last executing test programs: 54.823407961s ago: executing program 0 (id=166): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) preadv(r0, 0x0, 0x0, 0x80000000, 0x80000000) 54.648624965s ago: executing program 0 (id=169): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x19, 0x0, 0x70bd2b, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0xc8}}, 0x0) 54.423376844s ago: executing program 0 (id=172): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 54.299126284s ago: executing program 0 (id=174): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000100)='./file1\x00', 0x800800, &(0x7f0000000040)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@umask={'umask', 0x3d, 0x8}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 53.540023454s ago: executing program 0 (id=178): open$dir(&(0x7f0000000080)='./file0\x00', 0x48240, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) 52.985292839s ago: executing program 0 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 52.72047723s ago: executing program 32 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 10.59039856s ago: executing program 4 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0xffe4}}}}]}]}, 0x78}}, 0x0) 10.299317273s ago: executing program 4 (id=641): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x9, 0x401}, {}, {}, {0x0, 0x8, 0x40}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0xffffffff, 0x761a, 0x0, 0x0, 0x0, 0x10, 0x1, 0x3, 0x1}) 9.749931777s ago: executing program 4 (id=646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.561782243s ago: executing program 4 (id=649): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 9.117373318s ago: executing program 4 (id=651): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_io_uring_setup(0x11, &(0x7f0000000200), &(0x7f00000003c0), &(0x7f0000000400)) 8.601446289s ago: executing program 4 (id=656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080000080800000000000c0015"], 0x70}}, 0x4004040) 8.188361893s ago: executing program 33 (id=656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080000080800000000000c0015"], 0x70}}, 0x4004040) 7.423482114s ago: executing program 1 (id=666): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e22, 0x80000, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@tclass={{0x18, 0x29, 0x43, 0x1ff}}], 0x18}, 0x20040091) 7.156006925s ago: executing program 1 (id=670): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.157120736s ago: executing program 1 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="980000000008010f00000000000000000100000a060002408884000006000240809b00000900010073797a310000000005000300010000000600024008000000440004800800014000"], 0x98}, 0x1, 0x0, 0x0, 0x4451}, 0x24000000) 4.812330854s ago: executing program 1 (id=691): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x32315258, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0x1}, {0x7, 0x4}, {0x6, 0x2}], 0xf2, 0x8, 0x1, 0x0, 0x6}}) 4.566194083s ago: executing program 1 (id=694): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) 4.388399288s ago: executing program 1 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000200000000000010001a800c000a80050009000000000014003500776c616e31"], 0x44}}, 0x0) 3.438113404s ago: executing program 2 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x880a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 3.230954071s ago: executing program 2 (id=709): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000540)) 3.098530201s ago: executing program 2 (id=710): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004d00)={0x28, 0x3ea, 0x2, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 3.038529766s ago: executing program 3 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 2.976068061s ago: executing program 2 (id=712): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 2.889965298s ago: executing program 3 (id=713): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000001140)=""/4060, &(0x7f0000000180)=0xfdc) 2.716626272s ago: executing program 3 (id=714): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) 1.647087887s ago: executing program 3 (id=715): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 718.789252ms ago: executing program 2 (id=716): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fchdir(r0) 589.924522ms ago: executing program 3 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 294.042426ms ago: executing program 2 (id=718): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffc, 0x9}}) 0s ago: executing program 3 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 83.024129][ T5773] cgroup: Unknown subsys name 'net' [ 83.192064][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.907359][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.579983][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.593129][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.601137][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.603425][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.618454][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.625518][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.635316][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.643348][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.651210][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.660542][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.663039][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.669253][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.675886][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.682673][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.689985][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.699457][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.710545][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.712955][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.728211][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.737324][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.746530][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.747649][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.762559][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.771266][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.329957][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 87.408295][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 87.480012][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.547994][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.643299][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.651507][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.659587][ T5782] bridge_slave_0: entered allmulticast mode [ 87.667612][ T5782] bridge_slave_0: entered promiscuous mode [ 87.742263][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.749954][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.757735][ T5782] bridge_slave_1: entered allmulticast mode [ 87.765960][ T5782] bridge_slave_1: entered promiscuous mode [ 87.804014][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.811253][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.819249][ T5784] bridge_slave_0: entered allmulticast mode [ 87.827087][ T5784] bridge_slave_0: entered promiscuous mode [ 87.884648][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.893119][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.900510][ T5784] bridge_slave_1: entered allmulticast mode [ 87.909843][ T5784] bridge_slave_1: entered promiscuous mode [ 87.936979][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.023127][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.048593][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.056137][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.063849][ T5783] bridge_slave_0: entered allmulticast mode [ 88.070984][ T5783] bridge_slave_0: entered promiscuous mode [ 88.097345][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.110811][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.134450][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.142256][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.150285][ T5783] bridge_slave_1: entered allmulticast mode [ 88.157883][ T5783] bridge_slave_1: entered promiscuous mode [ 88.166277][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.173696][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.180907][ T5786] bridge_slave_0: entered allmulticast mode [ 88.188748][ T5786] bridge_slave_0: entered promiscuous mode [ 88.213680][ T5782] team0: Port device team_slave_0 added [ 88.248030][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.255762][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.264219][ T5786] bridge_slave_1: entered allmulticast mode [ 88.271774][ T5786] bridge_slave_1: entered promiscuous mode [ 88.296352][ T5784] team0: Port device team_slave_0 added [ 88.305797][ T5784] team0: Port device team_slave_1 added [ 88.314395][ T5782] team0: Port device team_slave_1 added [ 88.390888][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.398388][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.425790][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.444168][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.458036][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.473066][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.495804][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.503768][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.530325][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.543835][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.578908][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.586053][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.612439][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.658066][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.665258][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.691625][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.716816][ T5783] team0: Port device team_slave_0 added [ 88.726516][ T5786] team0: Port device team_slave_0 added [ 88.737515][ T5786] team0: Port device team_slave_1 added [ 88.765830][ T50] Bluetooth: hci0: command tx timeout [ 88.789134][ T5783] team0: Port device team_slave_1 added [ 88.827800][ T5782] hsr_slave_0: entered promiscuous mode [ 88.834628][ T5782] hsr_slave_1: entered promiscuous mode [ 88.852853][ T50] Bluetooth: hci1: command tx timeout [ 88.852870][ T5788] Bluetooth: hci3: command tx timeout [ 88.853140][ T5788] Bluetooth: hci2: command tx timeout [ 88.898850][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.905976][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.932160][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.948896][ T5784] hsr_slave_0: entered promiscuous mode [ 88.956155][ T5784] hsr_slave_1: entered promiscuous mode [ 88.962680][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.971018][ T5784] Cannot create hsr debugfs directory [ 88.977555][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.984947][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.016718][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.041804][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.049060][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.076715][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.097901][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.105196][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.131578][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.314294][ T5783] hsr_slave_0: entered promiscuous mode [ 89.321374][ T5783] hsr_slave_1: entered promiscuous mode [ 89.328730][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.336489][ T5783] Cannot create hsr debugfs directory [ 89.360708][ T5786] hsr_slave_0: entered promiscuous mode [ 89.367688][ T5786] hsr_slave_1: entered promiscuous mode [ 89.374570][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.382490][ T5786] Cannot create hsr debugfs directory [ 89.728358][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.755129][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.766637][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.793783][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.860345][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.874967][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.897145][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.915855][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.021622][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.035733][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.049563][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.060689][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.167475][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.210899][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.221481][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.236054][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.247386][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.287976][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.341366][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.349244][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.360694][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.367944][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.440652][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.497110][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.540012][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.581542][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.588843][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.634491][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.641719][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.676950][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.695356][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.718896][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.726168][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.757927][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.780623][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.787883][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.827737][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.834984][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.850141][ T5788] Bluetooth: hci0: command tx timeout [ 90.890386][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.897715][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.924033][ T5788] Bluetooth: hci1: command tx timeout [ 90.929617][ T5788] Bluetooth: hci2: command tx timeout [ 90.930705][ T5101] Bluetooth: hci3: command tx timeout [ 90.979158][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.994126][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.036128][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.047442][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.113535][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.265993][ T5782] veth0_vlan: entered promiscuous mode [ 91.323358][ T5782] veth1_vlan: entered promiscuous mode [ 91.424211][ T5782] veth0_macvtap: entered promiscuous mode [ 91.450894][ T5782] veth1_macvtap: entered promiscuous mode [ 91.576082][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.593527][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.612057][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.628075][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.675433][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.685579][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.695651][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.705309][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.729056][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.775810][ T5786] veth0_vlan: entered promiscuous mode [ 91.887688][ T5786] veth1_vlan: entered promiscuous mode [ 91.898773][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.930934][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.018638][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.027484][ T5783] veth0_vlan: entered promiscuous mode [ 92.032565][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.045731][ T5784] veth0_vlan: entered promiscuous mode [ 92.081724][ T5784] veth1_vlan: entered promiscuous mode [ 92.122740][ T5786] veth0_macvtap: entered promiscuous mode [ 92.142947][ T5783] veth1_vlan: entered promiscuous mode [ 92.166352][ T5786] veth1_macvtap: entered promiscuous mode [ 92.260489][ T5784] veth0_macvtap: entered promiscuous mode [ 92.279853][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.299981][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.312282][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.339717][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.351284][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.364941][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.378921][ T5783] veth0_macvtap: entered promiscuous mode [ 92.400570][ T5784] veth1_macvtap: entered promiscuous mode [ 92.434956][ T5783] veth1_macvtap: entered promiscuous mode [ 92.451842][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461545][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.470914][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.486775][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549598][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.561766][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.573572][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.585095][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.599032][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.668264][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.687860][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.704244][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.735026][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.766850][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.796729][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.809127][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.819790][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.830830][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.840897][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.860295][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.884709][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.905819][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.926307][ T50] Bluetooth: hci0: command tx timeout [ 92.926329][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.947152][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.956418][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.977925][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.004275][ T50] Bluetooth: hci3: command tx timeout [ 93.009792][ T50] Bluetooth: hci2: command tx timeout [ 93.016077][ T5101] Bluetooth: hci1: command tx timeout [ 93.032577][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.043952][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.054566][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.064590][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.075670][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.090833][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.148661][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.173266][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.192064][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.206141][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.215895][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228300][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.321792][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.363613][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.566984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.592104][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.654999][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.683164][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.752476][ T28] audit: type=1326 audit(1754390925.415:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577458eb69 code=0x7ffc0000 [ 93.775275][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.784169][ T5900] syz.1.14[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.803718][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.811912][ T28] audit: type=1326 audit(1754390925.435:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577458eb69 code=0x7ffc0000 [ 93.854177][ T5900] loop1: detected capacity change from 0 to 2048 [ 93.865684][ T28] audit: type=1326 audit(1754390925.445:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f577458eb69 code=0x7ffc0000 [ 93.888960][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.899245][ T28] audit: type=1326 audit(1754390925.465:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577458eb69 code=0x7ffc0000 [ 93.944198][ T5900] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 93.948935][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.003417][ T5900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.299147][ T5907] loop3: detected capacity change from 0 to 136 [ 94.416085][ T5907] Symlink component flag not implemented [ 94.484572][ T5907] Symlink component flag not implemented (108) [ 95.005609][ T50] Bluetooth: hci0: command tx timeout [ 95.082637][ T50] Bluetooth: hci3: command tx timeout [ 95.093252][ T50] Bluetooth: hci2: command tx timeout [ 95.093875][ T5101] Bluetooth: hci1: command tx timeout [ 95.182264][ T5928] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.747530][ T5945] netlink: 772 bytes leftover after parsing attributes in process `syz.3.35'. [ 95.901479][ T5912] loop0: detected capacity change from 0 to 40427 [ 95.924584][ T5948] gtp0: entered promiscuous mode [ 95.929803][ T5948] gtp0: entered allmulticast mode [ 95.951450][ T5912] F2FS-fs (loop0): invalid crc value [ 96.161721][ T5912] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.468971][ T5962] loop2: detected capacity change from 0 to 256 [ 96.886354][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 96.900607][ T5975] loop1: detected capacity change from 0 to 256 [ 97.146514][ T5979] loop2: detected capacity change from 0 to 256 [ 97.335587][ T5979] FAT-fs (loop2): Directory bread(block 64) failed [ 97.354792][ T5979] FAT-fs (loop2): Directory bread(block 65) failed [ 97.361573][ T5979] FAT-fs (loop2): Directory bread(block 66) failed [ 97.371559][ T5979] FAT-fs (loop2): Directory bread(block 67) failed [ 97.426174][ T5979] FAT-fs (loop2): Directory bread(block 68) failed [ 97.442594][ T5979] FAT-fs (loop2): Directory bread(block 69) failed [ 97.457296][ T5979] FAT-fs (loop2): Directory bread(block 70) failed [ 97.460781][ T5983] loop0: detected capacity change from 0 to 4096 [ 97.471348][ T5979] FAT-fs (loop2): Directory bread(block 71) failed [ 97.491941][ T5979] FAT-fs (loop2): Directory bread(block 72) failed [ 97.520414][ T5979] FAT-fs (loop2): Directory bread(block 73) failed [ 97.586242][ T785] cfg80211: failed to load regulatory.db [ 98.721446][ T6016] loop0: detected capacity change from 0 to 4096 [ 98.897369][ T6016] ntfs: volume version 3.1. [ 99.796286][ T6052] loop1: detected capacity change from 0 to 1024 [ 100.741872][ T6088] netlink: 'syz.0.102': attribute type 4 has an invalid length. [ 100.893005][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.117109][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 101.127646][ T5831] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.159780][ T5831] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.201002][ T5831] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 101.222495][ T5831] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 101.231089][ T5831] usb 2-1: Product: syz [ 101.273678][ T5831] usb 2-1: Manufacturer: syz [ 101.347547][ T5831] hub 2-1:4.0: USB hub found [ 101.547915][ T5831] hub 2-1:4.0: 1 port detected [ 101.559668][ T6109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.113'. [ 101.614788][ T6111] loop3: detected capacity change from 0 to 2048 [ 101.623277][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 101.635986][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 101.661914][ T6111] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.753848][ T5831] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 101.772406][ T5831] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 101.878902][ T5831] usb 2-1: USB disconnect, device number 2 [ 102.104190][ T6123] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 102.911174][ T6151] loop3: detected capacity change from 0 to 2048 [ 102.948384][ T6151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.512218][ T6169] loop2: detected capacity change from 0 to 1024 [ 103.523262][ T6139] loop1: detected capacity change from 0 to 32768 [ 103.581664][ T6139] (syz.1.129,6139,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.647667][ T6139] (syz.1.129,6139,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.693360][ T48] hfsplus: b-tree write err: -5, ino 4 [ 103.857290][ T6139] JBD2: Ignoring recovery information on journal [ 103.961570][ T6139] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.537552][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 104.605226][ T6198] loop0: detected capacity change from 0 to 64 [ 104.643276][ T6198] ======================================================= [ 104.643276][ T6198] WARNING: The mand mount option has been deprecated and [ 104.643276][ T6198] and is ignored by this kernel. Remove the mand [ 104.643276][ T6198] option from the mount to silence this warning. [ 104.643276][ T6198] ======================================================= [ 105.142587][ T5831] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.254077][ T6215] netlink: 44 bytes leftover after parsing attributes in process `syz.1.163'. [ 105.342508][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 105.359558][ T5831] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 105.368595][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.399203][ T5831] usb 3-1: config 0 has no interface number 0 [ 105.412909][ T5831] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 105.446830][ T5831] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.498324][ T5831] usb 3-1: config 0 interface 52 has no altsetting 0 [ 105.514071][ T5831] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 105.547073][ T5831] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 105.572600][ T5831] usb 3-1: Manufacturer: syz [ 105.594991][ T5831] usb 3-1: config 0 descriptor?? [ 105.873359][ T6229] loop3: detected capacity change from 0 to 4096 [ 105.906282][ T6236] loop0: detected capacity change from 0 to 256 [ 105.906597][ T5831] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input5 [ 105.928554][ T6229] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 105.933818][ T6236] exfat: Deprecated parameter 'utf8' [ 106.034477][ T6236] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 106.241341][ T6229] ntfs3: loop3: ino=0, attr_set_size [ 106.487162][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 106.496489][ T8] usb 3-1: USB disconnect, device number 2 [ 107.225411][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.385162][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.551269][ T6259] usb usb9: usbfs: process 6259 (syz.2.187) did not claim interface 6 before use [ 107.551273][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.726983][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.822693][ T6267] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 107.937381][ T6267] team0: Port device wlan1 added [ 108.199094][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.216329][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.226685][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.239666][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.262980][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.275029][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.535144][ T6284] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 108.913884][ T6266] loop3: detected capacity change from 0 to 32768 [ 108.964668][ T6266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.191 (6266) [ 109.091072][ T6266] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.147975][ T6266] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 109.184096][ T6266] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.221737][ T6266] BTRFS info (device loop3): trying to use backup root at mount time [ 109.230573][ T6266] BTRFS info (device loop3): disabling tree log [ 109.237278][ T6266] BTRFS info (device loop3): turning on sync discard [ 109.254421][ T6266] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.265797][ T6266] BTRFS info (device loop3): trying to use backup root at mount time [ 109.274425][ T6266] BTRFS info (device loop3): using free space tree [ 109.672121][ T6266] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.714195][ T6266] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 109.783837][ T6266] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.852679][ T6266] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 109.906650][ T6270] chnl_net:caif_netlink_parms(): no params data found [ 110.091924][ T6297] loop1: detected capacity change from 0 to 32768 [ 110.102635][ T6297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.200 (6297) [ 110.173578][ T6297] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.193566][ T6297] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.214123][ T6297] BTRFS info (device loop1): setting nodatacow, compression disabled [ 110.232213][ T6331] loop2: detected capacity change from 0 to 256 [ 110.242157][ T5783] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.256293][ T6297] BTRFS info (device loop1): force zlib compression, level 3 [ 110.271959][ T6297] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 110.289203][ T6297] BTRFS info (device loop1): trying to use backup root at mount time [ 110.323221][ T6297] BTRFS info (device loop1): enabling auto defrag [ 110.341385][ T6331] FAT-fs (loop2): Directory bread(block 64) failed [ 110.356379][ T6331] FAT-fs (loop2): Directory bread(block 65) failed [ 110.366759][ T50] Bluetooth: hci2: command tx timeout [ 110.393194][ T6331] FAT-fs (loop2): Directory bread(block 66) failed [ 110.401980][ T6331] FAT-fs (loop2): Directory bread(block 67) failed [ 110.440007][ T6297] BTRFS info (device loop1): max_inline at 0 [ 110.472893][ T6331] FAT-fs (loop2): Directory bread(block 68) failed [ 110.479523][ T6331] FAT-fs (loop2): Directory bread(block 69) failed [ 110.486680][ T6297] BTRFS info (device loop1): setting nodatacow [ 110.505196][ T6331] FAT-fs (loop2): Directory bread(block 70) failed [ 110.511995][ T6331] FAT-fs (loop2): Directory bread(block 71) failed [ 110.530468][ T6331] FAT-fs (loop2): Directory bread(block 72) failed [ 110.531429][ T6297] BTRFS info (device loop1): using free space tree [ 110.538581][ T6331] FAT-fs (loop2): Directory bread(block 73) failed [ 110.806862][ T6348] loop3: detected capacity change from 0 to 16 [ 110.846529][ T6348] erofs: (device loop3): mounted with root inode @ nid 36. [ 110.962608][ T6297] BTRFS info (device loop1): enabling ssd optimizations [ 110.969773][ T6297] BTRFS info (device loop1): auto enabling async discard [ 111.056855][ T6297] BTRFS info (device loop1): checking UUID tree [ 111.404485][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.412058][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.437355][ T6270] bridge_slave_0: entered allmulticast mode [ 111.460182][ T6270] bridge_slave_0: entered promiscuous mode [ 111.524354][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.553494][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 111.588762][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 111.622641][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'. [ 111.652990][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.681268][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.721966][ T6270] bridge_slave_1: entered allmulticast mode [ 111.747657][ T6270] bridge_slave_1: entered promiscuous mode [ 112.096290][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.133140][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.214'. [ 112.237700][ T41] hsr_slave_0: left promiscuous mode [ 112.286210][ T41] hsr_slave_1: left promiscuous mode [ 112.298090][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 112.353872][ T6387] netlink: 'syz.2.216': attribute type 2 has an invalid length. [ 112.368316][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.392530][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.462465][ T50] Bluetooth: hci2: command tx timeout [ 112.464294][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.505520][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.565529][ T41] bridge_slave_1: left allmulticast mode [ 112.584388][ T41] bridge_slave_1: left promiscuous mode [ 112.598709][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.661031][ T41] bridge_slave_0: left allmulticast mode [ 112.679060][ T41] bridge_slave_0: left promiscuous mode [ 112.699641][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.840518][ T41] veth1_macvtap: left promiscuous mode [ 112.854338][ T41] veth0_macvtap: left promiscuous mode [ 112.860342][ T41] veth1_vlan: left promiscuous mode [ 112.868095][ T41] veth0_vlan: left promiscuous mode [ 113.550192][ T41] team0 (unregistering): Port device team_slave_1 removed [ 113.597759][ T41] team0 (unregistering): Port device team_slave_0 removed [ 113.647558][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.701909][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.160524][ T41] bond0 (unregistering): Released all slaves [ 114.239727][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.500890][ T6270] team0: Port device team_slave_0 added [ 114.530849][ T6270] team0: Port device team_slave_1 added [ 114.536665][ T50] Bluetooth: hci2: command tx timeout [ 114.748026][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.786577][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.881942][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.908855][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.953023][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.027337][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.298957][ T6270] hsr_slave_0: entered promiscuous mode [ 115.355128][ T6270] hsr_slave_1: entered promiscuous mode [ 115.440861][ T6270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.462418][ T6270] Cannot create hsr debugfs directory [ 116.060522][ T6456] loop1: detected capacity change from 0 to 1024 [ 116.132865][ T966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.210740][ T2909] hfsplus: b-tree write err: -5, ino 4 [ 116.259238][ T6270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.316843][ T6270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.334331][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 116.359244][ T966] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 116.370292][ T6270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.396075][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.412225][ T6463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.245'. [ 116.426589][ T966] usb 3-1: config 0 descriptor?? [ 116.457519][ T966] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 116.479980][ T6270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.591118][ T6474] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.622391][ T50] Bluetooth: hci2: command tx timeout [ 116.674150][ T966] usb 3-1: Detected FT232A [ 116.682774][ T6474] xt_hashlimit: overflow, try lower: 18446744073709551614/15680 [ 116.725961][ T966] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.834638][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.914711][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.940198][ T5851] usb 3-1: USB disconnect, device number 3 [ 116.948699][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.956704][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.002035][ T5851] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.048066][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.048696][ T5851] ftdi_sio 3-1:0.0: device disconnected [ 117.055324][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.230076][ T6270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.890826][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.101484][ T6520] loop2: detected capacity change from 0 to 256 [ 118.122917][ T5831] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 118.327308][ T5831] usb 2-1: not running at top speed; connect to a high speed hub [ 118.369662][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.390813][ T5831] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 118.421589][ T5831] usb 2-1: config 1 has no interface number 1 [ 118.431519][ T5831] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.465203][ T5831] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.526610][ T5831] usb 2-1: string descriptor 0 read error: -22 [ 118.542633][ T5831] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.562694][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.009237][ T6270] veth0_vlan: entered promiscuous mode [ 119.056113][ T6270] veth1_vlan: entered promiscuous mode [ 119.190231][ T6270] veth0_macvtap: entered promiscuous mode [ 119.199817][ T5831] usb 2-1: USB disconnect, device number 3 [ 119.236583][ T6270] veth1_macvtap: entered promiscuous mode [ 119.328217][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.377012][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.404785][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.432439][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.458015][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.482703][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.505356][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.560405][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.612397][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.632535][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.670610][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.699474][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.745675][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.768187][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.799821][ T6270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.835020][ T6270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.870693][ T6270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.881028][ T6270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.193963][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.201999][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.295529][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 120.334613][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.356163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.962420][ T6604] netlink: 68 bytes leftover after parsing attributes in process `syz.4.285'. [ 121.756882][ T6635] loop4: detected capacity change from 0 to 512 [ 121.834958][ T6635] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.888647][ T6635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.164413][ T6677] loop3: detected capacity change from 0 to 128 [ 122.342009][ T6677] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 122.427420][ T6635] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.498361][ T6677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.529278][ T6635] EXT4-fs (loop4): 1 truncate cleaned up [ 122.576757][ T6635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.915649][ T6704] capability: warning: `syz.2.301' uses deprecated v2 capabilities in a way that may be insecure [ 122.995078][ T6270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.014965][ T6707] loop1: detected capacity change from 0 to 256 [ 123.093073][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 123.230920][ T6707] FAT-fs (loop1): Directory bread(block 64) failed [ 123.245791][ T6707] FAT-fs (loop1): Directory bread(block 65) failed [ 123.290344][ T6707] FAT-fs (loop1): Directory bread(block 66) failed [ 123.305603][ T6718] loop2: detected capacity change from 0 to 64 [ 123.332614][ T6707] FAT-fs (loop1): Directory bread(block 67) failed [ 123.339360][ T6707] FAT-fs (loop1): Directory bread(block 68) failed [ 123.371799][ T6707] FAT-fs (loop1): Directory bread(block 69) failed [ 123.401794][ T6707] FAT-fs (loop1): Directory bread(block 70) failed [ 123.422512][ T6707] FAT-fs (loop1): Directory bread(block 71) failed [ 123.430750][ T6707] FAT-fs (loop1): Directory bread(block 72) failed [ 123.482983][ T6707] FAT-fs (loop1): Directory bread(block 73) failed [ 123.518504][ T6718] syz.2.306: attempt to access beyond end of device [ 123.518504][ T6718] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 123.532731][ T5789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.557600][ T6718] Buffer I/O error on dev loop2, logical block 1295, async page read [ 123.575276][ T6718] syz.2.306: attempt to access beyond end of device [ 123.575276][ T6718] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 123.593618][ T6718] Buffer I/O error on dev loop2, logical block 1295, async page read [ 123.611668][ T28] audit: type=1800 audit(1754390955.275:6): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.306" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 123.763938][ T5789] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 123.795494][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.829203][ T5789] usb 5-1: Product: syz [ 123.849484][ T5789] usb 5-1: Manufacturer: syz [ 123.862829][ T5789] usb 5-1: SerialNumber: syz [ 123.887666][ T5789] usb 5-1: config 0 descriptor?? [ 124.172669][ T5789] usb 5-1: ignoring: probably an ADSL modem [ 124.221495][ T6741] overlayfs: conflicting options: userxattr,verity=on [ 124.251915][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 124.388448][ T5789] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 124.426708][ T5789] usb 5-1: USB disconnect, device number 2 [ 124.492857][ T6745] loop2: detected capacity change from 0 to 64 [ 127.205684][ T6846] loop3: detected capacity change from 0 to 128 [ 127.259970][ T6846] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 127.465069][ T6819] loop2: detected capacity change from 0 to 40427 [ 127.497843][ T6819] F2FS-fs (loop2): invalid crc value [ 127.541969][ T6819] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.772303][ T6819] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 127.964775][ T6868] netlink: 64 bytes leftover after parsing attributes in process `syz.4.358'. [ 128.010016][ T6868] netlink: 64 bytes leftover after parsing attributes in process `syz.4.358'. [ 128.703674][ T6890] loop2: detected capacity change from 0 to 2048 [ 128.733114][ T6890] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.858452][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.184206][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.189664][ T6909] loop3: detected capacity change from 0 to 4096 [ 129.363385][ T6909] ntfs: volume version 3.1. [ 129.452998][ T6917] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 129.487972][ T6917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 129.782843][ T28] audit: type=1326 audit(1754390961.455:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92758eb69 code=0x7ffc0000 [ 129.854390][ T28] audit: type=1326 audit(1754390961.455:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92758eb69 code=0x7ffc0000 [ 129.913248][ T28] audit: type=1326 audit(1754390961.505:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe92758eb69 code=0x7ffc0000 [ 129.972888][ T6907] loop1: detected capacity change from 0 to 32768 [ 129.979510][ T28] audit: type=1326 audit(1754390961.505:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92758eb69 code=0x7ffc0000 [ 130.031198][ T28] audit: type=1326 audit(1754390961.505:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92758eb69 code=0x7ffc0000 [ 130.141463][ T6907] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.256952][ T6940] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 130.273235][ T6940] overlayfs: missing 'lowerdir' [ 130.363091][ T5789] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.384941][ T6907] XFS (loop1): Ending clean mount [ 130.397848][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 130.470083][ T6907] XFS (loop1): Quotacheck needed: Please wait. [ 130.569368][ T5789] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 130.587987][ T5789] usb 3-1: config 0 has no interface number 0 [ 130.598417][ T6907] XFS (loop1): Quotacheck: Done. [ 130.605802][ T5789] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 130.634205][ T5789] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.675345][ T5789] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 130.694242][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.737144][ T5789] usb 3-1: Product: syz [ 130.741387][ T5789] usb 3-1: Manufacturer: syz [ 130.752467][ T5789] usb 3-1: SerialNumber: syz [ 130.774528][ T5789] usb 3-1: config 0 descriptor?? [ 130.800341][ T6935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.815488][ T5789] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 130.848202][ T6953] loop4: detected capacity change from 0 to 1024 [ 130.851442][ T5789] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 130.942168][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.975407][ T6953] hfsplus: extend alloc file! (8192,63991,0) [ 131.348095][ T5851] usb 3-1: USB disconnect, device number 4 [ 131.374126][ T5851] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 131.421130][ T5851] cyberjack 3-1:0.69: device disconnected [ 131.672871][ T28] audit: type=1326 audit(1754390963.345:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4018eb69 code=0x7ffc0000 [ 131.722667][ T28] audit: type=1326 audit(1754390963.345:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4018eb69 code=0x7ffc0000 [ 131.780284][ T28] audit: type=1326 audit(1754390963.385:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fee4018eb69 code=0x7ffc0000 [ 131.867988][ T28] audit: type=1326 audit(1754390963.385:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4018eb69 code=0x7ffc0000 [ 131.921128][ T28] audit: type=1326 audit(1754390963.385:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4018eb69 code=0x7ffc0000 [ 132.007801][ T6981] netlink: 'syz.1.405': attribute type 63 has an invalid length. [ 132.042562][ T6981] netlink: 5 bytes leftover after parsing attributes in process `syz.1.405'. [ 132.135245][ T6986] process 'syz.3.407' launched './file2' with NULL argv: empty string added [ 132.517592][ T7002] loop4: detected capacity change from 0 to 512 [ 132.585650][ T7002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.620961][ T7002] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.666843][ T7010] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 132.675390][ T7010] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 132.683994][ T7010] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 132.691501][ T7010] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 132.699945][ T7010] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 132.708445][ T7010] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 132.717418][ T7010] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 132.726229][ T7010] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 132.735431][ T7010] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 132.748752][ T7010] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 132.765420][ T7010] ALSA: mixer_oss: invalid OSS volume 'î[' [ 132.778923][ T7010] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 132.815641][ T7010] ALSA: mixer_oss: invalid OSS volume '·$>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 147.008710][ T7491] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 147.018374][ T7491] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 147.044836][ T7491] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 147.072628][ T7491] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 147.080585][ T7491] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 147.122472][ T7499] ufs: ufstype=old is supported read-only [ 147.131111][ T7499] syz.2.612: attempt to access beyond end of device [ 147.131111][ T7499] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 147.151188][ T7502] loop4: detected capacity change from 0 to 2048 [ 147.170260][ T7491] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 147.293330][ T7502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.588014][ T6270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.871240][ T7529] netlink: 'syz.2.621': attribute type 13 has an invalid length. [ 148.075526][ T28] audit: type=1400 audit(1754390979.755:24): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7534 comm="syz.1.625" [ 148.236141][ T7529] gretap0: refused to change device tx_queue_len [ 148.272708][ T7529] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.466635][ T7546] loop4: detected capacity change from 0 to 128 [ 148.552476][ T7546] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 148.669729][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 148.731095][ T7546] FAT-fs (loop4): Filesystem has been set read-only [ 148.759796][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 148.842890][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 148.862203][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 148.879784][ T7560] loop1: detected capacity change from 0 to 512 [ 148.894212][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 148.917717][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 148.933769][ T7560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.957900][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 148.977688][ T7560] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.023061][ T7560] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 149.034204][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 149.100192][ T7560] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 149.131814][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 149.162912][ T7560] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.633: Failed to acquire dquot type 1 [ 149.174385][ T7546] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 149.221620][ T7568] loop3: detected capacity change from 0 to 2048 [ 149.232840][ T28] audit: type=1800 audit(1754390980.905:25): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.628" name="file2" dev="loop4" ino=1048611 res=0 errno=0 [ 149.285775][ T7546] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 149.333989][ T7560] EXT4-fs (loop1): 1 truncate cleaned up [ 149.349531][ T7568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.371242][ T7560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.442132][ T28] audit: type=1800 audit(1754390981.115:26): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="file2" dev="loop3" ino=1336 res=0 errno=0 [ 149.708268][ T7578] netlink: 'syz.4.638': attribute type 3 has an invalid length. [ 149.812582][ T5789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.002463][ T5789] usb 2-1: Using ep0 maxpacket: 32 [ 150.004540][ T5789] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 150.004597][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.007316][ T5789] usb 2-1: config 0 descriptor?? [ 150.009873][ T5789] rndis_host: probe of 2-1:0.0 failed with error -22 [ 150.256170][ T5789] usb 2-1: USB disconnect, device number 4 [ 150.625750][ T7608] loop4: detected capacity change from 0 to 128 [ 150.657812][ T7608] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 150.697706][ T7608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.832492][ T7608] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 150.884593][ T7608] UDF-fs: error (device loop4): udf_count_free_bitmap: udf_count_free failed [ 150.894330][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.017532][ T6270] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 151.043683][ T6270] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 151.274227][ T7618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.653'. [ 151.293051][ T7616] loop1: detected capacity change from 0 to 1024 [ 151.593212][ T7606] loop2: detected capacity change from 0 to 32768 [ 151.678978][ T6681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.695629][ T7606] JBD2: Ignoring recovery information on journal [ 151.811912][ T7606] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 151.891929][ T6681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.957815][ T7606] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 151.957945][ T7606] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 152.015144][ T7606] OCFS2: File system is now read-only. [ 152.020712][ T7606] (syz.2.648,7606,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 152.032600][ T7606] (syz.2.648,7606,1):ocfs2_mknod:334 ERROR: status = -117 [ 152.064189][ T7606] (syz.2.648,7606,1):ocfs2_mknod:502 ERROR: status = -117 [ 152.081214][ T6681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.235464][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 152.271427][ T6681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.011297][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.023691][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.041269][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.058711][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.069581][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.083793][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.452616][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.543211][ T7668] loop3: detected capacity change from 0 to 1024 [ 153.645650][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 153.685104][ T8] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 153.708653][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.747761][ T8] usb 2-1: config 0 descriptor?? [ 153.787852][ T7675] netlink: 240 bytes leftover after parsing attributes in process `syz.2.675'. [ 153.825223][ T8] as10x_usb: device has been detected [ 153.836836][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 153.874003][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 153.922075][ T8] as10x_usb: error during firmware upload part1 [ 153.930040][ T8] Registered device nBox DVB-T Dongle [ 154.221624][ T966] usb 2-1: USB disconnect, device number 5 [ 154.340328][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.677'. [ 154.364138][ T966] Unregistered device nBox DVB-T Dongle [ 154.372273][ T966] as10x_usb: device has been disconnected [ 154.852962][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 155.077213][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.687'. [ 155.137273][ T7707] netlink: 56 bytes leftover after parsing attributes in process `syz.1.687'. [ 155.169673][ T5101] Bluetooth: hci2: command tx timeout [ 155.261428][ T6681] hsr_slave_0: left promiscuous mode [ 155.302477][ T6681] hsr_slave_1: left promiscuous mode [ 155.344830][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.372986][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.413349][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.429662][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.513242][ T6681] bridge_slave_1: left allmulticast mode [ 155.519389][ T6681] bridge_slave_1: left promiscuous mode [ 155.532678][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.583764][ T6681] bridge_slave_0: left allmulticast mode [ 155.610257][ T6681] bridge_slave_0: left promiscuous mode [ 155.627338][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.701748][ T7728] loop3: detected capacity change from 0 to 2048 [ 155.723050][ T6681] veth1_macvtap: left promiscuous mode [ 155.743307][ T6681] veth0_macvtap: left promiscuous mode [ 155.756934][ T7728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.769835][ T6681] veth1_vlan: left promiscuous mode [ 155.799940][ T6681] veth0_vlan: left promiscuous mode [ 156.479187][ T7752] netlink: 72 bytes leftover after parsing attributes in process `syz.2.703'. [ 156.490955][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 156.505819][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'. [ 156.958421][ T7764] loop3: detected capacity change from 0 to 1764 [ 157.009178][ T7764] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 157.212613][ T7771] loop2: detected capacity change from 0 to 8 [ 157.254802][ T5101] Bluetooth: hci2: command tx timeout [ 157.291688][ T7771] SQUASHFS error: xz decompression failed, data probably corrupt [ 157.301575][ T7771] SQUASHFS error: Failed to read block 0x108: -5 [ 157.308251][ T7771] SQUASHFS error: Unable to read metadata cache entry [106] [ 157.315786][ T7771] SQUASHFS error: Unable to read inode 0x11f [ 157.629927][ T6681] team0 (unregistering): Port device team_slave_1 removed [ 157.688808][ T6681] team0 (unregistering): Port device team_slave_0 removed [ 157.747079][ T6681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.787249][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.807757][ T6681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.009491][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 158.029874][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 158.040731][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 158.072242][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 158.093815][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 158.103087][ T8] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 158.111322][ T8] usb 3-1: Manufacturer: syz [ 158.128988][ T8] usb 3-1: config 0 descriptor?? [ 158.150811][ T7771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.161668][ T8] smsusb:smsusb_probe: board id=9, interface number 0 [ 158.196146][ T8] smsusb:siano_media_device_register: media controller created [ 158.220454][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.227821][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.235130][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.242474][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.249800][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.266779][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.274745][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.282068][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.289339][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.296598][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.303855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.311608][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.318994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.326362][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.333722][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.341083][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.348755][ T8] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 158.358409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.358520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.358607][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.358693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.358778][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.397456][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.404778][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.412056][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.419509][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.426862][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.434132][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.441404][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.449704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.457128][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.464464][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.474624][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.482141][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.489473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.496796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.504206][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.511573][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.518894][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.526866][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.534222][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.541549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.548867][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.556175][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.563508][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.570821][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.578138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.587842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.595175][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.602494][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.608978][ T7777] loop3: detected capacity change from 0 to 512 [ 158.610495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.623506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.630825][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.638149][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.645465][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.650888][ T7777] EXT4-fs: Ignoring removed nobh option [ 158.652755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.668108][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.675446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.682759][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.690745][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.698080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.705396][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.712715][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.720003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.727281][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.734858][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.742180][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.749477][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.756741][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.765196][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.772506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.779916][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.787317][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.794683][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.801975][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.809238][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.816494][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.823750][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.831555][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.838889][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.846222][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.853536][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.860853][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.868158][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.875432][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.882696][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.889954][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.897551][ T8] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 158.905963][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906146][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906319][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906400][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906563][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.906644][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.953941][ T7777] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 158.955368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.982463][ T7777] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.715: attempt to clear invalid blocks 2 len 1 [ 158.985125][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 158.997402][ T7777] EXT4-fs (loop3): Remounting filesystem read-only [ 159.005351][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.026684][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.034000][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.035666][ T7777] EXT4-fs (loop3): 1 truncate cleaned up [ 159.041294][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.056718][ T8] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 159.067307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.067408][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.067493][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.067585][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.067676][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.067765][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.067851][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.067933][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.068021][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.068113][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.121686][ T7777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.127461][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.161880][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.169224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.176554][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.183962][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.191296][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.198611][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.208387][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.215731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.223150][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.231871][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.239630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.247079][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.254345][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.261639][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.268916][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.276222][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.284685][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.292005][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.299331][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.306671][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.313994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.321664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.328987][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.336318][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.343970][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.351360][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.355784][ T5101] Bluetooth: hci2: command tx timeout [ 159.358662][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.371418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.378741][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.386098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.394429][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.401785][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.409101][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.416413][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.423746][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.431042][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.438357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.445668][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.452974][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.460283][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.468160][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.475496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.482824][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.490139][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.497452][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.504957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.512286][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.519719][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.528476][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.535820][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.543149][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.550647][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.558277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.561369][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.565580][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.565643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.565700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.565754][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.566127][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.611569][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.618863][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.626131][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.633402][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.640842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.648110][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.657249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.664597][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.671912][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.679276][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.686604][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.693920][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.701232][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.708542][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.715863][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.724973][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.732329][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.739731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.747056][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.754381][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.761715][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.769663][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.776991][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.784313][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.793092][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.800418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.807738][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.815070][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.822392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.829716][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.838919][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.846269][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.853585][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.861325][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.868645][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.875956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.883282][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.890603][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.898972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.906306][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.913617][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.920943][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.928427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.935698][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.942955][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.950210][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.957480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.965427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.972753][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.980091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.987434][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 159.994933][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.002258][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.010485][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.017840][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.025251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.033305][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.040651][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.047979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.055306][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.062931][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.070265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.077583][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.084972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.092298][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.099719][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.108234][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.115593][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.122929][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.130262][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.137634][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.144920][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.152200][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.159782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.167105][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.174428][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.181747][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.189092][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.196424][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.203841][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.212257][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.219594][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.226901][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.234203][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.241517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.248832][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.256146][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.263452][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.270745][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.278694][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.286044][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.293360][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.302638][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.310046][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.317408][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.324730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.332044][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.339459][ T8] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 160.353735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.361055][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.368829][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.376149][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.383444][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.390711][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.397969][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.405242][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.415248][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.422629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.429956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.437262][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.444630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.452384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.459686][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.466968][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.474235][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.481560][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.488868][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.497053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.504412][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.513392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.520672][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.527944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.535211][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.542475][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.549735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.557542][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.564896][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.572217][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.579501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.586873][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.594157][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.601450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.608747][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.617080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.624462][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.631760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.639029][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.646295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.653587][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.660895][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.668173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.675439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.683513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.690848][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.698164][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.705595][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.712890][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.720637][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.727910][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.735183][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.744425][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.747810][ T6681] bond0 (unregistering): Released all slaves [ 160.751800][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.765842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.773186][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.780495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.787817][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.795165][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.802463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.809902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.818134][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.827048][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.835006][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.842332][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.849636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.856920][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.864199][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.871760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.879019][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.886302][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.895606][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.902944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.910289][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.917626][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.924957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.932266][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.939581][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.946853][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.955883][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.963239][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.970546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.977864][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.985193][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.992517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 160.999850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.007200][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.017415][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.024832][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.032113][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.039394][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.046664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.054261][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.062099][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.069418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.076976][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 161.086813][ T8] ------------[ cut here ]------------ [ 161.092430][ T8] ODEBUG: free active (active state 0) object: ffff888025f84688 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 161.105687][ T8] WARNING: CPU: 0 PID: 8 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 161.116986][ T8] Modules linked in: [ 161.120973][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.6.101-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 161.129064][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.139243][ T8] Workqueue: usb_hub_wq hub_event [ 161.144525][ T8] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 161.150920][ T8] Code: 4c 8b 4d 00 48 c7 c7 40 71 fc 8a 48 c7 c6 a0 6d fc 8a 48 c7 c2 c0 72 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 3e a1 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 13 50 25 [ 161.170714][ T8] RSP: 0018:ffffc900000d6b38 EFLAGS: 00010282 [ 161.177029][ T8] RAX: 8b64a1f5b9635f00 RBX: ffffffff970f73f0 RCX: 0000000000100000 [ 161.185435][ T8] RDX: ffffc9001770c000 RSI: 0000000000089d07 RDI: 0000000000089d08 [ 161.193522][ T8] RBP: ffffffff8aa9e760 R08: ffffc900000d6727 R09: 1ffff9200001ace4 [ 161.201544][ T8] R10: dffffc0000000000 R11: fffff5200001ace5 R12: ffff888025f85000 [ 161.209692][ T8] R13: ffffffff870adf30 R14: ffff888025f84000 R15: ffff888025f84688 [ 161.219129][ T8] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 161.228344][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.235078][ T8] CR2: 00002000000001c0 CR3: 00000000305da000 CR4: 00000000003506f0 [ 161.243197][ T8] Call Trace: [ 161.246524][ T8] [ 161.249535][ T8] slab_free_freelist_hook+0xd2/0x1b0 [ 161.255056][ T8] ? smsusb_term_device+0x1ac/0x220 [ 161.260330][ T8] __kmem_cache_free+0xba/0x1f0 [ 161.265379][ T8] smsusb_term_device+0x1ac/0x220 [ 161.270479][ T8] smsusb_probe+0x1708/0x1da0 [ 161.275316][ T8] ? s2255_print_cfg+0x1b0/0x1b0 [ 161.280325][ T8] ? smsusb1_detectmode+0x260/0x260 [ 161.285635][ T8] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 161.291594][ T8] ? pm_runtime_enable+0x192/0x2a0 [ 161.296853][ T8] ? __pm_runtime_set_status+0x8ab/0xb80 [ 161.302631][ T8] usb_probe_interface+0x5a4/0xb00 [ 161.307830][ T8] ? usb_register_driver+0x3d0/0x3d0 [ 161.313258][ T8] really_probe+0x25b/0xb40 [ 161.319080][ T8] ? pm_runtime_barrier+0x14b/0x1c0 [ 161.324554][ T8] __driver_probe_device+0x18c/0x330 [ 161.329951][ T8] driver_probe_device+0x4f/0x420 [ 161.335160][ T8] __device_attach_driver+0x2ca/0x520 [ 161.340593][ T8] bus_for_each_drv+0x24b/0x2d0 [ 161.345545][ T8] ? coredump_store+0x90/0x90 [ 161.350273][ T8] ? bus_find_device+0x320/0x320 [ 161.355390][ T8] __device_attach+0x2b5/0x400 [ 161.360210][ T8] ? device_attach+0x20/0x20 [ 161.364902][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 161.369996][ T8] ? do_raw_spin_unlock+0x121/0x230 [ 161.375335][ T8] bus_probe_device+0x180/0x260 [ 161.380249][ T8] device_add+0x85b/0xc20 [ 161.384701][ T8] usb_set_configuration+0x1a79/0x20c0 [ 161.390255][ T8] usb_generic_driver_probe+0x8d/0x150 [ 161.395861][ T8] usb_probe_device+0x13d/0x280 [ 161.400773][ T8] ? usb_register_device_driver+0x230/0x230 [ 161.406799][ T8] really_probe+0x25b/0xb40 [ 161.411375][ T8] ? pm_runtime_barrier+0x14b/0x1c0 [ 161.412774][ T5101] Bluetooth: hci2: command tx timeout [ 161.417967][ T8] __driver_probe_device+0x18c/0x330 [ 161.427787][ T8] driver_probe_device+0x4f/0x420 [ 161.432957][ T8] __device_attach_driver+0x2ca/0x520 [ 161.438394][ T8] bus_for_each_drv+0x24b/0x2d0 [ 161.443394][ T8] ? coredump_store+0x90/0x90 [ 161.448128][ T8] ? bus_find_device+0x320/0x320 [ 161.453215][ T8] __device_attach+0x2b5/0x400 [ 161.458037][ T8] ? device_attach+0x20/0x20 [ 161.462705][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 161.467757][ T8] ? do_raw_spin_unlock+0x121/0x230 [ 161.473097][ T8] bus_probe_device+0x180/0x260 [ 161.477985][ T8] device_add+0x85b/0xc20 [ 161.482813][ T8] usb_new_device+0xa31/0x1630 [ 161.487644][ T8] ? usb_disconnect+0x8a0/0x8a0 [ 161.492577][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.497800][ T8] ? lockdep_hardirqs_on+0x98/0x150 [ 161.503128][ T8] hub_event+0x2962/0x49c0 [ 161.507619][ T8] ? hub_post_resume+0x120/0x120 [ 161.512665][ T8] ? read_lock_is_recursive+0x20/0x20 [ 161.518093][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.524315][ T8] ? process_scheduled_works+0x957/0x15b0 [ 161.530064][ T8] ? process_scheduled_works+0x957/0x15b0 [ 161.536071][ T8] process_scheduled_works+0xa45/0x15b0 [ 161.542055][ T8] ? assign_work+0x400/0x400 [ 161.546753][ T8] ? assign_work+0x39e/0x400 [ 161.551390][ T8] worker_thread+0xa55/0xfc0 [ 161.556127][ T8] kthread+0x2fa/0x390 [ 161.560231][ T8] ? pr_cont_work+0x560/0x560 [ 161.565984][ T8] ? kthread_blkcg+0xd0/0xd0 [ 161.570631][ T8] ret_from_fork+0x48/0x80 [ 161.575533][ T8] ? kthread_blkcg+0xd0/0xd0 [ 161.580161][ T8] ret_from_fork_asm+0x11/0x20 [ 161.585048][ T8] [ 161.588103][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.595397][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.6.101-syzkaller #0 [ 161.603310][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.613379][ T8] Workqueue: usb_hub_wq hub_event [ 161.618424][ T8] Call Trace: [ 161.621748][ T8] [ 161.624685][ T8] dump_stack_lvl+0x16c/0x230 [ 161.629395][ T8] ? show_regs_print_info+0x20/0x20 [ 161.634626][ T8] ? load_image+0x3b0/0x3b0 [ 161.639159][ T8] panic+0x2c0/0x710 [ 161.643098][ T8] ? bpf_jit_dump+0xd0/0xd0 [ 161.647660][ T8] ? ret_from_fork_asm+0x11/0x20 [ 161.652640][ T8] __warn+0x2e0/0x470 [ 161.656658][ T8] ? debug_check_no_obj_freed+0x446/0x540 [ 161.662493][ T8] ? debug_check_no_obj_freed+0x446/0x540 [ 161.668234][ T8] report_bug+0x2be/0x4f0 [ 161.672582][ T8] ? debug_check_no_obj_freed+0x446/0x540 [ 161.678321][ T8] ? debug_check_no_obj_freed+0x446/0x540 [ 161.684063][ T8] ? debug_check_no_obj_freed+0x448/0x540 [ 161.689821][ T8] handle_bug+0xcf/0x120 [ 161.694095][ T8] exc_invalid_op+0x1a/0x50 [ 161.698627][ T8] asm_exc_invalid_op+0x1a/0x20 [ 161.703505][ T8] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 161.709856][ T8] Code: 4c 8b 4d 00 48 c7 c7 40 71 fc 8a 48 c7 c6 a0 6d fc 8a 48 c7 c2 c0 72 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 3e a1 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 13 50 25 [ 161.729569][ T8] RSP: 0018:ffffc900000d6b38 EFLAGS: 00010282 [ 161.735657][ T8] RAX: 8b64a1f5b9635f00 RBX: ffffffff970f73f0 RCX: 0000000000100000 [ 161.743647][ T8] RDX: ffffc9001770c000 RSI: 0000000000089d07 RDI: 0000000000089d08 [ 161.751637][ T8] RBP: ffffffff8aa9e760 R08: ffffc900000d6727 R09: 1ffff9200001ace4 [ 161.759630][ T8] R10: dffffc0000000000 R11: fffff5200001ace5 R12: ffff888025f85000 [ 161.767621][ T8] R13: ffffffff870adf30 R14: ffff888025f84000 R15: ffff888025f84688 [ 161.775641][ T8] ? smsusb_onresponse+0x890/0x890 [ 161.780797][ T8] ? smsusb_onresponse+0x890/0x890 [ 161.785944][ T8] slab_free_freelist_hook+0xd2/0x1b0 [ 161.791339][ T8] ? smsusb_term_device+0x1ac/0x220 [ 161.796563][ T8] __kmem_cache_free+0xba/0x1f0 [ 161.801447][ T8] smsusb_term_device+0x1ac/0x220 [ 161.806500][ T8] smsusb_probe+0x1708/0x1da0 [ 161.811213][ T8] ? s2255_print_cfg+0x1b0/0x1b0 [ 161.816181][ T8] ? smsusb1_detectmode+0x260/0x260 [ 161.821412][ T8] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 161.827336][ T8] ? pm_runtime_enable+0x192/0x2a0 [ 161.832474][ T8] ? __pm_runtime_set_status+0x8ab/0xb80 [ 161.838172][ T8] usb_probe_interface+0x5a4/0xb00 [ 161.843325][ T8] ? usb_register_driver+0x3d0/0x3d0 [ 161.848669][ T8] really_probe+0x25b/0xb40 [ 161.853203][ T8] ? pm_runtime_barrier+0x14b/0x1c0 [ 161.858436][ T8] __driver_probe_device+0x18c/0x330 [ 161.863836][ T8] driver_probe_device+0x4f/0x420 [ 161.868891][ T8] __device_attach_driver+0x2ca/0x520 [ 161.874394][ T8] bus_for_each_drv+0x24b/0x2d0 [ 161.879285][ T8] ? coredump_store+0x90/0x90 [ 161.883990][ T8] ? bus_find_device+0x320/0x320 [ 161.888960][ T8] __device_attach+0x2b5/0x400 [ 161.893748][ T8] ? device_attach+0x20/0x20 [ 161.898367][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 161.903420][ T8] ? do_raw_spin_unlock+0x121/0x230 [ 161.908653][ T8] bus_probe_device+0x180/0x260 [ 161.913550][ T8] device_add+0x85b/0xc20 [ 161.917912][ T8] usb_set_configuration+0x1a79/0x20c0 [ 161.923424][ T8] usb_generic_driver_probe+0x8d/0x150 [ 161.928935][ T8] usb_probe_device+0x13d/0x280 [ 161.933900][ T8] ? usb_register_device_driver+0x230/0x230 [ 161.939817][ T8] really_probe+0x25b/0xb40 [ 161.944386][ T8] ? pm_runtime_barrier+0x14b/0x1c0 [ 161.949888][ T8] __driver_probe_device+0x18c/0x330 [ 161.955199][ T8] driver_probe_device+0x4f/0x420 [ 161.960254][ T8] __device_attach_driver+0x2ca/0x520 [ 161.965658][ T8] bus_for_each_drv+0x24b/0x2d0 [ 161.970620][ T8] ? coredump_store+0x90/0x90 [ 161.975319][ T8] ? bus_find_device+0x320/0x320 [ 161.980282][ T8] __device_attach+0x2b5/0x400 [ 161.985097][ T8] ? device_attach+0x20/0x20 [ 161.989702][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 161.994758][ T8] ? do_raw_spin_unlock+0x121/0x230 [ 161.999986][ T8] bus_probe_device+0x180/0x260 [ 162.004856][ T8] device_add+0x85b/0xc20 [ 162.009213][ T8] usb_new_device+0xa31/0x1630 [ 162.014006][ T8] ? usb_disconnect+0x8a0/0x8a0 [ 162.018880][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.024124][ T8] ? lockdep_hardirqs_on+0x98/0x150 [ 162.029373][ T8] hub_event+0x2962/0x49c0 [ 162.033848][ T8] ? hub_post_resume+0x120/0x120 [ 162.038802][ T8] ? read_lock_is_recursive+0x20/0x20 [ 162.044203][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.049457][ T8] ? process_scheduled_works+0x957/0x15b0 [ 162.055198][ T8] ? process_scheduled_works+0x957/0x15b0 [ 162.060936][ T8] process_scheduled_works+0xa45/0x15b0 [ 162.066528][ T8] ? assign_work+0x400/0x400 [ 162.071147][ T8] ? assign_work+0x39e/0x400 [ 162.075796][ T8] worker_thread+0xa55/0xfc0 [ 162.080462][ T8] kthread+0x2fa/0x390 [ 162.084558][ T8] ? pr_cont_work+0x560/0x560 [ 162.089278][ T8] ? kthread_blkcg+0xd0/0xd0 [ 162.093897][ T8] ret_from_fork+0x48/0x80 [ 162.098341][ T8] ? kthread_blkcg+0xd0/0xd0 [ 162.102968][ T8] ret_from_fork_asm+0x11/0x20 [ 162.107767][ T8] [ 162.110933][ T8] Kernel Offset: disabled [ 162.115348][ T8] Rebooting in 86400 seconds..