last executing test programs: 3.880826696s ago: executing program 1 (id=224): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'stack ', ':(%#{//(@\\)//&@},[\'%%&\\#*\x00'}, 0x20) 3.583766621s ago: executing program 1 (id=235): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES8, @ANYBLOB="0f7e998cc1ac58617ce1fbb6376c77c41a1a96b4da7f665ab0ba10e31828f922d42984ff743aac0de669573cb8490d9622b55de7abb7777c2c5473a9b854b8f54eb00eaf004cb9065dc006f418a81d78f32c142c339a6153e387b37cc066c279ec19836cafe0082c2c47d464ed86915b009ccddd71b99513c218ea2cdf784e4dd085c94749052a82fa29778594c24d47b723ecfba4c79e7a22f04cade3acdf", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="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"/497, @ANYRESHEX=0x0, @ANYRES32], 0xfd, 0x1ee, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) 3.193425548s ago: executing program 1 (id=233): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) 2.930410742s ago: executing program 1 (id=237): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 2.810438924s ago: executing program 3 (id=238): r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x9, @sdr={0x47314356, 0x6a2a}}) 2.541518708s ago: executing program 3 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 2.373324701s ago: executing program 0 (id=242): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x0, 0x323b, 0x10000055}, {@remote, 0x4e23, 0x2000, 0xfffffffe, 0x12d5c, 0x12d5c}}, 0x44) 2.325707222s ago: executing program 3 (id=243): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4c, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x39, 0x4, [0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 2.241634433s ago: executing program 0 (id=244): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x5602, &(0x7f0000000240)={0x4, "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"}) 2.134680955s ago: executing program 3 (id=246): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 2.084071976s ago: executing program 2 (id=247): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x5, 0x0, 0xfffff03c}, {0x6, 0x1, 0x8}]}, 0x10) 2.064715737s ago: executing program 0 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x0) 1.87239646s ago: executing program 2 (id=249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x1000, 0xffffffffffffffff}) 1.81939555s ago: executing program 0 (id=250): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 1.808934811s ago: executing program 3 (id=251): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x15a, &(0x7f0000003180)="$eJzs2rFK81AUB/DzwYdKwcXRqVCpgjZJE62rjuLm7lBqbhq8MSURpH0BcRIUroMvIfgEPoFkEjddivgSkdtcNI0Wsthb4f9b+ofTJicn9E6nEYVBk8UNoo3e1cFwKQqDasvZ7rAma1Nmj4iqMiRpemPQNy+f9SQl44cv6LXynn3W1jyxf8F87tq6WwIAAAAAAAAAAAAAAAAAAAAAgJLqFRUqXRGcM5+7zVw17g+O25y7UUy0oKlDvepVtcNFTPBbOR9nbBTrMu/I5IvdSNat8d9fq7DaFfy1OF/zNOiZcX/Q8IO253ruiW07LWvTsrZsc3Qts3jF+p3qiZL03sqtkxmPh46s5/bNnsvsm6n3/3/ZF5dnxbt9vX+EKQaiCaV/9Ds3fdP+yH8pPM1l/45Z6UdDWCx5fM6+0fk3JKJ5p/Ygzz+jE/IjVZzGOPU+PgBM8hEAAP//oTc3XQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.686718792s ago: executing program 2 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 1.24355909s ago: executing program 2 (id=253): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x0, 0x323b, 0x10000055}, {@remote, 0x4e23, 0x2000, 0xfffffffe, 0x12d5c, 0x12d5c}}, 0x44) 1.24242191s ago: executing program 0 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000ac0"], 0x30}}, 0x0) 748.363688ms ago: executing program 3 (id=254): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000340)={[{@umask={'umask', 0x3d, 0x1}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0xab}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@namecase}, {@errors_continue}, {@keep_last_dots}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x1, 0x1515, &(0x7f00000041c0)="$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") lstat(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) 740.365688ms ago: executing program 0 (id=255): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 614.44727ms ago: executing program 1 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000080)=""/1) 563.767511ms ago: executing program 2 (id=257): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x4, 0xc3, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x20, 0x1, 0xbacf}}) 62.508399ms ago: executing program 1 (id=258): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x5, 0x0, 0xfffff03c}, {0x6, 0x1, 0x8}]}, 0x10) 0s ago: executing program 2 (id=259): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x560d, 0x10000000000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 81.147298][ T5780] cgroup: Unknown subsys name 'net' [ 81.310770][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.018275][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.657440][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.668699][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.677664][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.693055][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.701877][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.710219][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.722549][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.741972][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.742529][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.750220][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.765864][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.765910][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.773726][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.780429][ T5805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.795793][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.804950][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.805503][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.819651][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.828786][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.845655][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.845780][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.861253][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.868967][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.877408][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.410673][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 85.439624][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 85.459511][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 85.550966][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.681462][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.689067][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.697191][ T5798] bridge_slave_0: entered allmulticast mode [ 85.704487][ T5798] bridge_slave_0: entered promiscuous mode [ 85.714372][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.722243][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.729455][ T5798] bridge_slave_1: entered allmulticast mode [ 85.736708][ T5798] bridge_slave_1: entered promiscuous mode [ 85.772432][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.779654][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.787004][ T5797] bridge_slave_0: entered allmulticast mode [ 85.794536][ T5797] bridge_slave_0: entered promiscuous mode [ 85.854518][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.862010][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.869199][ T5797] bridge_slave_1: entered allmulticast mode [ 85.877439][ T5797] bridge_slave_1: entered promiscuous mode [ 85.897038][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.905156][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.912741][ T5790] bridge_slave_0: entered allmulticast mode [ 85.919835][ T5790] bridge_slave_0: entered promiscuous mode [ 85.927336][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.934980][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.942301][ T5789] bridge_slave_0: entered allmulticast mode [ 85.949259][ T5789] bridge_slave_0: entered promiscuous mode [ 85.972925][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.985772][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.995229][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.002703][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.009883][ T5790] bridge_slave_1: entered allmulticast mode [ 86.017380][ T5790] bridge_slave_1: entered promiscuous mode [ 86.035912][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.043210][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.050395][ T5789] bridge_slave_1: entered allmulticast mode [ 86.057969][ T5789] bridge_slave_1: entered promiscuous mode [ 86.128448][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.141246][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.165397][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.179198][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.190737][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.216214][ T5798] team0: Port device team_slave_0 added [ 86.236734][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.277595][ T5798] team0: Port device team_slave_1 added [ 86.324465][ T5797] team0: Port device team_slave_0 added [ 86.336061][ T5789] team0: Port device team_slave_0 added [ 86.357403][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.364493][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.390904][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.406242][ T5790] team0: Port device team_slave_0 added [ 86.415912][ T5790] team0: Port device team_slave_1 added [ 86.424780][ T5797] team0: Port device team_slave_1 added [ 86.444185][ T5789] team0: Port device team_slave_1 added [ 86.463940][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.470943][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.497812][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.548128][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.555513][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.582481][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.599999][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.608322][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.634383][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.660362][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.667551][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.693978][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.706842][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.713889][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.739961][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.757633][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.765168][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.791298][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.804271][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.811576][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.838364][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.849811][ T5802] Bluetooth: hci1: command tx timeout [ 86.856224][ T50] Bluetooth: hci0: command tx timeout [ 86.922549][ T50] Bluetooth: hci2: command tx timeout [ 86.928477][ T5802] Bluetooth: hci3: command tx timeout [ 86.963308][ T5790] hsr_slave_0: entered promiscuous mode [ 86.973775][ T5790] hsr_slave_1: entered promiscuous mode [ 87.014428][ T5797] hsr_slave_0: entered promiscuous mode [ 87.021113][ T5797] hsr_slave_1: entered promiscuous mode [ 87.028004][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.037726][ T5797] Cannot create hsr debugfs directory [ 87.049359][ T5789] hsr_slave_0: entered promiscuous mode [ 87.058017][ T5789] hsr_slave_1: entered promiscuous mode [ 87.068154][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.076358][ T5789] Cannot create hsr debugfs directory [ 87.120734][ T5798] hsr_slave_0: entered promiscuous mode [ 87.133851][ T5798] hsr_slave_1: entered promiscuous mode [ 87.150879][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.159093][ T5798] Cannot create hsr debugfs directory [ 87.737258][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.751960][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.762856][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.772801][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.857304][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.869895][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.884296][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.899972][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.980864][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.007806][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.036072][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.053697][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.156241][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.182186][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.193289][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.214346][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.221361][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.280248][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.322177][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.329812][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.350838][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.379069][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.386289][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.468974][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.508802][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.530244][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.537449][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.557720][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.564929][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.592334][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.635669][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.642888][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.656895][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.664135][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.740027][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.776459][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.879873][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.913694][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.920878][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.933317][ T5802] Bluetooth: hci1: command tx timeout [ 88.938791][ T5802] Bluetooth: hci0: command tx timeout [ 88.963459][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.970791][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.004198][ T5802] Bluetooth: hci3: command tx timeout [ 89.010101][ T50] Bluetooth: hci2: command tx timeout [ 89.327569][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.380897][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.428287][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.537969][ T5797] veth0_vlan: entered promiscuous mode [ 89.559633][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.582881][ T5789] veth0_vlan: entered promiscuous mode [ 89.596881][ T5797] veth1_vlan: entered promiscuous mode [ 89.615075][ T5790] veth0_vlan: entered promiscuous mode [ 89.628852][ T5789] veth1_vlan: entered promiscuous mode [ 89.667582][ T5790] veth1_vlan: entered promiscuous mode [ 89.766645][ T5789] veth0_macvtap: entered promiscuous mode [ 89.785032][ T5790] veth0_macvtap: entered promiscuous mode [ 89.801978][ T5790] veth1_macvtap: entered promiscuous mode [ 89.817882][ T5789] veth1_macvtap: entered promiscuous mode [ 89.827794][ T5798] veth0_vlan: entered promiscuous mode [ 89.843499][ T5798] veth1_vlan: entered promiscuous mode [ 89.850805][ T5797] veth0_macvtap: entered promiscuous mode [ 89.868317][ T5797] veth1_macvtap: entered promiscuous mode [ 89.892845][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.930665][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.949317][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.959414][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.970354][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.981198][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.014640][ T5798] veth0_macvtap: entered promiscuous mode [ 90.026904][ T5798] veth1_macvtap: entered promiscuous mode [ 90.035723][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.047422][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.060254][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.070412][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.082310][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.092690][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.103559][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.117608][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.128006][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.138836][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.151024][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.164946][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.174091][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.183359][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.192304][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.240749][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.252137][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.262701][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.273407][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.285172][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.304388][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.317485][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.328165][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.341206][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.353396][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.364427][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.375983][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.396942][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.406431][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.415507][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.424645][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.444718][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.463774][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.473830][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.486315][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.496246][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.506966][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.518470][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.535787][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.547116][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.557402][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.567012][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.715845][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.733585][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.826723][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.836132][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.854219][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.864149][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.934622][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.959421][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.002011][ T50] Bluetooth: hci0: command tx timeout [ 91.007503][ T50] Bluetooth: hci1: command tx timeout [ 91.034374][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.056202][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.082344][ T5802] Bluetooth: hci3: command tx timeout [ 91.087991][ T50] Bluetooth: hci2: command tx timeout [ 91.150416][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.186518][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202776][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.210844][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.342723][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.361703][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.931409][ T5905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.163966][ T9] cfg80211: failed to load regulatory.db [ 92.484960][ T5925] syz.2.20[5925]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.529361][ T5925] loop2: detected capacity change from 0 to 1024 [ 92.836173][ T5931] loop1: detected capacity change from 0 to 8 [ 92.995585][ T5931] SQUASHFS error: zlib decompression failed, data probably corrupt [ 93.022591][ T5931] SQUASHFS error: Failed to read block 0x13e: -5 [ 93.039375][ T5931] SQUASHFS error: Unable to read metadata cache entry [13c] [ 93.059665][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 93.066488][ T5931] SQUASHFS error: Unable to read directory block [13c:26] [ 93.082155][ T50] Bluetooth: hci1: command tx timeout [ 93.087719][ T50] Bluetooth: hci0: command tx timeout [ 93.113542][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 93.162748][ T50] Bluetooth: hci2: command tx timeout [ 93.168264][ T5802] Bluetooth: hci3: command tx timeout [ 93.794170][ T5958] loop1: detected capacity change from 0 to 64 [ 93.881029][ T5958] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 94.045879][ T5943] loop3: detected capacity change from 0 to 32768 [ 94.072695][ T5943] XFS: noikeep mount option is deprecated. [ 94.092469][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.131800][ T786] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 94.133914][ T5943] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.249186][ T5943] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 94.299362][ T5943] XFS (loop3): Starting recovery (logdev: internal) [ 94.332828][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 94.335336][ T786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.343520][ T8] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.371345][ T5943] XFS (loop3): Ending recovery (logdev: internal) [ 94.371563][ T8] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.390164][ T786] usb 3-1: not running at top speed; connect to a high speed hub [ 94.409431][ T786] usb 3-1: config 56 has an invalid interface number: 129 but max is 0 [ 94.420017][ T786] usb 3-1: config 56 has no interface number 0 [ 94.428632][ T786] usb 3-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 94.440754][ T786] usb 3-1: config 56 interface 129 has no altsetting 0 [ 94.447949][ T8] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x3 has invalid maxpacket 1600, setting to 1024 [ 94.447982][ T8] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1024 [ 94.448006][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 94.462843][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.488682][ T786] usb 3-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2 [ 94.501794][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.510191][ T786] usb 3-1: Product: syz [ 94.510522][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.520217][ T786] usb 3-1: Manufacturer: syz [ 94.536033][ T786] usb 3-1: SerialNumber: syz [ 94.559711][ T5962] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 94.566366][ T8] usb 1-1: Product: syz [ 94.571680][ T8] usb 1-1: Manufacturer: syz [ 94.576332][ T8] usb 1-1: SerialNumber: syz [ 94.585736][ T5841] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 94.601060][ T5841] XFS (loop3): Unmount and run xfs_repair [ 94.619069][ T5959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.638350][ T5841] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 94.646898][ T5841] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 94.657841][ T5841] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 94.667339][ T5841] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 94.676702][ T5841] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 94.696478][ T5841] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 94.707223][ T5841] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.720863][ T5841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.737607][ T5841] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.748659][ T5943] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x8 len 8 error 117 [ 94.805482][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.825732][ T786] option 3-1:56.129: GSM modem (1-port) converter detected [ 94.936234][ T8] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 94.982021][ T786] usb 3-1: USB disconnect, device number 2 [ 95.001459][ T8] usb 1-1: USB disconnect, device number 2 [ 95.005062][ T786] option 3-1:56.129: device disconnected [ 95.069094][ T5984] IPVS: length: 250 != 8 [ 95.658944][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.907648][ T6010] Cannot find del_set index 1 as target [ 96.090253][ T6014] loop2: detected capacity change from 0 to 2048 [ 96.102445][ T6016] capability: warning: `syz.3.59' uses deprecated v2 capabilities in a way that may be insecure [ 96.151042][ T6014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.395434][ T6026] xt_cgroup: path and classid specified [ 96.552803][ T6030] loop2: detected capacity change from 0 to 256 [ 96.787929][ T6038] netlink: 'syz.1.68': attribute type 2 has an invalid length. [ 96.808461][ T6038] netlink: 'syz.1.68': attribute type 8 has an invalid length. [ 96.828287][ T6038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.68'. [ 97.074873][ T6050] loop1: detected capacity change from 0 to 256 [ 97.411826][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.78'. [ 97.718692][ T6070] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 98.567477][ T6102] netlink: 'syz.3.99': attribute type 3 has an invalid length. [ 99.246612][ T6100] loop0: detected capacity change from 0 to 32768 [ 99.432695][ T6100] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 99.467248][ T6129] loop2: detected capacity change from 0 to 1024 [ 99.481772][ T6100] overlayfs: missing 'lowerdir' [ 99.573577][ T6129] hfsplus: catalog name length corrupted [ 100.263940][ T6124] loop1: detected capacity change from 0 to 32768 [ 100.302080][ T6124] XFS: ikeep mount option is deprecated. [ 100.307899][ T6124] XFS: ikeep mount option is deprecated. [ 100.407260][ T6124] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.410664][ T6141] loop0: detected capacity change from 0 to 4096 [ 100.530089][ T6154] loop3: detected capacity change from 0 to 512 [ 100.637934][ T6154] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.651782][ T6124] XFS (loop1): Ending clean mount [ 100.665202][ T6124] XFS (loop1): Quotacheck needed: Please wait. [ 100.687250][ T6154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.698337][ T6154] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 100.718732][ T6154] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.793132][ T6154] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 100.816392][ T6154] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.120: bg 0: block 40: padding at end of block bitmap is not set [ 100.872474][ T6124] XFS (loop1): Quotacheck: Done. [ 100.907798][ T6154] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 100.945202][ T6154] EXT4-fs (loop3): 1 truncate cleaned up [ 100.957053][ T6154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.055016][ T6154] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.120: bad symlink. [ 101.142216][ T6166] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 101.165336][ T5797] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.170573][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.185273][ T6164] loop0: detected capacity change from 0 to 4096 [ 101.202960][ T6164] ======================================================= [ 101.202960][ T6164] WARNING: The mand mount option has been deprecated and [ 101.202960][ T6164] and is ignored by this kernel. Remove the mand [ 101.202960][ T6164] option from the mount to silence this warning. [ 101.202960][ T6164] ======================================================= [ 101.240263][ T6164] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 101.521805][ T6164] ntfs3: loop0: failed to convert "076c" to cp949 [ 101.860280][ T6175] loop0: detected capacity change from 0 to 512 [ 102.489534][ T6196] loop3: detected capacity change from 0 to 1024 [ 102.580429][ T6196] syz.3.139: attempt to access beyond end of device [ 102.580429][ T6196] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 102.636145][ T6196] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 102.671815][ T6196] syz.3.139: attempt to access beyond end of device [ 102.671815][ T6196] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 102.711682][ T6196] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 102.921795][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 102.941702][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 102.975935][ T6210] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.008038][ T6210] xt_HMARK: spi-set and port-set can't be combined [ 103.182741][ T6216] loop2: detected capacity change from 0 to 128 [ 103.206335][ T6216] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.223521][ T6216] FAT-fs (loop2): Directory bread(block 148) failed [ 103.238536][ T6216] FAT-fs (loop2): Directory bread(block 149) failed [ 103.267936][ T6216] FAT-fs (loop2): Directory bread(block 150) failed [ 103.285279][ T6216] FAT-fs (loop2): Directory bread(block 151) failed [ 103.318275][ T6216] FAT-fs (loop2): Directory bread(block 152) failed [ 103.348847][ T6216] FAT-fs (loop2): Directory bread(block 153) failed [ 103.361650][ T6216] FAT-fs (loop2): Directory bread(block 154) failed [ 103.377316][ T6216] FAT-fs (loop2): Directory bread(block 155) failed [ 103.473221][ T6216] FAT-fs (loop2): Directory bread(block 148) failed [ 103.491130][ T6198] loop1: detected capacity change from 0 to 32768 [ 103.506809][ T6216] FAT-fs (loop2): Directory bread(block 149) failed [ 103.519210][ T6198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.138 (6198) [ 103.559441][ T6198] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.584018][ T6198] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 103.606908][ T6198] BTRFS info (device loop1): using free space tree [ 103.671070][ T1321] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.805248][ T6198] BTRFS info (device loop1): enabling ssd optimizations [ 103.819675][ T6198] BTRFS info (device loop1): auto enabling async discard [ 103.954867][ T6247] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.126794][ T5797] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.166120][ T6251] loop2: detected capacity change from 0 to 256 [ 104.223015][ T6251] exfat: Deprecated parameter 'namecase' [ 104.261723][ T6251] exfat: Deprecated parameter 'namecase' [ 104.410479][ T6251] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 104.779584][ T6265] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 105.109811][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.118963][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.215548][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.222844][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.231526][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.238779][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.258474][ T6265] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.721706][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.925551][ T5832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.956704][ T5832] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.992459][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.011550][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.029974][ T5832] usb 3-1: SerialNumber: syz [ 106.045135][ T5832] usb 3-1: bad CDC descriptors [ 106.086369][ T6294] loop3: detected capacity change from 0 to 512 [ 106.099043][ T6294] EXT4-fs: Ignoring removed nobh option [ 106.132920][ T6294] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 106.152262][ T6294] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 106.160517][ T6294] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.180: casefold flag without casefold feature [ 106.181993][ T6294] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.180: couldn't read orphan inode 13 (err -117) [ 106.218717][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.233361][ T6277] loop1: detected capacity change from 0 to 32768 [ 106.247054][ T6294] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 106.285035][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.318187][ T6299] netlink: 'syz.0.181': attribute type 30 has an invalid length. [ 106.330266][ T5832] usb 3-1: USB disconnect, device number 3 [ 106.351568][ T6277] (syz.1.171,6277,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.385726][ T6277] (syz.1.171,6277,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.549163][ T6277] JBD2: Ignoring recovery information on journal [ 106.616061][ T6304] loop0: detected capacity change from 0 to 512 [ 106.688559][ T6304] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.730775][ T6277] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 106.818499][ T6304] EXT4-fs (loop0): 1 orphan inode deleted [ 106.837383][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.851719][ T6304] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.873261][ T58] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.916454][ T58] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 1 [ 107.058774][ T6304] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.133062][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.155095][ T5797] ocfs2: Unmounting device (7,1) on (node local) [ 107.242894][ T28] audit: type=1326 audit(1751799684.541:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ad8e929 code=0x7ffc0000 [ 107.301748][ T28] audit: type=1326 audit(1751799684.541:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ad8e929 code=0x7ffc0000 [ 107.367077][ T6323] ubi31: attaching mtd0 [ 107.373574][ T28] audit: type=1326 audit(1751799684.541:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb49ad8e929 code=0x7ffc0000 [ 107.405092][ T6323] ubi31: scanning is finished [ 107.427812][ T6323] ubi31: empty MTD device detected [ 107.469823][ T28] audit: type=1326 audit(1751799684.541:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ad8e929 code=0x7ffc0000 [ 107.597877][ T6323] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 107.619060][ T6323] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 107.658709][ T6323] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 107.661770][ T6330] netlink: 'syz.2.195': attribute type 21 has an invalid length. [ 107.685545][ T6323] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 107.706742][ T6330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.195'. [ 107.707287][ T6323] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 107.746456][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'. [ 107.749168][ T6323] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 107.780765][ T6323] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3746022990 [ 107.832094][ T6323] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 107.887222][ T6328] ubi31: background thread "ubi_bgt31d" started, PID 6328 [ 107.970631][ T6339] netlink: 'syz.2.199': attribute type 10 has an invalid length. [ 107.998190][ T6340] loop3: detected capacity change from 0 to 256 [ 108.005151][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.012984][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.075078][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.082418][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.090004][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.097290][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.179099][ T6340] FAT-fs (loop3): Directory bread(block 64) failed [ 108.186629][ T6340] FAT-fs (loop3): Directory bread(block 65) failed [ 108.207776][ T6339] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.217443][ T6340] FAT-fs (loop3): Directory bread(block 66) failed [ 108.226356][ T6340] FAT-fs (loop3): Directory bread(block 67) failed [ 108.251837][ T6340] FAT-fs (loop3): Directory bread(block 68) failed [ 108.268776][ T6340] FAT-fs (loop3): Directory bread(block 69) failed [ 108.287309][ T6340] FAT-fs (loop3): Directory bread(block 70) failed [ 108.297379][ T6340] FAT-fs (loop3): Directory bread(block 71) failed [ 108.306281][ T6340] FAT-fs (loop3): Directory bread(block 72) failed [ 108.313895][ T6340] FAT-fs (loop3): Directory bread(block 73) failed [ 108.753816][ T6355] loop2: detected capacity change from 0 to 256 [ 108.963367][ T6361] loop0: detected capacity change from 0 to 8 [ 109.139647][ T6365] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 109.189373][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.197205][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.284148][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.291421][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.299134][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.306412][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.363295][ T6365] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.863048][ T6388] loop2: detected capacity change from 0 to 8 [ 109.980608][ T28] audit: type=1400 audit(1751799687.301:6): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=6391 comm="syz.1.224" [ 110.204608][ T6399] loop1: detected capacity change from 0 to 8 [ 110.278203][ T6404] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 110.304455][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.313292][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.398716][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.406044][ T6404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.413700][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.420934][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.495229][ T6404] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.631719][ T28] audit: type=1326 audit(1751799687.941:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6f8e929 code=0x7ffc0000 [ 110.659227][ T28] audit: type=1326 audit(1751799687.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6f8e929 code=0x7ffc0000 [ 110.682483][ T28] audit: type=1326 audit(1751799687.951:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd8f6f8e929 code=0x7ffc0000 [ 110.705012][ T28] audit: type=1326 audit(1751799687.951:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6f8e929 code=0x7ffc0000 [ 110.846352][ T6418] loop0: detected capacity change from 0 to 24 [ 110.876472][ T6418] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 110.897509][ T6421] loop1: detected capacity change from 0 to 8 [ 110.918480][ T6418] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 110.970716][ T6421] SQUASHFS error: xz decompression failed, data probably corrupt [ 111.021276][ T6421] SQUASHFS error: Failed to read block 0x108: -5 [ 111.034980][ T6421] SQUASHFS error: Unable to read metadata cache entry [106] [ 111.043613][ T6421] SQUASHFS error: Unable to read inode 0x11f [ 111.078138][ T6418] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 111.502527][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.710443][ T6437] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 111.723254][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 111.743669][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 111.754485][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.761856][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.769442][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 111.788091][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 111.819244][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 111.832432][ T23] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 111.840766][ T23] usb 2-1: Manufacturer: syz [ 111.850682][ T23] usb 2-1: config 0 descriptor?? [ 111.861833][ T6421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.894270][ T23] smsusb:smsusb_probe: board id=9, interface number 0 [ 111.950138][ T23] smsusb:siano_media_device_register: media controller created [ 111.981926][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 111.989497][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 111.996862][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.004231][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.011591][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.022140][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.030062][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.037406][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.044734][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.052061][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.061037][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.068413][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.075686][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.082948][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.109378][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.116776][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.124201][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.129152][ T6447] loop3: detected capacity change from 0 to 24 [ 112.131517][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.145736][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.153074][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.160387][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.167709][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.173480][ T6447] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 112.176576][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.189159][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.196505][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.204813][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.212181][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.219478][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.226743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.241927][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.249355][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.256816][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.264198][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.271572][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.278930][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.286732][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.294053][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.301376][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.308962][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.316541][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.318462][ T6447] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 112.323812][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.324941][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.346293][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.353653][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.360940][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.368210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.375474][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.383235][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.390562][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.397863][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.405174][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.412482][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.419793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.427130][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.435908][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.443238][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.450564][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.457888][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.465235][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.472568][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.479889][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.487653][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.495021][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.502357][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.509669][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.516982][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.524302][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.531607][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.540797][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.548141][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.555467][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.562793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.570119][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.577437][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.577908][ T6447] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 112.584730][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.585359][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.606985][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.614279][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.621549][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.628809][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.636083][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.643337][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.651963][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.659399][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.666776][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.674095][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.681408][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.688727][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.696044][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.704525][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.712453][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.719786][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.727105][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.734409][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.741711][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.749035][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.764859][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.772227][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.779551][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.786878][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.794199][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.801522][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.809025][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.817624][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.824979][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.832306][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.839637][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.846966][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.854295][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.861610][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.869540][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.876894][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.884227][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.891543][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.898868][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.906200][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.915090][ T23] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 112.924970][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925082][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925176][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925275][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925367][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925457][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925635][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925725][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.925825][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 112.998927][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.006259][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.013755][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.021019][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.028282][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.035539][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.042798][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.050050][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.058543][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.065885][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.073201][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.080488][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.087802][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.095117][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.102438][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.109842][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.117166][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.132660][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.140028][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.147368][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.154721][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.162066][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.169477][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.176792][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.184118][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.192166][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.199737][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.207087][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.214418][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.221754][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.229173][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.236497][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.243908][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.252288][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.259630][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.266955][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.274277][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.281575][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.288886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.296578][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.304551][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.311871][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.319183][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.326488][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.333801][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.341126][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.348465][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.356753][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.364178][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.372055][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.379396][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.386726][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.394141][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.401475][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.408807][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.416133][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.423489][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.431770][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.439121][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.446451][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.453872][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.461198][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.468511][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.475793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.483054][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.490335][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.498230][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.505567][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.512894][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.520221][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.527544][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.527993][ T6460] loop3: detected capacity change from 0 to 256 [ 113.534841][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.534906][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.534973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.563113][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.571528][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.578860][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.586190][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.593586][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.601002][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.608309][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.608913][ T6460] exfat: Deprecated parameter 'namecase' [ 113.615599][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.615654][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.615709][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.617545][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.650543][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.657886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.665209][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.672525][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.679846][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.687176][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.696162][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.703511][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.710822][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.718245][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.725567][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.733668][ T6460] exfat: Deprecated parameter 'namecase' [ 113.733808][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.746768][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.754095][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.761501][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.768826][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.776147][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.783548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.790874][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.798308][ T23] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 113.806251][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.813587][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.820900][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.828173][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.835447][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.842714][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.849975][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.857376][ T23] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 113.866391][ T23] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 113.874260][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.896318][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.903769][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.911342][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.918659][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.925985][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.933318][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.940636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.950484][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.957957][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.965353][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.972275][ T6460] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 113.972693][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.992199][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 113.999576][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.007022][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.014907][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.022421][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.029731][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.037846][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 114.045108][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.052442][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.053245][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 114.053346][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.053421][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 114.055675][ T23] ------------[ cut here ]------------ [ 114.055685][ T23] ODEBUG: free active (active state 0) object: ffff88807c8808c8 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 114.056259][ T23] WARNING: CPU: 1 PID: 23 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 114.056311][ T23] Modules linked in: [ 114.056343][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted 6.6.96-syzkaller #0 [ 114.056366][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.056381][ T23] Workqueue: usb_hub_wq hub_event [ 114.056412][ T23] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 114.056449][ T23] Code: 4c 8b 4d 00 48 c7 c7 c0 76 fc 8a 48 c7 c6 20 73 fc 8a 48 c7 c2 40 78 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 8e 66 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 23 20 24 [ 114.056466][ T23] RSP: 0018:ffffc900001d6b38 EFLAGS: 00010282 [ 114.056487][ T23] RAX: cb15f2614155ba00 RBX: ffffffff9715bb78 RCX: 0000000000100000 [ 114.056504][ T23] RDX: ffffc90016ee9000 RSI: 0000000000076d86 RDI: 0000000000076d87 [ 114.056520][ T23] RBP: ffffffff8aa9dfe0 R08: ffffffff90da5597 R09: 1ffffffff21b4ab2 [ 114.199161][ T23] R10: dffffc0000000000 R11: fffffbfff21b4ab3 R12: ffff88807c881000 [ 114.199184][ T23] R13: ffffffff870be850 R14: ffff88807c880000 R15: ffff88807c8808c8 [ 114.199202][ T23] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 114.199222][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.199238][ T23] CR2: 0000001b2dc0dff8 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 114.199257][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.199270][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.199284][ T23] Call Trace: [ 114.199295][ T23] [ 114.199330][ T23] slab_free_freelist_hook+0xd2/0x1b0 [ 114.199366][ T23] ? smsusb_term_device+0x1ac/0x220 [ 114.199400][ T23] __kmem_cache_free+0xba/0x1f0 [ 114.199430][ T23] smsusb_term_device+0x1ac/0x220 [ 114.199469][ T23] smsusb_probe+0x1708/0x1da0 [ 114.199519][ T23] ? s2255_print_cfg+0x1b0/0x1b0 [ 114.199557][ T23] ? smsusb1_detectmode+0x260/0x260 [ 114.199591][ T23] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 114.199620][ T23] ? pm_runtime_enable+0x192/0x2a0 [ 114.199652][ T23] ? __pm_runtime_set_status+0x8ab/0xb80 [ 114.199694][ T23] usb_probe_interface+0x5a4/0xb00 [ 114.199729][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 114.199749][ T23] really_probe+0x25b/0xb40 [ 114.199794][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 114.199825][ T23] __driver_probe_device+0x18c/0x330 [ 114.199856][ T23] driver_probe_device+0x4f/0x420 [ 114.199887][ T23] __device_attach_driver+0x2ca/0x520 [ 114.199923][ T23] bus_for_each_drv+0x24b/0x2d0 [ 114.199951][ T23] ? coredump_store+0x90/0x90 [ 114.199979][ T23] ? bus_find_device+0x320/0x320 [ 114.200017][ T23] __device_attach+0x2b5/0x400 [ 114.200055][ T23] ? device_attach+0x20/0x20 [ 114.200089][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 114.200118][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 114.200155][ T23] bus_probe_device+0x180/0x260 [ 114.200200][ T23] device_add+0x85b/0xc20 [ 114.200228][ T23] usb_set_configuration+0x1a79/0x20c0 [ 114.200295][ T23] usb_generic_driver_probe+0x8d/0x150 [ 114.200334][ T23] usb_probe_device+0x13d/0x280 [ 114.200359][ T23] ? usb_register_device_driver+0x230/0x230 [ 114.200379][ T23] really_probe+0x25b/0xb40 [ 114.200411][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 114.200442][ T23] __driver_probe_device+0x18c/0x330 [ 114.200482][ T23] driver_probe_device+0x4f/0x420 [ 114.200515][ T23] __device_attach_driver+0x2ca/0x520 [ 114.200550][ T23] bus_for_each_drv+0x24b/0x2d0 [ 114.200577][ T23] ? coredump_store+0x90/0x90 [ 114.200606][ T23] ? bus_find_device+0x320/0x320 [ 114.200644][ T23] __device_attach+0x2b5/0x400 [ 114.200678][ T23] ? device_attach+0x20/0x20 [ 114.200704][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 114.200731][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 114.200766][ T23] bus_probe_device+0x180/0x260 [ 114.200797][ T23] device_add+0x85b/0xc20 [ 114.200826][ T23] usb_new_device+0xa31/0x1630 [ 114.200867][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 114.200895][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.200921][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 114.200947][ T23] hub_event+0x2957/0x49c0 [ 114.201033][ T23] ? led_work+0x720/0x720 [ 114.201071][ T23] ? read_lock_is_recursive+0x20/0x20 [ 114.201105][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.201130][ T23] ? process_scheduled_works+0x957/0x15b0 [ 114.201160][ T23] ? process_scheduled_works+0x957/0x15b0 [ 114.201187][ T23] process_scheduled_works+0xa45/0x15b0 [ 114.201250][ T23] ? assign_work+0x400/0x400 [ 114.201285][ T23] ? assign_work+0x39e/0x400 [ 114.201318][ T23] worker_thread+0xa55/0xfc0 [ 114.201377][ T23] kthread+0x2fa/0x390 [ 114.201397][ T23] ? pr_cont_work+0x560/0x560 [ 114.201425][ T23] ? kthread_blkcg+0xd0/0xd0 [ 114.201445][ T23] ret_from_fork+0x48/0x80 [ 114.201714][ T23] ? kthread_blkcg+0xd0/0xd0 [ 114.201740][ T23] ret_from_fork_asm+0x11/0x20 [ 114.201786][ T23] [ 114.201797][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.201808][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted 6.6.96-syzkaller #0 [ 114.201828][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.201840][ T23] Workqueue: usb_hub_wq hub_event [ 114.201866][ T23] Call Trace: [ 114.201874][ T23] [ 114.201881][ T23] dump_stack_lvl+0x16c/0x230 [ 114.201914][ T23] ? show_regs_print_info+0x20/0x20 [ 114.201942][ T23] ? load_image+0x3b0/0x3b0 [ 114.201980][ T23] panic+0x2c0/0x710 [ 114.202006][ T23] ? bpf_jit_dump+0xd0/0xd0 [ 114.202035][ T23] ? ret_from_fork_asm+0x11/0x20 [ 114.202079][ T23] __warn+0x2e0/0x470 [ 114.202098][ T23] ? debug_check_no_obj_freed+0x446/0x540 [ 114.202135][ T23] ? debug_check_no_obj_freed+0x446/0x540 [ 114.202167][ T23] report_bug+0x2be/0x4f0 [ 114.202195][ T23] ? debug_check_no_obj_freed+0x446/0x540 [ 114.202228][ T23] ? debug_check_no_obj_freed+0x446/0x540 [ 114.202258][ T23] ? debug_check_no_obj_freed+0x448/0x540 [ 114.202300][ T23] handle_bug+0xcf/0x120 [ 114.202329][ T23] exc_invalid_op+0x1a/0x50 [ 114.202358][ T23] asm_exc_invalid_op+0x1a/0x20 [ 114.202381][ T23] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 114.202413][ T23] Code: 4c 8b 4d 00 48 c7 c7 c0 76 fc 8a 48 c7 c6 20 73 fc 8a 48 c7 c2 40 78 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 8e 66 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 23 20 24 [ 114.202430][ T23] RSP: 0018:ffffc900001d6b38 EFLAGS: 00010282 [ 114.202448][ T23] RAX: cb15f2614155ba00 RBX: ffffffff9715bb78 RCX: 0000000000100000 [ 114.202462][ T23] RDX: ffffc90016ee9000 RSI: 0000000000076d86 RDI: 0000000000076d87 [ 114.202477][ T23] RBP: ffffffff8aa9dfe0 R08: ffffffff90da5597 R09: 1ffffffff21b4ab2 [ 114.202491][ T23] R10: dffffc0000000000 R11: fffffbfff21b4ab3 R12: ffff88807c881000 [ 114.202505][ T23] R13: ffffffff870be850 R14: ffff88807c880000 R15: ffff88807c8808c8 [ 114.202522][ T23] ? smsusb_onresponse+0x890/0x890 [ 114.202569][ T23] ? smsusb_onresponse+0x890/0x890 [ 114.202614][ T23] slab_free_freelist_hook+0xd2/0x1b0 [ 114.202643][ T23] ? smsusb_term_device+0x1ac/0x220 [ 114.202673][ T23] __kmem_cache_free+0xba/0x1f0 [ 114.202696][ T23] smsusb_term_device+0x1ac/0x220 [ 114.202734][ T23] smsusb_probe+0x1708/0x1da0 [ 114.202780][ T23] ? s2255_print_cfg+0x1b0/0x1b0 [ 114.202818][ T23] ? smsusb1_detectmode+0x260/0x260 [ 114.202851][ T23] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 114.202879][ T23] ? pm_runtime_enable+0x192/0x2a0 [ 114.202910][ T23] ? __pm_runtime_set_status+0x8ab/0xb80 [ 114.202950][ T23] usb_probe_interface+0x5a4/0xb00 [ 114.202983][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 114.203001][ T23] really_probe+0x25b/0xb40 [ 114.203033][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 114.203071][ T23] __driver_probe_device+0x18c/0x330 [ 114.203103][ T23] driver_probe_device+0x4f/0x420 [ 114.203144][ T23] __device_attach_driver+0x2ca/0x520 [ 114.203178][ T23] bus_for_each_drv+0x24b/0x2d0 [ 114.203203][ T23] ? coredump_store+0x90/0x90 [ 114.203229][ T23] ? bus_find_device+0x320/0x320 [ 114.203266][ T23] __device_attach+0x2b5/0x400 [ 114.203297][ T23] ? device_attach+0x20/0x20 [ 114.203321][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 114.203346][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 114.203378][ T23] bus_probe_device+0x180/0x260 [ 114.203407][ T23] device_add+0x85b/0xc20 [ 114.203432][ T23] usb_set_configuration+0x1a79/0x20c0 [ 114.203493][ T23] usb_generic_driver_probe+0x8d/0x150 [ 114.203529][ T23] usb_probe_device+0x13d/0x280 [ 114.203552][ T23] ? usb_register_device_driver+0x230/0x230 [ 114.203571][ T23] really_probe+0x25b/0xb40 [ 114.203603][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 114.203632][ T23] __driver_probe_device+0x18c/0x330 [ 114.203664][ T23] driver_probe_device+0x4f/0x420 [ 114.203696][ T23] __device_attach_driver+0x2ca/0x520 [ 114.203729][ T23] bus_for_each_drv+0x24b/0x2d0 [ 114.203754][ T23] ? coredump_store+0x90/0x90 [ 114.203780][ T23] ? bus_find_device+0x320/0x320 [ 114.203815][ T23] __device_attach+0x2b5/0x400 [ 114.203846][ T23] ? device_attach+0x20/0x20 [ 114.203870][ T23] ? __kmem_cache_free+0xba/0x1f0 [ 114.203895][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 114.203927][ T23] bus_probe_device+0x180/0x260 [ 114.203956][ T23] device_add+0x85b/0xc20 [ 114.203981][ T23] usb_new_device+0xa31/0x1630 [ 114.204019][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 114.204052][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.204075][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 114.204100][ T23] hub_event+0x2957/0x49c0 [ 114.204181][ T23] ? led_work+0x720/0x720 [ 114.204205][ T23] ? read_lock_is_recursive+0x20/0x20 [ 114.204236][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.204258][ T23] ? process_scheduled_works+0x957/0x15b0 [ 114.204284][ T23] ? process_scheduled_works+0x957/0x15b0 [ 114.204309][ T23] process_scheduled_works+0xa45/0x15b0 [ 114.204367][ T23] ? assign_work+0x400/0x400 [ 114.204400][ T23] ? assign_work+0x39e/0x400 [ 114.204431][ T23] worker_thread+0xa55/0xfc0 [ 114.204486][ T23] kthread+0x2fa/0x390 [ 114.204504][ T23] ? pr_cont_work+0x560/0x560 [ 114.204529][ T23] ? kthread_blkcg+0xd0/0xd0 [ 114.204548][ T23] ret_from_fork+0x48/0x80 [ 114.204571][ T23] ? kthread_blkcg+0xd0/0xd0 [ 114.204591][ T23] ret_from_fork_asm+0x11/0x20 [ 114.204637][ T23] [ 114.204993][ T23] Kernel Offset: disabled