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e}}) 3m0.267950827s ago: executing program 1 (id=776): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000100)='./file1\x00', 0x800800, &(0x7f0000000040)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@umask={'umask', 0x3d, 0x8}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 2m59.934562822s ago: executing program 1 (id=780): r0 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0902, 0x0, '\x00', @value64=0xe21}}) 2m59.424437559s ago: executing program 1 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x4004, '\x00', 0xa5, 0x7}) 2m58.818935458s ago: executing program 33 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x4004, '\x00', 0xa5, 0x7}) 33.96012005s ago: executing program 5 (id=2460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x4) 33.527833306s ago: executing program 5 (id=2464): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x3, 0x3f, 0x0, 0x3, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x11, 0x0, [{0x4, 0x0, 0x2}, {0x800, 0x8, 0x4, 0x7}, {0x4, 0x8, 0x48, 0x6}, {0xfff9, 0xf, 0xfb, 0x4}, {0x2f, 0x8, 0x2b, 0x5}, {0x0, 0xbe, 0x8c, 0x81}, {0x8001, 0x99, 0x2, 0x703f}, {0x8, 0x6, 0x5, 0x2}, {0x1cc3, 0x2e, 0x8, 0x2}, {0xc, 0x3, 0x2, 0x8}, {0x5, 0x8, 0x8, 0x4}, {0x7, 0x8, 0x6, 0xffffa025}, {0x3ff, 0x8, 0x8, 0x2400}, {0x10, 0x3, 0xa, 0x3}, {0x2, 0xfb, 0x5, 0xc7b}, {0xff45, 0x2f, 0x75}, {0xa, 0x2, 0x7, 0x6}, {0x0, 0x1, 0x71, 0x9}, {0x1000, 0x8, 0x7f, 0x8}, {0x7, 0x5, 0x7, 0x5}, {0x8, 0xe, 0x3, 0x8}, {0xfffa, 0x9, 0x5, 0x1}, {0x94, 0x8, 0x7, 0xfffffff8}, {0x92, 0x3, 0x2, 0xff}, {0x7, 0x7f, 0x0, 0x5}, {0x6, 0x9, 0xd2, 0x10}, {0x5, 0x54, 0x6, 0x8}, {0x81, 0x9, 0x32, 0x8}, {0x7fff, 0x91, 0x2, 0x62}, {0xff80, 0x39, 0x1, 0x3785}, {0x8, 0x80, 0x3, 0x8}, {0x7fff, 0x8, 0x0, 0x6}, {0x5, 0x5, 0x81, 0x43}, {0x52a, 0xd, 0x8, 0x8000}, {0x8, 0x1, 0x6, 0xf}, {0xff, 0xbc, 0x7, 0x9}, {0x8, 0x2, 0xec, 0xf6}, {0x9039, 0x1, 0xdc, 0xbd}, {0x6bf, 0x9, 0x80, 0x4}, {0x7, 0xa9, 0x4, 0x9}, {0x9, 0x6, 0x7, 0x1}, {0x0, 0x1, 0x5, 0x2}, {0x6, 0x5, 0xb, 0x63}, {0x2, 0xd, 0x3, 0x9}, {0x0, 0x1, 0x5, 0x1}, {0x4227, 0x14, 0x4, 0x1}, {0x4, 0x3, 0x9, 0xffff}, {0x4, 0x9, 0x6e, 0x7}, {0x4, 0xe6, 0x9}, {0x5a4b, 0x4, 0xf, 0x80000001}, {0x1000, 0x8, 0x1, 0x800}, {0x8, 0x5, 0x13, 0x8}, {0xe, 0xc0, 0x40}, {0x3, 0x0, 0xe}, {0x69, 0x6, 0x4, 0x101}, {0x4, 0xe, 0x3, 0x6}, {0x58b9, 0x4, 0x8, 0x2}, {0x3ff, 0xf5, 0x5, 0x2}, {0x8, 0x2, 0x1, 0xd}, {0x6, 0xfe, 0x5, 0x1}, {0x9, 0xb5, 0x4, 0x7}, {0xadf, 0xcc, 0x1}, {0x101, 0x6, 0x5, 0x9eb}, {0x7, 0x8, 0x0, 0x1}], {0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@icmp={{}, {0xd, "7fac", 0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfc75) 33.314095489s ago: executing program 5 (id=2468): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) 32.955940524s ago: executing program 5 (id=2470): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$eJzs3EFrE2sUxvFzm94mTWmTC5eCgnrQjd0MbfwAGqQFMaDWpqgLYWonGjImZSZUUsRmI279HMVld4L6BboRN+7dFUF0YRfiiJmknbSTNNUmpvb/gzInec+TvKUknBTybt56/rCQc42cWZaBmMqASFW2RJI/q7p/6teBWj0kQVWZGPny/tTN23eupjOZ6KzqTHruQkpVx868evT4xdk35ZH59bGXUdlI3t38lPqwMb5xYvP73IO8q3lXi6WymrpQKpXNBdvSxbxbMFSv25bpWpovupbTtJ6zS0tLFTWLi6PxJcdyXTWLFS1YFS2XtOxU1Lxv5otqGIaOxuV4G+ygJ7s2O2umWy57kUPdEbpuOOxOx0lXRWRo72J2rRebAgAA/aX9/O/P+q3n/8y8f23M/9OHM/+LMP93SbXp1j7zP/4KjpM24/XXbzPmfwAAAAAAAAAAAAAAAAAAAAAAjoItz0t4npdoXBs/URGJiUjj9p/eJ7pjv7//5/DYxV7vE90R+OJeTMR+tpxdzvpXfz2dk7zYYsmkJORb7f2gzq9nrmSmJ7Xmq+d5q/X86nI2ItFGviEZlj/935SfV3ltB/L/Sjz4/ClJyP/hz58KzQ/dOH8ukDckIW/vSUlsWay9r+3kn0ypXr6W2ZUfrvW1FHrSAgAAAAAA/cnQbcnmz7/+2Y9GrSEme9f9/AH+P7Dr8/WgnOzkiEoAAAAAAPDb3MpKwbRtywkp1kWkxVKtiIpIm/hxLSLSF9vYVVwSkT7YRq+KmIj49+gvxMc/bsc7Snkd9Azu82rqtyL0wGAAAAAAR9jO0H+A0LunXdwRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHT9tjwCZG/KbKSqHR39QTfKA2jxPoivTuNwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6z48AAAD//0vYF3I=") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) 32.52798661s ago: executing program 5 (id=2474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000000000000050c00078005001400fd00000011000300686173683a6e65742c6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) 31.990208047s ago: executing program 5 (id=2483): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20000006, 0x4, 0x3, "7713b1bf0ebeaa8f07ff635dbe136c3f64b3c606072d2d0e00", 0x31424752}) 31.632418212s ago: executing program 34 (id=2483): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20000006, 0x4, 0x3, "7713b1bf0ebeaa8f07ff635dbe136c3f64b3c606072d2d0e00", 0x31424752}) 4.944982783s ago: executing program 0 (id=2734): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, 0x0, 0x0) 4.759945636s ago: executing program 0 (id=2737): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 3.784016429s ago: executing program 4 (id=2747): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x421, 0x204, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x2e92}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x48}}, 0xc080) 3.164722717s ago: executing program 3 (id=2754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}}, 0x0) 3.124854518s ago: executing program 6 (id=2755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.784263722s ago: executing program 6 (id=2756): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) accept(0xffffffffffffffff, 0x0, 0x0) 2.727893273s ago: executing program 3 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 2.724937863s ago: executing program 4 (id=2758): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x11e, @local, 0x4e24, 0x0, 'rr\x00', 0x17, 0x1ff, 0x13}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 0x3, 0x1ff, 0x8000}}, 0x44) 2.25203691s ago: executing program 6 (id=2759): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x35315852, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 2.152839471s ago: executing program 0 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x488}}, 0x0) 2.093532382s ago: executing program 3 (id=2761): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_gettime(0xffffffffffffffff, 0x0) 2.035878362s ago: executing program 4 (id=2762): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) 1.716895926s ago: executing program 6 (id=2763): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) unlinkat(0xffffffffffffffff, 0x0, 0x0) 1.564500439s ago: executing program 0 (id=2764): capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0xc771, 0xffffffff, 0x11}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000850000009900000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.50759185s ago: executing program 3 (id=2765): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) 1.50694044s ago: executing program 4 (id=2766): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x1, 0x338, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0xf, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'netbios-ns\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0) 1.041991656s ago: executing program 6 (id=2767): r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1e00) 1.041309616s ago: executing program 3 (id=2768): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) 881.125468ms ago: executing program 0 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x800}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) 858.742968ms ago: executing program 4 (id=2770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x9, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71", 0x0}, 0x50) 480.852234ms ago: executing program 3 (id=2771): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$binfmt_elf32(r0, 0x0, 0x4cd) 445.172824ms ago: executing program 6 (id=2772): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@ref_verify}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x8) 37.2264ms ago: executing program 0 (id=2773): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x32, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x32314d48}) 0s ago: executing program 4 (id=2774): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) kernel console output (not intermixed with test programs): : new high-speed USB device number 7 using dummy_hcd [ 233.448503][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.459735][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.470696][ T27] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.480108][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.489243][ T27] usb 6-1: SerialNumber: syz [ 233.599027][ T5855] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 233.615683][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.634846][ T5855] usb 4-1: config 0 descriptor?? [ 233.720859][ T27] usb 6-1: 0:2 : does not exist [ 233.726442][ T27] usb 6-1: unit 5 not found! [ 233.758718][ T27] usb 6-1: USB disconnect, device number 3 [ 233.797632][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.811573][T10060] loop0: detected capacity change from 0 to 32768 [ 234.072027][ T5855] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 234.087065][ T5855] hackrf 4-1:0.0: Could not detect board [ 234.102122][ T5855] hackrf: probe of 4-1:0.0 failed with error -71 [ 234.119081][ T5855] usb 4-1: USB disconnect, device number 7 [ 234.530155][T10064] loop0: detected capacity change from 0 to 32768 [ 234.538696][T10064] XFS: noikeep mount option is deprecated. [ 234.562331][T10064] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.595893][T10064] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 234.659364][T10064] XFS (loop0): Starting recovery (logdev: internal) [ 234.741267][T10064] XFS (loop0): Ending recovery (logdev: internal) [ 234.765378][T10064] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 234.784635][T10064] XFS (loop0): Failed to initialize disk quotas. [ 234.881411][T10064] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 234.984379][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.072441][T10086] loop4: detected capacity change from 0 to 256 [ 235.111361][T10086] FAT-fs (loop4): Directory bread(block 64) failed [ 235.138038][T10086] FAT-fs (loop4): Directory bread(block 65) failed [ 235.147202][T10086] FAT-fs (loop4): Directory bread(block 66) failed [ 235.161014][T10086] FAT-fs (loop4): Directory bread(block 67) failed [ 235.190127][T10086] FAT-fs (loop4): Directory bread(block 68) failed [ 235.215387][T10086] FAT-fs (loop4): Directory bread(block 69) failed [ 235.233739][T10086] FAT-fs (loop4): Directory bread(block 70) failed [ 235.240336][T10086] FAT-fs (loop4): Directory bread(block 71) failed [ 235.302266][T10086] FAT-fs (loop4): Directory bread(block 72) failed [ 235.308879][T10086] FAT-fs (loop4): Directory bread(block 73) failed [ 236.599315][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 236.621502][T10138] netlink: 'syz.3.1629': attribute type 1 has an invalid length. [ 236.643969][T10138] netlink: 'syz.3.1629': attribute type 2 has an invalid length. [ 237.026826][T10151] loop3: detected capacity change from 0 to 256 [ 237.510549][T10165] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.801271][T10146] loop5: detected capacity change from 0 to 32768 [ 238.096548][T10175] lo: entered promiscuous mode [ 238.109974][T10175] lo: entered allmulticast mode [ 238.112736][T10158] loop0: detected capacity change from 0 to 32768 [ 238.146367][T10175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.221774][T10158] find_entry called with index >= next_index [ 238.239826][T10158] find_entry called with index >= next_index [ 238.268596][T10158] find_entry called with index >= next_index [ 238.639108][T10181] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.680253][T10173] loop3: detected capacity change from 0 to 32768 [ 239.055763][T10190] loop3: detected capacity change from 0 to 128 [ 239.094264][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 239.140670][T10192] tmpfs: Bad value for 'mpol' [ 239.149151][T10190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.809198][T10209] loop3: detected capacity change from 0 to 256 [ 239.905582][T10212] block nbd0: NBD_DISCONNECT [ 239.919393][T10209] FAT-fs (loop3): Directory bread(block 64) failed [ 239.926336][T10209] FAT-fs (loop3): Directory bread(block 65) failed [ 239.933969][T10209] FAT-fs (loop3): Directory bread(block 66) failed [ 239.940637][T10209] FAT-fs (loop3): Directory bread(block 67) failed [ 239.947733][T10209] FAT-fs (loop3): Directory bread(block 68) failed [ 239.956726][T10209] FAT-fs (loop3): Directory bread(block 69) failed [ 239.966372][T10209] FAT-fs (loop3): Directory bread(block 70) failed [ 239.974331][T10209] FAT-fs (loop3): Directory bread(block 71) failed [ 239.981145][T10209] FAT-fs (loop3): Directory bread(block 72) failed [ 239.988400][T10209] FAT-fs (loop3): Directory bread(block 73) failed [ 240.007372][T10188] loop4: detected capacity change from 0 to 32768 [ 240.043530][T10188] XFS: noikeep mount option is deprecated. [ 240.119772][T10188] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.298630][T10188] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 240.373339][T10188] XFS (loop4): Starting recovery (logdev: internal) [ 240.429274][T10188] XFS (loop4): Ending recovery (logdev: internal) [ 240.560763][T10188] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 240.592482][T10188] XFS (loop4): Unmount and run xfs_repair [ 240.601562][T10188] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 240.615791][T10188] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 240.635198][T10188] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 240.663456][T10188] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 240.707384][T10188] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 240.757001][T10188] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 240.776331][T10188] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.812304][T10188] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.821444][T10188] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.840584][T10188] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x8 len 8 error 117 [ 240.897216][ T6099] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.938494][T10210] loop5: detected capacity change from 0 to 32768 [ 241.103543][T10210] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.356856][T10210] XFS (loop5): Ending clean mount [ 241.445138][T10210] XFS (loop5): Quotacheck needed: Please wait. [ 241.552888][T10210] XFS (loop5): Quotacheck: Done. [ 241.705103][T10258] loop3: detected capacity change from 0 to 2048 [ 241.783723][T10258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.816622][ T7976] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.948470][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.005279][T10303] loop3: detected capacity change from 0 to 1024 [ 243.058096][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1702'. [ 243.110416][T10303] hfsplus: extend alloc file! (8192,512,16777719) [ 243.741815][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'. [ 244.064241][T10339] loop0: detected capacity change from 0 to 256 [ 244.180710][T10339] FAT-fs (loop0): Directory bread(block 64) failed [ 244.216178][T10339] FAT-fs (loop0): Directory bread(block 65) failed [ 244.228034][T10339] FAT-fs (loop0): Directory bread(block 66) failed [ 244.251528][T10339] FAT-fs (loop0): Directory bread(block 67) failed [ 244.276460][T10339] FAT-fs (loop0): Directory bread(block 68) failed [ 244.296507][T10339] FAT-fs (loop0): Directory bread(block 69) failed [ 244.303662][T10339] FAT-fs (loop0): Directory bread(block 70) failed [ 244.338660][T10339] FAT-fs (loop0): Directory bread(block 71) failed [ 244.347272][T10339] FAT-fs (loop0): Directory bread(block 72) failed [ 244.362124][T10339] FAT-fs (loop0): Directory bread(block 73) failed [ 244.503352][T10349] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1724'. [ 244.648849][T10318] loop4: detected capacity change from 0 to 32768 [ 244.684517][T10318] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 244.697407][T10318] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 244.788723][T10318] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 244.834719][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 244.841655][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 244.958480][T10362] loop3: detected capacity change from 0 to 8 [ 245.000119][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms [ 245.032443][ T786] gfs2: fsid=syz:syz.0: jid=0: Done [ 245.037753][T10318] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 245.101388][T10364] loop0: detected capacity change from 0 to 24 [ 245.163976][T10318] gfs2: gfs2 mount does not exist [ 245.779733][T10379] loop5: detected capacity change from 0 to 2048 [ 245.801022][T10379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.980851][ T5855] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 246.205542][T10391] loop5: detected capacity change from 0 to 8 [ 246.223998][ T5855] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 246.234139][T10391] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 246.252460][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.277169][T10391] cramfs: Error -5 while decompressing! [ 246.285582][T10391] cramfs: ffffffff96fdf6c8(26)->ffff88805d84d000(4096) [ 246.293336][ T5855] usb 4-1: Product: syz [ 246.297568][ T5855] usb 4-1: Manufacturer: syz [ 246.310070][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop5 [ 246.320770][T10391] cramfs: Error -3 while decompressing! [ 246.326663][ T5855] usb 4-1: SerialNumber: syz [ 246.328649][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1746'. [ 246.352056][T10391] cramfs: ffffffff96fdf6e2(26)->ffff888053ff5000(4096) [ 246.355724][ T5855] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 246.370894][T10391] cramfs: Error -3 while decompressing! [ 246.400445][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop5 [ 246.420931][T10391] cramfs: ffffffff96fdf6fc(16)->ffff88805431f000(4096) [ 246.429821][T10391] cramfs: Error -5 while decompressing! [ 246.438726][T10391] cramfs: ffffffff96fdf6c8(26)->ffff88805d84d000(4096) [ 246.450979][ T786] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.504446][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop5 [ 246.964583][ T5855] usb 4-1: USB disconnect, device number 8 [ 247.543311][ T786] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 247.582627][ T786] ath9k_htc: Failed to initialize the device [ 247.612434][ T5855] usb 4-1: ath9k_htc: USB layer deinitialized [ 247.681609][T10409] loop5: detected capacity change from 0 to 32768 [ 247.771021][T10409] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 247.828031][T10438] loop0: detected capacity change from 0 to 64 [ 247.996471][ T7976] ocfs2: Unmounting device (7,5) on (node local) [ 248.403524][T10454] loop3: detected capacity change from 0 to 128 [ 248.447964][T10454] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.500161][T10454] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.534922][T10454] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.806143][T10470] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1779'. [ 248.958528][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1780'. [ 248.980789][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1780'. [ 248.991893][T10454] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 249.100498][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.268372][T10488] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 249.289679][T10488] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 249.981411][T10491] loop3: detected capacity change from 0 to 32768 [ 250.007900][T10491] (syz.3.1786,10491,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 250.043882][T10491] (syz.3.1786,10491,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 250.114781][T10491] JBD2: Ignoring recovery information on journal [ 250.220488][T10491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 250.447712][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 250.824964][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 251.316377][T10535] loop3: detected capacity change from 0 to 4096 [ 251.512558][T10544] loop5: detected capacity change from 0 to 4096 [ 251.536939][T10544] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 251.619971][T10544] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 251.651480][T10544] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 251.712169][T10544] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 251.767424][T10544] ntfs: volume version 3.1. [ 251.779356][T10544] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 251.831996][T10544] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 251.855512][T10552] loop4: detected capacity change from 0 to 512 [ 251.862075][T10544] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 251.889451][T10552] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.918693][T10544] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 251.970322][T10544] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 252.035183][T10544] ntfs: (device loop5): load_and_init_quota(): Failed to load $Quota/$Q index. [ 252.120270][ T6099] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 252.698340][T10550] loop0: detected capacity change from 0 to 32768 [ 252.837789][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1822'. [ 252.868080][T10573] vlan0: entered promiscuous mode [ 253.625025][T10569] loop3: detected capacity change from 0 to 32768 [ 253.662358][T10569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1819 (10569) [ 253.693119][T10569] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.727576][T10569] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 253.754840][T10569] BTRFS info (device loop3): using free space tree [ 253.861601][T10611] loop4: detected capacity change from 0 to 1024 [ 253.936087][T10569] BTRFS info (device loop3): enabling ssd optimizations [ 253.968135][T10569] BTRFS info (device loop3): auto enabling async discard [ 254.085331][T10620] netlink: 'syz.5.1838': attribute type 3 has an invalid length. [ 254.123876][T10620] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.1838'. [ 254.160413][ T5792] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.225343][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 254.356057][T10625] loop0: detected capacity change from 0 to 512 [ 254.394383][T10625] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.492553][T10625] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 254.501459][T10625] EXT4-fs (loop0): orphan cleanup on readonly fs [ 254.597701][T10625] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 254.617674][T10625] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 254.627771][T10625] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1841: bg 0: block 40: padding at end of block bitmap is not set [ 254.677067][T10625] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 254.701074][T10625] EXT4-fs (loop0): 1 truncate cleaned up [ 254.743362][T10625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.874058][T10625] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 254.955662][T10643] netlink: 'syz.4.1848': attribute type 9 has an invalid length. [ 255.002124][T10643] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1848'. [ 255.073838][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.632866][T10659] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 255.660562][T10659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1855'. [ 255.824636][T10640] loop5: detected capacity change from 0 to 32768 [ 255.862634][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872251][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.926996][T10640] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.262167][T10640] XFS (loop5): Ending clean mount [ 256.283365][T10640] XFS (loop5): Quotacheck needed: Please wait. [ 256.355642][T10640] XFS (loop5): Quotacheck: Done. [ 256.608938][T10691] loop3: detected capacity change from 0 to 64 [ 256.835528][ T7976] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.457347][T10708] loop3: detected capacity change from 0 to 2048 [ 257.489291][T10708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.558703][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 257.558720][ T28] audit: type=1800 audit(1752165143.118:93): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1877" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 257.859301][T10721] loop3: detected capacity change from 0 to 512 [ 257.891423][T10725] QAT: failed to copy from user cfg_data. [ 257.955122][T10721] EXT4-fs (loop3): 1 truncate cleaned up [ 257.963689][T10721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.207241][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.355136][T10741] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 258.766824][T10759] qrtr: Invalid version 0 [ 258.968949][T10766] loop3: detected capacity change from 0 to 64 [ 259.018565][T10768] loop5: detected capacity change from 0 to 1024 [ 259.048824][T10766] hfs: unable to locate alternate MDB [ 259.095066][T10766] hfs: continuing without an alternate MDB [ 259.153500][T10766] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 259.487311][T10783] loop3: detected capacity change from 0 to 512 [ 259.524181][T10783] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.572404][T10783] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 259.639142][T10783] Quota error (device loop3): write_blk: dquota write failed [ 259.673373][T10783] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 259.727809][T10783] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1911: Failed to acquire dquot type 0 [ 259.774205][T10783] EXT4-fs (loop3): 1 truncate cleaned up [ 259.796965][T10783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.909270][T10783] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 5 index 2 [ 259.932253][T10783] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 259.968404][T10783] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1911: Failed to acquire dquot type 1 [ 260.105875][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.214155][T10801] loop4: detected capacity change from 0 to 256 [ 260.221591][T10801] exfat: Deprecated parameter 'utf8' [ 260.283787][T10801] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 260.538759][T10790] loop0: detected capacity change from 0 to 32768 [ 260.626019][T10790] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 260.661121][T10812] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1922'. [ 260.893196][T10790] XFS (loop0): Ending clean mount [ 261.066251][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 261.182985][T10797] loop5: detected capacity change from 0 to 40427 [ 261.236676][T10797] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 261.262922][T10797] F2FS-fs (loop5): Image doesn't support compression [ 261.269757][T10797] F2FS-fs (loop5): heap/no_heap options were deprecated [ 261.336983][T10797] F2FS-fs (loop5): Image doesn't support compression [ 261.399485][T10797] F2FS-fs (loop5): invalid crc value [ 261.483209][T10797] F2FS-fs (loop5): Found nat_bits in checkpoint [ 261.664522][T10797] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 261.837359][T10797] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 261.848331][T10797] F2FS-fs (loop5): Image doesn't support compression [ 261.859580][T10797] F2FS-fs (loop5): heap/no_heap options were deprecated [ 261.866709][T10797] F2FS-fs (loop5): Image doesn't support compression [ 262.466789][T10865] loop3: detected capacity change from 0 to 64 [ 263.034397][T10883] tmpfs: Bad value for 'mpol' [ 263.586091][T10907] loop4: detected capacity change from 0 to 256 [ 263.734585][T10911] loop3: detected capacity change from 0 to 64 [ 264.585918][T10941] loop5: detected capacity change from 0 to 256 [ 264.614257][T10941] exfat: Deprecated parameter 'utf8' [ 264.668844][T10941] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 264.995114][T10952] loop3: detected capacity change from 0 to 64 [ 265.128800][T10954] loop4: detected capacity change from 0 to 4096 [ 265.132011][ T28] audit: type=1800 audit(1752165150.688:94): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1988" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 265.186223][T10958] loop0: detected capacity change from 0 to 256 [ 265.489712][T10964] loop3: detected capacity change from 0 to 164 [ 265.551204][T10964] Unable to read rock-ridge attributes [ 265.710971][T10968] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 265.738703][T10968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 266.322756][T10989] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms [ 266.463538][T10989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.034819][ T28] audit: type=1326 audit(1752165152.598:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11006 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 267.152620][ T28] audit: type=1326 audit(1752165152.598:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11006 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 267.222003][ T28] audit: type=1326 audit(1752165152.618:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11006 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 267.244298][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.320512][ T28] audit: type=1326 audit(1752165152.618:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11006 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 267.342924][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.369668][ T28] audit: type=1326 audit(1752165152.618:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11006 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 267.392071][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.981314][T11044] loop3: detected capacity change from 0 to 32768 [ 269.003037][T11044] XFS: ikeep mount option is deprecated. [ 269.079637][T11044] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.211123][T11061] loop5: detected capacity change from 0 to 32768 [ 269.336808][T11061] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 269.410506][T11044] XFS (loop3): Ending clean mount [ 269.445691][T11044] XFS (loop3): Quotacheck needed: Please wait. [ 269.503382][T11091] loop4: detected capacity change from 0 to 1024 [ 269.580266][ T7976] ocfs2: Unmounting device (7,5) on (node local) [ 269.602228][T11044] XFS (loop3): Quotacheck: Done. [ 270.046792][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.272993][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 270.484711][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 270.494454][ T786] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 270.512013][ T786] usb 1-1: config 179 has no interface number 0 [ 270.518392][ T786] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 270.535627][ T786] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 270.562067][ T786] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 270.595130][ T786] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 270.610272][ T786] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 270.628306][ T786] usb 1-1: config 179 interface 65 has no altsetting 0 [ 270.636121][ T786] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 270.645949][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.682261][ T786] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 270.762756][ T5145] input input10: unable to receive magic message: -110 [ 270.779933][T11117] loop5: detected capacity change from 0 to 4096 [ 270.808888][ T5145] input input10: unable to receive magic message: -32 [ 270.852950][ T5145] input input10: unable to receive magic message: -32 [ 270.891651][T11117] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 270.896012][ T5145] input input10: unable to receive magic message: -32 [ 270.919798][T11117] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 270.942053][ T5145] input input10: unable to receive magic message: -32 [ 270.971231][ T5145] input input10: unable to receive magic message: -32 [ 271.020498][T11117] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 271.177211][T11111] loop4: detected capacity change from 0 to 40427 [ 271.222577][ T5795] usb 1-1: USB disconnect, device number 5 [ 271.222637][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 271.273014][T11111] F2FS-fs (loop4): invalid crc value [ 271.297377][ T5795] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 271.348532][T11111] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.558074][T11111] F2FS-fs (loop4): Start checkpoint disabled! [ 271.605803][T11111] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 271.682566][T11111] F2FS-fs (loop4): disabling checkpoint not compatible with read-only [ 272.125958][T11135] loop5: detected capacity change from 0 to 1024 [ 272.151728][T11139] loop0: detected capacity change from 0 to 64 [ 272.236569][T11135] hfsplus: keylen 65060 too large [ 272.258737][T11135] hfsplus: xattr searching failed [ 272.419766][ T786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 272.656805][ T786] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 272.668879][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'. [ 272.672003][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.678373][T11149] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2079'. [ 272.707751][ T786] usb 4-1: Product: syz [ 272.722874][ T786] usb 4-1: Manufacturer: syz [ 272.728185][ T786] usb 4-1: SerialNumber: syz [ 272.752498][ T786] usb 4-1: config 0 descriptor?? [ 272.792205][ T8079] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 272.982424][ T786] hso 4-1:0.0: Failed to find INT IN ep [ 272.988633][ T786] usb-storage 4-1:0.0: USB Mass Storage device detected [ 273.007774][ T8079] usb 6-1: unable to get BOS descriptor or descriptor too short [ 273.020408][T11141] loop4: detected capacity change from 0 to 32768 [ 273.030511][ T8079] usb 6-1: not running at top speed; connect to a high speed hub [ 273.077145][ T8079] usb 6-1: config 14 has an invalid interface number: 18 but max is 0 [ 273.139320][ T8079] usb 6-1: config 14 has no interface number 0 [ 273.147243][ T8079] usb 6-1: config 14 interface 18 has no altsetting 0 [ 273.164474][ T8079] usb 6-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 273.184985][ T8079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.202353][ T8079] usb 6-1: Product: syz [ 273.207140][T11141] ialloc: diAlloc returned -5! [ 273.212006][ T8079] usb 6-1: Manufacturer: syz [ 273.232644][ T8079] usb 6-1: SerialNumber: syz [ 273.245436][ T5841] usb 4-1: USB disconnect, device number 9 [ 273.481137][ T8079] rtl8150 6-1:14.18: couldn't find required endpoints [ 273.504028][ T8079] rtl8150: probe of 6-1:14.18 failed with error -5 [ 273.533581][ T8079] usb 6-1: USB disconnect, device number 4 [ 273.854574][T11161] loop0: detected capacity change from 0 to 32768 [ 273.918226][T11161] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.040894][T11161] XFS (loop0): Ending clean mount [ 274.094101][T11161] XFS (loop0): Quotacheck needed: Please wait. [ 274.235851][T11161] XFS (loop0): Quotacheck: Done. [ 274.270199][T11161] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.876844][ T28] audit: type=1326 audit(1752165160.428:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.5.2094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b5658e929 code=0x0 [ 274.931446][T11172] loop3: detected capacity change from 0 to 32768 [ 274.979103][T11172] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.032830][T11179] loop4: detected capacity change from 0 to 32768 [ 275.081637][T11179] XFS: ikeep mount option is deprecated. [ 275.187915][T11179] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.219528][T11172] XFS (loop3): Ending clean mount [ 275.264090][T11172] XFS (loop3): Quotacheck needed: Please wait. [ 275.390823][T11172] XFS (loop3): Quotacheck: Done. [ 275.441598][T11187] loop0: detected capacity change from 0 to 32768 [ 275.468851][T11179] XFS (loop4): Ending clean mount [ 275.513189][T11187] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.533092][T11179] XFS (loop4): Quotacheck needed: Please wait. [ 275.624266][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.640518][T11179] XFS (loop4): Quotacheck: Done. [ 275.730483][T11187] XFS (loop0): Ending clean mount [ 275.781719][T11187] XFS (loop0): Quotacheck needed: Please wait. [ 275.873994][T11187] XFS (loop0): Quotacheck: Done. [ 275.978214][ T6099] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.101117][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 276.908143][T11242] loop5: detected capacity change from 0 to 256 [ 276.950184][T11242] FAT-fs (loop5): Directory bread(block 64) failed [ 276.959267][T11242] FAT-fs (loop5): Directory bread(block 65) failed [ 276.968724][T11242] FAT-fs (loop5): Directory bread(block 66) failed [ 276.978725][T11242] FAT-fs (loop5): Directory bread(block 67) failed [ 276.988472][T11242] FAT-fs (loop5): Directory bread(block 68) failed [ 276.998031][T11242] FAT-fs (loop5): Directory bread(block 69) failed [ 277.009775][T11242] FAT-fs (loop5): Directory bread(block 70) failed [ 277.021248][T11242] FAT-fs (loop5): Directory bread(block 71) failed [ 277.036287][T11242] FAT-fs (loop5): Directory bread(block 72) failed [ 277.044594][T11242] FAT-fs (loop5): Directory bread(block 73) failed [ 277.741162][T11241] loop4: detected capacity change from 0 to 32768 [ 277.769677][T11241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2108 (11241) [ 277.843505][T11241] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.882102][T11241] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 277.890886][T11241] BTRFS info (device loop4): force clearing of disk cache [ 277.922967][T11241] BTRFS info (device loop4): enabling ssd optimizations [ 277.938878][T11241] BTRFS info (device loop4): using spread ssd allocation scheme [ 277.962176][T11241] BTRFS info (device loop4): enabling disk space caching [ 277.969298][T11241] BTRFS info (device loop4): turning on sync discard [ 278.002586][T11241] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 278.042250][T11241] BTRFS info (device loop4): use zstd compression, level 3 [ 278.060168][T11241] BTRFS info (device loop4): setting nodatacow, compression disabled [ 278.096620][T11241] BTRFS info (device loop4): disk space caching is enabled [ 278.159827][T11246] loop3: detected capacity change from 0 to 32768 [ 278.243025][T11246] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 278.243025][T11246] [ 278.286725][T11241] BTRFS info (device loop4): rebuilding free space tree [ 278.412981][T11241] BTRFS info (device loop4): disabling free space tree [ 278.420017][T11241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 278.457371][T11241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 278.882495][ T6099] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.126784][T11254] loop5: detected capacity change from 0 to 32768 [ 279.133913][ T5784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (5784) [ 279.198278][T11254] gfs2: fsid=gfs2: Trying to join cluster "lock_dlm", "gfs2" [ 279.255682][T11254] gfs2: fsid=gfs2: no fsname found [ 280.224030][ T28] audit: type=1326 audit(1752165165.788:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5658e929 code=0x7ffc0000 [ 280.303081][ T28] audit: type=1326 audit(1752165165.808:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5658e929 code=0x7ffc0000 [ 280.399139][ T28] audit: type=1326 audit(1752165165.818:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f0b5658e929 code=0x7ffc0000 [ 280.484742][ T28] audit: type=1326 audit(1752165165.818:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5658e929 code=0x7ffc0000 [ 280.562092][ T28] audit: type=1326 audit(1752165165.818:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5658e929 code=0x7ffc0000 [ 280.597667][T11317] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 280.730052][T11288] loop3: detected capacity change from 0 to 32768 [ 280.773742][T11288] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2122 (11288) [ 280.858981][T11288] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.891510][T11288] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 280.936024][T11288] BTRFS info (device loop3): using free space tree [ 281.233594][T11288] BTRFS info (device loop3): enabling ssd optimizations [ 281.272901][T11288] BTRFS info (device loop3): auto enabling async discard [ 281.441198][T11288] BTRFS warning (device loop3): can't clear the free_space_tree,compat_ro:1 feature bits while mounted [ 281.593042][ T5792] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.795469][ T5784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5784) [ 282.273576][T11378] netlink: 'syz.0.2158': attribute type 8 has an invalid length. [ 282.308116][T11378] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2158'. [ 282.673887][T11360] loop4: detected capacity change from 0 to 32768 [ 282.756133][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 282.850672][T11390] netlink: zone id is out of range [ 282.868191][T11390] netlink: del zone limit has 4 unknown bytes [ 283.353234][T11408] loop0: detected capacity change from 0 to 256 [ 283.400605][T11408] FAT-fs (loop0): Directory bread(block 64) failed [ 283.422016][T11408] FAT-fs (loop0): Directory bread(block 65) failed [ 283.440392][T11408] FAT-fs (loop0): Directory bread(block 66) failed [ 283.458283][T11408] FAT-fs (loop0): Directory bread(block 67) failed [ 283.490052][T11408] FAT-fs (loop0): Directory bread(block 68) failed [ 283.508092][T11408] FAT-fs (loop0): Directory bread(block 69) failed [ 283.532083][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 283.534709][T11408] FAT-fs (loop0): Directory bread(block 70) failed [ 283.570884][T11412] mmap: syz.5.2175 (11412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 283.584023][T11408] FAT-fs (loop0): Directory bread(block 71) failed [ 283.591008][T11408] FAT-fs (loop0): Directory bread(block 72) failed [ 283.609534][T11408] FAT-fs (loop0): Directory bread(block 73) failed [ 284.342125][ T5795] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 284.515298][T11432] loop4: detected capacity change from 0 to 512 [ 284.531216][T11432] EXT4-fs: Ignoring removed oldalloc option [ 284.554118][ T5795] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 284.582096][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.593599][T11432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2185: Parent and EA inode have the same ino 15 [ 284.609824][T11432] EXT4-fs (loop4): 1 orphan inode deleted [ 284.619092][T11432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.637575][ T5795] usb 6-1: config 0 descriptor?? [ 284.793600][ T6099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.928662][ T5795] snd-usb-hiface: probe of 6-1:0.0 failed with error -22 [ 285.167731][ T27] usb 6-1: USB disconnect, device number 5 [ 285.597645][T11445] loop0: detected capacity change from 0 to 32768 [ 285.665747][T11445] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 285.802543][T11450] loop4: detected capacity change from 0 to 32768 [ 285.804473][T11445] XFS (loop0): Ending clean mount [ 285.870005][T11445] XFS (loop0): Quotacheck needed: Please wait. [ 285.893193][T11450] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.989346][T11445] XFS (loop0): Quotacheck: Done. [ 286.165358][T11484] loop5: detected capacity change from 0 to 256 [ 286.200472][T11450] XFS (loop4): Ending clean mount [ 286.252170][T11450] XFS (loop4): Quotacheck needed: Please wait. [ 286.266388][T11484] FAT-fs (loop5): Directory bread(block 64) failed [ 286.294935][T11484] FAT-fs (loop5): Directory bread(block 65) failed [ 286.301889][T11484] FAT-fs (loop5): Directory bread(block 66) failed [ 286.308666][T11484] FAT-fs (loop5): Directory bread(block 67) failed [ 286.347890][T11450] XFS (loop4): Quotacheck: Done. [ 286.353709][T11484] FAT-fs (loop5): Directory bread(block 68) failed [ 286.360356][T11484] FAT-fs (loop5): Directory bread(block 69) failed [ 286.377273][T11484] FAT-fs (loop5): Directory bread(block 70) failed [ 286.382537][ T5790] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 286.387322][T11484] FAT-fs (loop5): Directory bread(block 71) failed [ 286.416310][T11484] FAT-fs (loop5): Directory bread(block 72) failed [ 286.432752][T11484] FAT-fs (loop5): Directory bread(block 73) failed [ 286.547112][ T6099] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.118959][T11502] loop3: detected capacity change from 0 to 8 [ 287.547475][T11516] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 287.954718][T11529] SET target dimension over the limit! [ 287.976744][T11526] loop3: detected capacity change from 0 to 4096 [ 288.046505][T11531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.398798][T11542] netlink: 'syz.4.2230': attribute type 11 has an invalid length. [ 288.750328][T11553] loop5: detected capacity change from 0 to 2048 [ 288.785374][T11557] sctp: [Deprecated]: syz.4.2238 (pid 11557) Use of int in maxseg socket option. [ 288.785374][T11557] Use struct sctp_assoc_value instead [ 288.804018][T11553] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 288.845942][T11560] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.984554][T11553] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 3044605952 [ 289.034672][T11553] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 289.069039][T11553] Remounting filesystem read-only [ 289.093108][T11553] NILFS (loop5): error -5 truncating bmap (ino=15) [ 289.213949][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2245'. [ 289.247809][ T7976] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 289.255066][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2245'. [ 289.282086][ T7976] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.291021][ T7976] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.324192][ T7976] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 289.331590][ T7976] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 289.340367][ T7976] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 289.529965][T11583] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2251'. [ 289.623464][T11582] loop3: detected capacity change from 0 to 4096 [ 289.668851][T11588] netlink: 'syz.5.2253': attribute type 1 has an invalid length. [ 289.683194][T11582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.700514][T11588] netlink: 'syz.5.2253': attribute type 2 has an invalid length. [ 289.792502][T11592] xt_l2tp: v2 sid > 0xffff: 262144 [ 289.996939][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.003145][T11598] loop4: detected capacity change from 0 to 64 [ 290.365493][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2262'. [ 290.511414][T11614] loop0: detected capacity change from 0 to 64 [ 290.551064][T11614] MINIX-fs: mounting file system with errors, running fsck is recommended [ 290.956399][T11630] deleting an unspecified loop device is not supported. [ 291.230060][T11634] loop5: detected capacity change from 0 to 4096 [ 291.405822][T11634] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 291.636684][ T7976] ntfs3: loop5: ino=9, ntfs_sync_fs failed, -22. [ 291.741776][T11656] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2287'. [ 292.405873][T11682] loop5: detected capacity change from 0 to 1024 [ 292.833010][T11699] vti0: entered promiscuous mode [ 292.847937][T11699] vti0: entered allmulticast mode [ 293.080511][T11706] loop3: detected capacity change from 0 to 2048 [ 293.111256][T11706] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 293.173257][T11711] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.223756][ T5797] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 293.479236][ T5797] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 293.614234][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 293.801606][T11735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2324'. [ 294.077982][T11749] loop5: detected capacity change from 0 to 128 [ 294.283508][T11756] loop4: detected capacity change from 0 to 1024 [ 294.320568][T11756] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.408092][T11756] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.2333: Invalid block bitmap block 0 in block_group 0 [ 294.475948][T11762] loop0: detected capacity change from 0 to 1024 [ 294.499808][T11756] Quota error (device loop4): write_blk: dquota write failed [ 294.507412][T11756] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 294.518014][T11756] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2333: Failed to acquire dquot type 0 [ 294.538360][T11756] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.2333: Freeing blocks not in datazone - block = 0, count = 4096 [ 294.559847][T11756] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2333: Invalid inode bitmap blk 0 in block_group 0 [ 294.582810][ T2937] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 294.591857][ T2937] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 0 [ 294.619739][T11756] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 294.644302][ T34] hfsplus: b-tree write err: -5, ino 4 [ 294.657787][T11756] EXT4-fs (loop4): 1 orphan inode deleted [ 294.683508][T11756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.883691][T11766] loop5: detected capacity change from 0 to 4096 [ 294.898584][T11766] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 294.929613][ T6099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.983691][T11772] loop3: detected capacity change from 0 to 164 [ 295.069556][T11766] ntfs3: loop5: failed to convert "c46c" to cp862 [ 295.692376][ T5795] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 295.899697][ T5795] usb 6-1: Using ep0 maxpacket: 16 [ 295.918930][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.953123][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.983607][ T5795] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.036757][ T5795] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 296.047805][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.083256][ T5795] usb 6-1: config 0 descriptor?? [ 296.117418][ T5795] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 296.162690][ T5145] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.183152][ T5145] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.209785][ T5145] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.232682][ T5145] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.246607][ T5145] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.281462][ T9319] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.324139][T11782] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.370042][ T5145] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.397825][ T5145] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 296.413826][ T27] usb 6-1: USB disconnect, device number 6 [ 296.440340][T11799] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 296.470267][T11799] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 296.481417][T11792] loop0: detected capacity change from 0 to 32768 [ 296.524567][T11792] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 296.556767][T11803] loop3: detected capacity change from 0 to 256 [ 296.593242][T11803] exfat: Deprecated parameter 'namecase' [ 296.618120][ T9319] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.668881][T11803] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 297.173685][T11813] loop5: detected capacity change from 0 to 2048 [ 297.312247][T11813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.347802][T11826] SET target dimension over the limit! [ 297.403185][T11813] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.2359: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 297.495427][T11813] EXT4-fs (loop5): Remounting filesystem read-only [ 297.616144][ T7976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.836141][T11841] loop4: detected capacity change from 0 to 128 [ 297.882209][T11841] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 297.931306][T11841] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 297.989846][T11841] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.2373: checksumming directory block 0 [ 298.072292][T11850] netlink: zone id is out of range [ 298.222967][ T6099] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.431026][T11866] loop3: detected capacity change from 0 to 256 [ 298.592044][ T5795] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 298.606050][T11870] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.788835][T11876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2388'. [ 298.800460][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 298.819551][ T5795] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 298.843456][ T5795] usb 6-1: config 0 has no interface number 0 [ 298.849716][ T5795] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.875595][ T5795] usb 6-1: config 0 interface 85 has no altsetting 0 [ 298.918339][ T5795] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 298.931097][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.955036][ T5795] usb 6-1: Product: syz [ 298.959280][ T5795] usb 6-1: Manufacturer: syz [ 298.969153][ T5795] usb 6-1: SerialNumber: syz [ 298.986710][ T5795] usb 6-1: config 0 descriptor?? [ 299.139296][T11886] loop3: detected capacity change from 0 to 1024 [ 299.374115][ T1294] hfsplus: b-tree write err: -5, ino 4 [ 299.467855][ T5795] appletouch 6-1:0.85: Failed to request geyser raw mode [ 299.476118][T11895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2397'. [ 299.482387][ T5795] appletouch: probe of 6-1:0.85 failed with error -5 [ 299.526251][ T5795] usb 6-1: USB disconnect, device number 7 [ 299.894537][T11907] veth5: entered promiscuous mode [ 299.918793][T11907] veth5: entered allmulticast mode [ 300.303232][ T28] audit: type=1326 audit(1752165185.868:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fb18e929 code=0x7ffc0000 [ 300.325609][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.390844][ T28] audit: type=1326 audit(1752165185.868:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fb18e929 code=0x7ffc0000 [ 300.413391][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.429501][T11922] UBIFS error (pid: 11922): cannot open "./file0", error -22 [ 301.248801][T11959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2426'. [ 301.295794][T11961] lo speed is unknown, defaulting to 1000 [ 301.314972][T11961] lo speed is unknown, defaulting to 1000 [ 301.352957][T11961] lo speed is unknown, defaulting to 1000 [ 301.401283][T11961] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 301.439992][T11961] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 301.503196][T11965] loop5: detected capacity change from 0 to 2048 [ 301.541741][T11965] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 301.583864][T11961] lo speed is unknown, defaulting to 1000 [ 301.597966][T11968] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.609359][T11965] syz.5.2430: attempt to access beyond end of device [ 301.609359][T11965] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 301.629929][T11961] lo speed is unknown, defaulting to 1000 [ 301.665383][T11961] lo speed is unknown, defaulting to 1000 [ 301.689896][T11961] lo speed is unknown, defaulting to 1000 [ 301.701354][T11965] syz.5.2430: attempt to access beyond end of device [ 301.701354][T11965] loop5: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 301.729973][T11965] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0) [ 301.898436][T11972] loop0: detected capacity change from 0 to 64 [ 303.015697][T12006] loop3: detected capacity change from 0 to 128 [ 303.035390][T12008] loop5: detected capacity change from 0 to 128 [ 303.090435][T12006] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.110287][T12008] FAT-fs (loop5): error, invalid access to FAT (entry 0x0005ffff) [ 303.114621][T12006] ext4 filesystem being mounted at /603/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.121561][T12008] FAT-fs (loop5): Filesystem has been set read-only [ 303.214613][T11985] loop4: detected capacity change from 0 to 32768 [ 303.258257][ T28] audit: type=1326 audit(1752165188.818:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 303.291735][ T28] audit: type=1326 audit(1752165188.818:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 303.318023][T11985] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.341755][ T28] audit: type=1326 audit(1752165188.898:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 303.367892][T11985] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 303.391149][T11985] BTRFS info (device loop4): force clearing of disk cache [ 303.396717][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.452887][ T28] audit: type=1326 audit(1752165188.898:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 303.471516][T11985] BTRFS info (device loop4): enabling ssd optimizations [ 303.476377][ T28] audit: type=1326 audit(1752165188.898:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b8e929 code=0x7ffc0000 [ 303.541856][T11985] BTRFS info (device loop4): using spread ssd allocation scheme [ 303.550741][T11985] BTRFS info (device loop4): enabling disk space caching [ 303.618506][T11985] BTRFS info (device loop4): turning on sync discard [ 303.642334][T11985] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 303.673324][T11985] BTRFS info (device loop4): use zstd compression, level 3 [ 303.705985][T11985] BTRFS info (device loop4): setting nodatacow, compression disabled [ 303.742831][T11985] BTRFS info (device loop4): disk space caching is enabled [ 303.926775][T11985] BTRFS info (device loop4): rebuilding free space tree [ 303.975842][T12044] PM: Enabling pm_trace changes system date and time during resume. [ 303.975842][T12044] PM: Correct system time has to be restored manually after resume. [ 303.999359][T11985] BTRFS info (device loop4): disabling free space tree [ 304.025607][T11985] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 304.026377][T12046] netlink: 'syz.5.2460': attribute type 8 has an invalid length. [ 304.062252][T11985] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 304.348949][ T6099] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.440391][T12058] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 304.447377][T12058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.475617][T12058] vhci_hcd vhci_hcd.0: Device attached [ 304.521511][T12061] loop0: detected capacity change from 0 to 2048 [ 304.530797][T12062] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 304.537373][T12062] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.546396][T12062] vhci_hcd vhci_hcd.0: Device attached [ 304.587345][T12059] vhci_hcd: connection closed [ 304.594730][T12063] vhci_hcd: connection closed [ 304.618841][T12061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.650929][ T48] vhci_hcd: stop threads [ 304.657598][ T48] vhci_hcd: release socket [ 304.662785][ T27] vhci_hcd: vhci_device speed not set [ 304.670828][ T48] vhci_hcd: disconnect device [ 304.709337][ T48] vhci_hcd: stop threads [ 304.718865][ T48] vhci_hcd: release socket [ 304.742193][ T48] vhci_hcd: disconnect device [ 304.762096][ T27] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 304.802283][ T27] usb 39-1: enqueue for inactive port 0 [ 304.922286][ T27] vhci_hcd: vhci_device speed not set [ 304.982728][T12070] loop5: detected capacity change from 0 to 128 [ 305.032492][T12070] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.294217][ T7976] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 305.301839][ T7976] FAT-fs (loop5): Filesystem has been set read-only [ 305.380784][ T7976] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 305.770084][T12092] loop4: detected capacity change from 0 to 512 [ 305.777712][T12092] EXT4-fs: Ignoring removed oldalloc option [ 305.799593][T12094] netlink: 'syz.0.2482': attribute type 29 has an invalid length. [ 305.874399][T12092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.913937][T12094] netlink: 'syz.0.2482': attribute type 29 has an invalid length. [ 305.986689][T12092] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.140519][ T1294] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.167067][ T6099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.286610][T12102] loop3: detected capacity change from 0 to 256 [ 306.351420][ T1294] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.375350][T12102] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 306.564353][ T1294] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.833496][ T1294] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.121563][T12124] netlink: 'syz.4.2495': attribute type 29 has an invalid length. [ 307.143199][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.155263][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.165449][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.174502][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.182976][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 307.190880][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.217548][T12124] netlink: 'syz.4.2495': attribute type 29 has an invalid length. [ 307.465215][T12125] lo speed is unknown, defaulting to 1000 [ 308.253580][T12155] xt_cgroup: xt_cgroup: no path or classid specified [ 308.331839][T12131] loop3: detected capacity change from 0 to 40427 [ 308.428897][T12131] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 308.441232][T12158] loop4: detected capacity change from 0 to 2048 [ 308.470675][T12131] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 308.494997][T12158] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 308.546344][T12131] F2FS-fs (loop3): invalid crc value [ 308.551006][T12158] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 308.579727][T12158] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 308.605476][T12158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.615005][T12131] F2FS-fs (loop3): Found nat_bits in checkpoint [ 308.900260][T12131] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 308.917559][T12125] chnl_net:caif_netlink_parms(): no params data found [ 308.923899][T12131] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 309.302258][ T50] Bluetooth: hci2: command tx timeout [ 309.330968][T12179] fuse: Bad value for 'fd' [ 309.724158][T12185] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.782663][T12172] loop0: detected capacity change from 0 to 32768 [ 309.836718][T12172] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.047336][T12172] XFS (loop0): Ending clean mount [ 310.059686][T12172] XFS (loop0): Quotacheck needed: Please wait. [ 310.137086][T12172] XFS (loop0): Quotacheck: Done. [ 310.318149][T12199] loop4: detected capacity change from 0 to 64 [ 310.331152][T12199] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 310.414448][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.509305][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2511'. [ 310.898266][ T28] audit: type=1400 audit(1752165196.458:113): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12212 comm="syz.3.2517" [ 311.225518][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.247408][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.272149][T12125] bridge_slave_0: entered allmulticast mode [ 311.279693][T12125] bridge_slave_0: entered promiscuous mode [ 311.328087][T12220] loop3: detected capacity change from 0 to 4096 [ 311.344106][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.351303][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.372169][ T50] Bluetooth: hci2: command tx timeout [ 311.399952][T12125] bridge_slave_1: entered allmulticast mode [ 311.460390][T12125] bridge_slave_1: entered promiscuous mode [ 311.468586][T12220] ntfs: volume version 3.1. [ 311.499704][T12230] loop0: detected capacity change from 0 to 256 [ 311.895245][T12125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.956939][T12125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.206587][ T1294] hsr_slave_0: left promiscuous mode [ 312.241311][ T1294] hsr_slave_1: left promiscuous mode [ 312.261665][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.293549][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.314502][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.329342][T12248] delete_channel: no stack [ 312.335471][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.347735][ T1294] bridge_slave_1: left allmulticast mode [ 312.366431][ T1294] bridge_slave_1: left promiscuous mode [ 312.382354][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.397355][ T1294] bridge_slave_0: left allmulticast mode [ 312.403316][ T1294] bridge_slave_0: left promiscuous mode [ 312.409108][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.496037][ T1294] veth1_macvtap: left promiscuous mode [ 312.509993][ T1294] veth0_macvtap: left promiscuous mode [ 312.522269][ T1294] veth1_vlan: left promiscuous mode [ 312.979064][T12266] loop0: detected capacity change from 0 to 256 [ 312.990210][T12266] exfat: Deprecated parameter 'namecase' [ 313.038231][T12266] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 313.188757][ T1294] bond2 (unregistering): Released all slaves [ 313.240200][ T1294] bond1 (unregistering): Released all slaves [ 313.462883][ T50] Bluetooth: hci2: command tx timeout [ 313.735815][ T1294] team0 (unregistering): Port device team_slave_1 removed [ 313.790816][ T1294] team0 (unregistering): Port device team_slave_0 removed [ 313.839578][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.895632][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.454057][ T1294] bond0 (unregistering): Released all slaves [ 314.578490][T12125] team0: Port device team_slave_0 added [ 314.701852][T12269] netlink: 'syz.0.2538': attribute type 15 has an invalid length. [ 314.724434][T12125] team0: Port device team_slave_1 added [ 314.925790][T12125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.947326][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.991158][T12125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.002262][ T5841] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 315.023606][T12125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.030604][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.056597][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.070441][T12125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.202561][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 315.235472][ T5841] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 315.252626][ T5841] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.300205][ T5841] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.311346][T12125] hsr_slave_0: entered promiscuous mode [ 315.335291][ T5841] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 315.354089][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.367051][ T5841] usb 4-1: Product: syz [ 315.371271][ T5841] usb 4-1: Manufacturer: syz [ 315.376326][T12125] hsr_slave_1: entered promiscuous mode [ 315.398727][T12125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.400221][ T5841] usb 4-1: SerialNumber: syz [ 315.411385][T12125] Cannot create hsr debugfs directory [ 315.446416][ T5841] usb 4-1: config 0 descriptor?? [ 315.470117][ T5841] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 315.534760][ T50] Bluetooth: hci2: command tx timeout [ 315.718672][ T5841] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 315.736929][ T5841] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 315.756209][ T5841] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 316.002634][ T5841] usb 4-1: USB disconnect, device number 10 [ 316.256633][T12125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.307298][T12125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.326663][T12125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.406936][T12125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.823568][T12125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.896521][T12125] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.950957][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.958629][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.009038][T12347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2563'. [ 317.042047][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 317.053536][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.060770][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.272597][ T27] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 317.276078][T12355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2565'. [ 317.282646][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.312844][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.319817][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.377694][ T27] usb 4-1: Product: syz [ 317.400394][ T27] usb 4-1: Manufacturer: syz [ 317.417549][ T27] usb 4-1: SerialNumber: syz [ 317.456757][ T27] usb 4-1: config 0 descriptor?? [ 317.490163][ T27] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 317.896647][T12125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.915720][ T27] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 317.944470][ T27] sq905c 4-1:0.0: Reading version command failed [ 317.971487][ T27] sq905c: probe of 4-1:0.0 failed with error -71 [ 317.991402][ T27] usb 4-1: USB disconnect, device number 11 [ 318.223326][T12387] syz.4.2570[12387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.223482][T12387] syz.4.2570[12387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.563738][T12398] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709518847) [ 318.602136][T12398] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 318.746607][T12125] veth0_vlan: entered promiscuous mode [ 318.793366][T12125] veth1_vlan: entered promiscuous mode [ 318.924259][T12125] veth0_macvtap: entered promiscuous mode [ 318.955221][T12125] veth1_macvtap: entered promiscuous mode [ 319.006628][T12125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.017988][T12125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.051294][T12125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.090628][T12125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.106973][T12125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.126823][T12125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.164144][T12125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.205537][T12125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.244509][T12125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.281244][T12125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.297403][T12125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.307791][T12125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.325713][T12125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.340437][T12125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.356416][T12417] loop3: detected capacity change from 0 to 8 [ 319.381363][T12125] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.412103][T12125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.414860][T12417] SQUASHFS error: Failed to read block 0x738: -5 [ 319.421784][T12125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.463331][T12417] SQUASHFS error: Unable to read metadata cache entry [736] [ 319.493997][T12125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.700654][T12426] loop0: detected capacity change from 0 to 256 [ 319.748594][T12426] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 319.773040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.780931][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.846608][T12426] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 319.871763][T12426] exFAT-fs (loop0): Filesystem has been set read-only [ 319.897449][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.915091][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.250109][T12437] loop6: detected capacity change from 0 to 256 [ 320.278705][T12437] exfat: Deprecated parameter 'namecase' [ 320.295778][T12437] exfat: Deprecated parameter 'utf8' [ 320.401515][T12437] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 320.733758][T12452] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 320.752198][T12452] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2592'. [ 320.761458][T12452] NCSI netlink: No device for ifindex 0 [ 321.439218][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 321.617486][T12486] Option ' ' to dns_resolver key: bad/missing value [ 321.642389][T12487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.649670][T12487] IPv6: NLM_F_CREATE should be set when creating new route [ 321.657052][T12487] IPv6: NLM_F_CREATE should be set when creating new route [ 322.451862][T12519] loop6: detected capacity change from 0 to 256 [ 322.484206][T12519] exfat: Deprecated parameter 'utf8' [ 322.529467][T12519] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 322.857067][T12528] loop6: detected capacity change from 0 to 1024 [ 322.951272][T12533] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 323.000201][T12535] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 323.120802][ T1294] hfsplus: b-tree write err: -5, ino 4 [ 323.542391][ T8079] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 323.653378][ T28] audit: type=1326 audit(1752165209.218:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.4.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facec98e929 code=0x7ffc0000 [ 323.753343][ T28] audit: type=1326 audit(1752165209.248:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.4.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facec98e929 code=0x7ffc0000 [ 323.792295][ T8079] usb 4-1: Using ep0 maxpacket: 32 [ 323.812237][ T8079] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 323.822381][ T8079] usb 4-1: config 0 has no interface number 0 [ 323.829147][ T8079] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.865532][ T28] audit: type=1326 audit(1752165209.248:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.4.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7facec98e929 code=0x7ffc0000 [ 323.888015][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.908359][ T8079] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.940921][T12566] netlink: 'syz.0.2635': attribute type 2 has an invalid length. [ 323.963283][ T8079] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 323.981947][ T8079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.990089][ T28] audit: type=1326 audit(1752165209.248:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.4.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facec98e929 code=0x7ffc0000 [ 324.032950][ T8079] usb 4-1: Product: syz [ 324.037223][ T8079] usb 4-1: Manufacturer: syz [ 324.041866][ T8079] usb 4-1: SerialNumber: syz [ 324.087614][ T8079] usb 4-1: config 0 descriptor?? [ 324.112140][ T8079] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 324.317516][ T8079] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 324.332574][ T8079] quatech2: probe of 4-1:0.51 failed with error -90 [ 324.547537][ T27] usb 4-1: USB disconnect, device number 12 [ 325.226128][T12609] loop4: detected capacity change from 0 to 128 [ 325.788421][T12631] usb usb1: usbfs: process 12631 (syz.6.2660) did not claim interface 0 before use [ 326.310540][T12613] loop0: detected capacity change from 0 to 32768 [ 326.342284][T12613] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2652 (12613) [ 326.383769][T12613] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 326.409120][T12613] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 326.447376][T12613] BTRFS info (device loop0): force zlib compression, level 3 [ 326.457835][T12613] BTRFS info (device loop0): force clearing of disk cache [ 326.469909][T12613] BTRFS info (device loop0): setting nodatasum [ 326.501434][T12613] BTRFS info (device loop0): use zlib compression, level 3 [ 326.549574][T12613] BTRFS info (device loop0): allowing degraded mounts [ 326.562176][ T8079] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 326.578073][T12613] BTRFS info (device loop0): enabling disk space caching [ 326.595755][T12613] BTRFS info (device loop0): disk space caching is enabled [ 326.604842][T12658] loop3: detected capacity change from 0 to 16 [ 326.643660][T12658] erofs: (device loop3): mounted with root inode @ nid 36. [ 326.680376][T12658] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 326.774860][ T8079] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.786537][T12613] BTRFS info (device loop0): enabling ssd optimizations [ 326.794364][ T8079] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.806019][T12613] BTRFS info (device loop0): auto enabling async discard [ 326.819029][ T8079] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.853136][ T8079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.868448][T12613] BTRFS info (device loop0): rebuilding free space tree [ 326.889802][ T8079] usb 7-1: config 0 descriptor?? [ 326.933042][T12613] BTRFS info (device loop0): disabling free space tree [ 326.942301][ T8079] hub 7-1:0.0: USB hub found [ 326.947089][T12613] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 326.978341][T12613] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.031439][T12681] loop3: detected capacity change from 0 to 512 [ 327.085667][T12681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.152317][T12681] EXT4-fs (loop3): Test dummy encryption mode enabled [ 327.163463][ T8079] hub 7-1:0.0: 1 port detected [ 327.174769][T12685] loop4: detected capacity change from 0 to 128 [ 327.205151][T12681] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 327.225325][T12685] EXT4-fs (loop4): Test dummy encryption mode enabled [ 327.252600][T12685] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.259161][T12681] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2672: attempt to clear invalid blocks 2 len 1 [ 327.287960][T12685] ext4 filesystem being mounted at /618/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.372477][ T8079] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 327.379802][T12681] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 327.398543][ T8079] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 327.413547][ T6099] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.438317][T12681] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2672: invalid indirect mapped block 1819239214 (level 0) [ 327.455300][ T8079] usbhid 7-1:0.0: can't add hid device: -71 [ 327.480110][T12613] BTRFS info (device loop0): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=2194728290303,usage=2047..511,devid=0,drange=9223372036854776319..17179869184 [ 327.507057][T12681] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2672: invalid indirect mapped block 1819239214 (level 1) [ 327.521769][ T8079] usbhid: probe of 7-1:0.0 failed with error -71 [ 327.543983][T12613] BTRFS info (device loop0): balance: ended with status: 0 [ 327.572387][ T8079] usb 7-1: USB disconnect, device number 2 [ 327.642499][T12681] EXT4-fs (loop3): 1 truncate cleaned up [ 327.649696][T12681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.780749][T12681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.839530][ T5790] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 327.860799][T12681] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 328.013095][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.085296][T12727] loop6: detected capacity change from 0 to 256 [ 329.825068][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2696'. [ 329.988402][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2698'. [ 330.042435][T12758] netlink: 492 bytes leftover after parsing attributes in process `syz.3.2698'. [ 330.108846][T12762] loop0: detected capacity change from 0 to 1764 [ 330.762298][ T8079] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 330.803195][T12789] loop6: detected capacity change from 0 to 4096 [ 330.973229][T12789] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 330.989017][ T8079] usb 4-1: Using ep0 maxpacket: 32 [ 331.017589][ T8079] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.052559][ T8079] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.094214][ T8079] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 331.139155][ T8079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.213006][ T8079] hub 4-1:4.0: USB hub found [ 331.422797][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 331.426172][ T8079] hub 4-1:4.0: 2 ports detected [ 331.614260][T12810] loop4: detected capacity change from 0 to 128 [ 331.629968][ T8079] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 331.655135][ T8079] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 331.716541][T12810] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.733151][ T8079] usb 4-1: USB disconnect, device number 13 [ 331.744360][T12810] ext4 filesystem being mounted at /622/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.802993][T12816] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 331.830030][T12816] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.947828][ T6099] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.092654][T12824] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2722'. [ 332.322238][ T28] audit: type=1400 audit(1752165217.878:118): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12830 comm="syz.6.2724" [ 333.109401][T12862] loop0: detected capacity change from 0 to 8 [ 333.199963][T12862] SQUASHFS error: xz decompression failed, data probably corrupt [ 333.233850][T12862] SQUASHFS error: Failed to read block 0x108: -5 [ 333.240256][T12862] SQUASHFS error: Unable to read metadata cache entry [106] [ 333.272484][T12866] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 50712 - 0 [ 333.291646][T12862] SQUASHFS error: Unable to read inode 0x11f [ 333.310607][T12866] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 50712 - 0 [ 333.316113][T12838] loop4: detected capacity change from 0 to 32768 [ 333.333937][T12866] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 50712 - 0 [ 333.343075][T12866] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 50712 - 0 [ 333.354797][T12866] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 60427 - 0 [ 333.370912][T12838] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.382964][T12866] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 60427 - 0 [ 333.440825][T12866] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 60427 - 0 [ 333.481519][T12866] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 60427 - 0 [ 333.532102][T12866] geneve2: entered promiscuous mode [ 333.547283][T12866] geneve2: entered allmulticast mode [ 333.619662][T12838] XFS (loop4): Ending clean mount [ 333.663002][T12838] XFS (loop4): Quotacheck needed: Please wait. [ 333.798429][T12883] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2743'. [ 333.810184][T12883] netlink: 'syz.6.2743': attribute type 3 has an invalid length. [ 333.814874][T12838] XFS (loop4): Quotacheck: Done. [ 333.819760][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2743'. [ 334.002084][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 334.031890][ T6099] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.096904][T12891] syz.6.2748 uses obsolete (PF_INET,SOCK_PACKET) [ 334.194602][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.215265][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 334.263019][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 334.275527][T12893] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 334.295961][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 334.348856][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 334.378542][ T9] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 334.402032][ T9] usb 1-1: Manufacturer: syz [ 334.451854][ T9] usb 1-1: config 0 descriptor?? [ 334.458349][T12862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.496504][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 334.518643][ T9] smsusb:siano_media_device_register: media controller created [ 334.561738][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.569148][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.576517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.583885][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.595212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.602809][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.610129][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.617456][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.642235][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.649610][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.656945][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.664278][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.673843][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.681205][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.688534][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.710633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.718030][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.725397][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.732759][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.740861][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.748235][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.755695][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 334.764233][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 334.771387][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 334.779384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.786709][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.794020][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.801325][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.808627][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.815947][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.823249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.836448][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.843876][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.851131][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.858378][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.866152][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.873462][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.880756][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.888061][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.896301][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.903630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.910954][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.918274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.925593][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.932928][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.940549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.947871][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.955190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.962500][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.969807][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.977117][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.984698][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.992003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 334.999304][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.007652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.014970][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.022266][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.029583][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.036891][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.044208][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.051496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.059142][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.066564][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.073968][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.081541][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.088854][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.096134][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.103385][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.110631][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.118758][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.126081][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.133373][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.140676][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.147978][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.155270][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.162561][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.169847][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.177756][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.185066][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.192366][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.199671][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.206972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.214274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.221574][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.229634][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.236945][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.244245][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.251547][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.258860][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.266144][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.273400][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.281072][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.288392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.304335][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.311676][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.318993][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.326303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.333621][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.340957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.348268][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.355584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.363147][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.370670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.377994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.385309][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.387878][T12912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2757'. [ 335.392591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.409011][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.417026][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.420698][T12914] IPVS: set_ctl: invalid protocol: 286 172.20.20.170:20004 [ 335.424311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.424367][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.424415][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.454433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.461767][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.469067][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.476382][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.483670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.491340][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.498693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.506022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.513335][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.520608][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.530388][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 335.538772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.538875][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.538965][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.539051][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.539138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.539223][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.539309][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.539414][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.539502][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.606273][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.613624][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.620956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.628282][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.635612][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.642953][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.650294][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.658061][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.665380][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.672699][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.680020][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.687339][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.694649][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.701960][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.710052][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.717361][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.724665][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.731970][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.739274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.747247][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.754583][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.761884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.769149][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.776931][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.784246][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.791555][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.798866][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.806161][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.814724][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.822041][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.829341][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.836645][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.844275][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.851599][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.858899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.866199][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.873506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.880802][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.888434][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.895846][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.903151][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.910496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.917805][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.925063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.932324][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.940426][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.947736][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.955035][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.962327][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.969629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.976924][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.984221][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.991524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 335.998828][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.006501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.013822][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.021123][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.028439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.036730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.044045][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.051432][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.058744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.066050][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.073346][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.080659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.088216][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.095542][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.103237][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.110576][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.117861][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.125119][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.132368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.139616][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.146954][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.154224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.162825][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 336.170093][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.177437][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.184768][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.192089][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.199424][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.206756][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.214091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.221418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.229911][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.237226][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.244525][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.251937][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.259242][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.266536][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.273846][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.281144][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.288872][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.296185][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.303482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.310763][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.318051][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.326333][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.333651][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.340950][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.348252][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.355565][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.362872][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.370192][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.377902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.385212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.392509][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.399812][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.407121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.414428][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.421723][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.429027][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.445245][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.452591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.459899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.467196][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.474491][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.481807][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.489381][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.496690][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.505133][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.512456][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.519776][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.527089][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.534445][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.541755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.549053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.556363][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.565123][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.572440][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.579745][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.587060][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.589864][T12932] xt_hashlimit: overflow, try lower: 6/0 [ 336.594348][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.607672][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.614990][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.622300][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.630311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.637602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.644851][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.652099][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.659355][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.667136][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.674448][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.681752][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.689158][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.696456][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.703752][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.711044][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.718354][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.726682][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.734019][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.741319][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.748606][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.755909][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.763209][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.770517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.778492][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.786050][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.793370][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.800684][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.807991][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.815323][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.822631][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.829930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.838094][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.845408][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.852704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.860004][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.867306][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.874592][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.881828][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.889064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.896315][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.904076][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.911379][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.918683][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.925979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.933298][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.940604][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.948584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.955903][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.963212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.970520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.978231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.985559][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 336.992879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.000182][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.007487][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.014811][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.022121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.029428][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.037556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.044866][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.052168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.059492][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.066797][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.074098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.081389][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.088685][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.096519][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.103825][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.111134][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.118684][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.125979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.133280][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.140563][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.147823][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.156151][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.163462][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.170739][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.178033][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.185334][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.192629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.199921][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.207209][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.214514][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.222423][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.229754][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.237063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.244374][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.251686][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.258984][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.266264][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.274138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.281470][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.288767][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.296506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.303830][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.311137][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.318445][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.325761][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.333081][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.341103][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.348746][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.356082][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.363393][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.370692][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.378276][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.385840][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.393138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.400450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.407759][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.415063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.422390][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.429690][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.437337][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.444663][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.451963][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.459239][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.467330][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.474648][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.481938][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.489233][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.496530][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.503829][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.511407][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.518717][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.534069][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.541409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.548731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.556049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.563360][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.570668][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.577983][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.585985][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.593684][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.601029][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.608344][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.615651][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.622956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.630678][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.637989][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.645300][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.652604][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.659906][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.667240][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.675332][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.682659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.689949][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.697226][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.704493][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.711735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.718975][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.726216][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.733960][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.741287][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.748596][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.755916][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.763240][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.770553][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.777865][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.785179][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.796874][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.804197][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.811501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.818808][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.826120][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.833432][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.841265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.848582][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.855880][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.863189][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.870498][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.878731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.886047][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.893352][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.901140][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.908462][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.915777][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.923091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.930399][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.937708][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.945112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.952412][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.960804][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.968130][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.975432][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.982760][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 337.989983][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 337.997447][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 338.004748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 338.012049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 338.019350][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 338.030091][ T9] ------------[ cut here ]------------ [ 338.035911][ T9] ODEBUG: free active (active state 0) object: ffff88802f91c208 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 338.049332][ T5795] ================================================================== [ 338.057432][ T5795] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 338.065106][ T5795] Read of size 8 at addr ffff888077f78098 by task kworker/0:4/5795 [ 338.073026][ T5795] [ 338.075397][ T5795] CPU: 0 PID: 5795 Comm: kworker/0:4 Not tainted 6.6.97-syzkaller #0 [ 338.083497][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.093677][ T5795] Workqueue: events do_submit_urb [ 338.098768][ T5795] Call Trace: [ 338.102080][ T5795] [ 338.105136][ T5795] dump_stack_lvl+0x16c/0x230 [ 338.109855][ T5795] ? __lock_acquire+0x7c80/0x7c80 [ 338.114917][ T5795] ? show_regs_print_info+0x20/0x20 [ 338.120153][ T5795] ? load_image+0x3b0/0x3b0 [ 338.124682][ T5795] ? __virt_addr_valid+0x469/0x540 [ 338.129847][ T5795] print_report+0xac/0x230 [ 338.134287][ T5795] ? __lock_acquire+0xff/0x7c80 [ 338.139166][ T5795] kasan_report+0x117/0x150 [ 338.143693][ T5795] ? mark_lock+0x94/0x320 [ 338.148036][ T5795] ? __lock_acquire+0xff/0x7c80 [ 338.152917][ T5795] __lock_acquire+0xff/0x7c80 [ 338.157621][ T5795] ? mark_lock+0x94/0x320 [ 338.161978][ T5795] ? look_up_lock_class+0x75/0x140 [ 338.167119][ T5795] ? verify_lock_unused+0x140/0x140 [ 338.172334][ T5795] ? register_lock_class+0xb5/0x890 [ 338.177547][ T5795] ? is_dynamic_key+0x260/0x260 [ 338.182454][ T5795] ? mark_lock+0x94/0x320 [ 338.186795][ T5795] ? __lock_acquire+0x1334/0x7c80 [ 338.191829][ T5795] lock_acquire+0x197/0x410 [ 338.196352][ T5795] ? smscore_getbuffer+0xa9/0x440 [ 338.201420][ T5795] ? read_lock_is_recursive+0x20/0x20 [ 338.206829][ T5795] _raw_spin_lock_irqsave+0xa8/0xf0 [ 338.212053][ T5795] ? smscore_getbuffer+0xa9/0x440 [ 338.217096][ T5795] ? _raw_spin_lock+0x40/0x40 [ 338.221789][ T5795] smscore_getbuffer+0xa9/0x440 [ 338.226656][ T5795] ? smscore_onresponse+0xf10/0xf10 [ 338.231875][ T5795] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 338.237976][ T5795] ? read_lock_is_recursive+0x20/0x20 [ 338.243360][ T5795] do_submit_urb+0x98/0x360 [ 338.247884][ T5795] ? process_scheduled_works+0x957/0x15b0 [ 338.253621][ T5795] ? process_scheduled_works+0x957/0x15b0 [ 338.259350][ T5795] process_scheduled_works+0xa45/0x15b0 [ 338.264923][ T5795] ? assign_work+0x400/0x400 [ 338.269530][ T5795] ? assign_work+0x39e/0x400 [ 338.274133][ T5795] worker_thread+0xa55/0xfc0 [ 338.278740][ T5795] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 338.284658][ T5795] ? _raw_spin_unlock+0x40/0x40 [ 338.289532][ T5795] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 338.295449][ T5795] kthread+0x2fa/0x390 [ 338.299533][ T5795] ? pr_cont_work+0x560/0x560 [ 338.304230][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 338.308834][ T5795] ret_from_fork+0x48/0x80 [ 338.313265][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 338.317865][ T5795] ret_from_fork_asm+0x11/0x20 [ 338.322823][ T5795] [ 338.325844][ T5795] [ 338.328174][ T5795] Allocated by task 9: [ 338.332252][ T5795] kasan_set_track+0x4e/0x70 [ 338.336856][ T5795] __kasan_kmalloc+0x8f/0xa0 [ 338.341454][ T5795] smscore_register_device+0x63/0x10f0 [ 338.346919][ T5795] smsusb_probe+0x1362/0x1da0 [ 338.351609][ T5795] usb_probe_interface+0x5a4/0xb00 [ 338.356746][ T5795] really_probe+0x25b/0xb40 [ 338.361260][ T5795] __driver_probe_device+0x18c/0x330 [ 338.366555][ T5795] driver_probe_device+0x4f/0x420 [ 338.371601][ T5795] __device_attach_driver+0x2ca/0x520 [ 338.376989][ T5795] bus_for_each_drv+0x24b/0x2d0 [ 338.381847][ T5795] __device_attach+0x2b5/0x400 [ 338.386644][ T5795] bus_probe_device+0x180/0x260 [ 338.391527][ T5795] device_add+0x85b/0xc20 [ 338.395899][ T5795] usb_set_configuration+0x1a79/0x20c0 [ 338.401374][ T5795] usb_generic_driver_probe+0x8d/0x150 [ 338.406845][ T5795] usb_probe_device+0x13d/0x280 [ 338.411786][ T5795] really_probe+0x25b/0xb40 [ 338.416302][ T5795] __driver_probe_device+0x18c/0x330 [ 338.421597][ T5795] driver_probe_device+0x4f/0x420 [ 338.426634][ T5795] __device_attach_driver+0x2ca/0x520 [ 338.432018][ T5795] bus_for_each_drv+0x24b/0x2d0 [ 338.436878][ T5795] __device_attach+0x2b5/0x400 [ 338.441651][ T5795] bus_probe_device+0x180/0x260 [ 338.446546][ T5795] device_add+0x85b/0xc20 [ 338.450881][ T5795] usb_new_device+0xa31/0x1630 [ 338.455659][ T5795] hub_event+0x2957/0x49c0 [ 338.460103][ T5795] process_scheduled_works+0xa45/0x15b0 [ 338.465749][ T5795] worker_thread+0xa55/0xfc0 [ 338.470352][ T5795] kthread+0x2fa/0x390 [ 338.474425][ T5795] ret_from_fork+0x48/0x80 [ 338.478933][ T5795] ret_from_fork_asm+0x11/0x20 [ 338.483708][ T5795] [ 338.486139][ T5795] Freed by task 9: [ 338.489865][ T5795] kasan_set_track+0x4e/0x70 [ 338.494466][ T5795] kasan_save_free_info+0x2e/0x50 [ 338.499501][ T5795] ____kasan_slab_free+0x126/0x1e0 [ 338.504623][ T5795] slab_free_freelist_hook+0x130/0x1b0 [ 338.510092][ T5795] __kmem_cache_free+0xba/0x1f0 [ 338.514966][ T5795] smscore_unregister_device+0x603/0x6e0 [ 338.520608][ T5795] smsusb_term_device+0x18f/0x220 [ 338.525650][ T5795] smsusb_probe+0x1708/0x1da0 [ 338.530420][ T5795] usb_probe_interface+0x5a4/0xb00 [ 338.535568][ T5795] really_probe+0x25b/0xb40 [ 338.540085][ T5795] __driver_probe_device+0x18c/0x330 [ 338.545386][ T5795] driver_probe_device+0x4f/0x420 [ 338.550425][ T5795] __device_attach_driver+0x2ca/0x520 [ 338.555816][ T5795] bus_for_each_drv+0x24b/0x2d0 [ 338.560677][ T5795] __device_attach+0x2b5/0x400 [ 338.565452][ T5795] bus_probe_device+0x180/0x260 [ 338.570315][ T5795] device_add+0x85b/0xc20 [ 338.574655][ T5795] usb_set_configuration+0x1a79/0x20c0 [ 338.580138][ T5795] usb_generic_driver_probe+0x8d/0x150 [ 338.585619][ T5795] usb_probe_device+0x13d/0x280 [ 338.590480][ T5795] really_probe+0x25b/0xb40 [ 338.594999][ T5795] __driver_probe_device+0x18c/0x330 [ 338.600298][ T5795] driver_probe_device+0x4f/0x420 [ 338.605348][ T5795] __device_attach_driver+0x2ca/0x520 [ 338.610732][ T5795] bus_for_each_drv+0x24b/0x2d0 [ 338.615595][ T5795] __device_attach+0x2b5/0x400 [ 338.620368][ T5795] bus_probe_device+0x180/0x260 [ 338.625231][ T5795] device_add+0x85b/0xc20 [ 338.629563][ T5795] usb_new_device+0xa31/0x1630 [ 338.634334][ T5795] hub_event+0x2957/0x49c0 [ 338.638761][ T5795] process_scheduled_works+0xa45/0x15b0 [ 338.644314][ T5795] worker_thread+0xa55/0xfc0 [ 338.648915][ T5795] kthread+0x2fa/0x390 [ 338.652994][ T5795] ret_from_fork+0x48/0x80 [ 338.657420][ T5795] ret_from_fork_asm+0x11/0x20 [ 338.662225][ T5795] [ 338.664552][ T5795] The buggy address belongs to the object at ffff888077f78000 [ 338.664552][ T5795] which belongs to the cache kmalloc-2k of size 2048 [ 338.678613][ T5795] The buggy address is located 152 bytes inside of [ 338.678613][ T5795] freed 2048-byte region [ffff888077f78000, ffff888077f78800) [ 338.692587][ T5795] [ 338.694918][ T5795] The buggy address belongs to the physical page: [ 338.701344][ T5795] page:ffffea0001dfde00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77f78 [ 338.711505][ T5795] head:ffffea0001dfde00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 338.720479][ T5795] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 338.728471][ T5795] page_type: 0xffffffff() [ 338.732814][ T5795] raw: 00fff00000000840 ffff888017842000 dead000000000100 dead000000000122 [ 338.741408][ T5795] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 338.749989][ T5795] page dumped because: kasan: bad access detected [ 338.756415][ T5795] page_owner tracks the page as allocated [ 338.762137][ T5795] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5455, tgid 5455 (dhcpcd), ts 97912598378, free_ts 97910225933 [ 338.783768][ T5795] post_alloc_hook+0x1cd/0x210 [ 338.788548][ T5795] get_page_from_freelist+0x195c/0x19f0 [ 338.794101][ T5795] __alloc_pages+0x1e3/0x460 [ 338.798703][ T5795] alloc_slab_page+0x5d/0x170 [ 338.803387][ T5795] new_slab+0x87/0x2e0 [ 338.807460][ T5795] ___slab_alloc+0xc6d/0x12f0 [ 338.812151][ T5795] __kmem_cache_alloc_node+0x1a2/0x260 [ 338.817614][ T5795] __kmalloc_node_track_caller+0xa2/0x230 [ 338.823337][ T5795] kmalloc_reserve+0x117/0x260 [ 338.828207][ T5795] pskb_expand_head+0x185/0x1230 [ 338.833154][ T5795] netlink_trim+0x180/0x220 [ 338.837671][ T5795] netlink_broadcast_filtered+0x80/0x1110 [ 338.843404][ T5795] nlmsg_notify+0xf0/0x1a0 [ 338.847921][ T5795] __dev_notify_flags+0xf5/0x2e0 [ 338.852962][ T5795] dev_change_flags+0xe8/0x1a0 [ 338.857828][ T5795] devinet_ioctl+0x97f/0x1c60 [ 338.862516][ T5795] page last free stack trace: [ 338.867191][ T5795] free_unref_page_prepare+0x7ce/0x8e0 [ 338.872656][ T5795] free_unref_page+0x32/0x2e0 [ 338.877346][ T5795] __unfreeze_partials+0x1cf/0x210 [ 338.882469][ T5795] put_cpu_partial+0x17c/0x250 [ 338.887243][ T5795] __slab_free+0x31d/0x410 [ 338.891668][ T5795] qlist_free_all+0x75/0xe0 [ 338.896177][ T5795] kasan_quarantine_reduce+0x143/0x160 [ 338.901642][ T5795] __kasan_slab_alloc+0x22/0x80 [ 338.906503][ T5795] slab_post_alloc_hook+0x6e/0x4d0 [ 338.911621][ T5795] __kmem_cache_alloc_node+0x13e/0x260 [ 338.917099][ T5795] kmalloc_trace+0x2a/0xe0 [ 338.921524][ T5795] ipv6_add_addr+0x538/0x1090 [ 338.926218][ T5795] addrconf_add_linklocal+0x289/0x6b0 [ 338.931603][ T5795] addrconf_addr_gen+0x4ac/0x5a0 [ 338.936558][ T5795] addrconf_init_auto_addrs+0x719/0xb40 [ 338.942126][ T5795] addrconf_notify+0xb62/0x1010 [ 338.946990][ T5795] [ 338.949315][ T5795] Memory state around the buggy address: [ 338.954950][ T5795] ffff888077f77f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 338.963015][ T5795] ffff888077f78000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.971181][ T5795] >ffff888077f78080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.979257][ T5795] ^ [ 338.984117][ T5795] ffff888077f78100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.992275][ T5795] ffff888077f78180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.000350][ T5795] ================================================================== [ 339.008434][ T5795] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 339.015642][ T5795] CPU: 0 PID: 5795 Comm: kworker/0:4 Not tainted 6.6.97-syzkaller #0 [ 339.023716][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.033779][ T5795] Workqueue: events do_submit_urb [ 339.038828][ T5795] Call Trace: [ 339.042118][ T5795] [ 339.045057][ T5795] dump_stack_lvl+0x16c/0x230 [ 339.049754][ T5795] ? show_regs_print_info+0x20/0x20 [ 339.054968][ T5795] ? load_image+0x3b0/0x3b0 [ 339.059487][ T5795] panic+0x2c0/0x710 [ 339.063397][ T5795] ? bpf_jit_dump+0xd0/0xd0 [ 339.067914][ T5795] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 339.073823][ T5795] ? _raw_spin_unlock+0x40/0x40 [ 339.078768][ T5795] ? print_memory_metadata+0x314/0x400 [ 339.084242][ T5795] ? __lock_acquire+0xff/0x7c80 [ 339.089106][ T5795] check_panic_on_warn+0x84/0xa0 [ 339.094059][ T5795] ? __lock_acquire+0xff/0x7c80 [ 339.098921][ T5795] end_report+0x6f/0x140 [ 339.103184][ T5795] kasan_report+0x128/0x150 [ 339.107703][ T5795] ? mark_lock+0x94/0x320 [ 339.112044][ T5795] ? __lock_acquire+0xff/0x7c80 [ 339.116906][ T5795] __lock_acquire+0xff/0x7c80 [ 339.121601][ T5795] ? mark_lock+0x94/0x320 [ 339.125938][ T5795] ? look_up_lock_class+0x75/0x140 [ 339.131058][ T5795] ? verify_lock_unused+0x140/0x140 [ 339.136271][ T5795] ? register_lock_class+0xb5/0x890 [ 339.141481][ T5795] ? is_dynamic_key+0x260/0x260 [ 339.146351][ T5795] ? mark_lock+0x94/0x320 [ 339.150691][ T5795] ? __lock_acquire+0x1334/0x7c80 [ 339.155729][ T5795] lock_acquire+0x197/0x410 [ 339.160261][ T5795] ? smscore_getbuffer+0xa9/0x440 [ 339.165319][ T5795] ? read_lock_is_recursive+0x20/0x20 [ 339.170725][ T5795] _raw_spin_lock_irqsave+0xa8/0xf0 [ 339.175944][ T5795] ? smscore_getbuffer+0xa9/0x440 [ 339.180992][ T5795] ? _raw_spin_lock+0x40/0x40 [ 339.185776][ T5795] smscore_getbuffer+0xa9/0x440 [ 339.190646][ T5795] ? smscore_onresponse+0xf10/0xf10 [ 339.195865][ T5795] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 339.201858][ T5795] ? read_lock_is_recursive+0x20/0x20 [ 339.207250][ T5795] do_submit_urb+0x98/0x360 [ 339.211775][ T5795] ? process_scheduled_works+0x957/0x15b0 [ 339.217527][ T5795] ? process_scheduled_works+0x957/0x15b0 [ 339.223262][ T5795] process_scheduled_works+0xa45/0x15b0 [ 339.228831][ T5795] ? assign_work+0x400/0x400 [ 339.233436][ T5795] ? assign_work+0x39e/0x400 [ 339.238038][ T5795] worker_thread+0xa55/0xfc0 [ 339.242660][ T5795] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 339.248566][ T5795] ? _raw_spin_unlock+0x40/0x40 [ 339.253428][ T5795] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 339.259338][ T5795] kthread+0x2fa/0x390 [ 339.263424][ T5795] ? pr_cont_work+0x560/0x560 [ 339.268123][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 339.272717][ T5795] ret_from_fork+0x48/0x80 [ 339.277162][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 339.281847][ T5795] ret_from_fork_asm+0x11/0x20 [ 339.286735][ T5795] [ 339.290132][ T5795] Kernel Offset: disabled [ 339.294479][ T5795] Rebooting in 86400 seconds..